All news with #aws tag

📨 Amazon SES Mail Manager is now available in AWS GovCloud (US-East and US-West), expanding Mail Manager coverage to 30 AWS regions. The managed gateway centralizes inbound and outbound email routing, filtering, and archiving to simplify infrastructure and reduce reliance on multiple third‑party tools. This AWS-native solution aims to improve visibility and operational control while lowering cost and complexity for regulated and government customers.

🔒 Amazon OpenSearch Service now supports a VPC egress option that enables a domain to establish private, outbound network connections to resources in your VPC—such as ML models, other AWS services, and custom applications—without exposing traffic to the public internet. When enabled, OpenSearch Service adds network interfaces to the subnets you select and routes outbound traffic into your VPC. You can enable or disable VPC egress via the console, AWS CLI, or the CreateDomain and UpdateDomainConfig APIs. This option is available in all Regions where the service is offered.

🔧 AWS announced that AWS Site-to-Site VPN now supports modifying tunnel bandwidth on existing VPN connections, enabling customers to switch between standard (up to 1.25 Gbps) and large (up to 5 Gbps) tunnel sizes without recreating connections. The upgrade preserves tunnel IP addresses, CIDR blocks, pre-shared keys, and all configuration settings, removing the need to update on-premises VPN devices or firewall rules. This capability is available across a broad set of AWS Regions to simplify bandwidth scaling for hybrid and multi-site deployments.

🔒 AWS published a practical compliance guide, ISO/IEC 42001:2023 on AWS, to help organizations design and operate an Artificial Intelligence Management System (AIMS) using AWS services. The guide maps ISO 42001 clauses 4–10 and the Annex A controls to AWS services and architectural patterns, and it explains scoping, shared responsibility, and audit readiness. It highlights automation, evidence collection, monitoring, and responsible AI features to reduce effort in preparing for certification.

⚡ Amazon ElastiCache now supports aggregation queries that let developers filter, group, transform, and summarize data directly in cache with a single query. By running aggregations in-memory, applications can deliver microsecond latencies across terabytes of data while returning results that reflect completed writes. The feature reduces architectural complexity by removing the need for a separate analytics engine and enables use cases such as faceted navigation, rollups, leaderboards, and real-time dashboards. Aggregations are available at no additional cost on node-based clusters running Valkey 9.0 in commercial, GovCloud, and China Regions.

🔍 Amazon ElastiCache now supports real-time hybrid search that combines vector similarity and full-text search in a single query, removing the need for a separate search service. New writes are searchable immediately, enabling microsecond latencies and up to 99% recall across billions of embeddings from providers such as Bedrock, SageMaker, Anthropic, and OpenAI. The feature is available at no additional cost for node-based clusters running Valkey 9.0+ in all commercial, GovCloud (US), and China Regions, and Valkey is recommended as a permissive, vendor-neutral alternative to Redis.

🔎 Amazon ElastiCache now provides real-time full-text, exact-match, and numeric range search directly in the cache, eliminating the need for a separate search service. Applications can query terabytes of frequently changing data with microsecond latency and up to millions of operations per second, and can combine search types in a single query to power complex filters. The capability is available in all commercial Regions, AWS GovCloud (US), and China Regions for node-based clusters running Valkey 9.0 at no additional cost; create or upgrade clusters via Console, SDK, or CLI.

🛒 AWS Marketplace announces the Agreements API, enabling programmatic procurement and agreement management for Marketplace products. With this API you can generate estimates, accept offers, track charges and entitlements, update purchase orders, and manage agreements within your existing tools and workflows. Combined with the Discovery API, it supports an end-to-end procurement journey from product discovery to purchase and allows partners to build custom storefronts. The Agreements API is available in the US East (N. Virginia) Region; get started by configuring AWS Identity and Access Management permissions and calling the API via the AWS SDK.

🧭 Amazon Neptune now offers a 1-click connect to CloudShell, letting administrators, developers, and analysts quickly open interactive sessions against Neptune Database and Neptune Analytics without manual network configuration. The feature supports VPC-only resources and common network setups, reducing setup time and simplifying testing, development, and troubleshooting workflows. 1-click connect is available at no additional charge in all regions where Neptune is offered.

🔐 AWS Elastic Beanstalk now supports configuring TLS listeners for environments that use a Network Load Balancer. You can attach an SSL/TLS certificate and select a security policy so the load balancer terminates encrypted connections and forwards decrypted traffic to instances. TLS listener settings are configurable via the Elastic Beanstalk console or CLI, and the feature is available in all regions that support Beanstalk and NLBs.

