All news with #aws s3 tag

🔍 Amazon S3 Vectors now returns up to 10,000 similarity search results per query, a 100x increase from the prior limit. This larger topK helps applications retrieve a more comprehensive candidate set for multi-stage pipelines that perform reranking, aggregations, or deduplication. Use the latest AWS SDK and specify up to 10,000 results in QueryVectors; results are paginated so you can process the first page while additional pages are fetched. A small data-returned fee applies beyond the free 512 KB per query.

🔎 This post explains how subdomain takeover occurs when dangling DNS CNAME records point to deleted AWS resources and how attackers can reclaim those names to serve malicious content. It describes which AWS services use globally claimable namespaces (notably S3, CloudFront, and Elastic Beanstalk), outlines potential impacts such as reputation damage and phishing, and recommends detection using AWS Config inventory checks rather than DNS resolution. The article also summarizes a reference implementation that deploys a Lambda-based Config rule, Security Hub findings, optional SNS alerts, and mitigation best practices including deleting DNS records before resources and adopting account regional S3 namespaces where applicable.

🚀 Amazon Web Services announces that S3 Vectors now reduces data-processed query charges by up to 80% for vector indexes containing more than 10 million vectors. This price improvement automatically applies with no changes required to customer applications and targets similarity search workloads used in AI, RAG, and semantic search scenarios. The reduction is effective today across all Regions where S3 Vectors is available, while AWS still recommends distributing vectors across multiple indexes for better query performance.

🚀 AWS announced a public preview that extends AWS Transform for migrations to replicate block storage workloads directly to Amazon FSx for NetApp ONTAP. The capability lets application owners and cloud migration teams move block and NFS datastores from on‑premises or other clouds into FSx for ONTAP alongside compute and network migrations. This removes intermediate storage platforms and separate migration tools, simplifying workflows and reducing cost and risk. FSx for ONTAP provides a fully managed ONTAP-based destination to preserve enterprise storage features while leveraging AWS scale and resiliency.

🆕 Amazon S3 now supports annotations, enabling attachment of custom JSON, XML, or YAML metadata to objects at up to 1GB per object to provide business context for AI agents and analytics tools. Annotations persist with objects through replication and copy operations, can be modified or deleted at any time, and share the same durability and consistency as the object. You can surface annotations in S3 Metadata for query via Apache Iceberg tables, or search them with natural language using Amazon SageMaker Unified Studio and supporting tools.

🔐 AWS Lake Formation now allows reading and writing the underlying Amazon S3 data files for tables registered in the AWS Glue Data Catalog, unifying permissions for SQL and direct file access. It issues temporary, scoped credentials tied to Lake Formation table grants—SELECT for read and SUPER for read/write—and is supported in Amazon EMR 7.13+. You can use Spark or Trino with provided APIs or an open source plugin, and all activity is logged in AWS CloudTrail. This capability is available at no extra charge in supported Regions.

🚀 Amazon FSx for OpenZFS now supports the Intelligent‑Tiering storage class in eight additional AWS Regions across the US, Europe, Asia Pacific, and South America. The Intelligent‑Tiering class automatically moves data among Frequent Access, Infrequent Access, and Archive tiers based on usage patterns and can include an optional SSD read cache for active data. This provides high performance for active workloads and lower-cost storage for less-active data, with up to 85% savings versus FSx SSD and up to 20% versus on‑premises HDD NAS.

🛈 Amazon S3 Access Grants are now available in the AWS European Sovereign Cloud (Germany) Region. The feature maps identities from directories like Microsoft Entra ID and AWS IAM principals to S3 datasets, enabling automated, scalable data permission management. This simplifies granting S3 access to end users based on corporate identities. Check the AWS Region Table for full regional availability and refer to the product page for details.

🔒 AWS Glue Data Catalog now supports IAM-based authorization for Amazon S3 Tables and Apache Iceberg materialized views in AWS GovCloud (US) Regions. This change lets you consolidate required permissions for storage, catalog, and query engines into a single IAM policy. The capability eases integration with analytics services such as Amazon Athena, Amazon EMR, Amazon Redshift, and AWS Glue. You can still opt in to AWS Lake Formation for fine-grained access controls.

🛡️ This post explains how AWS Shield Advanced attack flow logs capture metadata during DDoS events and publish records to Amazon S3, CloudWatch Logs, or Data Firehose. It outlines the fields included in each flow log entry, describes delivery configuration and required IAM permissions, and shows how to create the CloudWatch Logs delivery objects that connect a Shield protection to a destination. The article also covers output formats, file size and timing, cost considerations, and cross-account/Region aggregation options.

