All news with #aws tag

🔍 LocateAnything-3B, Qwen-AgentWorld-35B-A3B, and Qwen3.5-122B-A10B are now available on Amazon SageMaker JumpStart. These models provide visual grounding, agent environment simulation, and large-scale multimodal reasoning capabilities. Customers can deploy them with a few clicks via the SageMaker console or programmatically using the SageMaker Python SDK. The models expand foundation model choices for enterprise AI on AWS.

🚀 NVIDIA Nemotron 3.5 Lightning is now available on Amazon SageMaker JumpStart, enabling customers to deploy a high-throughput open model optimized for persistent agent workloads. The 30B-parameter hybrid MoE design activates 3B parameters per pass, delivering up to 4x throughput (~410 tokens/sec) and 30% faster task completion. It supports up to 1M-token context and can be post-trained and deployed across edge, on-premises, or cloud environments.

🧭 AWS Glue now lets users open Amazon SageMaker Unified Studio with a single click from the Glue console, enabling analysts and engineers to query cataloged data, run data quality checks, and build pipelines without switching contexts. Access from S3 Tables, Athena, EMR, Redshift and Glue consoles is supported, and the same IAM role is used when launching SageMaker Notebooks. An inline permissions panel simplifies setup by letting you create and customize required IAM policies in-context if SageMaker Unified Studio isn't yet configured.

🔐 AWS Secrets Manager now supports managed external secrets for Jenkins API Tokens and SonarQube Tokens, enabling automatic rotation and lifecycle management directly from the AWS console. For Jenkins, Secrets Manager mints new tokens and revokes old ones only after verifying the replacement is active, supporting both self-rotation and admin-assisted rotation. SonarQube rotation covers User Tokens, Global Analysis Tokens, and Project Analysis Tokens via the SonarQube Web API, with user tokens supporting self-rotation and analysis tokens rotated using an admin token. These additions join other supported services and are available in all Regions where managed external secrets is supported.

📊 Amazon Connect Customer now offers a performance dashboard for Cases that enables managers to monitor case volume, resolution trends, and SLA performance. The dashboard supports comparisons between current and prior periods across metrics such as cases created, average resolution time, first-contact resolution percentage, and SLA achievement rate. Managers can slice trends by case template, assigned user, or queue to identify issues and prioritize improvements.

📥 AWS Clean Rooms now supports exporting privacy-enhanced analysis logs for SQL analyses to an S3 bucket, giving customers improved optimization and troubleshooting capabilities. Collaboration owners can grant members permission to export logs when creating a collaboration or via change requests for existing collaborations. After a query runs, privacy-enhanced Spark execution details can be exported to a chosen S3 path to help identify issues like data skew and reduce resolution time and costs.

🖥️ Amazon GameLift Streams now captures and distributes shader caches for applications without requiring code changes. You mark a stream session to capture a cache, and the service replicates it across compatible stream groups and locations to reduce load times and visual stuttering. Monitor cache status and size via the ListApplicationShaderCaches API or the GameLift Streams console. The feature supports Linux (Ubuntu 22.04), Proton, and Windows Server 2022 runtimes, and storage of the latest cache version is billable.

📣 AWS Marketplace now supports category-based managed buyer notifications via AWS User Notifications, replacing the previous single-root-email delivery. Buyers can select from four notification categories — Products and Solutions, Agreements and Subscriptions, Private Offers, and Pricing Changes — and route them to multiple recipients and channels such as additional emails, distribution lists, mobile console alerts, Slack, and Microsoft Teams. By default all categories remain enabled to the root email; full rollout with automatic enablement for all customers begins January 2027.

🔒 AWS has renewed the Police-Assured Secure Facilities (PASF) accreditation for the Europe (London) Region for Official-Sensitive data. This renewal, confirmed by the Police Digital Service on May 28, 2026, continues a PASF accreditation that AWS London first obtained in 2017. The PASF program involves a control set of security requirements, on-site inspections, and audit interviews to validate facilities that handle UK law enforcement data. UK police and law enforcement organizations can verify compliance through the Police Digital Service and AWS Artifact.

🔐 AWS Identity and Access Management (IAM) introduced Account Access Manager, simplifying assignment of IAM roles to workforce users and groups from AWS IAM Identity Center. Administrators can now manage role assignments centrally while retaining per-account role flexibility, using the AWS IAM console, SDKs, CloudFormation, and CDK. The feature consolidates permissions management, user awareness, and a single federation point at no additional cost.

