All news with #aws tag

🛡️ Amazon announced quarterly security and critical updates for Amazon Corretto LTS distributions on January 20, 2026. Updated builds — Corretto 25.0.2, 21.0.10, 17.0.18, 11.0.30, and 8u482 — are available for download. Customers can obtain releases from the Corretto home page or configure Apt, Yum, or Apk repositories on Linux to receive updates. Feedback and issue reports are invited via the Corretto GitHub repository.

🔁 Amazon RDS Blue/Green Deployments now provide faster switchover for single-Region configurations, typically reducing writer-node downtime to five seconds or lower. Applications using the AWS Advanced JDBC Driver typically see cutovers of two seconds or lower because DNS propagation delays are avoided. The enhancement supports Amazon Aurora and Amazon RDS engines — including PostgreSQL, MySQL, and MariaDB — in all AWS Regions, and you can apply changes such as major engine upgrades, maintenance updates, and instance scaling via the Amazon RDS Console or CLI in a few clicks.

🚀 AWS has expanded support for Graviton4-based R8g, plus R7g and R7i, across additional regions for Amazon Aurora and Amazon RDS. The launch adds R8g availability in Hong Kong, Osaka, Jakarta, Seoul, Singapore and Canada (Central), with R7i in Hyderabad and R7g in Cape Town. Graviton4 instances deliver up to 40% higher performance and up to 29% better price/performance versus Graviton3, and introduce 24xlarge/48xlarge sizes (up to 192 vCPUs) with DDR5, high networking, and enhanced EBS bandwidth. Instances can be launched via the RDS console or AWS CLI; consult engine-version documentation and RDS pricing for details.

🚀 Amazon EC2 G7e instances are now generally available, powered by NVIDIA RTX PRO 6000 Blackwell Server Edition GPUs. G7e delivers up to 2.3x inference performance versus G6e and supports configurations with up to 8 GPUs (96 GB each), 5th Gen Intel Xeon processors, 192 vCPUs, and up to 1600 Gbps of Elastic Fabric Adapter networking. Designed for LLMs, multimodal and spatial computing workloads, G7e includes NVIDIA GPUDirect P2P and RDMA support in EC2 UltraClusters and is available in US East (N. Virginia) and US East (Ohio) as On‑Demand, Spot, or via Savings Plans.

📊 Amazon QuickSight now lets dashboard readers customize tables and pivot tables directly within dashboards, including adding or removing fields, changing aggregations, and modifying formatting without requiring updates from dashboard authors. These in-dashboard edits enable users to tailor views for specific analyses—for example, sales managers can add revenue breakdowns by category while finance teams switch aggregations from sum to average. The features are available in Enterprise Edition across all supported QuickSight regions; see the AWS blog for usage guidance.

🔍 Amazon has expanded CloudWatch Database Insights on-demand analysis to four additional Regions: Asia Pacific (New Zealand), Asia Pacific (Taipei), Asia Pacific (Thailand), and Mexico (Central). The on-demand experience uses machine learning to compare selected time periods against normal baselines, detect anomalies, and provide targeted remediation guidance. Administrators can enable Advanced mode for Amazon Aurora and Amazon RDS via the RDS console, APIs, SDKs, or CloudFormation to accelerate diagnosis and resolution.

🛠 Amazon Elastic VMware Service (Amazon EVS) now lets administrators specify supported combinations of VMware Cloud Foundation (VCF) and ESX software versions when provisioning environments and hosts. You can designate a VCF version with the CreateEnvironment API, select an ESX version when adding hosts via CreateEnvironmentHost, and query valid pairings with the GetVersions API. AWS also adds support for new environment deployments using VCF 5.2.2 to broaden compatibility.

🚀 AWS has expanded availability of its EC2 High Memory U7i instances into additional regions. New placements include U7i-6tb.112xlarge in Asia Pacific (Thailand, Sydney, Singapore), Canada (Central) and AWS GovCloud (US‑East); U7i-8tb.112xlarge in South America (Sao Paulo); and U7in-16tb.224xlarge in AWS GovCloud (US‑East). These 7th‑generation instances use custom 4th‑gen Intel Xeon (Sapphire Rapids), provide 6–16 TiB of DDR5 memory, up to 896 vCPUs, 100–200Gbps networking, EBS throughput and ENA Express, and are targeted at mission‑critical in‑memory databases such as SAP HANA, Oracle and SQL Server.

