All news with #aws tag

🔔 AWS Backup now supports copying Amazon FSx for NetApp ONTAP backups across AWS Regions and accounts. You can copy FSx for NetApp ONTAP backups to another AWS Region, another AWS account, or both using policy-based backup plans or on-demand copy jobs. Copies can be managed centrally and automated across your organization with AWS Organizations. This capability is available in all commercial Regions where both services are offered.

🛡️ Researchers disclosed a vulnerability in Amazon Kiro IDE (version 0.7.45 on Windows) that enables data exfiltration via prompt injection and manipulated Kiro Powers. Mindguard reported that attacker-controlled repository content and steering files can influence the agent to read and transmit sensitive local data when a malicious workspace file is opened and any message is sent to the agent. Amazon issued a remediation in Kiro IDE 0.8.140; the latest release is 1.0.337.

🔒 Amazon Aurora DSQL now supports defining FOREIGN KEY constraints on new and existing tables. This serverless, distributed SQL database with PostgreSQL compatibility and active-active multi-Region availability enforces referential integrity so writes that would create invalid references are rejected. Developers can choose delete/update behaviors: NO ACTION, RESTRICT, CASCADE, SET NULL, and SET DEFAULT. The feature is available in all Regions where Aurora DSQL is offered.

🔐 Amazon Cognito introduces an admin API operation to reset a user's time-based one-time password (TOTP) multi-factor authentication configuration. Administrators can remove the TOTP device association for users who lose access to their authenticator, enabling users to enroll a new device on next sign-in. This avoids recreating accounts to recover locked-out users and preserves enforced MFA policies. The feature is available in all AWS Regions and is accessible via the AdminDeleteSoftwareToken API through the AWS CLI, SDKs, or APIs; see the developer guide for details.

🛠️ Managers can now record unplanned shrinkage directly in Amazon Connect Customer agent schedules, capturing unscheduled absences like late logins or sudden sick leave. Uploaded assumptions update scheduling metrics instantly, showing adjusted scheduled headcount, net staffing, and projected service level. This allows teams to see, for example, how a 10% unavailability at 8 AM reduces projected service level from 90% to 85%, helping workforce managers proactively address staffing gaps.

🛡️ This recap highlights AWS Security blog posts, new capabilities, code samples, and guidance published in July 2026. Topics include AI agent security, data protection, network and infrastructure protections, threat detection enhancements, compliance guidance, and 21 security bulletins addressing vulnerabilities. Vendors and practitioners can use the code samples and workshops to implement recommended controls and apply patches promptly.

🧩 Mountpoint for Amazon S3 now supports configurable memory usage limits, either set manually or determined automatically based on the runtime environment. This change lets Mountpoint coexist with memory‑intensive workloads such as machine learning training or analytics by reserving memory for applications and slowing operations under memory pressure. The feature detects container budgets in environments like Amazon EKS and is available in all AWS Regions. Upgrade details and configuration guidance are available in the Mountpoint GitHub repository.

🔔 Amazon Connect Customer now offers points-based scoring to evaluate human and AI agent performance, giving managers greater flexibility to assign importance to individual criteria. With this model, scores are the sum of points earned rather than percentages that must total 100. Managers can combine criteria, exclude items from scoring, or award bonus points to reflect business priorities. The feature is available in all regions where Amazon Connect Customer is offered.

🔔 AWS Glue 5.1 is now available in the AWS European Sovereign Cloud Region, bringing core engine upgrades to Apache Spark 3.5.6, Python 3.11, and Scala 2.12.18 for improved performance and security. The release updates open table format support for Apache Hudi 1.0.2, Apache Iceberg 1.10.0, and Delta Lake 3.3.2, and adds Iceberg format 3.0 features such as default column values and row lineage tracking. Lake Formation now enforces fine-grained access control for write DML and DDL operations in Spark DataFrames and Spark SQL, and full-table access control is added for Hudi and Delta Lake tables.

🔒 AWS Backup now supports cross-Region copies and logically air-gapped vaults for Amazon DocumentDB in nine additional Regions including Asia Pacific, Europe, Africa, and Israel. You can copy backups using backup plans or on-demand copy jobs to meet disaster recovery, continuity, and compliance needs. Logically air-gapped vaults provide immutable, isolated backups that are locked by default and encrypted with AWS-owned or customer-managed keys. Share vaults for recovery via AWS Resource Access Manager and protect access with multi-party approval.

