All news with #aws tag

🔧 AWS Transit Gateway now supports Policy-Based Routing (PBR), allowing forwarding decisions based on packet attributes such as source and destination IPs, ports, and protocol instead of destination alone. PBR reduces the need for complex multi-VPC architectures and extra routing hops by enabling administrators to attach policy tables to Transit Gateway attachments and define ordered rule sets. Rules classify traffic and direct matches to specified route tables using first-match-wins logic, supporting traffic steering, inspection, and environment isolation. PBR is available in all commercial AWS Regions where Transit Gateway is offered and can be configured via the Console, CLI, or SDK with no additional charge beyond standard Transit Gateway fees.

🚀 Amazon MSK Express brokers can now continuously materialize Apache Kafka topics as Apache Iceberg streaming tables on Amazon S3, reducing ingestion and downstream query costs versus self-managed deployments. The capability provides intelligent inline compaction to avoid the small-file problem, built-in coordination for concurrent writers, and supports up to 10 GB/s throughput to Iceberg on S3. Customers can enable the feature via the MSK console, APIs, or MCP server; it is available in all Regions that offer MSK Express brokers.

🚀 Amazon MSK Express brokers now deliver Apache Kafka data directly to Amazon S3 general purpose buckets, providing a fully managed, auto-scaling capability for high-throughput data delivery. This feature handles scaling, retries, and backpressure for mission-critical workloads and can reduce ingestion and delivery costs by up to 60% versus self-managed connectors. MSK Express supports throughput up to 10 GB/s to S3 and eliminates the need to provision additional broker egress throughput, simplifying operations and lowering infrastructure costs.

🔔 AWS Directory Service now lets you upgrade an AWS Managed Microsoft AD directory from Standard Edition to Enterprise Edition directly via the AWS Management Console, AWS CLI, or API. The upgrade preserves trust relationships, application integrations, and group policies without requiring DNS changes or workload re-joins. Standard supports up to 5,000 objects while Enterprise supports up to 500,000 objects for larger deployments. This capability is available in all Regions where AWS Directory Service is offered.

🟦 You can now run OpenSearch 3.7 on Amazon OpenSearch Service, which brings vector search performance gains, improved search relevance, and enhanced Query Insights. The release adds 1-bit scalar quantization for Faiss and Lucene to compress vectors, doc values retrieval for faster vector access without reindexing, and new Search Relevance Workbench metrics and CSV judgments. Query Insights gains automated recommendations, a finished-queries cache, and S3 export for top queries. OpenSearch 3.7 is available in all regions where the service is offered.

🔔 Amazon EC2 Auto Scaling now supports Instance Refresh as a CloudFormation update policy. When you set the new AutoScalingInstanceRefresh update policy and change properties that require replacement, CloudFormation will automatically trigger an Instance Refresh. The integration includes features such as replace root volume for in-place updates, launch-before-terminate, alarm-based monitoring, and checkpoints with bake time for controlled rollouts. Rollback is managed through CloudFormation stack rollback, and the capability is available in all AWS Regions at no additional cost.

⚙️ Amazon Redshift Data API adds long polling to return SQL results without repeated polling, a ListSessions call to enumerate active sessions, and flexible BatchExecuteStatement options including AUTO_COMMIT and shared parameters. These features reduce API chatter, improve session visibility, and let batch statements run independently or reuse parameters. The capabilities are generally available for Provisioned and Serverless Redshift in supported AWS commercial and GovCloud Regions.

🔐 AWS Glue's REST API connector now supports VPC connections, filter pushdown, and partitioning to improve secure, efficient ingestion from REST endpoints. With VPC support you can reach private subnets, VPNs, or AWS PrivateLink without exposing traffic publicly. Filter pushdown converts query predicates into API-native parameters to reduce transferred data, and partition support enables parallel reads across Spark workers for faster ingestion. These features are available in all AWS commercial regions.

🔗 AWS announces general availability of AWS Interconnect - multicloud for Oracle Cloud Infrastructure (OCI), enabling customers to provision resilient, scalable private connections between AWS and OCI. The service simplifies multicloud networking that previously required complex DIY solutions. OCI entered public preview in May and now joins Google Cloud as a supported provider; Microsoft Azure support is expected later in 2026. The feature is available in the us-east-1 (N. Virginia) region and can be created via Console, CLI, or API.

