All news with #aws tag

🧪 Amazon Web Services has added natural-language test Q&A generation to Automated Reasoning checks in Amazon Bedrock Guardrails. The capability generates up to N test Q&As from input documents to accelerate creating and validating formal verification policies. Automated Reasoning checks apply formal methods to detect correct model outputs and report up to 99% accuracy in identifying correct responses and reducing hallucinations. The feature is available in multiple US and EU Regions and accessible via the Bedrock console and Python SDK.

🔎 The new AI-powered investigative agent in AWS Security Incident Response automates evidence collection, correlation, and timeline building to speed incident investigations from hours to minutes. It interactively asks clarifying questions, queries CloudTrail, IAM, EC2, and cost data, and summarizes critical findings and timelines. The capability is available now across commercial AWS Regions and is included with the service’s metered pricing.

🔧 The AWS IoT Core rules-SQL now supports a SET clause to define and reuse variables across SQL statements, simplifying complex queries and ensuring consistent content when values are referenced multiple times. A new get_or_default() function returns fallback values when encountering data encoding or external dependency failures so rules continue executing. These capabilities reduce SQL complexity and improve reliability across regions.

📧 Amazon Connect Email now lets agents send follow-up replies to existing email contacts, enabling them to add information or continue assistance without opening a new thread. The feature preserves full conversation history so agents retain context and deliver consistent support. It is available in multiple AWS regions including US East (N. Virginia), US West (Oregon), Europe (Frankfurt, London), Canada (Central), several Asia Pacific locations, and Africa (Cape Town). Refer to documentation and pricing to get started.

📣 Second-generation AWS Outposts racks are now supported in the AWS Asia Pacific (Tokyo) Region. Organizations in and outside Japan can order Outposts racks connected to this region to optimize latency and meet data residency requirements while running low-latency workloads on-premises. Outposts extends AWS infrastructure, services, APIs, and tools into customer data centers or colocation spaces and connects back to a home Region for centralized management.

🔔 Amazon Web Services has raised the maximum storage limit for Aurora DSQL database clusters to 256 TiB, doubling the prior 128 TiB cap. This update enables customers to store and manage much larger datasets within a single cluster, simplifying data management for large-scale applications. Storage continues to auto-scale and customers pay only for used capacity; default clusters remain limited to 10 TiB and higher limits require a Service Quotas request.

🔔 Amazon Connect now enables monitoring of contacts queued for callback, allowing supervisors and integrations to search queued callbacks and view details such as customer phone numbers and queued duration in the Connect UI and via APIs. Teams can proactively route contacts nearing promised callback windows to available agents and clear customers who have already been served to avoid duplicative work. This capability is available in all regions where Amazon Connect is offered.

🔐 AWS WAF now supports Web Bot Auth, providing cryptographic verification for automated agents and crawlers that access web applications. The capability uses signed HTTP messages and a public key directory defined by active IETF drafts to authenticate bot identities. AWS WAF will automatically allow verified WBA bots by default, refining previous behavior where the AI category blocked unverified bots. This change helps operators distinguish trusted automated traffic from potentially harmful automation.

🆕 Amazon EMR 7.12 now supports the Apache Iceberg v3 table format (Iceberg 1.10) and includes Apache Spark 3.5.6. This update reduces storage and pipeline costs by marking deleted rows instead of rewriting files, while adding automatic row-level history for stronger governance and change-data capture. It also introduces table-level encryption and integrates with AWS Lake Formation. Apache Trino 476 is included, and EMR 7.12 is available in all Regions that support EMR.

🔐 Aurora DSQL now provides Python, Node.js, and JDBC Connectors that transparently handle IAM token generation for standard PostgreSQL drivers. The connectors integrate with psycopg/psycopg2, node-postgres, Postgres.js, and the PostgreSQL JDBC driver and support common pooling libraries such as HikariCP and built-in pooling in Node.js and Python. By automatically generating IAM tokens via the AWS SDK for each connection, they remove the need for custom token code or manual token provisioning, reducing reliance on static database passwords while preserving existing driver features and workflows.

