All news with #aws tag

🔧 Amazon CloudWatch pipelines now includes three new processors: an Amazon RDS log parser, an XML parser, and a GeoIP enrichment processor. These processors parse and enrich logs as they are ingested, turning RDS Aurora audit and error logs into structured fields, converting XML strings into JSON, and adding geographic context to IP addresses. They are available at no extra charge where CloudWatch pipelines is GA; standard ingestion and storage rates still apply.

🩺 CareCloud, a U.S. healthcare IT provider, disclosed a March breach that disrupted services and exposed patient data. The company said an unauthorized third party accessed an AWS environment between March 10 and March 16, 2026, and claimed to have exfiltrated database contents. Notifications began July 25, and impacted individuals are offered identity protection via IDX. No group has claimed responsibility and investigations continue.

🔒 AWS Security Agent (part of AWS Continuum) now offers two capabilities for its on-demand AI-driven penetration testing service: a configurable maximum task-hours limit and selective revalidation of findings. Teams can set preset or custom hour caps so tests stop gracefully when the limit is reached while preserving discovered findings and keeping billing tied to actual task-hours used. Individual findings from completed runs can be re-tested against the live application to confirm an Active or Resolved status, with full revalidation history linked to the original finding.

🔧 AWS Elemental MediaConnect Router now lets customers set internal recovery latency per output. Customers can choose between balanced mode (default behavior) and low-latency mode to optimize recovery time for latency-sensitive workflows. The setting is configurable via the MediaConnect API, AWS Management Console, or AWS CLI, and a new CloudWatch metric, RouteFabricRecoveryLatency, exposes recovery latency per route. This feature is available in all regions where MediaConnect Router is deployed.

🔍 AWS Cost Anomaly Detection now monitors spend for third-party foundation models on Amazon Bedrock, including provider-hosted models like Anthropic Claude. The service uses machine learning to detect and alert on unusual spend, and this update extends automatic anomaly detection to Bedrock model usage. Alerts include a ranked root-cause breakdown by dollar impact across service, account, Region, and usage type, and the feature is available in all commercial AWS Regions except GovCloud and China.

🔔 Starting today, Amazon OpenSearch Ingestion is available in AWS GovCloud (US-East) and AWS GovCloud (US-West), enabling secure ingestion into Amazon OpenSearch Service managed clusters and serverless collections. OpenSearch Ingestion is a fully managed data ingestion tier that offers a no-code experience to filter, transform, redact, and route data. It automatically provisions and scales resources to handle variable workloads and is now generally available across 19 AWS regions.

🛠️ Customers can now deploy eligible AWS Marketplace AMIs directly on Amazon Lightsail. Lightsail offers simple, predictable pricing with instance bundles that include compute, storage, and data transfer at a fixed monthly rate. When subscribing to supported products — such as Microsoft Windows Server, Microsoft SQL Server Express, Ubuntu, cPanel & WHM, and Plesk — users may choose Amazon Lightsail in addition to Amazon EC2. The "Launch on Lightsail" option opens the Lightsail console with the AMI and region pre-configured for fast deployment.

🟦 AWS has added a fourth Availability Zone (eu-west-2d) to the Europe (London) Region, expanding capacity for AI, ML, and general-purpose compute. The new zone provides next-generation accelerated instances such as Trn3 and P6, enabling local model training and inference. Customers can distribute workloads across four zones for improved fault tolerance, accessible via the Console, APIs, and existing workflows at standard regional pricing.

🚀 AWS has added a fourth Availability Zone to the Europe (London) Region (eu-west-2), increasing capacity for cloud compute and AI/ML workloads. The new zone provides next-generation accelerated instances such as Trn3 and P6, plus general-purpose EC2, enabling customers to run training and inference locally within the London region. It improves fault isolation for resilient, highly available architectures and is accessible via the AWS Console, APIs, and existing workflows at standard regional pricing.

🚀 AWS Lambda MicroVMs are now available in five additional Regions: Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Europe (Frankfurt), and Europe (Stockholm), bringing availability to 10 Regions in total. Lambda MicroVMs deliver VM-level isolation, near-instant launch and resume speeds, and state preservation so developers can run isolated, stateful workloads without managing virtualization. Developers create a MicroVM image from a Dockerfile and launch per-user or per-job MicroVMs with dedicated HTTPS URLs supporting HTTP/2, gRPC, and WebSockets via the Lambda console, CloudFormation, CDK, or Agent Toolkit for AWS.

