All news with #aws tag

🔒 The AWS Customer Incident Response Team (AWS CIRT) released the March 2026 update to the Threat Technique Catalog for AWS, adding three new entries that address identity abuse, persistence, infrastructure destruction, and privilege escalation. The update highlights concrete, real-world techniques — Cognito refresh token abuse, AMI deregistration, and misuse of UpdateAssumeRolePolicy — that let attackers hide in legitimate operations. Each entry includes detection guidance and straightforward mitigations you can apply today, such as enabling refresh token rotation, protecting AMIs with Recycle Bin retention rules, and monitoring trust-policy changes.

🚀 AWS Glue 5.1 is now generally available across commercial and AWS GovCloud (US) Regions, bringing updated runtimes, open-table-format support, and enhanced security controls. This release upgrades core engines to Apache Spark 3.5.6, Python 3.11, and Scala 2.12.18, and refreshes support for Apache Hudi 1.0.2, Apache Iceberg 1.10.0, and Delta Lake 3.3.2. It also adds Apache Iceberg format v3.0 features and extends AWS Lake Formation fine-grained access control to include write DML and DDL for Spark DataFrames and Spark SQL, plus full-table access control for Hudi and Delta tables.

🎮 Amazon GameLift Streams now supports Proton 10, an updated Proton compatibility layer for running Windows games on Linux-based stream classes. Proton 10 expands support to newer titles including modern DirectX 12 games and updates graphics translation layers (VKD3D/DXVK) for improved rendering and performance. The release also addresses Media Foundation video playback issues such as black screens and color bars and is available at no additional cost.

📥 AWS Cost Optimization Hub now offers a one-click CSV download in the console, allowing users to export cost optimization recommendations directly to their local machine. Exports respect current filters, sorting, and grouping and begin immediately for offline analysis or stakeholder sharing. This complements existing automated Data Export to Amazon S3 and is available in all supported regions.

⚙️ Administrators can now migrate Amazon WorkSpaces Personal from PCoIP to Amazon DCV using a guided, single‑click console action in addition to existing CLI and API methods. WorkSpaces take an automatic checkpoint snapshot before migration to enable rollback and protect against data loss, and session provisioning is blocked during the process with clear end‑user messaging. By moving to DCV, customers gain broader OS support—including Windows 11 and Windows Server 2025—along with enhanced security options such as certificate‑based authentication and WebAuthN, and improved streaming performance.

🔐 AWS IAM Identity Center centralizes workforce access and can consume session tags from external SAML providers such as Microsoft Entra ID to enable fine‑grained, attribute‑based access control (ABAC) across multiple AWS accounts. By mapping directory group attributes to session tags, administrators can dynamically apply permissions and runtime configuration—examples include selecting an AWS Glue usage profile or configuring Systems Manager Session Manager run‑as behavior. The post walks through SAML and SCIM setup, creating a custom permission set, mapping claims (for example AccessControl:glue:UsageProfile), testing job creation in the Glue console, and validating session tags via CloudTrail AssumeRoleWithSAML events.

🤖 Amazon Connect Talent is now available in Preview as an AI-powered hiring solution that automates structured voice interviews, administers science-backed assessments, and generates consistent candidate scores and transcripts. Candidates can interview 24/7 from any device, while recruiters access a central dashboard, detailed evaluations, and ATS integrations to accelerate and standardize hiring decisions.

✨ AWS is previewing new features in Amazon Quick that let non-developers create custom web applications in minutes by describing their needs in natural language. These apps can connect to live data sources, orchestrate complex workflows, and embed AI-powered features without writing code. Built-in publishing and sharing let teams distribute internal tools with one click, and a guided onboarding experience claims value in under five minutes.

🚀 AWS announced the general availability of Amazon Connect Decisions, an agentic AI planning and intelligence solution that helps supply chain teams shift from firefighting to proactive operations. The service combines 30 years of Amazon operational science with 25+ specialized supply chain tools so persistent AI teammates can adapt to business rules, learn from human decisions, and continuously improve. These agents harmonize demand signals into consensus forecasts, generate constraint-aware supply plans, and run 24/7 monitoring that detects variances, performs automated root-cause analysis, and triages exceptions, surfacing only prioritized, actionable recommendations to help prevent stockouts and reduce working capital waste.

🔍 Microsoft has expanded Microsoft Sentinel UEBA to ingest and enrich AWS CloudTrail alongside other cloud and identity sources, enabling behavioral anomaly detection across hybrid environments from a single pane. The solution delivers precomputed binary behavioral features and machine‑driven anomalies into the BehaviorAnalytics and Anomalies tables, letting analysts stack simple true/false signals such as first‑time geography, uncommon ISP, unusual action, and high operation volume. By shifting baseline management to UEBA, teams reduce heavy KQL baselines, accelerate triage, and surface low‑and‑slow or blended attacker behavior.

