All news with #aws tag

🛡️ Amazon GameLift Servers now includes Enhanced DDoS Protection, automatically active when you run game servers with no configuration required. The feature provides gaming-optimized traffic shaping to mitigate common network and transport layer attacks such as UDP reflection and SYN floods. It complements AWS Shield Standard and integrates with the Player Gateway relay option for higher-risk games.

🔧 Amazon Elastic Container Service now automatically detects and repairs container instances with impaired agent connectivity across all compute options. It surfaces a new AGENT_CONNECTIVITY health change event for AWS Fargate, Amazon ECS Managed Instances, and Amazon ECS on EC2. For ECS Managed Instances and Fargate, ECS will automatically drain tasks and launch replacement capacity while deregistering impaired instances; ECS on EC2 users can use the event to trigger replacements. This capability is available at no additional cost in all AWS Commercial and GovCloud (US) Regions.

🔒 AWS Glue now supports catalog federation for remote Iceberg REST catalogs in AWS GovCloud (US) Regions, enabling direct, secure access to Iceberg tables stored in Amazon S3 and cataloged remotely. With this feature, analytics engines can query remote Iceberg tables without copying data, and metadata synchronizes in real time between AWS Glue Data Catalog and the remote catalog. The capability integrates with AWS Lake Formation for fine-grained access controls and cross-account sharing, and is supported by Amazon Redshift, Amazon EMR, Amazon Athena, AWS Glue, and third-party engines. Catalog federation is available via the Lake Formation console and the AWS Glue and Lake Formation SDKs/APIs in GovCloud (US-East) and GovCloud (US-West).

🔐 Amazon MSK Replicator now supports OAuth 2.0 (SASL/OAUTHBEARER) authentication for replicating data from external Apache Kafka clusters—including on-premises, self-managed on AWS, or other clouds—to Amazon MSK Provisioned clusters. This enables replication from clusters using OAuth/OIDC for migration, disaster recovery, and hybrid or multi-cloud data distribution. MSK Replicator continues to automate replication without custom tooling and preserves topic names while preventing replication loops and synchronizing consumer offsets.

🔍 Amazon Connect Customer now supports automated information extraction from voice and chat interactions, capturing verbatim data like account numbers and derived insights such as reason for contact and next steps. Administrators define conversational analytics rules and extraction runs on raw content before redaction, enabling capture of sensitive items while still supporting redaction in recordings and transcripts. Extracted values appear to agents in After Contact Work, are searchable by supervisors, and are available to developers via APIs, Kinesis Data Streams, and S3 outputs.

🛠️ AWS ParallelCluster 3.16 is now generally available and introduces pcluster-diag, an on-node diagnostics tool included in ParallelCluster AMIs that produces structured reports to simplify issue identification. The release also improves cluster lifecycle resilience with more robust creation, updates, and image builds. The HPC and AI/ML software stack receives updates to NVIDIA drivers, CUDA, EFA installer, and Slurm.

🤝 Amazon Bedrock now offers OpenAI's GPT-5.6 family — Terra and Luna — in AWS GovCloud (US-West) and (US-East), delivered via Bedrock's next-generation inference engine for security and high performance. Terra balances capability and cost while Luna prioritizes fast, low-cost inference; both support 1 million token context windows and prompt caching with explicit breakpoints for reduced billing on repeated context. Use the Bedrock Console or Responses API on the bedrock-mantle endpoint to get started.

🛡️ ToxicPanda 2.0 now requests VPN service permissions to create a local interface that can block Google Play and Google Play Services, enabling it to interfere with app verifications, updates, and Play Protect checks. After establishing the VPN, the malware extracts and installs payloads, requests Accessibility Service permissions, and automates Wireless ADB to gain shell-level access. Zimperium reports distribution via AWS-hosted buckets and notes support for 167 remote commands and overlays targeting 349 financial apps across 16 countries.

🚀 AWS Neuron 2.32.0 delivers NKI 0.6.0 with on-device top-K, variable-length all-gather, and new loop constructs for data-dependent iteration. The release includes 13 new NKI Library kernels for Mixture of Experts (MoE) training and sparse attention, plus PyTorch references for 22 additional kernels. Runtime collectives now support variable-size all-gather, reduce-scatter, and all-to-all on Trn2 and Trn3, and the vLLM Neuron plugin moves to vLLM 0.24.0 across Neuron AMIs and containers.

🤖 Managers can now query Amazon Connect Customer in plain language to get answers, evidence, and recommended fixes in seconds. The feature searches over 150 metrics across self-service, agent, and queue performance to identify what matters and explain why. Users can start with broad questions and drill down—receiving prioritized actions with confidence scores and projected impact. Available in all Regions that support Amazon Connect Customer AI Agents.

