All news with #aws tag

🔐 Amazon GuardDuty centralizes continuous threat detection across AWS using AI/ML and integrated threat intelligence. It offers optional protection plans—S3, EKS, Runtime Monitoring, Malware Protection for EC2 and S3, RDS, and Lambda—that extend detections to service-specific telemetry and runtime behaviors. Built-in Extended Threat Detection correlates signals into high-confidence attack sequences and maps findings to MITRE ATT&CK, providing prioritized remediation guidance.

📈 Amazon now lets customers generate AI-powered forecasts and visualizations from time-series data indexed into Amazon OpenSearch Service domains. Forecasts can enhance insights into infrastructure utilization, application and business metrics, website traffic, and system performance to help anticipate upcoming changes. You can set up forecasts directly from OpenSearch dashboards or the OpenSearch UI, and no data science or AI expertise is required. The feature is available in all regions that support OpenSearch 3.1+ domains.

🚀 Operation StormBreaker transformed how Marine Corps Community Services (MCCS) develops and authorizes IT. By creating a Marine Corps–authorized landing zone in AWS and pairing it with the Department of the Navy’s RAISE platform, MCCS implemented CI/CD pipelines and automated security checks to push security left. The result: ATOs that once took 18 months can now be granted in a day, saving roughly $1M per system and improving digital services for Marines and families.

📅 Amazon Connect Cases now supports date range filters in the case list view, enabling managers and agents to narrow case lists by creation, modification, or upcoming SLA windows. Users can filter cases created in the last 30 days, view items modified in the past 24 hours, or surface cases with potential SLA breaches in the next two days for proactive triage. Amazon Connect Cases is available in multiple AWS regions and documentation is provided to get started.

🚀 Amazon OpenSearch Service now supports OpenSearch 3.1, bringing targeted improvements for vector-driven and traditional search workloads. The release bundles Lucene 10 for optimized vector field indexing, faster indexing times, reduced index sizes, sparse indexing, and vector quantization to lower memory usage. It also improves range query and high-cardinality aggregation latency and introduces a new Search Relevance Workbench for iterative quality testing. Additional vector search enhancements include Z-score normalization for more reliable hybrid search and memory-optimized Faiss support; OpenSearch 3.1 is available in all AWS Regions.

🛈 AWS Organizations introduces a new State field in the console and APIs (DescribeAccount, ListAccounts, ListAccountsForParent) to provide more granular lifecycle visibility for member accounts. The console Status field has been replaced by State, while both Status and State remain available in APIs until September 9, 2026. New state values include SUSPENDED, PENDING_CLOSURE, and CLOSED (within the 90-day reinstatement window). Customers should update account vending pipelines and governance integrations to reference State before the Status deprecation date.

📢 Amazon Managed Service for Prometheus is now generally available in 11 additional AWS regions, including Asia Pacific (Jakarta, Hyderabad, Osaka, Melbourne, Taipei), Canada West (Calgary), Europe (Spain), Israel (Tel Aviv), Mexico (Central), Middle East (Bahrain), and US West (N. California). The fully managed, Prometheus-compatible monitoring service makes it easier to collect, store, query, and alarm on operational metrics at scale. Customers can send up to 1 billion active metrics to a single workspace and create multiple workspaces per account to partition workloads. See the AWS user guide or product documentation for the full list of supported regions and configuration details.

🚀 Amazon ECS Service Connect now supports cross-account communication by letting teams share AWS Cloud Map namespaces via AWS RAM. Platform engineers can create a resource share and grant access to individual accounts, OUs, or the whole organization so services in multiple accounts register to a single namespace. This reduces duplication, simplifies service discovery, and works with Fargate and EC2 across commercial regions.

🌐 AWS Direct Connect now supports 4-byte Autonomous System (AS) numbers for virtual interfaces, extending the usable ASN range to the full RFC 6793 limit of 4,294,967,294. The change addresses constraints imposed by the legacy 2-byte ASN space (max 65,536), which can complicate complex or multi-tenant network topologies. Support is available in all AWS regions and across all Direct Connect virtual interface types. To provision, use the Direct Connect Console or the updated APIs to specify 4-byte ASNs when creating virtual interfaces.

🚀 Amazon EC2 M4 and M4 Pro Mac instances are now generally available, offering up to 20% (M4) and 15% (M4 Pro) improved application build performance versus the M2 families. Powered by the AWS Nitro System, they provide up to 10 Gbps network and 8 Gbps EBS bandwidth and include a 2 TB instance store per Dedicated Host. M4 models use Apple M4 Mac Mini hardware and support macOS Sequoia 15.6+. Available in US East (N. Virginia) and US West (Oregon).

