All news with #aws tag

🛠️ Today AWS announced Dynamic Instrumentation for Amazon CloudWatch Application Signals, enabling capture of runtime state from live applications without restarts or redeployments. Developers can inspect variable values, method arguments, return values, and stack traces at configured code locations, removing the need to add logs and redeploy. Instrumentation is configured via the AWS Distro for OpenTelemetry SDKs and the CloudWatch Application Signals MCP server or CLI/SDK, and captured snapshots are delivered to CloudWatch Logs correlated with traces.

🧰 Amazon SageMaker AI now supports serverless model customization for Gemma 4 E4B and 31B models using supervised fine-tuning (SFT), direct preference optimization (DPO), and reinforcement fine-tuning (RFT). You can adapt these Google DeepMind-built Gemma models to specific domains and workflows, and SageMaker AI handles infrastructure provisioning and training orchestration so teams pay only for what they use. The launch expands serverless customization to include models from Nova, Nemotron 3, Qwen, Llama, gpt-oss, and DeepSeek families, and is available in US East (N. Virginia), US West (Oregon), Asia Pacific (Tokyo), and EU (Ireland).

🔌 AWS introduces AWS Interconnect - last mile, a fully managed connectivity service that eases connections from branch offices, data centers, and remote sites to AWS. Now in a gated preview with AT&T in the US, the offering lets customers select region, bandwidth, Direct Connect Gateway ID and partner subscriber ID to initiate provisioning. AWS issues an activation key to complete AT&T provisioning while automating BGP, VLAN, and ASN setup, providing pre-provisioned capacity, high availability, and SLA-backed zero-downtime maintenance.

🔒 AWS Security Hub now monitors Microsoft Azure resources, extending risk analytics, cloud security posture management, vulnerability management, and security response across both clouds. The service auto-discovers Azure VMs, ACR images, Function Apps, and identities, evaluating misconfigurations, internet exposure, and software vulnerabilities. Findings from AWS and Azure appear in a single prioritized view with consistent formats and automation workflows, and a 30-day free trial for Azure monitoring is available.

🚀 AWS GovCloud (US) now offers Anthropic's Claude Opus 4.8, the vendor's most capable generally available model to date. Claude Opus 4.8 improves agentic coding, long-running autonomous tasks, and professional knowledge work by maintaining extended context, planning before edits, and recovering from errors. Amazon Bedrock delivers access while keeping data in AWS infrastructure and adding AWS-managed features such as Guardrails and Knowledge Bases.

🛡️ Amazon GameLift Servers now includes DDoS Protection client SDKs for C# and Unity, enabling developers to protect session-based multiplayer games from denial-of-service and distributed denial-of-service attacks. The service co-locates a relay network with game servers and uses access token-based authentication to allow only authorized client traffic. It enforces per-player UDP traffic limits, offers negligible latency, and is provided at no extra cost to GameLift Servers customers. The new SDKs complement existing C++ and Unreal Engine support and are available in multiple AWS regions.

🔧 Amazon CloudWatch pipelines now supports processing and enriching OpenTelemetry (OTel) metrics during ingestion. CloudWatch pipelines is a fully managed service that ingests, transforms, and routes telemetry data to CloudWatch without requiring you to manage infrastructure. Customers can centrally apply transformations and add business context tags, strip high-cardinality labels, and rename metrics to enforce consistent naming, all with no application changes. The feature is available in Regions where CloudWatch pipelines and native OTel metrics are supported, and processing incurs no additional charge beyond standard ingestion pricing.

🔔 AWS is announcing availability changes affecting several services and features, with some moving to Maintenance and others entering Sunset or already at End of Support. Services moving to maintenance will not be accessible to new customers after specified dates, but existing customers can continue use. Several SageMaker features and select media and communication components are impacted. AWS provides migration guides and support resources to help affected customers.

🧩 AWS Clean Rooms now supports writing SQL query results to intermediate tables within a collaboration, enabling multi-step analytical workflows between partners. These intermediate tables allow reuse of complex joins and creation of shared ID mapping tables for downstream analyses, all within the collaboration’s privacy boundary. The feature helps reduce costs and improve performance for subsequent analyses such as reach, frequency, and attribution.

🛡️ The AWS CIRT updated the Threat Technique Catalog for June 2026, adding five new entries focused on container security, organization-level trust, and compute hijacking. The update documents EKS workload modification, exploitation of public-facing Kubernetes services, sts:AssumeRoot abuse across AWS Organizations, compute hijacking in clusters, and account invitations into attacker-controlled organizations. It also refreshes three existing entries with expanded detection and mitigation guidance.

