All news with #aws tag

🚀 SageMaker JumpStart now offers optimized deployments for foundation models, providing pre-configured, task-aware settings tailored to specific use cases and performance goals. Customers can choose cost-, throughput-, latency-optimized, or balanced configurations and preview P50 latency, time-to-first-token, and throughput metrics before deployment. Supported models include variants from Meta, Microsoft, Mistral AI, Qwen, Google, and TII, and deployments target SageMaker AI Managed Inference endpoints or HyperPod clusters. The feature leverages VPC deployment capabilities and is available in all regions where JumpStart is supported.

🌍 Amazon has expanded CloudWatch RUM to the AWS European Sovereign Cloud, enabling customers subject to strict data residency and sovereignty rules to collect client-side performance data within the sovereign boundary. The feature captures page load times, JavaScript errors, HTTP failures, and mobile signals to help teams triage issues faster. It is intended for enterprises, public sector organizations, and regulated industries operating in Europe.

📡 Amazon CloudWatch now lets customers audit and enable telemetry from AWS services such as Amazon EC2, Amazon VPC, and AWS CloudTrail across multiple Regions from a single region. Administrators can create organization-wide enablement rules scoped to specific regions or all supported regions, and rules targeting all regions automatically expand to include newly launched regions. The feature is available in all AWS commercial regions and standard CloudWatch ingestion pricing applies.

🛡️ AWS Elastic Disaster Recovery (AWS DRS) is now available in the AWS European Sovereign Cloud (Germany). It enables organizations with data sovereignty requirements to protect mission-critical workloads and supports recovery from physical infrastructure, VMware vSphere, Microsoft Hyper‑V, and cloud environments. AWS DRS delivers point-in-time recovery with RPOs measured in seconds and RTOs typically in minutes, and provides a unified process for testing, recovery, and failback.

🖥️ Amazon WorkSpaces Personal and Amazon WorkSpaces Core are now available in US East (Ohio) and Asia Pacific (Malaysia), allowing organizations to provision virtual desktops closer to users for improved responsiveness and potential in‑country data residency. In Ohio, the availability also supports disaster recovery implementations and regional compliance requirements. Administrators can begin by selecting the new Regions in the WorkSpaces management console.

🚀 Amazon has expanded FSx for Lustre Persistent-2 to four more Regions—Asia Pacific (Hyderabad, Jakarta), Europe (Zurich), and South America (São Paulo). These file systems run on AWS Graviton processors and deliver up to 1 GB/s per terabyte throughput with a lower cost of throughput than previous generations. The change helps accelerate machine learning, high-performance computing, media & entertainment, and financial simulation workloads while reducing storage costs. To get started, create a file system through the AWS Management Console.

🚀 AWS announced general availability of Amazon EC2 C8in and C8ib instances powered by custom sixth-generation Intel Xeon Scalable processors and the latest AWS Nitro cards. These instances deliver up to 43% higher performance versus the prior C6in generation and scale up to 384 vCPUs. C8in provides up to 600 Gbps networking for network-intensive workloads, while C8ib offers up to 300 Gbps EBS bandwidth for high-performance databases and file systems. Both families are available in select regions and via On-Demand, Savings Plans, and Spot.

🔐 AWS introduced multi-session sign-in for Amazon Quick, allowing users to access up to five Quick accounts concurrently in the same browser. The update includes the account name in all URLs so agents, spaces, flows, reports, dashboards, and other assets open in the intended account. Users add accounts via the top-right menu or a pre-populated account input on global URLs, and can sign out per tab or from all sessions.

🔐 AWS Payment Cryptography is now available in South America (São Paulo), allowing latency-sensitive payment workloads to run closer to their applications. The fully managed service centralizes payment-specific cryptography and key management and is assessed as PCI PIN and PCI P2PE compliant. Organizations such as acquirers, payment facilitators, networks, switches, processors, and banks can reduce dependence on dedicated payment HSMs and auxiliary data centers. To start, update your AWS CLI/SDK and consult the service user guide for region-specific guidance.

📊 Amazon QuickSight now supports sheet tooltips, enabling authors to surface rich, contextual detail when viewers hover over data points without disrupting their analysis flow. Authors can create dedicated tooltip sheets with visuals, text boxes, and images that inherit source visual filters and apply an additional filter for the hovered data point. The feature supports tables and pivot tables, allows assigning one tooltip sheet to multiple visuals, and is available on interactive sheets across all QuickSight regions.

🔒 This post explains how AI agents and coding assistants access AWS resources via the Model Context Protocol (MCP) and why deterministic IAM controls are required. It outlines three security principles—assume all granted permissions could be used, enforce role governance, and differentiate AI-driven from human-initiated actions—and maps them to deployment patterns. It contrasts AWS-managed MCP servers (which inject context keys) with self-managed servers (which require session tags), and provides practical IAM policy examples, monitoring guidance, and operational controls.

