All news with #aws tag

🖥️ Amazon WorkSpaces Personal and Core now include Microsoft Office, Visio, and Project 2024 applications in the managed applications catalog. The release covers Microsoft Office LTSC Professional Plus 2024, Office LTSC Standard 2024, Visio LTSC Professional and Standard 2024, and Project Professional and Standard 2024. Administrators can add these applications to eligible new or existing WorkSpaces using the existing Manage application workflow to standardize a modern, secure productivity desktop. Applications are available in all Regions that support WorkSpaces Personal and Core and will incur per-application charges.

🔔 Amazon MQ now enables RabbitMQ 4 brokers to connect directly with JMS applications via the RabbitMQ JMS Topic Exchange plugin and RabbitMQ JMS client. The plugin is enabled by default on all RabbitMQ 4 brokers and supports JMS 1.1, JMS 2.0, and JMS 3.1, allowing JMS apps to run without rewrites. The JMS client can also bridge JMS messages to AMQP exchanges and consume from AMQP queues to support interoperability or migration. To use it, select RabbitMQ 4.2 on an M7g instance when creating a broker via Console, CLI, or SDKs; the plugin is available in all regions where RabbitMQ 4 is offered.

🔒 AWS now supports connecting AWS Security Agent to GitHub Enterprise Cloud, allowing organizations to apply AI-powered security analysis to private repositories. Customers install the AWS Security Agent GitHub app with required permissions to enable automated code reviews on pull requests, use the agent during penetration testing, and optionally have the agent submit PRs with recommended fixes. This capability is available in US East (N. Virginia).

🔎 Amazon Connect now provides automated random sampling of agent contacts to simplify fair quality evaluations. Managers can specify how many contacts to review per agent and define a timeframe (for example, 3 contacts per agent from the last week). New filters let evaluators require audio, screen recordings, or transcripts and exclude previously evaluated interactions. The capability is available in all regions where Amazon Connect is offered.

🔧 AWS Clean Rooms now supports SQL join and partition hints to let analysts optimize join strategies and data distribution. Hints are applied using comment-style syntax in pre-approved analysis templates and ad hoc SQL queries. You can force a broadcast join for small lookup tables or add partition hints for better parallelism. These options improve query performance and can lower costs.

🔒 Amazon EMR Serverless now supports encrypting local disks with AWS KMS customer managed keys (CMKs), enabling customers to adopt CMKs instead of default AWS-owned keys for greater encryption control. You can use CMKs from the same account or from another account and apply them at the application level or per job run and interactive session. This capability is supported on new and existing EMR Serverless applications across all supported EMR release versions and is available in all Regions, including AWS GovCloud (US) and China.

🚀 Amazon Web Services has expanded availability of Amazon EC2 C8gn instances powered by AWS Graviton4 to additional regions including Asia Pacific (Mumbai), Africa (Cape Town), Europe (Ireland, London) and Canada West (Calgary). C8gn delivers up to 30% better compute performance versus C7gn and incorporates 6th-generation AWS Nitro Cards with up to 600 Gbps network bandwidth. Instances scale to 48xlarge with up to 384 GiB memory and 60 Gbps EBS bandwidth, and selected large sizes support Elastic Fabric Adapter for lower latency. These instances are aimed at network-intensive workloads such as network virtual appliances, data analytics, and CPU-based AI/ML inference.

🔍 AWS now includes the policy Amazon Resource Name (ARN) from AWS Identity and Access Management (IAM) and AWS Organizations in Access Denied error messages for same-account and same-organization scenarios. This change surfaces the exact policy causing the denial—covering Service Control Policies (SCPs), Resource Control Policies (RCPs), identity-based policies, session policies, and permission boundaries—so you can identify and remediate explicit denies more quickly. The update will be rolled out across services and regions; consult IAM documentation for details.

🔧Instance Scheduler on AWS now provides enhanced scheduling orchestration that tracks AWS tagging events, informational resource tags for self-service troubleshooting, an optional EC2 insufficient-capacity retry flow using alternate instance types, and automatic creation of a dedicated EventBridge EventBus. These changes re-architect orchestration and fan-out mechanisms to improve scaling performance and address cost-scaling concerns. The update reduces operational overhead and increases workload reliability by empowering distributed engineers to troubleshoot independently and by improving start success in capacity-constrained zones.

🌐 AWS has expanded availability of second-generation Outposts racks to 20 additional countries, enabling customers to deploy AWS infrastructure and services on-premises for low-latency access, data residency, and local processing. These racks support the latest x86 Amazon EC2 instance families (C7i, M7i, R7i) with up to 40% better performance versus first-generation racks, and they introduce simplified network scaling plus a new class of accelerated networking instances optimized for ultra-low latency and high throughput.

