All news with #aws tag

🛠️ AWS Glue Data Quality now supports anomaly detection for Catalog-based evaluations and can write evaluation results to AWS Glue Data Catalog (GDC) tables. These features apply to both ETL jobs and Catalog evaluations, enabling ML-driven time-series forecasting to surface unexpected changes in table statistics without manual thresholds. Evaluation outcomes, profiling metrics, and anomaly predictions (with confidence bounds) are persisted to GDC tables and can be queried via standard SQL. The capabilities are available in all AWS commercial regions and AWS GovCloud (US).

📊 AWS announced a Distribution Analyzer for AWS Glue Data Quality that produces frequency distribution profiles for datasets. The feature generates histograms for numeric columns and value distributions for categorical, date, and boolean columns, with support for custom bin counts to tune granularity. Distribution statistics integrate with existing DQDL rulesets, are stored in Amazon S3, and are accessible via APIs for querying and visualization.

🛡️ In June 2025 AWS introduced the AWS WAF Anti‑DDoS managed rule group to protect application‑layer (L7) traffic. Starting July 27, 2026, Shield Advanced will add this rule group to eligible web ACLs in Count mode and eventually replace Shield’s existing L7 automatic mitigation by January 1, 2027. The rollout includes a free evaluation period, configurable sensitivities, new Challenge actions, reduced WCU usage, and a dedicated dashboard and metrics for observability.

🎮 Amazon GameLift Streams introduces Custom Aspect Ratio and Dynamic Resolution to improve streaming across diverse devices and networks. With Custom Aspect Ratio you can set per-session resolutions (320–4096 pixels per dimension, up to a 1080p pixel budget) via the StartStreamSession API or the AWS Console. Dynamic Resolution adapts stream quality automatically as network bandwidth fluctuates and is enabled by default for new stream groups; customers must download the new Web SDK. Both features are available in all Regions where GameLift Streams is offered.

🔒 Amazon EKS now supports AWS PrivateLink for the cluster OIDC discovery and JWKS endpoint, allowing access to the OIDC endpoint used by IAM Roles for Service Accounts (IRSA) privately from your VPC without internet egress. Tools such as eksctl, Terraform, or custom token validators can reach the discovery document and JWKS via an interface VPC endpoint for the com.amazonaws..oidc-eks service. This ensures correct DNS resolution when the EKS management VPC endpoint uses private DNS. The feature is available in all Regions where Amazon EKS is offered at standard AWS PrivateLink pricing.

🛡️ AWS Security Assurance Services published a Cloud Security Alliance (CSA) Compliance Guide for AWS that maps the 17 control domains and 207 control objectives of the Cloud Controls Matrix v4.1 to AWS services and implementation recommendations. The guide helps organizations plan, implement, and evidence controls within their CCM scope, including those pursuing CSA STAR certification, and aligns CSA’s Shared Security Responsibility Model with the AWS model. It notes AWS-owned controls and available attestations via AWS Artifact, and provides implementation guidance, common pitfalls, and example evidence for customer- and shared-owned controls.

🎯 AWS Elemental MediaTailor now lets customers directly control ad decision server (ADS) timeouts and concurrency settings without contacting AWS Support. You can set individual HTTP ad request timeouts, total ad personalization time budgets for live, VOD, and prefetch, and enable parallel ADS requests. Configure these options via the console, AWS CLI, or SDKs using the new AdsPersonalizationTimeouts and AdsPersonalizationConcurrency parameters on playback configurations.

🎧 Agents using Azure Virtual Desktop (AVD) or Windows 365 Cloud PC can now take Amazon Connect calls directly from their virtual desktop with audio optimization enabled. IT administrators perform a one-time setup to redirect media from the virtual desktop to the agent's local device, improving call audio quality. Agents access calls via the Amazon Connect Customer agent workspace or custom interfaces built with the Amazon Connect Customer open-source JavaScript libraries. This capability complements existing support for Amazon WorkSpaces, Citrix, and Omnissa cloud desktops and is available in all AWS Regions offering Amazon Connect Customer except AWS GovCloud (US-West).

🛠️ Amazon Managed Workflows for Apache Airflow (MWAA) now supports Apache Airflow 2.11.2, a maintenance release with security improvements, bug fixes, and dependency upgrades. The update enhances webserver stability, task execution, and task lifecycle handling, and improves secrets masking and UI behavior. You can create new 2.11.2 environments or upgrade existing ones in all available MWAA regions via the AWS Management Console.