🚀 Amazon has added EC2 P6-B300 instances to the AWS GovCloud (US‑East) Region. The p6-b300.48xlarge configuration provides 8x NVIDIA Blackwell Ultra GPUs with 2.1 TB of high-bandwidth GPU memory, 6.4 Tbps EFA networking, 300 Gbps ENA throughput, and 4 TB of system memory. P6-B300 delivers ~2x networking, 1.5x GPU memory and 1.5x FP4 TFLOPS vs P6-B200, targeting training and deployment of large trillion-parameter foundation models and LLMs.

🚀 AWS Transform is now accessible from within Kiro and Visual Studio Code via an AWS Transform Power and an extension, enabling developers to start, run, and monitor agentic migration and modernization jobs directly from their IDEs. The platform offers custom transformations and AWS-managed playbooks for common upgrades — language version bumps and SDK migrations — and supports running agents across thousands of repositories. Job state and context are synchronized across the web console, CLI, and IDEs, and AWS Transform custom is currently available in US East (N. Virginia) and Europe (Frankfurt).

🔐 AWS Secrets Manager now supports hybrid post-quantum TLS key exchange using ML-KEM (a module-lattice-based KEM) to secure secret retrieval. The capability is automatically enabled in Secrets Manager Agent (v2.0.0+), Lambda Extension (v19+), and Secrets Manager CSI Driver (v2.0.0+); supported SDKs include Rust, Go, Node.js, Kotlin, Python (OpenSSL 3.5+), and Java v2 (v2.35.11+). No code or configuration changes are required for up-to-date clients except Java v2. You can verify hybrid key exchange in CloudTrail GetSecretValue events by checking the tlsDetails field for the X25519MLKEM768 algorithm.

🚚 AWS now lets customers deliver AWS Data Exports — including Cost and Usage Report 2.0 (CUR 2.0), FOCUS, Cost Optimization Recommendations, and Carbon Emissions reports — directly into an authorized Amazon S3 bucket in another AWS account. This removes the need to replicate billing data across accounts and eliminates duplicate storage costs by allowing exports to target a destination bucket when created. The destination account owner controls which source accounts may deliver data via S3 bucket policies. The capability is available in all commercial AWS Regions except AWS GovCloud (US) and China Regions.

🚀 AWS has increased Amazon EBS performance for EC2 C8gn, M8gn, and R8gn instances in 48xlarge and metal-48xl sizes. With enhancements to the AWS Nitro System, EBS bandwidth doubles from 60 Gbps to 120 Gbps and IOPS doubles from 240,000 to 480,000. New launches receive the upgrade at no extra cost; running instances can enable it by stopping and starting. The change is available in all regions where these instance types are generally available.

🔧 Amazon OpenSearch Serverless now supports Derived Source, a feature that reconstructs the _source field on demand using indexed values instead of storing a separate copy. This reduces storage consumption for collections such as time-series and log analytics that contain many indexed fields. You can enable Derived Source at the index level when creating or updating mappings. The feature is available today in all AWS Regions where OpenSearch Serverless is supported.

🚀 Amazon Redshift now accelerates top-k queries (those using ORDER BY with LIMIT) by skipping irrelevant data blocks and keeping only the K best candidate rows in memory. The engine reorders and selectively reads blocks based on the ORDER BY column's min/max values so that when data is fully or partially sorted it reads only the minimal blocks needed rather than scanning entire tables. This optimization is available at no extra cost in patch release P199 and applies automatically to eligible queries without any rewrites or configuration changes.

🔐 Amazon Quick now supports document-level access controls for Google Drive knowledge bases, allowing organizations to retain native Google Drive permissions when indexing content. Quick combines indexed ACL replication for fast pre-retrieval filtering with a second layer of real-time permission checks against Google Drive at query time to prevent stale or mis-mapped access. When a user queries, Quick verifies their current Drive permissions before generating a response, ensuring answers reflect live access rights. This capability respects individual file and folder permissions and is available in all AWS Regions where Amazon Quick is offered. To enable it, create or update a Google Drive knowledge base in the Amazon Quick console and configure document-level access controls in the integration settings.

🔒 The new Aurora DSQL Connector for PHP (PDO_PGSQL) simplifies building PHP applications on Aurora DSQL by automating IAM token generation, SSL configuration, and connection pooling. It removes the need for static user-managed passwords while maintaining full compatibility with existing PDO_PGSQL features. The connector also offers opt-in optimistic concurrency control (OCC) retries with exponential backoff and supports custom IAM credential providers and AWS profiles to streamline credential management and client retry logic.