All news with #aws tag

🚀 AWS Backup now performs S3 backup copy operations up to 8x faster for buckets with millions of objects and low change rates by using enhanced change tracking. This removes the need to scan all objects in the destination account or Region, reducing copy time across accounts and AWS Regions. The improvement records object events as they occur and applies automatically to new cross-account and cross-Region copy jobs at no additional cost in supported Regions.

🛈 Amazon RDS Custom for SQL Server now supports the latest Cumulative Updates (CU) and General Distribution Release (GDR) updates for Microsoft SQL Server, including SQL Server 2019 CU32+GDR (KB5090407) and SQL Server 2022 CU25 (KB5081477). These GDR updates address vulnerabilities described in CVE-2026-40370. You can apply the updates via the Amazon RDS Management Console, AWS SDK, or AWS CLI, and guidance is available in the Amazon RDS Custom User Guide.

🔄 Amazon RDS for SQL Server now supports the latest General Distribution Release (GDR) updates across SQL Server 2016 SP3, 2017, 2019, and 2022, corresponding to specific RDS engine versions. These GDRs address vulnerabilities identified as CVE-2026-32167 and CVE-2026-32176. AWS recommends upgrading instances via the Amazon RDS Management Console, AWS SDK, or CLI and refers users to the RDS SQL Server User Guide for upgrade instructions.

🚀 Amazon OpenSearch Ingestion is now available in the Europe (Paris) Region (eu-west-3). This fully managed ingestion tier enables no-code filtering, transformation, redaction, and routing of data into Amazon OpenSearch Service managed clusters or serverless collections, automatically provisioning and scaling resources to match workload demands. The service is now generally available in 17 AWS regions worldwide, expanding customers' options for regional data ingestion and processing.

🔒 This post explains how AWS Sign-In now supports resource-based policies and resource control policies (RCPs) to restrict AWS Management Console and AWS CLI sign-in to expected networks such as corporate IP ranges, on-premises data center networks, and Amazon VPCs. It walks through a financial services use case that enforces console sign-in from a corporate network, shows how to create and enable a sign-in resource permission statement, and describes verification via AWS CloudTrail. The article also contrasts single-account resource-based policies with organization-wide RCPs and explains integration with AWS Management Console Private Access and the broader data perimeter framework.

🔧 Amazon EMR Serverless now permits live updates to key application configurations, such as maximum capacity and custom image settings, without stopping or restarting the application. New workloads submitted after a configuration change automatically use the updated settings while existing jobs continue under their original configuration. This removes the previous need to coordinate maintenance windows and restart applications when adjusting scaling boundaries or deploying updated custom images.

🔒 The AWS IoT Device SDK for Swift is now generally available, enabling Swift developers to build secure, scalable IoT applications natively on Apple platforms (macOS, iOS, tvOS) and Linux. The SDK fills a prior gap in native Swift support for AWS IoT services and provides production-ready APIs for teams managing device fleets and cross-platform Apple ecosystem solutions. It integrates service clients for AWS IoT Device Shadow, Jobs, and Fleet Provisioning and includes built-in TLS 1.3 support on Apple platforms. Install via Swift Package Manager and consult the documentation and GitHub samples to get started.

🔒 Amazon Route 53 Global Resolver now allows sharing DNS views across AWS accounts via AWS Resource Access Manager (AWS RAM). Consumer accounts can associate their private hosted zones with a shared DNS view to make records resolvable through the owner's global resolver in all Regions where it runs, while retaining hosted zone ownership. Access is controlled with predefined AWS RAM permissions—association-only, lifecycle management, or full access—or with custom permissions. This feature is available at no additional cost in supported Regions.

📣 Amazon Neptune now supports AWS CloudFormation for provisioning and managing Neptune global databases using the new AWS::Neptune::GlobalCluster resource type. You can define multi-region graph database topology as code, automate deployments, store configurations in source control, and integrate with CI/CD pipelines. Neptune global databases offer a single read-write primary and up to five read-only secondaries across Regions for low-latency reads, disaster recovery, and data residency. This capability is available in all Regions where Neptune global databases are supported.

🔖 Amazon CloudWatch now supports tagging for dashboards, enabling organizations to organize, categorize, and control access using key-value tags. The PutDashboard API accepts an optional Tags parameter for up to 50 tags on new dashboards, while TagResource, UntagResource, and ListTagsForResource now support dashboard ARNs to manage tags on existing dashboards. Dashboard tags can also be handled through AWS CloudFormation, and tags can be used to scope IAM permissions, group dashboards by team or project, and filter dashboards in AWS Resource Explorer. This capability is available at no additional cost in all Regions where CloudWatch is offered.

🚀 Amazon EC2 High Memory U7in-24TB instances (u7in-24tb.224xlarge) are now available in the AWS Asia Pacific (Seoul) region. These 7th-generation U7i instances use custom Intel Sapphire Rapids CPUs and provide 24 TiB of DDR5 memory, 896 vCPUs, up to 200 Gbps network, and 100 Gbps EBS bandwidth to accelerate in-memory workloads. U7i offers up to 45% better price performance over prior U-1 instances and is suited for mission-critical databases like SAP HANA, Oracle, and SQL Server.

