All news with #aws tag

🔎 Amazon S3 Metadata and annotations are now available in AWS GovCloud (US-East) and AWS GovCloud (US-West), enabling faster discovery, understanding, and enrichment of S3 data. S3 Metadata captures system-defined details like object size and source and stores them in Amazon S3 Tables for near real-time tabular queries. Annotations let you attach rich business context in JSON, XML, or YAML (up to 1 GB per object) that travels with the object and follows durability and consistency properties.

🚀 Amazon Elastic Container Registry (Amazon ECR) has increased the maximum number of replication rules per registry from 10 to 25. This change addresses limitations for complex multi-region and multi-account architectures, allowing more granular replication strategies for scenarios such as distributing images for low-latency pulls and separating production and staging targets. The increase is available in all AWS Regions where Amazon ECR is supported.

🔧 Amazon MSK Provisioned clusters now support configuring custom domain names at the cluster level for both ZooKeeper and KRaft metadata modes. This removes the need to set domains per broker and ensures persistent endpoints across scaling, migrations, and failovers. The setting persists through cluster operations and is available for new and existing clusters in all Regions where MSK Provisioned is offered, at no extra cost.

🔍 The Amazon Connect Customer dashboards now include reporting on routing steps and agent proficiencies, enabling supervisors to monitor and optimize contact-to-agent matching. Managers can filter agents by assigned proficiencies, group metrics by routing steps, and track metrics such as the number of contacts queued in a routing step. These analytics are available in all AWS commercial and AWS GovCloud (US-West) regions where Amazon Connect Customer is offered.

🔒 Amazon Web Services is rolling out a redesigned AWS Sign-In and session selection experience to a subset of customers, introducing a unified email entry point and refreshed session management. Existing sign-in methods and credentials continue to work, and sign-in with supported identity providers is available only for accounts created with those providers. Organizations using IAM Identity Center or federation should continue to use their existing portals, and administrators who rely on browser automation should review the changes for compatibility.

🔍 AWS Network Firewall now reports rule hit counts for stateful rules, giving administrators visibility into how often each stateful rule in a firewall policy matches traffic. This capability helps accelerate incident response, uncover shadow or redundant rules, and validate policy changes by confirming new rules match intended traffic. Hit counts are enabled by default for custom and managed rule groups, refresh at intervals as low as five minutes, and are available at no additional charge in supported Regions except UAE and Bahrain.

🚀 Amazon Quick announces general availability of Microsoft 365 extensions for Excel, PowerPoint, Word, and Outlook, enabling AI-driven tasks directly within users' M365 environments. The Excel extension assists with advanced analysis, pivot tables, charts, and data cleaning. PowerPoint and Word extensions generate and format presentation decks and documents using organization templates and track changes. The Outlook extension helps prioritize emails, organize inboxes, schedule meetings, and draft replies using Quick data and full inbox context.

🔒 Amazon OpenSearch Service now supports automatic semantic enrichment for VPC-enabled domains, allowing customers with private network configurations to use AI-powered semantic search without exposing domains to the public internet. The feature converts keyword searches into context-aware retrieval, handling all semantic processing automatically and removing the need to manage ML models. It requires OpenSearch version 2.19 or later and is available across 11 Regions globally.

🚀 AWS Console-to-Code now supports 26 additional services and adds cross-region and cross-browser-tab action recording. This expands coverage from 6 to 32 services, helping developers, DevOps, and cloud architects convert manual console workflows into repeatable infrastructure as code (IaC). Actions are consolidated across regions and tabs so complex multi-region deployments retain context. Available today in all commercial AWS Regions.

🗺️ Amazon Location Service now supports server-side per-category and density-based POI filtering via the GetStyleDescriptor API. Developers can pass poi-categories and poi-density parameters to return style descriptors that render only selected categories at the requested density. This removes prior client-side workarounds and ensures consistent maps across web, mobile, and server renderers.

