All news with #aws tag

🚀 Amazon EKS and EKS Distro now support Kubernetes version 1.37. This release lets you create new clusters or upgrade existing ones via the EKS console, eksctl, or infrastructure-as-code tools. Kubernetes 1.37 promotes the Metrics API to GA, graduates Dynamic Resource Allocation device taints and tolerations to GA, and enables HPA scale-to-zero by default. EKS 1.37 is available in all Regions where EKS operates, with EKS Distro images published to ECR Public Gallery and GitHub.

🛈 AWS Brazil introduces the AWS Brazil 2P Distribution Program to automate distribution of SaaS product licenses for eligible non-Brazilian ISVs. AWS Brazil becomes the seller of record, invoicing customers in BRL, calculating and withholding applicable Brazilian taxes, and handling disbursements. ISVs create distribution authorizations via AWS Partner Central or APIs and monitor transactions and payments through the Seller Insights dashboard.

🚀 The AWS MCP Server, part of the Agent Toolkit for AWS, is now available in six additional Regions: Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Ireland), Europe (London), and US West (Oregon). The managed Model Context Protocol server provides a single interface for AI coding agents to discover and call AWS services without per-service integrations. Running the server closer to developers reduces latency and helps meet regional data residency requirements. It can access services across all commercial AWS Regions while operating in the listed Regions.

📈 Amazon ElastiCache for Valkey now exports OpenTelemetry metrics to Amazon CloudWatch for node-based clusters, with each metric carrying attributes usable in PromQL expressions. Two monitoring modes are available: Standard monitoring (60s) which now includes a core OpenTelemetry set, and Detailed monitoring (15s) which exposes the full metric set for finer diagnostics. Detailed monitoring supports detection of short-lived events and feeds ElastiCache Insights dashboards; CloudWatch OpenTelemetry pricing applies.

🔔 AWS has integrated Amazon GuardDuty Runtime Monitoring into the AWS Security Hub Threat Analytics plan. This runtime capability inspects OS, network, and file activity to detect threats like container escapes, privilege escalation, and cryptomining across Amazon EC2, Amazon EKS, and Amazon ECS on AWS Fargate. Billing for Runtime Monitoring is now consolidated under Security Hub as a single usage type, eliminating separate GuardDuty Runtime Monitoring charges for accounts and regions with Security Hub enabled. Detection behavior, finding types, and GuardDuty agents remain unchanged, and no reconfiguration is required; free-trial terms for Threat Analytics and Security Hub Essentials remain separate.

🔍 AWS announced a preview of the AWS Well‑Architected Agent, an AI‑driven evolution of Trusted Advisor and the Well‑Architected Tool. The agent analyzes AWS infrastructure across cost, security, performance, and reliability to produce contextualized, prioritized recommendations aligned to business goals. It correlates metrics, application topology, and IaC templates (Terraform, CDK, CloudFormation) and can deliver automation‑ready fixes such as SSM runbooks and CLI scripts.

🚀 Amazon Redshift now lets customers query Amazon S3 data lake tables in a different AWS Region while keeping query traffic within their VPC using enhanced VPC routing. The integrated data lake query engine runs on RG provisioned and Serverless cluster compute, avoiding public networks and supporting compliance needs. Cross‑Region queries remove the need to copy or replicate data, simplify global analytics, and incur standard data transfer charges.

🛠️ Amazon Q Developer in the AWS Management Console now provides enhanced visualizations that reason across hundreds of AWS APIs to deliver comprehensive answers about an account. The update adds health dashboards with status indicators, interactive time-series charts with trend and anomaly detection, troubleshooting diagnostics, and detailed resource views. Responses are faster and more actionable, replacing multi-step text replies with immediate visual summaries. The features are available in all Regions where Amazon Q Developer is supported.

🔍 Amazon DynamoDB now supports filtered export to Amazon S3, letting you export only the items and attributes you specify. Using a key condition expression, filter expression, and projection expression, you can produce datasets tailored for granular recovery, cross-account transfers, analytics, or compliance. Filtered export works with both full and incremental exports and is available in all AWS Regions except AWS GovCloud (US). See the DynamoDB developer guide to get started.

🚀 AWS has announced that Amazon DynamoDB Accelerator (DAX) is now available in 17 additional Regions, including new Asia Pacific, Canadian, European, Israel, Mexico, and AWS GovCloud locations. DAX is a fully managed, in-memory cache for DynamoDB that delivers up to 10x performance improvements—lowering latencies from milliseconds to microseconds—while supporting millions of requests per second. The expansion helps customers meet local data residency and low-latency requirements and simplifies cache management with automated patching, failover, and scaling.