💸 AWS has announced general availability of Flexible Cost Allocation (FCA) for AWS Transit Gateway, enabling organizations to distribute data processing and transfer charges more flexibly across accounts. FCA lets you assign usage to the source, destination, or the central Transit Gateway account and supports attachment-level or per-flow granularity. It also supports middle-box appliances such as AWS Network Firewall, allowing costs to be attributed to original source or destination owners. You can enable FCA via the AWS Management Console, CLI, or SDK with no additional charge.

🔧 Amazon Athena now lets you control Data Processing Unit (DPU) allocation for queries running on Capacity Reservations at the workgroup or per-query level. You can set explicit DPU values so small queries consume less capacity while critical jobs receive guaranteed resources. The Athena console and API now report per-query DPU usage, improving visibility into consumption and supporting capacity planning. These controls reduce over-provisioning, manage concurrency, and improve predictability for business-critical workloads in supported AWS Regions.

🔍 AWS Cost Anomaly Detection now uses an enhanced algorithm that analyzes spend in rolling 24-hour windows, comparing current costs to equivalent time periods from previous days whenever AWS receives updated cost and usage data. This removes delays from incomplete calendar-day comparisons and aligns analysis to similar times of day, improving accuracy for workloads with distinct morning and evening patterns. The result is faster, more precise anomaly identification with fewer false positives; the enhancement is available in all AWS Regions except the AWS GovCloud (US) Regions and the China Regions.

🚀 The AWS Transfer Family Terraform module now supports provisioning Transfer Family servers with a custom identity provider (IdP), enabling integration with existing authentication systems and centralized access control. This update automates deployment of SFTP, FTPS, FTP, AS2 and browser-based endpoints using Terraform, removing repeated manual configuration. The module is built on the open source Custom IdP solution and includes an Amazon Cognito example to help teams get started quickly.

🧭 AWS announced the Address Form Solution Builder for Amazon Location Service, a no-code tool that creates customizable address forms with predictive suggestions, autofill for fields like postal code, and an integrated map view. Developers can generate a ready-to-use application in minutes and download a developer package in React JavaScript, React TypeScript, or standalone HTML/JavaScript. The builder aims to speed address entry, reduce errors, and improve delivery and fraud outcomes for enterprise applications.

🔍 AWS Security Incident Response now offers an agentic AI investigative capability that automatically gathers, correlates, and summarizes evidence across AWS data sources. The investigative agent assesses new cases, asks submitters clarifying questions for missing indicators or timeframes, and collects logs from AWS CloudTrail, AWS Identity and Access Management (IAM), Amazon EC2, and AWS Cost Explorer. Findings are presented as clear, actionable summaries, and the feature is enabled automatically at no extra cost in supported Regions.

✨ Amazon SageMaker now offers one-click onboarding of existing AWS datasets into Amazon SageMaker Unified Studio, letting customers begin data work in minutes while retaining their current IAM roles and permissions. The feature provisions a pre-configured serverless notebook with a built-in AI agent that supports SQL, Python, Spark, and natural language. Users can start from SageMaker, Amazon Athena, Amazon Redshift, or Amazon S3 Tables consoles and the setup imports permissions from AWS Glue Data Catalog, Lake Formation, and S3 to accelerate first use.

🤖 Amazon SageMaker Data Agent is a built-in AI agent in the new notebook experience that accelerates analytics and ML development. It translates natural-language prompts into detailed execution plans and generates SQL and Python code, while staying aware of notebook context and data catalog metadata. Available in multiple AWS regions, it speeds common tasks like data transformation, statistical analysis, and model prototyping.

🔒 AWS launched VPC Encryption Controls to simplify auditing and enforcement of encryption in transit within and across Amazon Virtual Private Clouds. You can enable it on existing VPCs to monitor encryption status of traffic flows, identify resources that permit plaintext, and generate audit logs for compliance. The feature can also transparently enable hardware-based AES-256 encryption on traffic between supported resources such as AWS Fargate, Network Load Balancers and Application Load Balancers.

🔐 Amazon ECR now offers managed container image signing to simplify and standardize container provenance. Using a few clicks in the ECR Console or a single API call, you create a signing rule that references an AWS Signer signing profile (signature validity, target repositories), and ECR automatically signs images when they are pushed using the pusher's identity. AWS Signer handles key and certificate lifecycle, and all signing operations are logged to CloudTrail. The feature is available in all Regions where AWS Signer is offered.