🛡️ Gamaredon exploited CVE-2025-8088 in WinRAR to deploy an HTML Application payload named GammaPhish, which fetches a VBScript downloader called GammaLoad. Observed in January 2026 by Sekoia, the chain delivers multiple strains including a worm (GammaWorm) that persists via scheduled tasks and hides payloads using NTFS ADS, and a stealer (GammaSteel) that exfiltrates files to AWS S3 or fallback servers. The campaign targets Ukrainian entities and demonstrates a modular, highly obfuscated architecture likely to be reused.

📣 AWS announced that AWS Cost and Usage Report 2.0 (CUR 2.0) now integrates directly with AWS Athena and AWS Redshift, enabling customers to query CUR data in Amazon S3 using standard SQL without custom warehousing. Exports are delivered in optimal formats (Parquet, GZIP) and include metadata, templates, table definitions, and loading instructions to accelerate setup. CUR 2.0 refreshes automatically update Athena and Redshift tables, and the feature is available in all commercial AWS Regions except GovCloud (US) and China Regions.

🟦 Amazon S3 Tables are now available in the Asia Pacific (Taipei) and Asia Pacific (New Zealand) AWS Regions. S3 Tables provide an object store with built-in Apache Iceberg support, enabling scalable tabular data storage and making data queryable by AWS and third-party engines. They perform continual table maintenance to optimize queries and reduce storage costs, and integrate with the Intelligent-Tiering storage class for automated cost management without operational overhead.

🗂️ AWS Transform now supports customer-owned Amazon S3 buckets, letting customers control where transformation artifacts are stored and how they are secured. You can configure your own S3 bucket, optionally encrypt artifacts with your AWS KMS key, and manage access policies in your account. Migration teams can upload files directly and centralize artifacts across accounts to support regulated industries and data sovereignty requirements. This capability is available in all Regions where AWS Transform is offered.

🧬 AWS HealthOmics now supports caching completed task outputs when runs are cancelled, automatically storing those outputs in the customer’s S3 bucket. When caching is enabled, customers can restart runs from the point of cancellation and avoid recomputing tasks that already finished. This capability helps researchers, bioinformaticians, and workflow developers debug and iterate more efficiently. Caching is available for Nextflow, WDL, and CWL runs across all HealthOmics regions.

🔁 Amazon Redshift now supports concurrency scaling for COPY queries from Amazon S3, enabling parallel ingestion of Parquet and ORC files without queuing delays. This lets organizations run time-sensitive ETL, real-time analytics, and high-frequency reporting without sacrificing query performance, as Redshift provisions additional compute automatically. The capability applies to both Serverless and provisioned clusters, with zero operational overhead and general availability across AWS commercial and GovCloud regions.

🔌 Amazon announced that Bedrock AgentCore Runtime now supports bring-your-own file system mounts for Amazon S3 Files and Amazon EFS access points. Developers can attach these file systems into every agent session at a specified path so agents use standard file operations without custom mount code, privileged containers, or pre-run download orchestration. The feature preserves sub-millisecond latency for active data and NFS close-to-open consistency. It is available across the 15 AWS Regions that support AgentCore Runtime and requires an access point ARN plus a configured VPC.

🚀 AWS Transfer Family web apps are now available in the AWS Asia Pacific (New Zealand) Region. The service provides a fully managed, branded web portal that lets workforces browse, upload, and download data stored in Amazon S3 through a browser. Administrators get a secure, simple interface for end-user file access without managing servers. This expands regional options for organizations operating in New Zealand.

🔍 Amazon Quick now supports Amazon S3 table buckets as a direct data source, enabling dashboards, conversational analytics, and exploration of Apache Iceberg tables stored in S3 without intermediate warehouses or OLAP layers. Paired with Zero-ETL ingestion from systems like Salesforce, SAP, and Amazon Kinesis Data Firehose, organizations can access near real-time insights with reduced pipeline complexity. Admins configure S3 table bucket permissions once, and authors can immediately create datasets and use Dataset Q&A to query the lakehouse in natural language.

🔒 Amazon S3 now supports five additional checksum algorithms — MD5, XXHash3, XXHash64, XXHash128, and SHA-512 — bringing the total to ten. S3 will validate and store the checksum you provide on upload, compute composite checksums for multipart uploads, and return stored checksums on download for verification. If you do not supply a checksum, CRC64NVME is applied by default. The new options integrate with replication, S3 Inventory, and S3 Batch Operations and are available across 37 AWS Regions at no extra cost.