All news with #aws s3 tag

🔒 You can now change the server-side encryption type of encrypted objects in Amazon S3 without moving data. Use the UpdateObjectEncryption API to atomically change encryption keys across any object size or storage class, and run it at scale with S3 Batch Operations to standardize entire buckets while preserving object properties and Lifecycle eligibility. The capability supports migrating from SSE-S3 to SSE-KMS, swapping customer-managed KMS keys, and enabling S3 Bucket Keys to reduce KMS requests. The API is available in all AWS Regions via the AWS Management Console and SDKs.

🔧 The AWS Transfer Family Terraform module now supports provisioning Transfer Family web apps, offering a branded, managed web portal for users to browse, upload, and download data in Amazon S3. The module centralizes deployment with federated authentication via AWS IAM Identity Center and fine-grained permissions using S3 Access Grants. An included end-to-end example covers Identity Center user and group assignment, Access Grants setup, web app configuration, and CloudTrail auditing.

🔔 LastPass is warning users about an active phishing campaign observed from around January 19, 2026, that impersonates the service and urges users to create local backups within 24 hours to harvest master passwords. The messages route recipients through a staged AWS S3 URL that then redirects to a fraudulent domain (mail-lastpass[.]com) and originate from several spoofed support addresses. LastPass said it will never ask for master passwords and is working with partners to take down the malicious infrastructure while urging users to report suspicious messages.

📦 Amazon S3 on Outposts is now supported on second-generation AWS Outposts racks, offering 196 TB, 490 TB, and 786 TB storage tiers for on‑premises workloads. The update enables customers to use the same S3 APIs, security controls, and access management for local data residency, low-latency access, and on-site processing. It is available in all Regions and countries where second-generation racks are offered. Customers can select tiers optimized for production, backup, or archival use cases while maintaining familiar S3 management and features.

📢 AWS Transfer Family is now available in AWS Asia Pacific (New Zealand), providing fully managed, production-ready file transfer endpoints for Amazon S3 and Amazon EFS. It supports SFTP, FTP, FTPS and AS2, and enables event-driven automation for common managed file transfer (MFT) workflows. Customers can modernize business-to-business transfers, reduce operational overhead, and address latency and data residency requirements.

🚀 AWS Storage Gateway now supports deployment on the Nutanix AHV hypervisor, enabling S3 File, Tape, and Volume gateway virtual appliances to run on Nutanix HCI environments. This expands on-premises deployment choices beyond VMware ESXi, Hyper-V, and KVM, providing seamless access to AWS S3 storage via NFS, SMB, iSCSI and iSCSI-VTL. The capability is available in all AWS Regions and can be managed through the Storage Gateway console.

🔔 Amazon RDS now provides enhanced observability for snapshot exports to Amazon S3, delivering per-task insights on export progress, failures, and performance. The update adds four new event types, including current export progress and table-level notifications for long-running tables, and reports exported and pending table counts and data sizes. You can subscribe to events via AWS SNS and view export status in the AWS Console, CLI, or SDK. This capability is available for RDS PostgreSQL, MySQL, and MariaDB in Commercial Regions.

🚀 AWS DataSync Enhanced mode now supports direct transfers between on‑premises NFS/SMB file servers and Amazon S3, removing file count limits and using parallel processing to boost throughput and scalability. The mode delivers detailed transfer metrics for improved monitoring and management and accelerates use cases such as generative AI dataset movement, data lake synchronization, and large‑scale migrations. This capability is available in all AWS Regions where DataSync is offered.

🚀 The AWS DataSync Terraform module now supports Enhanced mode for S3-to-S3 transfers, enabling parallel processing to boost throughput and remove file-count limitations. Enhanced mode provides detailed transfer metrics for improved monitoring and troubleshooting. Using Terraform automates provisioning of Enhanced-mode DataSync tasks, eliminating manual configuration and enabling consistent, version-controlled deployments across an organization. The module is available on GitHub and via the Terraform Registry; check region availability before rollout.

📊 S3 Storage Lens now provides three new capabilities: application performance metrics, expanded prefix analytics across billions of prefixes, and direct export of metrics to managed S3 Tables. The performance metrics include access pattern, request origin, and object access count metrics to surface inefficient requests, cross‑Region access, and hot object reads. Enable these features in your advanced dashboard to make metrics queryable via AWS analytics services.

