All news with #aws tag

🛡️ Amazon Inspector introduces the new Inspector VM Scanner for agent-based EC2 scanning, increasing detection coverage while lowering CPU usage on instances. The updated scanner expands findings to include software such as WordPress, Apache HTTP Server, Python packages, and Ruby gems, bringing agent-based coverage closer to agentless parity. Customers can enable the VM Scanner via the Inspector console or API, including organization-wide enablement for delegated administrators, with no additional IAM instance profile roles required.

📣 Amazon Simple Email Service (SES) introduced enhanced deliverability features that report inbox placement percentages and public email blocklist status. These insights use representative industry samples to show how many messages are routed to spam folders and provide visibility by sending domain and campaign. SES also offers pre-send content testing to estimate inbox placement at major mailbox providers and passive monitoring of blocklist activity. The new capabilities are available in all AWS commercial regions where SES is offered.

📣 AWS End User Messaging now supports RCS for Business messaging in 20 additional countries, bringing coverage to 22 countries including the United States and Canada. Businesses can use the existing SendTextMessage API with no code changes, and messages are delivered from a recognized business identity. Devices that do not support RCS automatically fall back to SMS, and RCS for Business is available in all Regions where AWS End User Messaging operates.

🩺 AWS HealthLake now natively supports payer compliance with the CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F), requiring four standardized FHIR-based APIs by January 1, 2027. The release implements Patient Access, Provider Access, Payer-to-Payer, and Prior Authorization APIs using CARIN, DaVinci, and SMART standards, and adds metrics and consent integrations. It is HIPAA-eligible and available in multiple AWS Regions.

📅 Amazon Connect Customer now supports scheduling tasks up to 90 days in advance, enabling organizations to plan, route, and track long-running follow-up work. Examples include scheduling adjuster visits, parts availability checks, and repair completion follow-ups, with tasks routed to the appropriate team and carrying relevant claim context. Tasks can be scheduled via the StartTaskContact API, contact flows, or the agent workspace. This capability is available in all commercial and AWS GovCloud (US) regions where Amazon Connect Customer is offered.

📡 AWS Shield Advanced now provides DDoS attack flow logs that deliver packet-level visibility into traffic targeting Shield-protected resources. The logs capture source and destination IPs, ports, protocols, packet and byte counts, and source country details, and are published every five minutes during active attacks. Log data can be delivered to Amazon S3, Amazon CloudWatch Logs, or Amazon Data Firehose for forensic analysis, threat intelligence, and compliance. To use the feature, resources must be protected by Shield Advanced and log delivery must be configured; the feature is available in all regions where Shield Advanced operates.

🔌 AWS now offers a free 500 Mbps Interconnect - multicloud tier to simplify private connectivity between AWS and other public clouds. The open specification behind Interconnect is already adopted by Google Cloud and Oracle Cloud Infrastructure, with Microsoft Azure planned later in 2026. The free tier provides a fully managed, resilient path (one local Tier 1 Interconnect per customer per region) and includes an Amazon CloudWatch Network Synthetic Monitor at no additional cost. Other CSPs set their own charges for their side of the link, so customers should review third-party pricing before creating an Interconnect.

🟦 Amazon Redshift Serverless now supports a lower base capacity of 4 Redshift Processing Units (RPUs) in seven regions, including Asia Pacific (Hong Kong), Seoul, Canada (Central), Europe (London), South America (Sao Paulo), and AWS GovCloud (US-East and US-West). Each RPU equals 16 GB of memory and billing is per-second in RPU-hours; the new entry-level starts at about $1.50 per hour. Previously the minimum was 8 RPUs. The configuration supports up to 32 TB of managed storage, up to 100 columns per table, and a maximum of 64 GB memory, and capacity reservations are available for 1- and 3-year terms for predictable workloads.

🟢 Oracle Database@AWS is now generally available in eight additional AWS Regions — Zurich, Milan, Spain, Paris, Osaka, Singapore, Melbourne, and Sao Paulo — enabling customers to access OCI-managed Oracle Exadata systems from within AWS data centers. This expansion brings the service to twenty regions total, supporting migrations of on-premises Oracle Exadata and Oracle RAC workloads and meeting in-region data residency requirements. Customers can request a private offer from Oracle via the AWS Marketplace and configure databases through the AWS Management Console.