🖥️ The Deadline Cloud Monitor desktop app now displays download progress, status, and health for automatic job file downloads to your destination drive. The monitor provides visibility into render environments, jobs, resources, and costs, and the new Download status column appears at both job and task levels to confirm when outputs are available. An indicator shows how current the status is and the app provides guidance when files are unavailable.

🚀 AWS Glue 6.0 is now generally available with a 30% price reduction and upgraded runtimes including Apache Spark 4.1, Python 3.13, and Scala 2.13. It adds full support for Apache Iceberg v3, newer Apache Hudi and Delta Lake versions, and productivity features such as Spark Declarative Pipelines, Real-Time Mode streaming, and Arrow-native Python UDFs. Glue 6.0 is available across AWS Commercial, GovCloud (US), and China regions.

📣 Amazon Simple Email Service (SES) now supports per-request open and click tracking override parameters in the SendEmail and SendBulkEmail APIs. This lets senders enable or disable open and click tracking on individual API calls instead of managing multiple configuration sets. The override takes precedence over the associated configuration set and helps honor recipient-level consent requirements like GDPR and CNIL guidance. The feature is available in all AWS Regions where Amazon SES is offered and has no additional cost.

🚀 The AWS Local Zone in Las Vegas, Nevada is now generally available. This Local Zone supports Amazon EC2 instances (C7i, M7i, R7i, C8gn), Amazon EBS volume types (gp3, gp2, io1, sc1, st1), Amazon ECS, Amazon EKS, Application Load Balancer, and AWS Direct Connect. AWS Local Zones extend AWS infrastructure closer to metropolitan areas to enable single-digit millisecond latency, address data residency, and support AI/ML inference and migration of legacy applications. Enable the Las Vegas Local Zone (us-west-2-las-2a) from the AWS Global View or use the ModifyAvailabilityZoneGroup API.

🔔 Amazon Redshift now supports concurrency scaling for refreshes of Amazon Kinesis Data Streams-connected streaming materialized views starting with patch P203. Redshift Streaming Ingestion enables low-latency ingestion from KDS into streaming materialized views, letting each refresh process hundreds of megabytes per second. With concurrency scaling enabled, streaming workloads automatically scale, freeing the main cluster or Serverless workgroup to run higher-priority jobs. This capability is available immediately in all AWS regions where Redshift is offered.

🔐 Amazon Timestream for InfluxDB now supports AWS KMS customer managed keys to encrypt data at rest for InfluxDB 2 databases, InfluxDB 2 Read Replicas, and InfluxDB 3 clusters. Customers choose a symmetric AWS KMS key during resource creation; the key must reside in the same AWS account and Region and cannot be changed later. The capability is available via the AWS Console, AWS CLI, and the Timestream for InfluxDB API across all supported Regions, with standard AWS KMS charges applying.

🚀 Amazon EC2 C8gd, M8gd, and R8gd instances with up to 11.4 TB of local NVMe SSD are now available in more regions. Powered by AWS Graviton4, they deliver up to 30% better performance than Graviton3 and improved I/O and query speeds for demanding workloads. Instances offer up to 50 Gbps network, EBS bandwidth controls, Elastic Fabric Adapter on larger sizes, and 12 sizes per family to suit diverse compute, balanced, and memory-intensive use cases.

🔒 This post announces a new AWS Network Firewall capability—rule hit count—that provides visibility into how often stateful rules match network traffic across custom and managed rule groups. Rule hit counts increment when matches produce alert logs (alert, drop, reject), and pass rules can be tracked by adding the alert keyword. Alert logs include aws_metadata with resource ARN and signature ID, are delivered to CloudWatch Logs or S3, and drive the Top Rule Hits dashboard for monitoring and compliance validation.

🚀 Amazon EC2 P6-B300 instances are now available in the Asia Pacific (Seoul) Region. These instances offer 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB high-bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps dedicated ENA throughput, and 4 TB of system memory. The P6-B300 delivers 2x networking bandwidth, 1.5x GPU memory, and 1.5x GPU TFLOPS (FP4) versus P6-B200, targeting large trillion-parameter FMs and LLM training and deployment. The p6-b300.48xlarge size is available in Seoul, US West (Oregon), AWS GovCloud (US-East), and US East (N. Virginia).

⚙️ Amazon launches the RDS Switchover Read Replica execution block for ARC Region switch to automate recovery orchestration for Amazon RDS databases using Oracle Data Guard in multi-Region workloads. The feature automates role reversal or promotion between primary and read replica to enable zero data loss in planned failovers and rapid recovery in unplanned events. It includes native cross-account support for centralized recovery management.