All news with #aws tag

🚀 Amazon Web Services has expanded OR2 and OM2 OpenSearch Optimized instances into additional global regions, delivering higher indexing throughput and S3-based managed storage for indexing-heavy workloads. In AWS internal benchmarks OR2 showed up to 26% higher indexing throughput vs OR1 (70% vs R7g) and OM2 up to 15% vs OR1 (66% vs M7g). Both families include local instance caching, S3-managed storage, pay-as-you-go and reserved pricing, and a range of sizes to fit different compute and memory needs.

🔍 Amazon CloudWatch Database Insights now supports cross-account and cross-region monitoring, enabling teams to observe and manage database fleets across multiple AWS accounts and regions from a single console. The feature centralizes performance metrics and troubleshooting workflows so teams can correlate incidents across distributed environments. It is intended to reduce operational overhead and improve mean time to resolution by enforcing consistent monitoring standards.

📦 AWS License Manager now offers license asset groups, a centralized capability to manage commercial software licenses across AWS regions and accounts in an organization. The enhancement delivers organization-wide visibility with customizable grouping and automated reporting so customers can track expiry dates, streamline audit responses, and take data-driven renewal actions. The feature is available in all commercial regions where License Manager is offered.

🔒AWS Control Tower now supports 279 additional managed AWS Config rules and seven new compliance frameworks in the Control Catalog. You can search, discover, enable, and manage these rules directly from the AWS Control Tower console or via the ListControls, GetControl, and EnableControl APIs. The ListControlMappings API has been enhanced to show relationships between controls — complementary, alternative, or mutually exclusive — helping map detection (Config rules) to prevention (Service Control Policies). These features are available in Regions where Control Tower is offered, including AWS GovCloud (US).

🔍 Amazon CloudWatch Container Insights now supports configurable sub-minute GPU sampling for Amazon EKS, enabling GPU metrics to be collected at a per-second sample rate and aggregated to CloudWatch once per minute. This enhancement gives teams finer visibility into short-lived AI/ML inference and GPU-intensive workloads, helping to optimize resource utilization, troubleshoot performance issues, and improve operational efficiency for containerized GPU applications. The feature is available in all AWS Commercial Regions and AWS GovCloud (US) Regions at no additional cost.

🔒 Amazon Elastic Container Registry (ECR) now supports AWS PrivateLink for its dual-stack endpoints. This enables customers to standardize on IPv6 while continuing to accept IPv4 traffic, and to keep API and Docker/OCI request traffic confined to the Amazon network. By routing dual-stack endpoint traffic over PrivateLink, organizations can reduce exposure to the public internet and improve their security posture. The feature is generally available in all AWS commercial and GovCloud (US) regions at no additional cost.

⚙️ Amazon CloudWatch now provides an in-console experience for automated installation and configuration of the CloudWatch agent on EC2 instances. The new UI surfaces agent status across your EC2 fleet, automatically detects supported workloads, and uses CloudWatch observability solutions to recommend monitoring configurations. Customers can deploy agents with one-click installs or create tag-based policies for automated fleet-wide management, including for auto-scaled instances, reducing setup time from hours to minutes.

🔎 Amazon has added an integrated query editor to Aurora DSQL, enabling secure, browser-based SQL access from the AWS Management Console without requiring external client installation or configuration. The editor includes syntax highlighting, auto-completion, and intelligent code assistance, along with schema exploration and result viewing in a single interface. Available in all Regions where Aurora DSQL is offered, this feature shortens time-to-value and simplifies database interactions for developers, analysts, and data engineers.

🔐 AWS Application Load Balancers (ALB) and Network Load Balancers (NLB) now offer an opt-in post-quantum TLS (PQ-TLS) key exchange option. The new PQ-TLS security policies use hybrid key agreement that combines classical algorithms with post-quantum KEMs including the standardized ML-KEM, protecting against 'harvest now, decrypt later' attacks. Available at no extra cost across AWS Commercial, GovCloud (US), and China Regions, the feature requires explicit listener updates and supports monitoring via ALB connection logs and NLB access logs.

🛡️ AWS Application Load Balancers (ALB) now support Health Check Logs that deliver detailed target health check entries to a designated Amazon S3 bucket every five minutes. The optional feature records timestamps, target identifiers, per-target health status, and precise failure reasons to accelerate troubleshooting. You can enable it via the AWS Management Console, AWS CLI, or SDK. Available in all AWS Commercial Regions, AWS GovCloud (US), and AWS China Regions, logs incur no additional fees beyond standard S3 storage and can reduce mean time to resolution for target health investigations.