📂 You can now attach Amazon S3 Access Points to Amazon FSx for NetApp ONTAP file systems so applications can access file data as if it were stored in S3. This lets a broad range of AI, ML, and analytics services—including Amazon Bedrock, SageMaker, and Glue—use your FSx file data without copying it. Create and attach access points via the Amazon FSx console, AWS CLI, or SDK; support for existing file systems will arrive in a forthcoming maintenance window. The capability is available in select AWS Regions.

🔁 Amazon S3 Tables now support automatic replication of Apache Iceberg tables across AWS Regions and accounts, duplicating full table structure, snapshots, and metadata to destination buckets. The feature creates read-only replica tables, backfills them to the source's latest state, and continuously monitors for updates while allowing independent snapshot retention and encryption settings per replica. Replicas are queryable with Amazon SageMaker Unified Studio or any Iceberg-compatible engine such as Amazon Athena, Amazon Redshift, Apache Spark, and DuckDB. This capability is available in all Regions where S3 Tables are supported.

📦 Amazon S3 now supports individual objects up to 50 TB, a 10× increase over the previous 5 TB limit. The change applies across all S3 storage classes and AWS Regions, enabling single-file storage of very large assets such as high-resolution video, seismic datasets, and AI training corpora. Use the AWS Common Runtime (CRT) and S3 Transfer Manager in the AWS SDK to optimize uploads and downloads; standard S3 features like S3 Lifecycle and S3 Replication continue to operate on these large objects.

🚀 Amazon S3 Vectors is now generally available, delivering native, purpose-built vector storage and query capabilities in cloud object storage. It supports up to two billion vectors per index, 10,000 indexes per vector bucket, and offers up to 90% lower costs to upload, store, and query vectors. S3 Vectors integrates with Amazon Bedrock, SageMaker Unified Studio, and OpenSearch Service, supports SSE-S3 and optional SSE-KMS encryption with per-index keys, and provides tagging for ABAC and cost allocation.

⚡Amazon S3 Batch Operations now finishes jobs up to 10x faster and supports jobs that include up to 20 billion objects, accelerating large-scale storage tasks. S3 pre-processes objects, runs operations, and generates completion reports with no extra configuration or cost. Typical uses include copying between buckets, tagging for lifecycle policies, and computing checksums. The upgrade is available in all AWS Regions except China and GovCloud (US).

🗃️ Amazon S3 Tables now support the Intelligent-Tiering storage class to automatically optimize table storage costs based on access patterns, without impacting performance or adding operational overhead. Data not accessed for 30 days moves to the Infrequent Access tier (≈40% lower cost), and after 90 days moves to Archive Instant Access (≈68% lower cost), enabling up to 80% storage savings. Automated table maintenance (compaction, snapshot expiration, unreferenced file removal) does not trigger tiering, and you can select Intelligent-Tiering per table or set it as the default for new tables in a table bucket across all regions where S3 Tables are available.

🔒 Amazon S3 Block Public Access now supports organization-level enforcement via AWS Organizations, enabling centralized standardization of public-access settings across member accounts. When attached at a root or OU the single policy configuration propagates to existing and new accounts, or it can be targeted to specific accounts for granular control. Policy attachment and enforcement are auditable through AWS CloudTrail, and the feature is available in the console and via CLI/SDK in supported regions at no additional charge.

🔍 Amazon S3 Metadata is expanding to twenty-two additional AWS Regions, bringing automated, queryable object and custom metadata closer to more customers. The feature automatically populates metadata for both new and existing objects in near real-time and supports system-defined details (size, source) and user-defined tags such as product SKUs or transaction IDs. This expansion makes S3 Metadata generally available in 28 Regions and enables faster data discovery, curation, and analytics inside existing S3 workflows.

🔐 A Trend Micro report warns that ransomware groups are shifting from on-premises targets to cloud object storage, particularly AWS S3, by abusing integrated encryption and key management. Attackers probe configurations from AWS-managed KMS keys to customer-provided and external key stores to encrypt or irreversibly lock data. The report urges hardening S3 settings, enforcing least privilege, enabling versioning and Object Lock, and isolating backups.

🔐 A Trend Micro analysis warns ransomware actors are increasingly targeting cloud storage by abusing AWS-native encryption and key management to render S3 data unrecoverable. Attackers probe buckets with disabled versioning or Object Lock, exploit wide write permissions, and weaponize SSE-KMS, SSE-C, BYOK and XKS to seize control of keys. Researchers recommend least-privilege IAM, enable versioning/Object Lock, isolate backups, and continuously monitor audit logs. An "assume breach" posture and short-lived credentials are urged to limit impact.