All news with #aws tag

🛡️ Amazon GameLift Servers now includes DDoS Protection client SDKs for C# and Unity, enabling developers to protect session-based multiplayer games from denial-of-service and distributed denial-of-service attacks. The service co-locates a relay network with game servers and uses access token-based authentication to allow only authorized client traffic. It enforces per-player UDP traffic limits, offers negligible latency, and is provided at no extra cost to GameLift Servers customers. The new SDKs complement existing C++ and Unreal Engine support and are available in multiple AWS regions.

🔧 Amazon CloudWatch pipelines now supports processing and enriching OpenTelemetry (OTel) metrics during ingestion. CloudWatch pipelines is a fully managed service that ingests, transforms, and routes telemetry data to CloudWatch without requiring you to manage infrastructure. Customers can centrally apply transformations and add business context tags, strip high-cardinality labels, and rename metrics to enforce consistent naming, all with no application changes. The feature is available in Regions where CloudWatch pipelines and native OTel metrics are supported, and processing incurs no additional charge beyond standard ingestion pricing.

🔔 AWS is announcing availability changes affecting several services and features, with some moving to Maintenance and others entering Sunset or already at End of Support. Services moving to maintenance will not be accessible to new customers after specified dates, but existing customers can continue use. Several SageMaker features and select media and communication components are impacted. AWS provides migration guides and support resources to help affected customers.

🧩 AWS Clean Rooms now supports writing SQL query results to intermediate tables within a collaboration, enabling multi-step analytical workflows between partners. These intermediate tables allow reuse of complex joins and creation of shared ID mapping tables for downstream analyses, all within the collaboration’s privacy boundary. The feature helps reduce costs and improve performance for subsequent analyses such as reach, frequency, and attribution.

🛡️ The AWS CIRT updated the Threat Technique Catalog for June 2026, adding five new entries focused on container security, organization-level trust, and compute hijacking. The update documents EKS workload modification, exploitation of public-facing Kubernetes services, sts:AssumeRoot abuse across AWS Organizations, compute hijacking in clusters, and account invitations into attacker-controlled organizations. It also refreshes three existing entries with expanded detection and mitigation guidance.

🔧 Amazon Managed Workflows for Apache Airflow (Amazon MWAA) Serverless now supports shared VPC subnets, removing a prior validation error when creating Serverless workflows with subnets shared via AWS Resource Access Manager (AWS RAM). This change aligns MWAA Serverless subnet ownership validation with MWAA Provisioned environments, enabling centrally managed network architectures to launch workflows in member accounts without workarounds. The update also benefits customers using Amazon SageMaker Unified Studio Workflows with shared VPC networking and is available in all Regions where MWAA Serverless is supported.

📣 Amazon S3 now supports delivering server access logs to Amazon CloudWatch Logs, enabling instant querying, alarms, cross-account and cross-Region aggregation, and AWS KMS encryption for access log data. You can also mirror logs to Amazon S3 Tables in Apache Iceberg format at no additional storage cost. These delivery options complement existing free delivery to S3 buckets and provide more flexibility for monitoring and analysis.

🔔 Amazon EC2 R8g instances are now available in AWS Asia Pacific (Thailand, New Zealand), AWS Africa (Cape Town), AWS Europe (Milan), and AWS Canada West (Calgary). These instances use AWS Graviton4 processors and deliver up to 30% better performance than Graviton3-based instances, targeting memory-intensive workloads such as databases and real-time analytics. Built on the AWS Nitro System, R8g offers larger sizes, enhanced networking, and improved EBS bandwidth for demanding applications.

🚀Starting today, compute-optimized Amazon EC2 C7a instances are available in the AWS Asia Pacific (Singapore) Region. Powered by 4th Gen AMD EPYC (Genoa) processors with up to 3.7 GHz, C7a delivers up to 50% higher performance than C6a and adds new capabilities like AVX-512, VNNI, and bfloat16. These instances use DDR5 memory for 2.25x more memory bandwidth, come in 12 sizes including bare-metal, and support up to 128 EBS attachments. C7a instances run on the AWS Nitro System and are available via On-Demand, Spot, and Savings Plans.

🚀 Starting today, Amazon EC2 M8a general-purpose instances are available in the AWS Asia Pacific (Mumbai) region. Powered by 5th Gen AMD EPYC CPUs with up to 4.5 GHz, M8a offers up to 30% higher performance and up to 19% better price-performance than M7a. Instances provide 45% more memory bandwidth, SAP certification, 12 sizes including 2 bare metal, and are suitable for high-throughput workloads.