🔒 Amazon Web Services (AWS) completed the 2026 CyberVadis assessment and achieved the highest score (Mature) across all evaluated areas, demonstrating commitment to elevated cloud-security expectations. The report and scorecard are now available to help customers reduce third-party due-diligence burdens and map AWS controls to common industry frameworks. Customers can download the full assessment via the CyberVadis portal or AWS Artifact and contact their AWS account team with questions.

🚀 Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports in-place migration from Apache ZooKeeper to KRaft, letting customers convert existing clusters without provisioning new infrastructure or reconfiguring clients. KRaft moves metadata management into Kafka controllers, improving metadata propagation, scalability, and simplifying architecture. The migration requires Kafka 3.9.x as an intermediate step and enables upgrades to Kafka 4.x, and is available today in all MSK provisioned regions except the European Sovereign Cloud (Germany).

🔔 The next generation of Amazon OpenSearch Serverless now supports up to 10,000 collections within a single collection group, increased from the previous limit of 1,500. Collection groups let multiple collections share OpenSearch Compute Units (OCUs) even when encrypted with different AWS KMS keys. This change enables greater consolidation, improved compute utilization, and reduced per-collection costs for multi-tenant workloads. The higher limit applies automatically to new and existing nextgen collection groups in all available AWS Regions.

🔧 AWS Elastic Disaster Recovery now preserves UEFI boot mode when recovering Linux source servers that boot with UEFI firmware. Previously, recovered Linux instances launched in legacy BIOS mode and could require extra post-recovery configuration. Recovered instances now launch with the same UEFI boot mode as the source, ensuring applications that depend on UEFI behavior function without additional steps. This automatic capability is available in all Regions where AWS DRS is offered at no extra cost.

🔒 Over ten years, AWS Managed Microsoft AD evolved from a basic managed Microsoft Active Directory offering into a foundational enterprise identity service integrated across more than 20 AWS services. The service reduced operational overhead by handling domain controllers, HA, backups, patching, and replication while adding features like schema extensions, gMSA, multi-Region replication, and CRUD APIs. Recent additions include Hybrid Edition, self-service edition upgrades, and integrations for database, file, and remote-access authentication.

🔒 Amazon Timestream for InfluxDB now supports customer-driven backups and restores for InfluxDB 2 and 3 engines. You can trigger one-time on-demand backups, schedule up to four recurring backup configurations per resource with custom frequency and retention, and restore either to a new resource or overwrite an existing one via the Console, CLI, or API. The first backup is full and subsequent backups are incremental, and KMS-managed keys are preserved for encrypted resources.

🔧 The Amazon Cognito (aws-auth) skill is now included in the Agent Toolkit for AWS, enabling AI coding agents to set up, configure, secure, and troubleshoot Amazon Cognito using best-practice workflows. The skill supports user pools, app clients, OAuth 2.0 flows, token and JWT authorizer management, passkey/WebAuthn enrollment, threat protection, Lambda triggers, and identity pools. When used with the AWS MCP Server, commands run with IAM guardrails and CloudTrail audit logging; it also works standalone via the AWS CLI.

🛡️ Amazon VPC IPAM now supports BGP route protection monitoring and delegated RPKI management for BYOIP prefixes, enabling centralized monitoring of RPKI validity, ROA strength, and route overlap across accounts and regions. Administrators can detect invalid or missing ROAs, identify potential hijacks via overlap detection, and differentiate strict versus permissive ROA configurations. With Delegated RPKI, after a one-time setup with ARIN, RIPE, APNIC, or LACNIC, IPAM automates ROA creation, renewal, and management for both BYOIP and on-premises prefixes. The capability is available in all commercial AWS Regions except AWS GovCloud (US) and the China regions.

🛡️ Amazon Bedrock AgentCore is now available in AWS GovCloud (US-West), enabling regulated organizations to build context-aware agents with controls for production scale. AgentCore memory provides short-term conversational context and long-term persistent insights without complex infrastructure. Policy features let teams author natural-language policies that convert to Cedar and enforce tool access at an AgentCore gateway. The managed harness simplifies deployment by declaring models, tools, and instructions via configuration and running agents with a few API calls.

⚙️ Amazon GameLift Servers now supports 21 additional EC2 instance types for managed EC2 and container fleets. The expansion covers compute-optimized C-series (C8a, C8i, C9g) and general-purpose M-series (M8a, M8i, M9g), offering x86 and Arm architectures. Customers can choose processors including 5th-gen AMD EPYC, custom Intel Xeon 6, or AWS Graviton5 to balance performance, cost, and engine compatibility.