All news with #aws tag

🚀 Amazon ECS Managed Instances is now available in the AWS GovCloud (US-East) and GovCloud (US-West) Regions, bringing a fully managed EC2 compute option to government-focused accounts. Managed Instances dynamically scales and optimizes EC2 capacity, supports task-level requirements (vCPU, memory, CPU architecture), and lets you select instance families including GPU, network-optimized, and burstable types. AWS initiates security patching every 14 days; management fees apply in addition to EC2 costs.

📊Amazon QuickSight now lets dashboard viewers customize tables and pivot tables directly in dashboards. Users can sort, reorder, hide or show, and freeze columns without requiring updates from dashboard authors. These per-view adjustments support cross-team collaboration and tailored analysis — for example, sales teams sorting by revenue or finance freezing account columns to retain context. The features are available in Amazon QuickSight Enterprise Edition across supported regions; see the product documentation and blog for guidance.

🔁 AWS Network Firewall now supports flexible cost allocation through AWS Transit Gateway native attachments, enabling automatic distribution of data processing charges across different AWS accounts. Administrators can create metering policies to apply inspection charges to application teams or business units instead of consolidating expenses in the firewall owner account. This preserves centralized security controls while automating chargeback based on actual usage. Flexible cost allocation is available in all AWS Commercial and Amazon China Regions where supported, with no additional fees beyond standard service pricing.

🔍 AWS announced general availability of a new Application Observability for AWS GitHub Action and enhancements to the CloudWatch Application Signals MCP server that embed observability into developer workflows. Developers can now request trace-aware diagnostics inside GitHub — for example by mentioning @awsapm in Issues — and receive intelligent, observability-based responses without switching consoles. The MCP server updates also let AI coding agents (such as Kiro) identify the exact file, function, and line causing latency or errors and provide or modify OTel-based instrumentation guidance for CDK or Terraform across ECS, EKS, Lambda, and EC2.

🔒 AWS Security Incident Response introduces a metered pricing model that charges per ingested security finding and includes a free tier for the first 10,000 findings per month. After the free tier, the per-finding rate is $0.000676 with tiered discounts at higher volumes. The consumption-based approach removes upfront commitments and minimum fees, enabling teams to scale response capability as needs evolve. Customers can monitor finding counts via Amazon CloudWatch at no extra cost, and the new pricing automatically applies in supported Regions starting November 21, 2025.

📧 Amazon Simple Email Service (Amazon SES) is now available in the Asia Pacific (Malaysia) and Canada West (Calgary) AWS Regions. This expansion lets customers send marketing, notification, and transactional emails from local AWS infrastructure, helping reduce latency and address data sovereignty and residency needs. Amazon SES, a scalable and cost-effective cloud email service, is now offered across 29 AWS Regions worldwide.

🚀 AWS Glue zero-ETL integrations now support AWS CloudFormation and the AWS Cloud Development Kit (CDK), enabling creation and management of zero-ETL integrations using infrastructure as code. This lets teams ingest data from DynamoDB and enterprise SaaS sources (Salesforce, ServiceNow, SAP, Zendesk) into Amazon Redshift, S3, and S3 Tables. CloudFormation and CDK support makes it easier to deploy, update, and version-control zero-ETL configurations consistently across multiple AWS accounts.

🚀 Amazon Lightsail now offers a new Nginx blueprint that includes IMDSv2 enforced by default and supports IPv6-only instances. With a few clicks you can provision a Lightsail VPS of your chosen size with Nginx preinstalled, using Lightsail instance bundles that combine OS, storage, and monthly data transfer. This blueprint is available in all AWS Regions where Lightsail runs; consult Lightsail documentation for supported blueprints and pricing details.

🗣️ Amazon Lex now supports Wait & Continue in ten additional languages — Chinese, Japanese, Korean, Cantonese, Spanish, French, Italian, Portuguese, Catalan, and German. The feature enables deterministic voice and chat bots to pause while customers gather information and then resume the interaction seamlessly. It enhances natural, multilingual self-service experiences and is available in all AWS Regions where Amazon Lex operates.

🔧 AWS Control Tower v4.0 introduces a controls-focused experience that gives customers direct access to more than 750 AWS managed controls without requiring a full Control Tower deployment. Customers can review the Control Catalog and deploy selected controls into their existing AWS Organization within minutes while retaining their current account structure. The release also separates S3 buckets and SNS notifications for cleaner operations and improved cost attribution.

