All news with #aws tag

🔌 AWS has announced general availability of AWS Interconnect - last mile, a fully managed offering that streamlines private, high-speed connections from branch offices, data centers, and remote sites to AWS in partnership with Lumen. Through the AWS Console customers can provision pre-provisioned capacity, automate BGP, VLAN and ASN configuration, and scale bandwidth from 1 Gbps to 100 Gbps while MACsec is enabled by default. The service is SLA-backed, designed for high availability, zero-downtime maintenance, and includes an open API for partner adoption.

🚀 Amazon Web Services (AWS) has announced general availability of Amazon EC2 X8i instances, next‑generation memory‑optimized VMs powered by custom Intel Xeon 6 processors available only on AWS. X8i delivers up to 43% higher performance, up to 1.5× more memory (up to 6 TB) and 3.3× greater memory bandwidth versus X2i. Offered in 14 sizes, including two bare‑metal options, they target SAP HANA, large databases, data analytics and EDA and are available in select US and European regions.

⚙️ Amazon CloudWatch pipelines now supports conditional processing and a new Drop Events processor, letting you apply transformations only to matching log entries. You can set processor-level 'run when' conditions or entry-level conditions across 21 processors such as Add Entries, Grok, and Rename Key. The Drop Events processor filters unwanted entries from third-party connectors to reduce noise and lower costs. These features are available at no additional charge where pipelines are generally available; standard CloudWatch Logs ingestion and storage rates still apply.

☁️ AWS Deadline Cloud now supports creating monitors in multiple AWS Regions without requiring changes to your IAM Identity Center configuration. You can deploy render farms and place resources closer to artists and studios worldwide, and run or compare workloads across Regions to optimize rendering strategy or diversify instance types. Deadline Cloud automatically routes authentication to your IAM Identity Center instance in its primary Region, keeping identity data in place and avoiding replication.

🛡️ Amazon CloudWatch pipelines introduces compliance and governance controls to help preserve data integrity and restrict pipeline creation. You can enable a keep original toggle to store raw logs before any transformation, and processed entries now include metadata indicating they were transformed. New IAM condition keys let administrators limit pipeline creation by log source and type. These capabilities are provided at no additional cost and are available in Regions where pipelines is supported.

🚀 Amazon announced second-generation Amazon FSx for NetApp ONTAP is now available in four additional Regions: Europe (London), Asia Pacific (Hyderabad), South America (Sao Paulo), and AWS GovCloud (US-West). The second-generation file systems deliver greater performance scalability and flexibility compared with first-generation deployments, enabling up to 12 highly-available (HA) pairs per file system. That configuration provides workloads with up to 72 GBps of throughput and up to 1 PiB of provisioned SSD storage. You can deploy second-generation Multi-AZ file systems with a single HA pair, and Single-AZ file systems with up to 12 HA pairs, broadening choices for redundancy and capacity.

🔐 Amazon Quick now supports document-level access control lists (ACLs) for Amazon S3 knowledge bases, enabling granular permissions for documents and folders. You can configure ACLs with a centralized global ACL configuration file or with per-document metadata files for faster, targeted permission updates. ACLs are permanent at knowledge base creation and documents without an ACL entry are not ingested. The feature is available in all AWS Regions and is documented in the Amazon Quick User Guide.

📧 AWS Billing and Cost Management Dashboards now support scheduled email delivery for dashboard reports. You can configure daily, weekly, or monthly deliveries that send secure links to password-protected PDF reports optimized for offline viewing, and manage recipients through AWS User Notifications. The feature is available at no additional cost in all commercial AWS Regions (excluding AWS China Regions) and is accessible via AWS SDKs and the CLI.

✅AWS RTB Fabric now supports health checks for real-time bidding workloads running on EC2 Auto Scaling groups, providing continuous monitoring and automatic routing to healthy instances via configurable settings in RTB responder gateways. This reduces failed bidding transactions caused by bootstrapping, draining, or instance failures and helps AdTech operators improve uptime and lower error rates. The capability is generally available in multiple AWS Regions and integrates with a broad set of advertising partners.

📁 AWS Backup now supports backup and restore for Amazon FSx for Windows File Server, FSx for OpenZFS, and FSx for Lustre in five additional Regions — Malaysia, Taipei, Thailand, Canada West (Calgary), and Mexico (Central). You can centrally manage FSx backup policies, automate schedules, and monitor backup activity through AWS Backup in those Regions. AWS Backup also supports cross‑Region and cross‑account copy of FSx backups across 14 Regions, available for on‑demand copies and scheduled copy rules. In opt‑in Regions, backups can be placed in logically air‑gapped vaults to help defend against accidental deletion and ransomware.

