All news with #aws tag

🗺 Amazon Location Service introduced enhanced map styling capabilities that give developers greater control over terrain visualization, traffic display, and immersive 3D presentation. The release adds three contour density levels—Low, Medium, and High (High doubles contour lines for more detailed elevation)—and a traffic congestion-only mode that filters out free-flowing traffic to surface incidents. It also delivers 3D Terrain and 3D Globe View with Atmosphere for realistic elevation and atmospheric effects, and extends full traffic visualization, Transit and Truck travel modes, and light/dark color schemes across Monochrome, Hybrid, and Satellite styles. The service is available in multiple AWS Regions.

📧 Amazon Simple Email Service Mail Manager now supports optional TLS (including STARTTLS) and certificate-based mutual TLS (mTLS) on Ingress Endpoints, plus two new rule actions: Invoke Lambda function and Bounce. These additions let organizations preserve compatibility with legacy email systems while implementing stronger authentication and custom processing workflows. The Invoke Lambda action enables direct serverless email processing and automation, and the Bounce action issues RFC-compliant SMTP responses to senders. The features are available today in all Regions offering SES Mail Manager except the Middle East (UAE and Bahrain).

🔒 AWS VPC Encryption Controls is now available in AWS GovCloud (US-East) and GovCloud (US-West). The feature lets security teams enable monitoring and enforcement of encryption in transit across existing VPCs, automatically identifying flows that permit plaintext. It transparently activates hardware-based AES-256 encryption across VPC resources (including Fargate, NLB, and ALB) and produces audit logs to help demonstrate compliance with standards such as HIPAA, PCI DSS, FedRAMP, and FIPS 140-2.

🔐 Amazon CloudFront now supports SHA-256 as a hash algorithm for creating signed URLs and signed cookies, improving collision resistance and aligning with modern cryptographic standards. To use SHA-256, include the Hash-Algorithm=SHA256 query parameter for signed URLs or the CloudFront-Hash-Algorithm=SHA256 cookie attribute for signed cookies. Existing signed artifacts that omit a hash algorithm continue to use SHA-1, preserving backwards compatibility. This capability is available in all CloudFront edge locations at no additional cost.

🔒 Amazon RDS for Oracle now supports cross-account snapshot sharing for database instances configured with additional storage volumes. Customers can create, share, and copy DB snapshots that preserve the original storage layout, including up to three attached volumes, across AWS accounts and Regions. Use cases include isolated backups for compliance and restoring snapshots in separate accounts for diagnostics, development, and testing. This capability is available today via the AWS Management Console, AWS CLI, and AWS SDKs.

🔒 Amazon Bedrock now supports structured outputs in AWS GovCloud (US) Regions. Structured outputs enables foundation models to produce consistent, schema-compliant, machine-readable responses tailored for government and regulated workloads. This reduces the need for custom validation logic, lowers operational overhead, and minimizes failed requests and retries. The capability is generally available in all commercial and GovCloud regions where Amazon Bedrock is supported.

🔁 AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) now supports Multi-Region replication in AWS Opt-In regions. The automated feature deploys domain controllers across Availability Zones per region, handles inter-region networking, and replicates users, groups, Group Policy Objects, and schema to maintain a single authoritative directory. It configures an Active Directory site per region to optimize authentication performance and reduce cross-region transfer costs; availability excludes the Middle East (UAE) and Middle East (Bahrain) regions and pricing is hourly per domain controller plus data transfer.

⚡ Oracle Database@AWS (ODB@AWS) now provides consistent sub-millisecond roundtrip latency between Amazon EC2 instances and ODB@AWS databases. By automatically optimizing compute placement within ODB@AWS networks, customers can migrate latency-sensitive workloads — such as payment processing and securities trading — to AWS while using existing EC2 APIs and workflows. There is no additional charge for EC2 instances using the optimized placement; the capability is available in six Regions today, with more Regions planned.

🔔 Amazon CloudWatch now ingests AWS Security Hub CSPM findings into CloudWatch Logs, supporting both ASFF and OCSF schemas via CloudWatch Pipelines. Customers can query findings with CloudWatch Logs Insights, create metric filters for monitoring, and use Amazon S3 Tables for advanced analytics and reporting. Organization-level enablement rules allow automatic delivery to all accounts or selected groups, standardizing monitoring coverage. Findings delivery is available in all AWS commercial regions and is charged under tiered CloudWatch pricing.

🌱AWS has launched the free, standalone AWS Sustainability console to show customers estimated carbon emissions from their AWS usage without requiring billing permissions. Building on the Customer Carbon Footprint Tool, the console reports emissions by AWS Region, service, and scope using both market-based and location-based methods. It also adds customizable visualizations, fiscal-year settings, CSV exports, and API/SDK access for integration into reporting workflows.