🛡️ AWS Network Firewall now offers two new managed rule groups from VisionHeight in AWS Marketplace: Zero-Day Threat Protection and Noisy Scanners and Tor Protection. These rule groups use VisionHeight's Pulse telemetry to provide proactive blocking of malicious IP infrastructure and suppression of noisy Tor and scanner traffic. Daily refresh cycles reduce SOC alert volume and SIEM ingestion costs while improving protection for targeted workloads.

🔒 Kiro is now authorized for FedRAMP High and DoD CC SRG Impact Levels 4 and 5 within the AWS GovCloud (US) Regions. This enables federal agencies and public sector organizations with stringent compliance requirements to adopt Kiro for sensitive workloads. Kiro combines an IDE and CLI for agentic AI-driven, spec-driven development, translating prompts into code, documentation, and tests. It also supports native MCP integration to connect with documentation, databases, APIs, and enterprise resources.

⚙️ Amazon EC2 C8in instances are now available in the AWS US East (Ohio) and Europe (Ireland) regions. These instances use custom sixth generation Intel Xeon Scalable processors and the latest sixth generation AWS Nitro cards, offering up to 43% higher performance over prior C6in instances. C8in supports up to 384 vCPUs and provides 600 Gbps network bandwidth, suited for network-intensive workloads. Availability spans multiple regions and purchasing models including Savings Plans, On-Demand, and Spot.

🔔 Amazon Redshift now offers All Upfront and Partial Upfront payment options for 1- and 3-year reserved instances (RG instances). These join the existing No Upfront option and give customers more flexibility to optimize compute costs. All Upfront provides the largest discount by paying the full term up front, while Partial Upfront splits cost between an initial payment and lower monthly installments. The new options are available across many AWS Regions globally.

🔒 AWS GovCloud (US) now routes technical support cases by default to US-based, US-citizen cloud support engineers, requiring no opt-in. This change covers both AWS GovCloud (US-East) and (US-West) Regions and is designed to maintain ITAR compliance and other GovCloud requirements. Support is available 24/7 via the AWS GovCloud (US) Console, API, click-to-call, and live chat. Engineers have the required permissions to work directly within regulated customer environments for faster issue resolution.

🚀 AWS Backup now performs S3 backup copy operations up to 8x faster for buckets with millions of objects and low change rates by using enhanced change tracking. This removes the need to scan all objects in the destination account or Region, reducing copy time across accounts and AWS Regions. The improvement records object events as they occur and applies automatically to new cross-account and cross-Region copy jobs at no additional cost in supported Regions.

🛈 Amazon RDS Custom for SQL Server now supports the latest Cumulative Updates (CU) and General Distribution Release (GDR) updates for Microsoft SQL Server, including SQL Server 2019 CU32+GDR (KB5090407) and SQL Server 2022 CU25 (KB5081477). These GDR updates address vulnerabilities described in CVE-2026-40370. You can apply the updates via the Amazon RDS Management Console, AWS SDK, or AWS CLI, and guidance is available in the Amazon RDS Custom User Guide.

🔄 Amazon RDS for SQL Server now supports the latest General Distribution Release (GDR) updates across SQL Server 2016 SP3, 2017, 2019, and 2022, corresponding to specific RDS engine versions. These GDRs address vulnerabilities identified as CVE-2026-32167 and CVE-2026-32176. AWS recommends upgrading instances via the Amazon RDS Management Console, AWS SDK, or CLI and refers users to the RDS SQL Server User Guide for upgrade instructions.

🚀 Amazon OpenSearch Ingestion is now available in the Europe (Paris) Region (eu-west-3). This fully managed ingestion tier enables no-code filtering, transformation, redaction, and routing of data into Amazon OpenSearch Service managed clusters or serverless collections, automatically provisioning and scaling resources to match workload demands. The service is now generally available in 17 AWS regions worldwide, expanding customers' options for regional data ingestion and processing.

🔒 This post explains how AWS Sign-In now supports resource-based policies and resource control policies (RCPs) to restrict AWS Management Console and AWS CLI sign-in to expected networks such as corporate IP ranges, on-premises data center networks, and Amazon VPCs. It walks through a financial services use case that enforces console sign-in from a corporate network, shows how to create and enable a sign-in resource permission statement, and describes verification via AWS CloudTrail. The article also contrasts single-account resource-based policies with organization-wide RCPs and explains integration with AWS Management Console Private Access and the broader data perimeter framework.