🖥️ AWS CloudShell now offers a built-in visual file editor that launches from your shell with a single 'edit' command, requiring no setup. The browser-based editor supports syntax highlighting, find-and-replace, multi-line selection, copy-paste, and undo-redo, enabling seamless in-console edits for scripts, CloudFormation templates, and Lambda code. This feature is available in all Regions where CloudShell is offered.

🛠️ Administrators can now set per-user limits on index storage and agent hours in Amazon Quick to control subscription costs. Limit profiles let admins cap consumption at user, role, or account levels with a priority hierarchy to ensure appropriate capacity. When a user reaches their limit, new consumption is blocked while existing content is preserved. This capability is available for Professional and Enterprise plans in supported AWS Regions.

🔒 Amazon Quick now integrates with Microsoft Purview to enforce data loss prevention (DLP) policies across Quick environments. Administrators can apply existing Purview sensitivity labels to control file handling in Quick features such as chat, spaces, and knowledge bases. Enforcement actions—block, warn, or allow—are configurable per label to provide granular control over sensitive file sharing. The integration is available in all AWS Regions that support Amazon Quick agentic capabilities.

🔒 Amazon Quick introduces approval policies that give administrators governance over how assets are shared within an organization. Administrators can require designated approvers to review and approve share requests before access is granted, ensuring sharing of sensitive assets is deliberate, compliant, and auditable. Policies can be scoped to asset types like knowledge bases, spaces, and custom chat agents, and events are recorded in AWS CloudTrail for auditability.

🛡️ Amazon Quick custom permissions now support a deny-by-default governance setting that blocks new AI capabilities until administrators explicitly allow them. Administrators can restrict an AI capability category within a custom permissions profile and assign that profile to users, roles, or an account, causing Quick to deny any newly released capabilities in that category for those subjects. The restriction also affects existing capabilities in the category and can be configured in Manage account or via the AWS CLI. This feature is available in all Regions where Amazon Quick is offered.

📣 Amazon Quick now lets report authors replace the default "No data to display" text with a tailored message when a visual returns no data. Authors can configure a custom title, subtitle, and hyperlink, and toggle title/subtitle independently. All text fields support parameters so messages can reflect current filters; hyperlinks accept http://, https://, and mailto: schemas. The feature is available now in all AWS Regions offering Amazon Quick.

📣 Amazon Simple Email Service (SES) now supports mobile app deep linking via a new ses:custom-path HTML attribute. When added to an <a> tag, SES preserves the path segment in its tracking URL so iOS Universal Links and Android App Links can route users to the app while keeping engagement tracking enabled. The capability is available in all AWS Regions that offer SES and requires a custom redirect domain with an AASA or Digital Asset Links verification file hosted on that domain. Follow the SES Developer Guide sections on custom domains and email metrics for configuration details.

📊 AWS Billing and Cost Management now provides Managed Dashboards: a set of five preconfigured, read-only dashboards that populate with your account data automatically. They include Cost Overview & Trends, Compute and Database breakdowns, and Reservations and Savings Plans performance views. Dashboards are maintained by AWS, can be duplicated for editing, and support widget export via PDF or CSV.

🛡️ AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027, aligning with the CA/B Forum’s March 15, 2028 deprecation of email-based domain validation. Customers must migrate to DNS validation; ACM is updating the UpdateCertificateOptions API to allow in-place switching from email to DNS without changing certificate ARNs. ACM provides a CNAME record for DNS validation and offers a 72-hour window to add it; once validated, ACM will handle automatic renewals. AWS provides console and AWS CLI steps, a migration user guide, and support resources to assist customers through the transition.

🛠️ The rebuilt AWS VPN Client v6.0.x now includes a fully featured command-line interface (CLI), enterprise administrative controls, and faster connection establishment, enabling automation and centralized device management. The CLI matches GUI functionality and supports background operations so VPN connections can be scripted into workflows and infrastructure-as-code. Administration controls let organizations scope and enforce profiles per user or provide global device profiles, removing the need to distribute profiles manually. Built on OpenVPN3, the client preserves backward compatibility with existing AWS Client VPN endpoints and runs concurrently with the GUI; it is available today for Windows, macOS, and Linux with no additional charges beyond standard AWS Client VPN pricing.