All news with #aws tag

🔐 Amazon Managed Grafana now supports customer-managed keys (CMKs) through AWS Key Management Service (KMS), enabling you to encrypt workspace data with keys you control. Previously, Amazon Managed Grafana used AWS-owned keys by default; this option lets organizations add a self-managed encryption layer to meet compliance and regulatory requirements. The feature is available in all generally available regions except AWS GovCloud (US) Regions.

🔒 AWS Clean Rooms now supports catalog federation for remote Apache Iceberg REST catalogs, enabling direct, secure access to Iceberg tables stored in Amazon S3 without replicating table metadata. Using AWS Glue catalog federation, organizations can include remote Iceberg catalogs in Clean Rooms collaborations so partners can jointly analyze combined datasets while keeping underlying data private. This reduces the need for ETL pipelines and simplifies cross‑party analytics between organizations such as publishers and advertisers.

🔧Amazon OpenSearch Service now supports the latest Graviton4-based EC2 instance families — compute-optimized c8g, general-purpose m8g, and memory-optimized r8g and r8gd. AWS reports up to 30% better performance versus Graviton3, offering improved price-performance for compute, general, and memory-intensive workloads. Support covers all OpenSearch versions and open-source Elasticsearch 7.9 and 7.10, with expanded regional availability.

🚀 Amazon OpenSearch Service now supports the latest x86-based, storage-optimized i7i instances powered by 5th generation Intel Xeon Scalable processors. i7i delivers up to 23% better compute performance and more than 10% better price-performance compared with prior-generation i4i instances, plus 3rd generation AWS Nitro SSDs for faster, more consistent storage. Storage improvements include up to 50% better real-time storage performance, up to 50% lower I/O latency, and up to 60% lower latency variability. Support is available across many commercial, regional, and GovCloud AWS Regions; check region-specific pricing and availability.

🚀 Amazon Web Services has launched EC2 R8i and R8i-flex instances in Europe (Ireland), powered by custom Intel Xeon 6 processors exclusive to AWS. These memory-optimized instances deliver up to 15% better price-performance and 2.5x more memory bandwidth versus previous Intel-based generations, with workload-specific gains for PostgreSQL, NGINX, and AI recommendation models. R8i includes 13 sizes including bare-metal and a new 96xlarge, while R8i-flex provides common memory-optimized sizes from large to 16xlarge to help right-size deployments.

🔧 Amazon Bedrock now supports reinforcement fine-tuning (RFT) for open-weight models, including openai.gpt-oss-20b and qwen.qwen3-32b. The managed RFT workflow automates end-to-end customization using reward functions that can be rule-based or AI-driven, and integrates with AWS Lambda for custom grading and checkpoint inspection. Fine-tuned models are immediately available for on-demand inference via Bedrock's OpenAI-compatible Responses and Chat Completions APIs, while proprietary data remains within AWS's secure environment.

🔒 Amazon has released Aurora MySQL-Compatible Edition 3.12 with MySQL 8.0.44, delivering security enhancements, numerous bug fixes, and availability improvements for Aurora clusters. Administrators can initiate a manual minor version upgrade or enable Auto minor version upgrade during DB cluster creation or modification to receive the update. The release is rolled out in all AWS regions that support Aurora MySQL. Aurora continues to offer built-in security, continuous backups, serverless options, and multi-Region replication.

📅 Amazon Connect now surfaces agent time-off requests directly in draft schedules, so schedulers can see why an agent wasn't assigned on specific days or shifts. This makes it easier to identify coverage gaps before publishing schedules to agents. The addition reduces the need to inspect published schedules or troubleshoot configuration to explain absences. The feature is available in all Regions where agent scheduling is supported.

📈 Amazon now emits resource count metrics from EventBridge Scheduler to CloudWatch, enabling teams to track the approximate number of schedules and schedule groups in an account. The metrics surface usage trends and indicate when you are approaching service quota limits so you can request increases before capacity is exhausted. These metrics are available at no extra cost in all AWS Regions, including AWS GovCloud.

📝 Amazon Connect Cases now supports larger, expandable multi-line text fields on case templates, enabling agents to capture detailed free-form notes and structured data directly within cases. The fields expand vertically to accommodate multiple paragraphs, simplifying documentation of root cause analysis, transaction details, investigation findings, and customer-facing updates. This enhancement is available in multiple AWS regions.

🚀Amazon Web Services has launched the compute-optimized Amazon EC2 C8a instances in the Europe (Frankfurt) and Europe (Ireland) regions. Powered by 5th Gen AMD EPYC processors at up to 4.5 GHz, C8a delivers up to 30% higher performance and up to 19% better price-performance versus C7a. The family offers 33% more memory bandwidth, up to 57% faster GroovyJVM performance, and 12 sizes including two bare-metal options, making it well suited for latency-sensitive and compute-intensive workloads.