🔍 Amazon OpenSearch Service now includes agentic AI capabilities that let engineering and support teams analyze log data through a conversational interface. The features simplify log querying, generate and refine Piped Processing Language (PPL) queries in Discover, and surface visualization insights. An investigation agent can autonomously plan and execute root cause analysis and return ranked hypotheses with transparent reasoning. Agent memory preserves context across pages and sessions to maintain conversational continuity.

🔒 AWS has made IAM Identity Center available in the AWS European Sovereign Cloud (Germany) Region, an independent cloud fully located within the EU to address evolving sovereignty requirements. The service offers centralized workforce access management, single sign-on across AWS applications, and user-aware access controls for auditing and data governance. It supports centralized management of multiple AWS accounts and is available at no additional cost.

🔒 AWS released the ISO/IEC 27001:2022 on AWS compliance guide to help organizations design and operate an Information Security Management System (ISMS) using AWS services. The guide maps selected Annex A controls and clauses 4–10 to AWS services and architectural capabilities, and clarifies customer responsibilities under the Shared Responsibility Model. It provides practical recommendations for evidence collection, documentation, automation, and audit readiness using AWS native tooling. The target audience includes cloud architects, security teams, compliance leaders, and DevOps practitioners seeking certification readiness.

🚀 Amazon Managed Service for Apache Flink now supports Apache Flink 2.2, offering runtime improvements including Java 17 support, RocksDB 8.10.0 for improved I/O, and serialization enhancements. The release deprecates the Dataset API and Scala APIs. You can create new Flink 2.2 applications or perform in-place version upgrades across AWS regions to simplify adoption. These updates aim to improve performance, reliability, and upgrade velocity for streaming workloads.

🔍 Amazon SageMaker Unified Studio now surfaces Amazon CloudWatch metrics for AWS Glue jobs directly alongside job logs in a single, unified interface. Data engineers can correlate DPU utilization, memory consumption, CPU load, and data movement size with log output to diagnose compute bottlenecks and memory pressure faster. The consolidated view reduces mean time to resolution for ETL pipelines and is available in all Regions where SageMaker Unified Studio is generally available. To view metrics, open a Glue job run and select the Metrics tab.

🧭 AWS Organizations API responses now include the complete organizational path for accounts and organizational units, eliminating the need to traverse hierarchies with multiple calls. APIs such as DescribeAccount, ListAccounts and DescribeOrganizationalUnit return the full path (for example: o-{orgId}/r-{rootId}/ou-{ouId}/{accountId}) in a single response. This reduces operational overhead, lowers latency and simplifies troubleshooting, governance and automation workflows. The capability is available in all commercial Regions and AWS GovCloud (US) Regions, helping enterprises and regulated customers gain immediate org context.

☁️ AWS Deadline Cloud introduces three new fleet scaling options—worker idle duration, standby worker count, and scale out rate—to give creative teams finer control over render farm capacity and responsiveness. Worker idle duration keeps instances available after jobs complete to reduce cold starts and speed artist iteration. Standby worker count maintains a pool of pre-warmed workers for immediate job starts, while scale out rate lets you control expansion speed up to 500 workers per minute to match infrastructure and budget needs.

🔁 AWS Marketplace now offers sellers a streamlined self-service workflow for refunds and agreement cancellations that removes the need to file support tickets and provides full visibility into request status. Sellers can create requests from the Agreements page or programmatically via the AWS Marketplace Agreement APIs; requests are pre-populated with agreement and invoice data and processed automatically. Buyers can approve cancellations in-console and see refunds reflected on their charge summary, and KYC verification is limited only to invoices that require compliance validation.

📩 AWS announced AWS End User Messaging Notify, a service that lets developers send one-time passcodes (OTPs) within minutes using phone numbers and sender IDs owned by AWS. Developers configure a brand name, enable SMS, voice, or both, and use ready-to-use templates to send messages to over 200 countries. Every API call includes built-in SMS fraud protection via AWS End User Messaging SMS Protect at no extra cost, and spend limits can pause delivery if thresholds are met. Notify is available in all AWS Regions where End User Messaging is offered.

⚠️ AWS announced availability changes across multiple products: some services and features are moving to Maintenance, a set of services are entering Sunset, and one feature has reached End of Support. Starting April 30, 2026, services designated as Maintenance will no longer be accessible to new customers, while existing customers may continue use. Notable items include Amazon ARC Readiness Check, Amazon Comprehend features, AWS App Runner, and Amazon RDS Custom for Oracle. AWS is providing migration guides and support to assist affected customers.