🟦 Amazon S3 Tables are now available in the Asia Pacific (Taipei) and Asia Pacific (New Zealand) AWS Regions. S3 Tables provide an object store with built-in Apache Iceberg support, enabling scalable tabular data storage and making data queryable by AWS and third-party engines. They perform continual table maintenance to optimize queries and reduce storage costs, and integrate with the Intelligent-Tiering storage class for automated cost management without operational overhead.

📈 Amazon CloudWatch Metrics Insights now supports querying metrics data up to two weeks in the past, extending the previous 3-hour SQL query window. This enhancement lets you display, aggregate, and analyze older metrics for improved visualization and investigation. The feature is available in AWS GovCloud (US-East) and GovCloud (US-West) at no additional charge, with standard CloudWatch pricing applying for related alarms, dashboards, and API use.

🔐 This post explains AWS Network Firewall's new native attachment to Transit Gateway and how it replaces the traditional inspection VPC model. It outlines benefits such as simplified architecture, centralized control, and flexible cost allocation via Transit Gateway metering policies. The article summarizes preparation steps, two common centralized architectures, a phased migration approach, and best practices for testing, rollback, and preserving NAT Elastic IPs.

📊 AWS Billing and Cost Management (BCM) now supports Budgets widgets in BCM Dashboards, allowing teams to monitor budgets alongside Cost Explorer and Savings Plans reports. Budgets widgets show budget name, budgeted amount, actual spend, and forecasted amount, with filters for name, threshold, and budget type. Widgets can be added to any dashboard, included in exports, and are available in all AWS commercial Regions at no additional charge.

🔒 AWS Network Firewall adds URL and domain category filtering to simplify policy management by using AWS-managed categories instead of manual allowlists and blocklists. This reduces administrative overhead and keeps policies current as new domains appear. The feature supports domain category filtering via SNI without decryption and URL filtering with TLS inspection, and includes options for exceptions, Suricata rule support, and integrated logging for monitoring and compliance.

🔔 AWS Organizations now emits CloudTrail events to the management account when member accounts join or leave an organization, introducing two new events: AccountJoinedOrganization and AccountDepartedOrganization. The join event records method (Created or Invited) and timestamp, while the depart event records mode (Left, Removed, or Cleaned) and timestamp. Administrators can use these events with CloudWatch alarms or EventBridge rules to enable real‑time notifications and faster incident response.

🔧 The next generation of AWS Resilience Hub is now generally available, offering platform engineering and SRE teams a centralized console to assess and strengthen workload resilience. It introduces a three-level application model, automated dependency discovery, generative AI-powered failure mode analysis, modular resilience policies, and organization-wide reporting. Integration with AWS Organizations enables central policy definition and posture monitoring across accounts and regions, and existing customers can migrate at their own pace.

🛈 Amazon Connect Customer now offers generative AI-powered post-contact summaries in eight new language families — Portuguese, French, Italian, German, Spanish, Chinese, Japanese, and Korean — and extends support for non-US English locales such as British and Australian English. These summaries provide concise, structured overviews of voice, chat, and email interactions to help agents and managers review contacts without reading full transcripts. The new languages are available in all AWS Regions where post-contact summaries are supported, enabling global teams to generate summaries in the conversation language and maintain locally appropriate spelling and terminology.

🤖 AWS now offers Claude Opus 4.8, Anthropic's most capable generally available model, bringing advances in agentic coding, professional knowledge work, and autonomous long-running tasks for developers and enterprises. The model sustains longer sessions, reasons more deeply, and maintains consistency for production workflows. Customers can access Opus 4.8 via Amazon Bedrock or the Claude Platform on AWS, with AWS-managed features and unified billing.

🔒 Amazon DynamoDB Streams now supports AWS PrivateLink for FIPS endpoints in AWS GovCloud (US) Regions. This enables private connectivity between VPCs and DynamoDB Streams FIPS endpoints, keeping traffic off the public internet for agencies and organizations with federal compliance requirements. The capability simplifies compliant architectures for real-time data processing, CDC, and event-driven applications while maintaining enhanced security and privacy.

🚀 The next generation of Amazon OpenSearch Serverless is now generally available, offering a fully managed search and vector engine optimized for agentic workflows. It auto-scales up to 20x faster and provisions resources in seconds, supports scale-to-zero and pay-per-usage pricing, and can reduce costs by up to 60% versus provisioning clusters for peak loads. New features include a shared storage layer that decouples compute and storage, two resource-based endpoints for simplified network connectivity, and native integrations with AI development platforms and OpenSearch Agent Skills.