🔧 Amazon Managed Workflows for Apache Airflow (Amazon MWAA) Serverless now supports shared VPC subnets, removing a prior validation error when creating Serverless workflows with subnets shared via AWS Resource Access Manager (AWS RAM). This change aligns MWAA Serverless subnet ownership validation with MWAA Provisioned environments, enabling centrally managed network architectures to launch workflows in member accounts without workarounds. The update also benefits customers using Amazon SageMaker Unified Studio Workflows with shared VPC networking and is available in all Regions where MWAA Serverless is supported.

📣 Amazon S3 now supports delivering server access logs to Amazon CloudWatch Logs, enabling instant querying, alarms, cross-account and cross-Region aggregation, and AWS KMS encryption for access log data. You can also mirror logs to Amazon S3 Tables in Apache Iceberg format at no additional storage cost. These delivery options complement existing free delivery to S3 buckets and provide more flexibility for monitoring and analysis.

🔔 Amazon EC2 R8g instances are now available in AWS Asia Pacific (Thailand, New Zealand), AWS Africa (Cape Town), AWS Europe (Milan), and AWS Canada West (Calgary). These instances use AWS Graviton4 processors and deliver up to 30% better performance than Graviton3-based instances, targeting memory-intensive workloads such as databases and real-time analytics. Built on the AWS Nitro System, R8g offers larger sizes, enhanced networking, and improved EBS bandwidth for demanding applications.

🚀Starting today, compute-optimized Amazon EC2 C7a instances are available in the AWS Asia Pacific (Singapore) Region. Powered by 4th Gen AMD EPYC (Genoa) processors with up to 3.7 GHz, C7a delivers up to 50% higher performance than C6a and adds new capabilities like AVX-512, VNNI, and bfloat16. These instances use DDR5 memory for 2.25x more memory bandwidth, come in 12 sizes including bare-metal, and support up to 128 EBS attachments. C7a instances run on the AWS Nitro System and are available via On-Demand, Spot, and Savings Plans.

🚀 Starting today, Amazon EC2 M8a general-purpose instances are available in the AWS Asia Pacific (Mumbai) region. Powered by 5th Gen AMD EPYC CPUs with up to 4.5 GHz, M8a offers up to 30% higher performance and up to 19% better price-performance than M7a. Instances provide 45% more memory bandwidth, SAP certification, 12 sizes including 2 bare metal, and are suitable for high-throughput workloads.

🛡️ AWS Network Firewall now offers two new managed rule groups from VisionHeight in AWS Marketplace: Zero-Day Threat Protection and Noisy Scanners and Tor Protection. These rule groups use VisionHeight's Pulse telemetry to provide proactive blocking of malicious IP infrastructure and suppression of noisy Tor and scanner traffic. Daily refresh cycles reduce SOC alert volume and SIEM ingestion costs while improving protection for targeted workloads.

🔒 Kiro is now authorized for FedRAMP High and DoD CC SRG Impact Levels 4 and 5 within the AWS GovCloud (US) Regions. This enables federal agencies and public sector organizations with stringent compliance requirements to adopt Kiro for sensitive workloads. Kiro combines an IDE and CLI for agentic AI-driven, spec-driven development, translating prompts into code, documentation, and tests. It also supports native MCP integration to connect with documentation, databases, APIs, and enterprise resources.

⚙️ Amazon EC2 C8in instances are now available in the AWS US East (Ohio) and Europe (Ireland) regions. These instances use custom sixth generation Intel Xeon Scalable processors and the latest sixth generation AWS Nitro cards, offering up to 43% higher performance over prior C6in instances. C8in supports up to 384 vCPUs and provides 600 Gbps network bandwidth, suited for network-intensive workloads. Availability spans multiple regions and purchasing models including Savings Plans, On-Demand, and Spot.

🔔 Amazon Redshift now offers All Upfront and Partial Upfront payment options for 1- and 3-year reserved instances (RG instances). These join the existing No Upfront option and give customers more flexibility to optimize compute costs. All Upfront provides the largest discount by paying the full term up front, while Partial Upfront splits cost between an initial payment and lower monthly installments. The new options are available across many AWS Regions globally.

🔒 AWS GovCloud (US) now routes technical support cases by default to US-based, US-citizen cloud support engineers, requiring no opt-in. This change covers both AWS GovCloud (US-East) and (US-West) Regions and is designed to maintain ITAR compliance and other GovCloud requirements. Support is available 24/7 via the AWS GovCloud (US) Console, API, click-to-call, and live chat. Engineers have the required permissions to work directly within regulated customer environments for faster issue resolution.