🔍 AWS HealthLake now offers automatic resource matching to identify and link duplicate FHIR records across seven resource types, enabling more accurate longitudinal patient records and population health datasets. The feature recognizes high-confidence identifiers (SSN, MRN, NPI), filters placeholders to reduce false matches, and connects matches via FHIR Linkage resources without modifying original records. Available in gated preview across multiple AWS Regions; interested customers can request allowlist access.

🛡️ This post shows how AWS DevOps Agent accelerates root-cause analysis for AWS Network Firewall issues by correlating CloudWatch alarms, firewall logs, route tables, and CloudTrail events. It walks through three reproducible failure scenarios—domain deny list, stateless rule priority inversion, and asymmetric cross-AZ routing—deployed via an AWS CDK app. The CDK stack includes a sample workload, test endpoint, status page, and a webhook pipeline so alarms trigger investigations and the agent returns mitigation plans for operator review.

🔧 Amazon Kinesis Data Streams now lets you scale down on-demand warm throughput for streams running in On-demand Advantage mode. By setting a lower warm throughput value, streams adjust to the requested capacity or to the peak ingest usage from the last hour, whichever is higher, ensuring sufficient capacity while releasing unneeded throughput. The capability incurs no additional cost and is available in all Regions that support On-demand Advantage; documentation and pricing guidance are provided in the Developer Guide and console instructions.

📧 Amazon Simple Email Service (SES) now provides a guided console setup for sending email over SMTP using Mail Manager. The new workflow automatically creates and configures required resources and delivers a working SMTP endpoint with downloadable credentials. This lets developers plug SMTP credentials into any application or framework quickly, streamlining transactional and notification email workflows. The feature is available in all AWS Regions where SES is offered.

🔒 AWS now offers Claude Opus 5, the latest Opus model with optional zero data retention (ZDR) for enterprise customers. The model improves coding capabilities, long-running agents, and complex document analysis while supporting regional residency and AWS-managed features. Customers can access Opus 5 via Amazon Bedrock (ZDR by default) or Claude Platform on AWS (ZDR on request). The offering integrates with AWS billing, authentication, and governance features.

🛠️ Amazon Redshift now offers an All Upfront payment option for 3‑year Serverless Reservations, delivering up to 50% savings versus on‑demand rates. This joins existing 1‑year No Upfront, 1‑year All Upfront, and 3‑year No Upfront options to provide more flexibility for cost optimization. Reservations are managed at the AWS payer account level and can be shared across accounts to reduce compute costs for Amazon Redshift Serverless workloads.

🛰️ Two new models, Claude Opus 4.8 and Claude Sonnet 5, are now available in the Kiro IDE and CLI for AWS GovCloud (US) Regions. Opus 4.8 targets complex multi-step tasks with improved self-verification and a 1M context window (2.2x credit multiplier), while Sonnet 5 offers agentic reasoning and coding at lower cost with experimental support and a 1M context window (1.3x credit multiplier). Kiro administrators gain enhanced monitoring and tracking: an aggregate usage dashboard, daily per-user CSV telemetry to your S3 bucket, and optional prompt logging for compliance and debugging, with data stored in the customer's account. Update your IDE/CLI and restart to access the new models.

🔍 AWS today announced a research preview of aws-bench, an open-source benchmark designed to measure how accurately and efficiently AI agents complete real-world AWS tasks. The suite includes test cases derived from actual AWS usage—such as investigation, troubleshooting, and infrastructure creation—pairing natural-language queries with defined resource states and ground-truth answers. A CLI tool is included to instantiate test environments, run evaluations, score results, and reset state, and the project is available on GitHub.

⚙️ AWS Clean Rooms now supports larger worker types of 32 vCPUs with 244 GB of memory for SQL analyses, up from the previous 16 vCPUs and 120 GB. The increase enables more compute- and memory-intensive workloads, improving performance for complex queries on large datasets and helping customers optimize costs. Use cases include running complex feature engineering across billions of records to accelerate model training and collaboration between advertisers and publishers.

🔔 AWS now allows customers who pay via electronic funds transfer to set preferences for automatic application of credit memos. Choices on the Billing and Cost Management console include applying credit memos to the original invoice, the next eligible invoice, or the oldest unpaid invoice. By default, credits apply to the original invoice first, then future invoices, unless changed.

📣 Amazon CloudWatch Logs now supports vended Application Load Balancer (ALB) logs to improve observability and simplify debugging of network traffic patterns. You can analyze ALB access, connection, and health check logs directly in CloudWatch to gain insights into client connections, traffic distribution, and target health. CloudWatch telemetry enablement rules allow automatic configuration of logging for existing and new ALBs across organizations, accounts, or specific resources to ensure consistent monitoring coverage.