📝 Amazon Quick now supports integrated document and visual creation directly within chat conversations, enabling users to produce polished Word, PDF, PowerPoint, and Excel files without leaving the interface. The capability also generates images, infographics, charts, and other visuals that can be embedded or exported as standalone files. Visual creation is currently in preview in US East (N. Virginia) and US West (Oregon), while document creation is available across supported Regions. Users can sign up for free without an AWS account or credit card.

🔗 Amazon Quick now provides 13 new built-in action connectors that let business users take direct actions across Google Workspace, Zoom, Airtable, QuickBooks, Dropbox, and Microsoft Teams without leaving the assistant. Each connector supports managed authentication, enabling secure account connections in a few clicks without manual credential handling. The connectors handle authorization flows on behalf of users and are available in all AWS Regions where Amazon Quick is offered.

🖥️ Amazon Quick is now available as a native desktop preview for macOS and Windows, extending the assistant beyond the browser to leverage local files, OS-level notifications, and native desktop controls. The desktop app can read and work with files on the machine without uploading them, surface action-item, calendar, and message alerts, and automate both browser-based and desktop workflows. Memory, knowledge graph, and agents are shared with the web experience, and the preview supports local Model Context Protocol (MCP) connections for coding agents.

🚀 Amazon has introduced new Free and Plus pricing plans for Amazon Quick, enabling sign-up in minutes using a personal email or existing Google, Apple, GitHub, or Amazon credentials—no AWS account required. A guided onboarding helps users get value in under five minutes with role-specific workflows for sales, marketing, finance, operations, and more. Quick connects to applications and data to turn questions into actions—scheduling meetings, sending emails, following up on items—and builds a personal knowledge graph that learns preferences and priorities. Professional and Enterprise plans add agentic business intelligence, governance, and expanded user support.

🤖 Amazon Redshift Serverless now enables AI-driven scaling and optimization by default for all new workgroups, using machine learning to predict compute needs and automatically adjust resources before queries queue. The update expands support to workloads with a Base RPU range of 8–512 RPU, lowering the entry cost. Use the price-performance slider to prioritize cost, performance, or a balance; Amazon Redshift also applies automatic materialized views and table design optimizations. Configure targets via the AWS Management Console or the Amazon Redshift API; settings can be modified after workgroup creation and are available in all Regions where Serverless is offered.

🔍 Amazon CloudWatch RUM now provides an improved App Monitors overview that surfaces fleet-wide health, SLO breaches, and distributed tracing coverage on a single page. The new view groups monitors into four summary cards — Needs attention, Trending worse, Setup and coverage, and SLOs and Alarms — and offers quick filters, per-row SLI and tracing links, and a selectable side panel for deeper context. The enhancement is available in all AWS commercial Regions where CloudWatch RUM is offered at no additional cost.

🚀 Amazon Elastic VMware Service (Amazon EVS) now supports the i7i.metal-24xl Amazon EC2 bare-metal instance, providing a lower-core-count option with a 5th-generation Intel Xeon processor. This delivers improved cost-performance and scaling flexibility for VMware-based workloads on EVS. Customers can expect up to 23% better compute performance and over 10% better price performance versus i4i for x86 storage-optimized use cases. The release is available in Regions that offer both Amazon EVS and EC2 i7i.

🚀 Amazon Redshift Serverless is now generally available in the AWS Asia Pacific (Melbourne) and Canada West (Calgary) regions. The serverless offering removes the need to provision or manage clusters by automatically provisioning and scaling compute for analytics workloads. Users can query data directly in S3 in open formats (Parquet, Iceberg), access data shares, restore snapshots, and use Query Editor V2 or existing BI tools, with per-second compute billing and unified query cost reporting.

📎 Amazon Connect now supports attachment file sizes up to 100 MB for chat, cases, and tasks, increased from the previous 20 MB limit. Administrators can enable the higher limits and configure custom file extensions for attachments across chat, email, cases, and tasks via the Amazon Connect admin website or APIs. This reduces back-and-forth by allowing customers to upload diagnostic bundles, log archives, signed contracts, and other larger documents directly during interactions; the feature is available in multiple AWS Regions.

💳 AWS Billing Conductor now supports the new Passthrough Pricing Plan for Billing Transfer users. Customers can select this AWS-managed plan when configuring a new transfer in the Billing Transfer page or apply it to existing billing groups via the AWS Billing Conductor console. Under the plan, accounts in a billing group see billable data that reflects the AWS invoice value in both My View and Showback/Chargeback views. The feature is available in US East (N. Virginia) and is offered free of charge for qualifying Direct Customers and Channel Partners.