🛠 Amazon Timestream for InfluxDB now lets customers define weekly maintenance windows for both InfluxDB 2 instances and InfluxDB 3 clusters across all supported editions. You can specify day-and-time in an IANA timezone such as America/New_York, Europe/London, or Asia/Tokyo, and the service will automatically handle Daylight Saving Time transitions. Configure or modify the window when creating or updating resources via the console, AWS CLI, or AWS SDKs. If no window is specified, Timestream will continue to schedule maintenance automatically.

🔧 Amazon OpenSearch Service now delivers a unified observability workspace that combines metrics, logs, traces, and AI agent tracing with native integration for Amazon Managed Service for Prometheus. You can query Prometheus metrics directly with PromQL alongside logs and traces in the OpenSearch UI using live queries that avoid data duplication and reduce costs compared with premium platforms. New RED-based application monitoring workflows and OpenTelemetry GenAI semantic conventions enable correlating slow traces, overlaying Prometheus metrics on service dashboards, and tracing LLM agent execution within a single tool.

🔁 Amazon RDS Blue/Green Deployments now supports Amazon RDS Proxy, eliminating DNS propagation delays to enable faster application recovery during switchovers. RDS Proxy actively monitors database instances during single-Region switchovers and redirects connections to the Green environment so applications begin using the new production database immediately without driver or configuration changes. This integration supports Amazon Aurora (MySQL and PostgreSQL), Amazon RDS for MySQL, PostgreSQL, and MariaDB in commercial Regions where RDS Proxy is available, and deployments can be initiated via the RDS Console or CLI.

🔍 AWS has previewed the Agent Registry in AgentCore, a private, governed catalog and discovery layer for agents, tools, skills, MCP servers, and custom resources across an organization. The registry is accessible via the AgentCore Console, APIs (AWS CLI, AWS SDK), or as an MCP server that builders can query from their IDEs, and it supports IAM and OAuth (Custom JWT) access. Teams can register resources manually or use URL-based discovery to harvest metadata from live endpoints; records pass through an approval workflow and are auditable via AWS CloudTrail. Semantic and keyword search lets developers find capabilities by describing use cases in natural language.

🔎 The AWS Marketplace Discovery API provides programmatic access to product and pricing data across the Marketplace catalog, including SaaS, AI agents and tools, AMIs, containers, and machine learning models. Buyers can embed catalog data into internal portals and procurement workflows, while sellers and channel partners can surface listings, public pricing, and private offer details within their storefronts. The API is available in US East (N. Virginia), US West (Oregon), and Europe (Ireland) and is accessed using IAM permissions via the AWS SDK.

🗜️ Amazon OpenSearch Serverless now supports Zstandard (zstd) codecs for index storage, giving customers a choice between the default LZ4 and the new zstd or zstd_no_dict modes. Zstandard can reduce index size by up to 32% compared with LZ4 and lets you tune compression levels to balance storage savings against indexing throughput and query latency. Lower compression levels (for example, level 1) deliver meaningful space savings with minimal performance impact, while higher levels (for example, level 6) maximize compression at the cost of slower indexing. The feature is available today in all Regions where OpenSearch Serverless is supported and can be configured in index settings at creation time.

🔒 AWS Private Certificate Authority now supports customer managed permissions in AWS Resource Access Manager (AWS RAM), enabling administrators to grant only the specific API operations each consuming account needs. You can choose from granular read operations (for example, DescribeCertificateAuthority, GetCertificate, GetCertificateAuthorityCertificate) and write operations (for example, IssueCertificate, RevokeCertificate). Cross-account issuers are no longer limited to a single certificate template. The feature is available in all Regions where Private CA and RAM are offered.

🔁Route 53 Resolver endpoints in AWS GovCloud (US) Regions now support DNS delegation for private hosted zone subdomains. This update enables both inbound and outbound delegation between on-premises DNS and Route 53 Resolver endpoints, simplifying namespace management across teams and environments. The capability removes the need for conditional forwarding rules and extends the earlier commercial-region support to GovCloud (US-East and US-West). Delegation incurs no extra charge beyond Resolver endpoint usage.

🔐 Unit 42 found the AgentCore starter toolkit auto-creates overly permissive IAM roles that grant wildcard access to Bedrock AgentCore and ECR resources. The default deployment enables an “Agent God Mode” scenario where a compromised agent can exfiltrate container images, retrieve other agents’ MemoryIDs, invoke code interpreters, and read or poison memories across an entire AWS account. AWS updated documentation to warn these roles are intended for development; Unit 42 recommends creating scoped, least-privilege roles and auditing ECR, memory, and invoke permissions.

🔁 Amazon IVS Real-Time Streaming now supports redundant ingest, enabling simultaneous streaming from two encoders to a single stage with automated failover. This feature protects live feeds from source encoder failures and first-mile network issues, helping maintain uninterrupted delivery to viewers. It's particularly suited for live events and continuous 24/7 streams where availability is critical. The capability is available through the IVS console and APIs in supported AWS Regions.