🌐 Amazon WorkSpaces Applications now supports IPv6 for WorkSpaces Applications domains and external endpoints, allowing users on IPv6-capable devices to connect (SAML authentication is not supported over IPv6). This reduces the need for address-translation appliances, helps meet IPv6 compliance, and simplifies VPC addressing. The feature is available at no additional cost in 16 AWS Regions and uses pay-as-you-go pricing; customers must use the latest client or web access.

🔒 AWS Transfer Family web apps now support Virtual Private Cloud (VPC) endpoints, enabling private, in‑VPC access to your browser-based S3 file interface at no additional charge. Workforce users can connect through a VPC, AWS Direct Connect, or VPN so that file traffic remains inside your network boundary. Administrators can enforce controls with security groups and subnet-level NACLs, retaining full visibility and control over transfers. Configure and manage endpoints via the Transfer Family console, AWS CLI, or SDK.

🔍 The AWS Management Console now integrates Amazon Q Developer AI-assisted troubleshooting directly into Amazon ECS and Amazon EKS. Contextual 'Inspect with Amazon Q' controls appear alongside error and status messages to gather relevant logs and metrics, analyze root causes, and present one-click mitigation suggestions. The experience covers failed tasks, container health checks, deployment rollbacks, cluster and node health, and Kubernetes pod events, and is available in all AWS commercial regions.

🔗 Amazon API Gateway REST APIs now support private integration with Application Load Balancer (ALB), enabling direct inter‑VPC connectivity to internal ALBs. This removes the previously required Network Load Balancer hop, which can reduce latency and simplify deployments. The integration brings Layer 7 capabilities — such as HTTP/HTTPS health checks, advanced request‑based routing, and native container service alignment — while retaining NLB-based layer‑4 options.

🚀 Amazon Web Services today introduced Amazon ECS Express Mode, a managed deployment option that helps developers rapidly launch containerized web applications and APIs with minimal configuration. Every Express Mode service is assigned an AWS‑provided domain and supports public or private HTTPS, autoscaling, and ALB-based traffic distribution. The feature can consolidate up to 25 Express Mode services behind a single Application Load Balancer while preserving isolation through intelligent rule-based routing. All provisioned resources remain in your AWS account and are fully accessible; Express Mode is available now in all AWS Regions at no additional service charge — you pay only for the underlying AWS resources used.

🔒 AWS Backup now supports Amazon FSx Intelligent-Tiering, enabling centralized protection for FSx for Lustre and FSx for OpenZFS file systems. The Intelligent-Tiering storage class delivers fully elastic file storage that automatically scales with workloads while optimizing costs through pay-for-what-you-use elasticity. Existing Amazon FSx backup plans continue to run without modification. Support is available in all Regions where FSx Intelligent-Tiering is offered, and you can manage protections from the AWS Backup console.

🔗 AWS announced integration of AWS Lambda Kafka event source mapping directly in the Amazon MSK Console, allowing you to connect MSK topics to Lambda functions without switching consoles. The MSK Console now requires only a topic and target function while automatically creating and configuring the event source mapping (ESM), applying optimized defaults and optional IAM role generation. The integration defaults to Provisioned Mode to improve latency and throughput, and is generally available in most AWS Commercial Regions with a few regional exceptions.

🚀 AWS Glue now includes a new Amazon DynamoDB connector that natively supports Apache Spark DataFrames. This enables developers to reuse existing Spark DataFrame code across AWS Glue, Amazon EMR, and other Spark environments with minimal modification, replacing prior reliance on Glue-specific DynamicFrame objects. The connector exposes the full range of DataFrame operations and current Spark performance optimizations and is available in all AWS Commercial Regions where Glue runs.

🚀 Amazon ECS Managed Instances is now available in the AWS GovCloud (US-East) and GovCloud (US-West) Regions, bringing a fully managed EC2 compute option to government-focused accounts. Managed Instances dynamically scales and optimizes EC2 capacity, supports task-level requirements (vCPU, memory, CPU architecture), and lets you select instance families including GPU, network-optimized, and burstable types. AWS initiates security patching every 14 days; management fees apply in addition to EC2 costs.

📊Amazon QuickSight now lets dashboard viewers customize tables and pivot tables directly in dashboards. Users can sort, reorder, hide or show, and freeze columns without requiring updates from dashboard authors. These per-view adjustments support cross-team collaboration and tailored analysis — for example, sales teams sorting by revenue or finance freezing account columns to retain context. The features are available in Amazon QuickSight Enterprise Edition across supported regions; see the product documentation and blog for guidance.