All news with #aws tag

🚀 Second-generation AWS Outposts racks are now supported in the AWS Asia Pacific (Seoul, Sydney) and Europe (Paris) Regions. Outposts racks bring AWS infrastructure, services, APIs, and tools into on‑premises data centers or colocation spaces to provide a consistent hybrid experience. Customers can order racks attached to these Regions to optimize latency, meet data residency requirements, run low-latency workloads locally, and manage applications from their home Region.

🔍 AWS has extended Elastic Beanstalk's AI-powered environment analysis to Windows Server platforms, enabling developers and operators to diagnose and resolve Windows-based environment issues more quickly. The feature collects recent events, instance health metrics, and logs from Windows instances and sends that telemetry to Amazon Bedrock for analysis. You can request an AI analysis from the Elastic Beanstalk console using the AI Analysis button or programmatically via the AWS CLI with the RequestEnvironmentInfo and RetrieveEnvironmentInfo operations. Results include step-by-step troubleshooting recommendations tailored to the environment's current state and are available in Regions where both services are offered.

🔒 Amazon Quick now supports adding co-owners to admin-managed Microsoft SharePoint Online and Google Drive knowledge bases and their data source connections. Owners receive full management capabilities — editing, syncing, sharing, and deleting — while Viewers have query-only access. The Owner co-owner option is restricted to admin-managed SharePoint and Google Drive; other knowledge base types support Viewer sharing only. Administrators can also share connections so teams can create knowledge bases from the same integration. The feature is available in all AWS Regions where Amazon Quick is offered.

🆕 Amazon Redshift now supports row-level UPDATE, DELETE, and MERGE operations on Apache Iceberg tables, allowing direct DML on both partitioned and unpartitioned Iceberg datasets. Customers can perform UPSERT workflows such as change data capture and slowly changing dimensions without moving data to external engines. Tables remain interoperable with other Iceberg-compatible engines and respect AWS Lake Formation permissions. The feature is available in all AWS Regions where Redshift is offered.

🔒 Amazon Quick now includes an ACL Permission Checker for knowledge bases with document-level ACLs, enabling administrators to verify whether a specific user can access a particular document without manually tracing permission inheritance. To use it, open a knowledge base with ACLs enabled, go to the Sync reports tab, choose View Access Details for any synced item, and enter the user's email in the Permission Checker to get an immediate result. The Access Details panel also lists all users and groups with access so administrators gain full visibility into applied permissions. The checker returns one of three outcomes: the user has access, the user does not have access, or no ACL was found for the document.

🔒 Amazon Quick now supports document-level access controls (ACLs) for Microsoft SharePoint knowledge bases, allowing organizations to preserve native SharePoint permissions when indexing content. Quick uses a dual approach—ACL replication for fast pre-retrieval filtering paired with real-time permission checks against SharePoint at query time—to avoid stale or incorrectly mapped access. Administrators can enable this in an admin-managed SharePoint knowledge base in the Quick console; the feature is available in all Regions where Quick is offered.

🔒 UNC6692 used persistent social engineering to lure victims via Microsoft Teams, delivering a staged payload that installed an AutoHotkey loader and a malicious Chromium extension (SNOWBELT) from attacker-controlled AWS S3. The intruders deployed a modular suite — SNOWBELT, SNOWGLAZE, and SNOWBASIN — to establish WebSocket tunnels, local HTTP backdoors, and stealthy proxying for lateral movement. The campaign combined credential theft, LSASS and NTDS extraction, and exfiltration to cloud services, highlighting the need to monitor browser extensions and cloud egress.

🔔 AWS Backup now supports Amazon Aurora point-in-time recovery (PITR) in six additional AWS Regions: Malaysia, Thailand, Taipei, New Zealand, Canada West (Calgary) and Mexico (Central). The expansion enables policy-based data protection and time-based recovery for Aurora clusters via backup plans. To protect clusters, add them to an existing or new backup plan and ensure continuous backups or PITR are enabled on the relevant backup rule. Management is available via the AWS Backup console, CLI, or SDKs.

🔒 Amazon SageMaker Unified Studio now runs notebook kernels inside the domain-configured Amazon VPC, providing network isolation for interactive ML and data workloads. Kernels inherit VPC settings, subnets, and security groups defined at the domain level, enabling centralized network policy and secure access to private databases, internal APIs, and non-public data sources. This VPC configuration applies to the interactive compute where Python code and dataframes execute; other compute engines have separate VPC considerations. VPC-enabled kernels are available in all Regions where SageMaker Unified Studio is supported.

🧑‍💻 Amazon SageMaker Unified Studio now lets data workers create and manage multiple code spaces within a single project for IAM domains. Each space maintains its own persistent Amazon EBS volume and independent compute and storage settings, and can be paused, resumed, or connected to a local IDE while preserving files and session state. This enables parallel workstreams and isolated experiments with tailored runtimes and is available in all Regions where SageMaker Unified Studio is offered.