🔧 AWS Elemental MediaTailor now natively supports ad trickplay personalization and compact DASH manifests through dynamic transcoding. This enables HLS and DASH ads to include trickplay variants and associated image streams that align with origin content specifications, removing the need for custom transcode profiles. Compact DASH manifest support elevates SegmentTemplate to the AdaptationSet level for smaller manifests and more efficient delivery. The features are available in all MediaTailor regions at no additional cost.

🔒 AWS has announced general availability of the AWS MCP Server, a managed endpoint that gives AI coding agents secure, auditable access to AWS services using the Model Context Protocol (MCP). The server is part of the Agent Toolkit for AWS and enforces IAM-based guardrails while emitting CloudWatch metrics and CloudTrail logs so teams keep visibility and control. It supports calling any AWS API through a single tool, sandboxed Python execution for multi-step tasks without filesystem or shell access, and a new agent skills format for on-demand, curated procedures. The service is available at no additional charge; customers pay only for the AWS resources agents consume.

🚀 AWS announced the Agent Toolkit for AWS, a production-ready suite of tools and guidance to help AI coding agents build on AWS with fewer errors, lower token costs, and enterprise-grade security controls. The toolkit includes validated agent skills, a fully managed MCP Server, and easy-to-install agent plugins. At launch AWS is shipping more than 40 skills across infrastructure-as-code, storage, analytics, serverless, containers, and AI, plus three plugin bundles for Core applications, Data Analytics, and Agent development. The Agent Toolkit is available at no additional charge; customers pay only for AWS resources consumed.

🚀 AWS Transfer Family web apps are now available in the AWS Asia Pacific (New Zealand) Region. The service provides a fully managed, branded web portal that lets workforces browse, upload, and download data stored in Amazon S3 through a browser. Administrators get a secure, simple interface for end-user file access without managing servers. This expands regional options for organizations operating in New Zealand.

🔒 AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) now offers expanded STIG-aligned security settings focused on high-impact directory controls. These settings are available today through a self-service interface, both programmatically and via the AWS Management Console, enabling administrators to declare desired configurations and have AWS implement and persist them. When new domain controllers are added or directories are scaled or deployed in additional regions, AWS automatically applies the declared settings to new instances to maintain consistency.

🚀 Amazon ElastiCache now offers Valkey 9.0, adding built-in full-text and hybrid search, semantic retrieval, and expanded vector similarity to node-based and serverless caches. The update delivers up to 40% higher throughput for pipelined workloads, microsecond latency for real-time queries, and throughput that can reach millions of requests per second. It also introduces hash field expiration for per-field TTLs and multi-database support for lightweight namespaces.

🔒 AWS Elemental MediaTailor now automatically authenticates server-to-server connections with Google Ad Manager (GAM), Google Campaign Manager (GCM), and Display & Video 360 (DV360), streamlining SSAI integration for customers. The service auto-detects requests to Google's ad servers and establishes the required secure, authenticated connection — no support case or allow-listing needed. GAM ad requests are secured to support access to Authorized Buyers, and GCM/DV360 impression tracking is routed through Google's authenticated endpoints to improve reporting and reduce rejected impressions. The feature is available in all Regions where MediaTailor runs and incurs no additional charge.

🔍 The AWS blog announces AI Traffic Analysis dashboards for AWS WAF, adding AI-specific visibility into bot and agent activity across web ACLs. The dashboards extend WAF Bot Control detection to more than 650 named bots and provide identity, intent classification, organization breakdowns, top paths, and 14‑day temporal trends. Data is emitted to Amazon CloudWatch and is queryable via the GetTopPathStatisticsByTraffic API for custom dashboards, alerting, and automation. A reference sample demonstrates per-path monetization with CloudFront and Lambda@Edge, with usage guidance and cost warnings.

🛠️The SAM CLI now supports BuildKit for building container images from Dockerfiles, enabling faster, more efficient Lambda container builds. You can use multi-stage builds to produce smaller final images, improved caching to reduce rebuild times, and parallelized build steps for faster overall builds. BuildKit also enables cross-architecture targets (x86_64 and arm64) and secure build-time use of Docker secrets. To use it, update to SAM CLI v1.159.0+ and run sam build with the --use-buildkit flag; the feature works with both Docker and Finch.

🚀AWS Serverless Application Model (AWS SAM) now supports WebSocket APIs for Amazon API Gateway, enabling developers to declare complete WebSocket APIs with minimal configuration in a SAM template. SAM automatically generates the necessary resources and permissions, reducing the manual CloudFormation work and common IAM debugging issues. The new AWS::Serverless::WebSocketApi resource offers parity with API Gateway WebSocket features — including IAM and Lambda authorization, custom domains, RouteSettings, Models, StageVariables, and Globals support. Define routes by assigning Lambda handlers for $connect, $disconnect, $default, and custom routes; SAM wires up integrations and permissions automatically.