🔒 AWS Security Hub now groups related exposure findings into remediation plans that target shared root causes. Each plan provides prioritization (Critical, High, Medium, Low), impact assessment, and step-by-step remediation instructions with examples for AWS CLI, Terraform, CloudFormation, Python, and CDK. Security Hub automatically ranks plans by potential risk reduction so teams can focus on the most impactful fixes, and AI agents can consume the plans via API to automate remediation. Remediation plans are available in all Regions where Security Hub is offered and included at no extra cost under the AWS Security Hub Essentials plan.

📘 AWS Transfer Family now lets you select a custom Amazon CloudWatch Logs group for managed workflow execution logs. You can assign a distinct log destination per workflow or consolidate logs from multiple workflows into a shared group for unified metrics and dashboards. Workflow logs remain structured JSON and queryable with CloudWatch Logs Insights, and the feature is available in all Regions offering Transfer Family managed workflows.

🚀 Amazon EKS Auto Mode now supports advanced node tuning via the NodeClass resource, enabling kubelet, Linux kernel sysctl, and hugepage configuration directly through the Kubernetes API. advancedCompute lets you set user namespaces for rootless builds, adjust eviction thresholds and log rotation, raise network and ARP cache limits, and pre-allocate 2Mi or 1Gi hugepages for HPC and low-latency workloads. EKS Auto Mode validates and applies settings at node boot and preserves them across scaling and upgrades, with no custom AMIs, EC2 launch templates, or privileged DaemonSets to manage.

🔧 Amazon EMR Serverless now supports up to 1TB of shuffle storage per job, up from the previous 200 GB limit, enabling production-scale Apache Spark workloads without managing clusters. This change helps data engineers and scientists run large joins, aggregations, and sorts that generate heavy shuffle traffic by providing spill-to-disk support and improved job reliability. The feature is available in emr-7.14, emr-spark-8.1 and later, across 18 AWS Regions where EMR Serverless is offered.

🔍 Amazon Route 53 Global Resolver and DNS Firewall now integrate with Amazon CloudWatch to provide DNS analytics and insights. These features let network and security teams observe DNS query patterns, evaluate DNS Firewall rule effectiveness, detect anomalies, and optimize DNS performance. An Analytics tab in the Global Resolver and DNS Firewall consoles centralizes access, and CloudWatch Metrics and Contributor Insights enable metric filters, searches, and alarms. Standard CloudWatch pricing applies to opted-in metrics.

🔧 AWS Glue Data Catalog now supports table optimization, statistics, and crawlers for Apache Iceberg Version 3 (V3) tables. With table optimization you can compact V3 tables using binpack, sort, or z-order strategies and remove expired snapshots and orphan files. Glue can generate NDV statistics for V3 types and Glue crawlers can discover V3 tables in Amazon S3 and register them in the Glue Data Catalog.

📧 AWS Budgets now verifies new email subscribers before sending budget alerts. When you add an email address to a budget notification, AWS sends a verification email and the recipient begins receiving notifications only after confirming via the provided link. Verification applies to addresses added from 9/30/26 onward and is shown in the AWS Budgets console with a resend option for pending confirmations. This feature is available in all Regions except AWS GovCloud (US) and China Regions.

🔒 AWS Secrets Manager now integrates with the AWS Recommended Actions framework to display contextual, actionable suggestions directly in the Secrets Manager console. Users can view tailored recommendations beside individual secrets to improve security posture and follow best practices without leaving the console. Examples include enabling rotation, switching to customer-managed keys for encryption, and addressing configuration improvements. This capability is available in all AWS Regions where Secrets Manager is offered, at no additional cost.

🔁 IAM Identity Center can now be replicated to opt-in AWS Regions and between Regions inside AWS GovCloud (US) and AWS China, extending prior multi-Region coverage beyond enabled-by-default commercial Regions. When enabled, the service automatically replicates identities, entitlements, and related data from a primary Region to additional Regions, allowing users to retain access during primary Region disruptions. Multi-Region support works with external identity providers or the IAM Identity Center directory and requires a multi-Region customer managed KMS key (CMK); new instances can enable the feature with one click, while existing instances must create and configure a CMK. Standard AWS KMS charges apply; IAM Identity Center itself has no extra fee.

🖥️ Amazon WorkSpaces Core Managed Instances now support Graphics G7 instances powered by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs and Intel Xeon 6 processors. G7 offers up to 2.1X better performance than G6 for graphics-intensive workloads and includes 32 GB of GDDR7 per GPU with 2.67X faster memory bandwidth. Six sizes are available (1–8 GPUs, 8–192 vCPUs, 32–768 GB RAM) with Linux and Windows support and BYOL.