🔧 Amazon Elastic Container Service now includes NVIDIA GPU health monitoring and auto repair for ECS Managed Instances. The capability leverages NVIDIA Data Center GPU Manager (DCGM) to detect critical GPU hardware failures and proactively replace impaired instances to maintain availability for GPU-accelerated container workloads. You can view GPU health via the DescribeContainerInstances API and receive notifications through Amazon EventBridge. Auto repair is enabled by default on supported instances at no additional cost and is available in all AWS Commercial Regions.

🎬 Amazon Interactive Video Service (IVS) Low-Latency Streaming now supports server-side ad insertion (SSAI), enabling creators to monetize live streams with server-stitched ads. IVS integrates with AWS Elemental MediaTailor to deliver ad decisioning, audience targeting, and personalization while keeping client integration simple. The service provides an API to insert ad breaks in real time and includes ad markers in Amazon S3 recordings to support on-demand monetization. Server-side stitching also reduces the impact of client-side ad blockers.

🔁 Amazon has added a rollback capability for Amazon OpenSearch Service service software updates, allowing administrators to revert a domain to a previous software state if issues occur. Rollbacks use a blue/green deployment model and must be initiated within 15 days of an applied update via the new RollbackServiceSoftwareUpdate API, the AWS CLI, or the management console. The option is available in all Regions where the service is offered.

🔒 The Winter 2025 SOC 1 report from AWS is now available, covering 184 services for the 12‑month period January 1–December 31, 2025. Customers can download the report through AWS Artifact. AWS reiterates its commitment to meeting heightened expectations for cloud service providers, and to continuously bring additional services into compliance scope. If you have questions or feedback, contact your AWS account team or the AWS Compliance team.

🔧 Amazon SageMaker AI now provides inference recommendations that automate optimization and benchmarking to deliver validated, deployment-ready configurations. Customers supply their own generative models, define expected traffic patterns, and set a performance objective — optimize for cost, minimize latency, or maximize throughput. SageMaker analyzes model architecture, benchmarks across multiple instance types using NVIDIA AIPerf, and returns metrics such as time to first token, inter-token latency, request latency percentiles, throughput, and cost projections. The capability is available today in seven AWS Regions.

🌐 Amazon SageMaker now supports multi-region replication from IAM Identity Center (IdC), allowing administrators to deploy SageMaker Unified Studio domains in regions separate from their IdC instance. This capability preserves centralized single sign-on while enabling data residency and sovereignty controls. It is aimed at enterprise and regulated customers who need to process sensitive data in specific jurisdictions without fragmenting identity management.

🔔 AWS has added five new Qwen foundation models to SageMaker JumpStart, including Qwen3-Coder-Next, Qwen3-30B-A3B, Qwen3-30B-A3B-Thinking-2507, Qwen3-Coder-30B-A3B-Instruct, and Qwen3.5-4B. The models support agentic coding, extended reasoning, multimodal and multilingual workloads, and lightweight deployments. Customers can deploy them from SageMaker Studio or via the SageMaker Python SDK to accelerate development of coding agents and multimodal applications.

🧾 AWS Marketplace now provides a unified, self-service workflow for sellers to submit VAT invoices and receive automated VAT disbursements under deemed supply rules in the EU, UK, and Norway. Sellers can use the AWS Marketplace Management portal or AWS Partner Central to submit invoices, track status in real time, and consolidate multiple deemed supply transactions into a single periodic invoice when they share the same AWS EMEA branch and currency. The system validates required fields and disburses VAT after buyer payment, while supporting pre-submission so payments are processed once conditions are satisfied. Enhanced Seller Reports assist reconciliation and audit readiness and remove prior manual steps and separate platform onboarding.

🔒 Amazon now enables AWS PrivateLink access for Athena Spark, allowing clients in an Amazon VPC to reach Athena Spark APIs and endpoints without traversing the public internet. You can create an interface VPC endpoint to connect to Athena Spark using the AWS Management Console, AWS CLI, or AWS CloudFormation. The endpoint covers all Athena Spark APIs and endpoints — including Spark Connect, Spark Live UI, and the Spark History Server — keeping communication inside the AWS network to support security and compliance requirements.

📌 AWS Lambda now supports S3 Files, allowing functions to mount Amazon S3 buckets as file systems and perform standard file operations without pre-downloading objects. Built on Amazon EFS, S3 Files combines file-system performance with S3 scalability and durability, and multiple functions can share a mounted workspace concurrently. The integration streamlines stateful and AI/ML workflows and is configurable via console, CLI, SDKs, CloudFormation, or SAM; standard Lambda and S3 pricing applies.