📥 Amazon CloudWatch Logs now offers managed syslog ingestion, allowing firewalls, routers, switches, and Linux servers to send syslog messages directly to CloudWatch without agents. It accepts TCP, TCP+TLS, and UDP to a VPC endpoint and supports RFC 5424, RFC 3164, and Cisco FTD/ASA formats. CloudWatch automatically parses messages to extract fields like facility, severity, hostname, and application, enabling immediate querying via Logs Analytics. The feature is available in all commercial AWS Regions except UAE, Bahrain, and Israel.

🧬 AWS HealthOmics now provides ephemeral local scratch volumes for individual workflow tasks, mounted at /tmp, to improve performance for bioinformatics workloads such as sequence alignment, BAM sorting, and variant calling. Each task gets 16 GiB by default at no extra charge, with configurable sizes up to 3,072 GiB via WDL, Nextflow, or CWL directives and enabled at runtime using the StartRun API. Volumes are encrypted and deleted on task termination, and the feature is available in all Regions where HealthOmics operates. HealthOmics is HIPAA-eligible and designed to accelerate managed bioinformatics workflows for healthcare and life sciences customers.

🔐 Amazon Cognito now supports customer managed keys in AWS Key Management Service (KMS) to encrypt user pool data at rest. While AWS-owned keys remain the default, customer managed keys let organizations control key lifecycle and access policies to meet governance requirements. You can set a key when creating a new user pool or update an existing one, and audit key usage via AWS CloudTrail. Available in Essentials and Plus tiers with standard AWS KMS charges.

🚀 Amazon CloudWatch now offers OTel Container Insights for Amazon EKS, collecting infrastructure metrics at 30-second granularity using open-source receivers like cAdvisor, Kube State Metrics, and NVIDIA DCGM. Each metric includes OpenTelemetry semantic conventions and Kubernetes labels to simplify correlation across nodes, pods, and workloads with a single PromQL query. Pre-built dashboards provide immediate visibility into cluster health, node performance, and pod-level resource usage, and the CloudWatch PromQL endpoint enables direct connection of existing Prometheus and Grafana dashboards. Enable the feature from the EKS console, the CloudWatch Observability add-on (v6.2.0+), Helm, or CloudFormation; it is available in all commercial AWS Regions except UAE, Bahrain, and Israel (Tel Aviv).

🤖 Anthropic has introduced Claude Tag, a channel-based assistant starting with Slack, now available in beta to AWS customers who purchase Claude Enterprise via AWS Marketplace. Teams can grant Claude scoped access to selected channels, connect it to tools, data, and codebases, and use multiplayer tagging to delegate tasks. Claude Tag maintains channel context, plans future tasks, and employs per-channel identities, spend controls, and ambient mode off by default for governance. The AWS Marketplace experience mirrors first-party Claude Enterprise with consumption-based pricing, org-wide budget visibility, and per-channel limits.

🚀 Migration Assistant for Amazon OpenSearch Service now includes an AI-assisted experience that simplifies moving self-managed Apache Solr, Elasticsearch, or OpenSearch deployments to OpenSearch Serverless or Managed Clusters. The assistant integrates with AI tools like Kiro and Claude Code to plan migrations, deploy infrastructure, and execute both historical and live traffic migration. It also adds live traffic capture and replay support for Solr and is available in all commercial AWS Regions and AWS GovCloud (US) Regions where OpenSearch Service is offered.

🚀 Amazon EC2 G7e instances deliver up to 8 NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs, 96 GB per GPU, 5th Gen Intel Xeon CPUs, up to 192 vCPUs and 1600 Gbps EFA networking. They support NVIDIA GPUDirect P2P and GPUDirect RDMA with EFAv4 for reduced latency in multi-node and multi-GPU workloads. G7e instances target LLMs, agentic and multimodal generative AI, spatial computing, and workloads needing combined graphics and AI acceleration. G7e is now available for SageMaker Studio notebooks in US East (N. Virginia, Ohio) and US West (Oregon).

🔒 Unit 42 researchers describe a bucket hijacking technique that exploits globally unique storage bucket names across major cloud providers. By deleting a target bucket and recreating it under an attacker-controlled account with the same name, data streams (logs, Pub/Sub, replication, transfer jobs, etc.) can be silently rerouted to an adversary. The team validated the attack across Google Cloud, AWS and demonstrated cross-subscription scenarios in Azure, and has shared findings with the affected vendors.

🧬 AWS HealthOmics now supports Nextflow profiles, letting users activate predefined execution settings at run time. This allows separation of platform-specific configuration from core workflow logic and enables switching between development and production settings without editing workflow source code. The feature reduces errors, improves portability, and supports nf-core built-in and institutional profiles. It is available in all AWS HealthOmics Regions listed.