🔒 Today, AWS WAF adds pre-parse text transformations for query arguments and ten new text transformations for use in any rule statement. These capabilities help normalize request content so that AWS WAF inspects requests the same way your application interprets them. New pre-parse options close HTTP parameter pollution and parser-differential evasion gaps, while new transforms include Uppercase, Trim, SHA256, and OS- and JavaScript-aware decoders.

📣 Amazon Connect Customer now automatically surfaces relevant example agent evaluations to help managers prepare coaching feedback. When composing feedback, managers receive recent high- and low-scoring evaluation examples on the selected coaching topic, along with human or AI evaluator notes explaining agent behaviors. This includes paired examples such as successful de-escalations and escalated calls, enabling tailored, evidence-backed coaching across all regions where the service is offered.

🔒 Amazon EFS now supports cross-account Replication in AWS GovCloud (US), enabling customers to replicate file systems between separate AWS accounts. EFS Replication keeps an up-to-date replica of file systems in the AWS GovCloud (US) Region of your choice, supporting business continuity, multi-account disaster recovery, and compliance. Customers can configure replication via the Amazon EFS Console, AWS CLI, CloudFormation, or APIs for streamlined, automated synchronization across accounts.

🔁 IAM Identity Center now replicates identities and entitlements from the primary AWS Region to additional Regions when using the Identity Center directory as the identity source. This extends prior multi‑Region support for organization instances that used external identity providers to those using the Identity Center directory, improving resilience and enabling deployment closer to users and for data residency. The feature requires a multi‑Region customer managed KMS key and is available in the 17 enabled‑by‑default commercial Regions; standard KMS charges apply.

🔒 Amazon Web Services (AWS) announced the release of the Information Security Registered Assessors Program (IRAP) Phase 1a full assessment report, now available via AWS Artifact. The assessment, completed by an ASD-certified IRAP assessor in June 2026, adds four services to the PROTECTED-level scope, bringing the total to 167 assessed services. AWS also released an IRAP documentation pack, updated consumer guidance, and Reference Architectures for ISM PROTECTED workloads to help Australian customers plan and assess cloud risk.

🔔 Second-generation AWS Outposts racks are now supported in the Asia Pacific (Mumbai) Region. Outposts racks extend AWS infrastructure, services, APIs, and tools to on-premises data centers or colocation spaces to provide a consistent hybrid experience. Customers in and outside India can order Outposts racks connected to this region to optimize latency and meet data residency needs. The expansion increases flexibility in region connectivity for Outposts deployments.

💡 AWS Console Home now supports the Cost and Usage widget in the AWS European Sovereign Cloud (Germany) Region, enabling users to surface insights from Cost Explorer and Cost Optimization Hub on their dashboard. The widget shows month-to-date and forecasted costs, highlights savings opportunities, and breaks down spend by service over time. To enable it, sign in to the AWS Management Console, select Add widgets, and drag the Cost and Usage widget onto your Console Home dashboard.

🛠️ AWS DataSync Enhanced mode now supports agent-based transfers for HDFS, Microsoft Azure Blob Storage, and self-managed object storage, and agents can be deployed on Microsoft Hyper-V. Using a DataSync agent, customers can move data with Enhanced mode's parallelism, unlimited file counts, and detailed metrics. HDFS support includes multiple NameNode high-availability configurations and Transparent Data Encryption with Kerberos authentication for secure, compliant migrations.

🔄 AWS DataSync Enhanced mode now supports Amazon EFS and Amazon FSx for Lustre as source or destination locations. Enhanced mode provides parallel data processing, removes file count limits, and offers detailed transfer metrics to simplify large-scale migrations and high-performance workloads. This capability is available in all Regions where AWS DataSync is offered.

🟦 Amazon S3 Tables now support the Variant data type from the Apache Iceberg Version 3 specification, enabling direct writing of semi-structured data like JSON without a fixed schema. Variant shards data into hidden columns and generates Parquet column statistics to optimize queries through techniques such as file pruning. S3 Tables also handle ongoing maintenance including compaction for Variant columns and the feature is available in multiple global AWS Regions.

🔒 Amazon Neptune now supports tag-based access control (TBAC) for IAM, enabling the use of AWS resource tags and IAM principal tags as conditions in IAM policies and Service Control Policies to govern data-plane access. TBAC lets administrators restrict neptune-db:* actions to clusters whose tags match principal tags, reducing lateral access risks in shared VPCs and supporting federated identities via SAML or OIDC session tags. The feature is available in all Regions running Neptune and requires engine version 1.2.0.0+ with IAM authentication enabled.