🌐 Amazon MSK now supports dual-stack IPv4 and IPv6 connectivity for existing MSK Provisioned and MSK Serverless clusters. Customers can enable dual-stack via the Amazon MSK Console, AWS CLI, SDKs, or CloudFormation by changing the cluster Network Type; MSK provisions IPv6-enabled interfaces while preserving IPv4 to avoid service disruption. For Provisioned clusters, use the GetBootstrapBrokers API to retrieve new IPv6 bootstrap broker strings. Dual-stack is available in all Regions where MSK is offered and incurs no additional cost.

📈 AWS HealthImaging now provides additional Amazon CloudWatch metrics to monitor storage at both the account and individual data store levels. Customers can track storage volume, the number of image sets, and counts of DICOM studies, series, and instances to understand growth trends. These granular metrics support management of single-tenant and multi-tenant workloads at petabyte scale and are available in select AWS Regions.

🚀Amazon Web Services announced the new Amazon EC2 Hpc8a instances, a next-generation offering optimized for high performance computing and powered by 5th Gen AMD EPYC (Turin) processors. Hpc8a delivers up to 40% higher compute performance, up to 25% better price performance, and up to 42% higher memory bandwidth versus Hpc7a, with 192 cores, 768 GiB RAM and 300 Gbps EFA networking. Built on sixth-generation AWS Nitro Cards, these instances target tightly coupled, latency-sensitive HPC workloads and are available today in US East (Ohio) and Europe (Stockholm).

🛡️ This article presents a layered, AI-enhanced defense-in-depth architecture for protecting serverless microservices on AWS. It outlines seven security layers—from edge DDoS and WAF protections to identity, API gateway controls, network isolation, compute hardening, secrets management, and data encryption—integrating GuardDuty, Cognito, API Gateway, Secrets Manager, and DynamoDB. The guidance emphasizes continuous monitoring, automated incident response using Amazon Bedrock and EventBridge, and operational practices that balance security, compliance, and developer velocity.

🔔 Amazon DocumentDB (with MongoDB compatibility) now offers Long-Term Support on DocumentDB 5.0, delivering security and stability patches without feature changes. To adopt LTS, create a new cluster using engine version 5.0.0 or patch an existing 5.0.0 cluster during your maintenance window. Verify your Engine Patch Version with db.runCommand({getEngineVersion: 1}) and ensure it is 3.0.17983 or later. LTS is available in all AWS regions where DocumentDB is offered.

🔒 AWS Backup now supports AWS PrivateLink for SAP HANA systems running on Amazon EC2. This lets customers route backup traffic over private VPC endpoints instead of the public internet, helping meet security and compliance requirements for regulated workloads. Organizations subject to HIPAA, PCI DSS and privacy frameworks can maintain end-to-end private connectivity for both application and backup data. The feature is available in all AWS Regions that support SAP HANA on EC2; to enable it, update the Backint agent and add the backup-storage VPCE to your VPC.

🚀 Amazon EC2 M7i instances powered by AWS-custom 4th Gen Intel Xeon (Sapphire Rapids) are now available in the Israel (Tel Aviv) Region. These AWS‑exclusive processors deliver up to 15% better performance versus comparable x86 Intel processors and up to 15% improved price-performance compared to M6i. M7i offers sizes up to 48xlarge plus bare-metal options (metal-24xl, metal-48xl) with built-in Intel accelerators — suitable for gaming servers, CPU-based ML, and high-throughput video streaming.

🚀 AWS Glue 5.1 is now available in eighteen additional AWS Regions, bringing the service to thirty-three Regions worldwide. The release upgrades core engines to Apache Spark 3.5.6, Python 3.11, and Scala 2.12.18, and refreshes support for open table formats including Apache Hudi, Apache Iceberg, and Delta Lake. It introduces Iceberg format v3.0 features, deletion vectors, multi-argument transforms, and row lineage tracking, and extends AWS Lake Formation fine-grained access control to write operations as well as full-table access control for Hudi and Delta tables. Customers can begin using the update via APIs, CLI, SDKs, Glue Studio, or SageMaker Unified Studio and should consult the documentation for migration and configuration guidance.

🔒 Kiro is now available in AWS GovCloud (US-East) and AWS GovCloud (US-West), enabling agentic AI development for compliance-sensitive workloads. The platform combines an integrated development environment (IDE) and a command-line interface (CLI) to support spec-driven workflows that turn prompts into specs, working code, documentation, and tests. Native Model Context Protocol (MCP) support lets Kiro connect to documentation, databases, APIs, and other enterprise resources while integrating with AWS IAM Identity Center for enterprise authentication.