🌐 Amazon Route 53 now exposes a dual-stack API endpoint at route53.global.api.aws, allowing clients to connect over IPv6, IPv4, or dual-stack. The existing IPv4-only endpoint remains available for backward compatibility. IPv6 support is available in all Commercial Regions at no additional cost and can be enabled via the AWS CLI or Management Console. This reduces IPv4 translation complexity and helps organizations meet IPv6 compliance.

⚡ AWS announces enhancements to Lambda's Provisioned mode for Kafka event source mappings, enabling grouping of ESMs and higher density of event pollers to reduce costs by up to 90% for low-throughput workloads. Each Event Poller Unit (EPU) still provides 20 MB/s but now defaults to 10 pollers per EPU and supports shared capacity via the new PollerGroupName parameter. Changes are available today across AWS Commercial Regions and can be configured via API, CLI, Console, SDK, CloudFormation, or SAM.

🔁 Amazon Athena now provides an auto-scaling solution for Capacity Reservations that adjusts reserved DPUs automatically based on workload utilization. The solution uses AWS Step Functions to monitor Amazon CloudWatch metrics and add or remove DPUs when utilization crosses configured high and low thresholds. You can set measurement frequency, utilization thresholds, and capacity limits, and customize behavior via the provided CloudFormation template. The feature is available in Regions where Capacity Reservations is supported.

📞 Amazon Connect now supports multi-skill agent scheduling to optimize workforce allocation across departments, languages, and customer tiers. Using forecast-driven, skill-based matching, administrators can schedule agents who hold multiple specialties and reserve multi-skilled staff for high-value interactions when demand peaks. This capability is available in all AWS Regions where agent scheduling is offered and aims to raise utilization while reducing staffing gaps.

📢 Amazon RDS for Oracle now offers Oracle Database Standard Edition 2 (SE2) License Included on R7i and M7i instances in the Asia Pacific (Taipei) region. Launched Nov 21, 2025, these License Included instances remove the need to purchase separate Oracle Database licenses and are available through the AWS Management Console, AWS CLI, and SDKs. There are no separate license or support charges. Review the Rethink Oracle Standard Edition Two on Amazon RDS for Oracle blog and Amazon RDS pricing for cost and regional availability.

🔍 Amazon CloudWatch Container Insights now supports Neuron UltraServers on Amazon EKS, enabling aggregated observability for multi-instance ML servers. The update adds a new UltraServer ID filter that presents consolidated metrics across all instances in a logical UltraServer group while retaining per-instance visibility. Available in all commercial AWS Regions and AWS GovCloud (US), this simplifies monitoring and troubleshooting for Trainium and Inferentia workloads.

🔒 AWS has released the Landing Zone Accelerator on AWS sample security baseline called the Universal Configuration, designed to deploy a secure, multi-account environment rapidly. It encodes AWS Well‑Architected security best practices and automates hundreds of controls to accelerate compliance for regulated workloads. The release is paired with the LZA Compliance Workbook on AWS Artifact, which maps technical controls to frameworks such as NIST, ISO, HIPAA, and CMMC.

📞 Amazon Connect now supports a persistent agent connection that keeps an open channel between agents and the service after a call ends. Administrators can enable the feature per agent profile to reduce customer connect time and help meet telemarketing compliance such as the U.S. Telephone Consumer Protection Act (TCPA) for outbound campaigns. The capability is available in all Amazon Connect regions and carries no additional charge beyond standard Amazon Connect usage and telephony fees.

🔐 AWS outlines replacing cross-partition IAM user keys with IAM Roles Anywhere to securely transfer data between AWS partitions. The post explains partition isolation (Commercial, GovCloud, China), why long-lived access keys are discouraged, and how IAM Roles Anywhere uses X.509 certificates and temporary credentials. It also covers using an external CA or AWS Private CA to issue and manage certificates for workloads.

🔒 AWS Organizations Tag Policies introduces Reporting for Required Tags, a validation check that ensures IaC deployments include mandatory tags. You define a tag policy specifying required keys and enable validation for CloudFormation, Terraform, or Pulumi workflows. Validation is implemented by activating the AWS::TagPolicies::TaggingComplianceValidator Hook in CloudFormation, adding plan-time checks in Terraform, or enabling the aws-organizations-tag-policies policy pack in Pulumi. The feature is available via the AWS Management Console, AWS CLI, and AWS SDK in supported Regions.