🔒 Amazon Quick now offers a deny by default governance setting for custom permissions, automatically blocking new AI capabilities until administrators explicitly allow them. Previously, new capabilities were enabled for all users on release, requiring reactive controls. Administrators can apply the restriction per custom permissions profile for users, roles, or the entire account via the Amazon Quick console or AWS CLI. The setting is available in all Regions where Amazon Quick is offered and also restricts existing capabilities within a restricted category.

📊 Administrators can now monitor Amazon WorkSpaces Applications directly in the service console with real-time session-level metrics, instance resource data, and network performance metrics. This native experience removes the need for third-party tools or custom CloudWatch dashboards and requires no configuration. Fleet-level capacity views, customizable session tables, correlated graphs for frame rate, input latency, bandwidth, and CPU/memory/GPU usage are provided, with metrics also exported to Amazon CloudWatch for flexibility.

🔒 AWS Storage Gateway now supports FIPS 140-3 validated endpoints over AWS PrivateLink for Tape Gateway and Volume Gateway. Previously restricted to the public internet, FIPS traffic can now stay on the private AWS network, simplifying use for regulated workloads. To use it, create a FIPS interface VPC endpoint and choose the FIPS option when activating your gateway; gateways must run software version 3.2.7 or later. The feature is available in eight Regions, including US East, US West, and AWS GovCloud.

🚀 Amazon EC2 R8a instances with 5th Gen AMD EPYC processors are now available in Asia Pacific (Taipei). These instances deliver up to 30% higher performance and up to 19% better price-performance versus R7a, plus 45% more memory bandwidth and SAP certification. Built on the AWS Nitro System with sixth-generation Nitro Cards, R8a offers 12 sizes (including 2 bare metal) for memory-intensive and latency-sensitive workloads.

🚀 Amazon Bedrock now supports OpenAI GPT-5.6 Terra and Luna in India with India Geo cross-Region inference. This feature ensures inferencing stays within India while automatically routing requests across AWS Regions like Mumbai and Hyderabad for higher throughput. The models run on the bedrock-runtime endpoint and support Responses, Chat Completions, and Converse APIs, integrating with existing account-level controls including model invocation logging and CloudWatch metrics.

🔐 AWS Identity and Access Management (IAM) now supports outbound identity federation in the AWS European Sovereign Cloud (Germany), enabling workloads to obtain short-lived JSON Web Tokens (JWTs) to authenticate with external services. This feature allows secure access to third-party clouds, SaaS, and self-hosted applications without long-term credentials. Administrators can enforce token properties and control generation via IAM policies and audit usage with CloudTrail to meet sovereignty and compliance needs.

🔔 Amazon announced critical security patch updates for multiple Amazon Corretto distributions on Aug 18, 2026. The release includes Corretto 26.0.2.11.1, 25.0.4.8.1, 21.0.12.9.1, 17.0.20.10.1, 11.0.32.10.1, and 8u504. Amazon Corretto is a free, production-ready OpenJDK distribution available across platforms, and updates can be obtained via the Corretto homepage or by configuring Apt, Yum, or Apk repos. Feedback is welcomed.

🔔 Amazon Web Services announces general availability of AgentCore payments, part of Amazon Bedrock AgentCore, enabling AI agents to discover, access, and pay for paid APIs, MCPs, and content with minimal code. The capability integrates with Coinbase and Stripe Privy wallets, supports the Machine Payment Protocol (MPP), and offers payment orchestration, configurable infrastructure-level limits, and end-to-end observability. GA features include Quick Create for Coinbase credentials, a curated Coinbase Bazar MCP server of x402 pay-per-use endpoints, and support for the x402 "upto" scheme for dynamic pricing.

🆕 Amazon Managed Workflows for Apache Airflow (Amazon MWAA) Serverless now supports running custom Python functions and shell scripts directly in the serverless runtime using PythonOperator and BashOperator. Package your Python modules or shell scripts as code packages, upload them to Amazon S3, and reference them when creating or updating a workflow. The service snapshots your code at workflow creation time and uses that snapshot for all subsequent runs, ensuring execution consistency. This capability is available in all AWS Regions where MWAA Serverless is offered.

🔧 AWS now supports nested virtualization for Amazon WorkSpaces Personal and Core Managed Bundles, enabling developers to run hypervisor-dependent tools directly on Windows and Linux WorkSpaces. Supported OSes include Windows Server 2019/2022/2025, Windows 11, Ubuntu 22.04/24.04, RHEL 8/9, and Rocky 8/9 with DCV. Administrators can toggle nested virtualization per workspace via console, API, or CLI; it’s available in most AWS Regions with some exceptions.