🔍 AWS has introduced five new Elastic Fabric Adapter (EFA) metrics to improve network observability for AI/ML and HPC workloads. The counters track retransmitted packets and bytes, retransmit timeouts, impaired remote connections, and unresponsive remote receivers at the per-EFA device level. Available on Nitro v4+ instances with EFA installer 1.43.0+, metrics are exposed via sysfs and can be exported to Prometheus and tools like Grafana for monitoring and alerting.

🚀 Amazon Web Services announced general availability of EC2 P6-B200 instances for SageMaker notebooks. These instances include eight NVIDIA Blackwell GPUs with 1,440 GB of high-bandwidth GPU memory and 5th Gen Intel Xeon processors, offering up to 2x the training performance versus P5en. They enable interactive development and fine-tuning of large foundation models in JupyterLab and CodeEditor, and are available in US East (Ohio) and US West (Oregon).

🎬 AWS Deadline Cloud is now available in Asia Pacific (Seoul) and Europe (London). This fully managed service simplifies render management for teams producing computer-generated graphics and visual effects, enabling them to scale render farms near creative teams. Customers gain improved integration with existing AWS services and creative pipelines, and can now deploy Deadline Cloud across 10 AWS regions worldwide. Bringing the service closer reduces latency and streamlines collaboration across distributed production workflows.

🔗 AWS now enables remote connections from local VS Code to Amazon SageMaker Unified Studio, allowing developers to use their personalized VS Code setups while running workloads on SageMaker-managed compute and accessing cloud-resident data. Authentication is provided via the AWS Toolkit extension for secure, streamlined access. The integration preserves existing development workflows for data processing, SQL analytics, and ML.

🤖 Amazon ECS now offers generative AI assistance from Amazon Q Developer to streamline task definition creation and updates in the AWS Management Console. Developers can use an inline chat to generate, explain, or refactor task definition JSON, inject suggestions at any point, and accept or reject proposed edits. Inline suggestions are enhanced to let Amazon Q Developer autocomplete whole blocks of sample code in addition to property-based hints. The capability is available where Amazon Q Developer is offered and can be enabled or disabled via the console code editor settings or controlled with IAM permissions.

🔒 AWS now offers VPC endpoints for Amazon CloudWatch Observability Access Manager (OAM), enabling private, in-region connectivity between your VPCs and CloudWatch OAM without traversing the public internet. The endpoints support both IPv4 and IPv6 and leverage AWS PrivateLink controls such as security groups and VPC endpoint policies. Available in all commercial regions, AWS GovCloud (US), and China Regions, this lets teams manage cross-account observability links and sinks from VPCs that have no internet access.

🔔 Amazon EventBridge now provides its API destinations capability in the AWS Asia Pacific (Melbourne) and AWS Asia Pacific (Thailand) Regions. API destinations allow event buses to invoke HTTPS endpoints as rule targets and support flexible authentication methods such as API key and OAuth, while storing credentials securely in AWS Secrets Manager. This expansion reduces call latency for local workloads and simplifies secure, managed integrations. To get started, consult the EventBridge documentation for configuration guidance.

🔍The Amazon Managed Service for Prometheus collector — an agentless, fully managed Prometheus metrics collector — now vends logs to Amazon CloudWatch Logs, improving visibility into target discovery, authentication, scraping, and ingestion. These logs surface details such as timeouts, remote-write failures, and other errors to aid troubleshooting. The feature is generally available in all regions where the service is offered; review CloudWatch logs pricing and the collector monitoring user guide to get started.

🧰 AWS has added a LocalStack integration for Visual Studio Code that enables developers to test and debug serverless applications locally from the IDE. The integration connects VS Code to a LocalStack-emulated environment without manual port configuration or code changes, exposing emulated services such as AWS Lambda, Amazon SQS, Amazon API Gateway, and DynamoDB. Available through the AWS Toolkit for VS Code (v3.74.0+), a guided walkthrough installs the LocalStack CLI, creates a LocalStack profile, and lets developers switch profiles and deploy to the LocalStack environment at no additional AWS cost.

🔐 Amazon Athena now supports single sign-on for its JDBC and ODBC drivers using AWS IAM Identity Center’s trusted identity propagation. With updated drivers (JDBC 3.6.0 and ODBC 2.0.5.0), analysts can connect from third‑party BI tools and SQL clients using corporate credentials while Lake Formation permissions are enforced and actions are logged. This removes the need for embedded credentials, simplifies identity‑based data governance, and streamlines access management across tools.