🛡️ TrendAI, the AI cybersecurity arm of Trend Micro with U.S. headquarters in Irving, has surpassed $1 billion in sales on the AWS Marketplace, reflecting rising enterprise demand for cloud-delivered AI security. The company credits growth to customers seeking protections against AI-oriented threats and adopting its Vision One platform through AWS. TrendAI reframed itself as an AI-first security business and sees marketplace consumption models overtaking traditional channels. Market research forecasts substantial expansion in the global AI-in-cybersecurity market over the coming decade.

🛡️ This post announces an independent assessment showing how Landing Zone Accelerator on AWS (LZA) can deploy multi-account environments with coverage for Australian Government ISM controls. The analysis, performed by AWS Partner gwi.digital, evaluates LZA Universal Configuration against 1,081 ISM controls and introduces the Controls Acceptance Testing Suite (CATS) for automated validation. Results highlight that LZA addresses 256 addressable controls, achieving Full or Partial coverage for 234, and offers mappings and tooling to accelerate IRAP assessment readiness for Australian customers.

📡 AWS IoT Core now includes an InfluxDB rule action that sends time-series data from connected IoT devices directly to InfluxDB-compatible databases. The integration converts device telemetry to InfluxDB line protocol and supports writing to Amazon Timestream or self-hosted InfluxDB. It offers both device-side and server-side batching to optimize cost and throughput. The feature is available in all AWS Regions where Amazon Timestream for InfluxDB is supported.

🚀 AWS Batch now supports Amazon ECS Managed Instances (ECS MI) as a compute option, enabling GPU-accelerated and compute-intensive batch workloads on AWS-managed infrastructure. With AWS handling AMI updates, security patching, and instance lifecycle, customers can avoid operating their own EC2 fleets. Create a compute environment via the AWS Batch CreateComputeEnvironment API or the management console, specify instance types and networking in managedInstancesProvider, and submit jobs using On-Demand, Spot, or reserved capacity. This capability is available in all Regions where AWS Batch is offered; refer to the AWS Batch User Guide for details.

🟢 Starting today, you can add Amazon EC2 Capacity Blocks for ML and interruptible Capacity Reservations to Capacity Reservation Resource Groups. Previously limited to On-Demand Capacity Reservations, resource groups now accept any reservation type, simplifying instance launches across reserved capacity. Use a Capacity Reservation Resource Group in launch requests, and when using EC2 Fleet or Auto Scaling you can set prioritization and automatic fall back to On-Demand. This feature is available in supported AWS Regions with no additional charges.

🔒 AWS Lambda MicroVMs now support AWS PrivateLink, enabling private connectivity from Amazon VPC resources to Lambda MicroVMs without exposing traffic to the public internet. This helps regulated workloads in financial services, healthcare, and government meet strict network isolation requirements when building with MicroVMs. PrivateLink VPC Endpoints allow creation and invocation of MicroVM APIs and access to each MicroVM’s HTTP endpoint. Endpoints can be created via the Console, CLI, CloudFormation, or SDKs and are supported in all Regions where Lambda MicroVMs are available.

🛠️ Amazon Connect Customer now lets agents change or assign a customer profile on a case after it has been opened. This update helps correct mislinked cases and allows profiles to be added later when customer identity is unknown at creation, such as shared numbers or pending verification. Amazon Connect Cases is available in multiple AWS regions including US, Canada, Europe, Asia Pacific, and Africa, with documentation and getting started resources provided by AWS.

🛠️ The AWS Identity and Access Management (IAM) Roles Anywhere plugin for the AWS SDK for Java v2 lets applications running outside AWS obtain temporary credentials directly inside the Java process. The JVM-hosted plugin removes the need for a separate credential helper or credential_process configuration and integrates with client builders to auto-resolve and refresh credentials. It supports RSA, EC, and ML-DSA keys, requires Java 8+, and is available across all AWS Regions at no extra charge.

🔔 AWS Lambda has opened public preview for managed runtimes starting with Node.js 26 and Python 3.15. This preview lets customers, partners, and language communities test upcoming runtimes and provide feedback before general availability. Preview runtimes may change and are not covered by the Lambda SLA or AWS support plans, so they should not be used for production. The preview uses the same runtime identifiers as GA, enabling automatic graduation when released.

🔔 Amazon RDS for SQL Server now supports the latest Microsoft cumulative update: SQL Server 2025 CU6 (KB5093421) as RDS version 17.00.4055.5.v1. This update brings the fixes and improvements detailed in Microsoft's KB5093421. AWS recommends upgrading RDS instances using the Amazon RDS Management Console, AWS SDK, or CLI. Refer to the Amazon RDS SQL Server User Guide for detailed upgrade instructions.