⚠️ A recent Pentera investigation discovered nearly 2,000 intentionally vulnerable security-testing web applications (DVWA, OWASP Juice Shop, Hackazon, bWAPP) exposed on the public internet, often running from overly privileged cloud accounts on AWS, GCP and Azure. Attackers exploited these instances to deploy crypto miners, install webshells and create persistence mechanisms, then pivot to sensitive cloud resources. Affected vendors including Cloudflare, F5 and Palo Alto Networks were notified and remediated issues. Pentera recommends inventories, isolation of test systems, enforcement of least-privilege IAM, and elimination of default credentials.

🔧 The AWS Transfer Family Terraform module now supports provisioning Transfer Family web apps, offering a branded, managed web portal for users to browse, upload, and download data in Amazon S3. The module centralizes deployment with federated authentication via AWS IAM Identity Center and fine-grained permissions using S3 Access Grants. An included end-to-end example covers Identity Center user and group assignment, Access Grants setup, web app configuration, and CloudTrail auditing.

🛡️ Amazon RDS for SQL Server now supports native differential and transaction log restores for instances configured with Multi‑AZ and same‑region read replicas. This removes the prior requirement to convert instances to Single‑AZ before performing differential or log restores. Customers can reduce restore time while maintaining Multi‑AZ high availability and preserving Read Replica read capacity. The feature is available in all Regions where RDS for SQL Server is offered.

📦 Amazon Elastic Container Registry (ECR) now supports cross-repository layer sharing via a capability called blob mounting. By enabling this registry-level setting through the ECR console or AWS CLI, teams can reuse identical image layers across repositories to accelerate image pushes and reduce duplicate storage. Blob mounting is available in all AWS commercial and AWS GovCloud (US) Regions and is applied automatically during image push operations.

🔁 Amazon SageMaker Unified Studio now supports cross-Region subscriptions and IAM role-based subscriptions, enabling teams to subscribe to AWS Glue and Amazon Redshift tables and views published in different AWS Regions. Cross-Region support helps break down data silos and removes the need for manual replication. IAM role-based subscriptions let users request access without creating a SageMaker project, simplifying governance. These APIs are available via the SageMaker console, Amazon DataZone API, SDK, and AWS CLI.

🔒 AWS has published its Fall 2025 SOC 1, SOC 2, and SOC 3 reports covering 185 services for the 12‑month period from October 1, 2024 through September 30, 2025, providing customers with a full year of assurance. Customers can download SOC 1 and SOC 2 reports via AWS Artifact, while the SOC 3 report is available on the AWS SOC compliance page. AWS continues to expand the set of services in scope and encourages customers to contact their account team with questions.

🔌 AWS IoT Device Management now offers the managed integrations feature in the Middle East (UAE), enabling local organizations to onboard and manage diverse IoT devices via a single interface. The capability includes device SDKs and protocol support for ZigBee, Z-Wave, Matter, and Wi‑Fi, along with partner cloud-to-cloud connectors and 80+ device data model templates. These tools help developers accelerate integrations for home security, energy management, and elderly care monitoring, regardless of whether devices connect directly, through hubs, or via third-party clouds.

🚀 AWS Glue is now available in the Asia Pacific (New Zealand) Region, enabling customers to build and run ETL workloads closer to their data sources. The AWS Glue serverless data integration service offers both visual and code-based interfaces to discover, prepare, and combine data for analytics, machine learning, and application development. This regional launch reduces latency, eases data residency compliance, and accelerates time-to-insight for New Zealand workloads.

🔧 Amazon QuickSight has enhanced its SPICE in-memory engine to support datasets up to 2 TB, doubling the prior 1 TB limit, while optimizing ingestion and refresh to reduce time to insight. String length limits have been increased from 2K to 64K Unicode characters and timestamp support extended from year 1400 back to 0001. These capabilities are available in Enterprise Editions across supported regions.

🔔 Amazon RDS for Oracle now supports bare metal instances with Bring Your Own License (BYOL) for Oracle Standard Edition 2. Supported bare metal families include M7i, R7i, X2iedn, X2idn, X2iezn, M6i, M6id, M6in, R6i, R6id, and R6in, offered at a 25% lower price than equivalent virtualized instances. Bare metal provides full visibility into CPU cores and sockets, which may reduce licensing and support costs—consult your legal or licensing partner to confirm eligibility. Bare metal is also available for Oracle Enterprise Edition under BYOL; check RDS pricing and region availability for specific configurations.