🔒 This post outlines a practical technical approach to implementing data governance on AWS, focusing on monitoring, preventive controls, automated remediation, and advanced features such as data sovereignty and lifecycle management. It recommends an event-driven model using CloudTrail, EventBridge, Lambda, and AWS Config to validate and enforce tagging and security controls. The guidance covers organization-wide tag policies, ABAC with IAM conditions, multi-account strategies, and integration with on-premises governance via Service Catalog and compliant CloudFormation products.

🔒 This post outlines an automation-first approach to implementing data governance on AWS, aimed at teams starting new or improving existing frameworks. Part 1 focuses on strategy, a practical data classification framework, and tag governance as foundational elements. It details prerequisites (Organizations, CloudTrail, Config, IAM), organizational roles, KPIs, and recommended mandatory and optional tags to enable automated controls and continuous monitoring.

🚀 Amazon Managed Workflows for Apache Airflow (MWAA) is now available in the AWS Region Asia Pacific (Thailand). The managed service delivers the familiar Apache Airflow orchestration platform with AWS-managed infrastructure, offering improved scalability, availability, and security while removing the operational burden of maintaining clusters. Customers in Thailand can deploy workflows closer to their data, helping reduce latency and address data residency needs. Consult the documentation and AWS region table to plan deployments and verify service limits.

🖧 AWS now supports multiple local gateway (LGW) routing domains on Outposts racks, allowing you to create up to 10 isolated routing domains per Outpost. Each domain has independent route tables, its own LGW VIF Group, and dedicated BGP sessions to on‑premises networks, enabling traffic separation and simultaneous use of Customer-owned IP (CoIP) and Direct VPC Routing (DVR). The capability is available on second‑generation Outposts racks at no additional charge and can be configured through the AWS Management Console or the AWS CLI.

🔁 AWS Outposts racks now support up to 10 isolated local gateway (LGW) routing domains per Outpost. Each domain has independent route tables, LGW VIF Groups, and BGP sessions, enabling traffic separation and preventing cross-domain routing while allowing both Customer-owned IP (CoIP) and Direct VPC Routing (DVR) on the same hardware. You can configure multiple LGW routing domains via the AWS Management Console or AWS CLI. This capability is available on second-generation Outposts racks at no additional charge.

🚀Second-generation AWS Outposts racks are now supported in the South America (São Paulo) and Europe (Stockholm) Regions. Outposts racks extend AWS infrastructure, services, APIs, and tools into on-premises data centers and colocation facilities to provide a consistent hybrid experience. Customers can order racks connected to these Regions to optimize for latency and data residency requirements while maintaining centralized application management.

🔍 Amazon S3 Storage Lens is now available in AWS GovCloud (US) Regions, providing organization-wide visibility into object storage usage and activity. S3 Storage Lens delivers cost, data protection, and performance metrics to identify inefficient access patterns, incomplete multipart uploads, and buckets with non-current object versions. Free basic metrics include 14 days of history while advanced metrics offer extended retention and greater detail.

🔒 Researchers at Wiz found a subtle misconfiguration in AWS CodeBuild build-trigger handling that could let unauthenticated actors infiltrate build environments and leak credentials. A two-character mistake in an unanchored regex filter allowed threat actor ID bypasses, putting public repositories such as the AWS JavaScript SDK at risk. AWS patched the issue within 48 hours, hardening CodeBuild and auditing public build logs. Wiz recommends anchored regexes, fine-grained PATs, and stricter build gates to reduce exposure.

📦 Amazon S3 on Outposts is now supported on second-generation AWS Outposts racks, offering 196 TB, 490 TB, and 786 TB storage tiers for on‑premises workloads. The update enables customers to use the same S3 APIs, security controls, and access management for local data residency, low-latency access, and on-site processing. It is available in all Regions and countries where second-generation racks are offered. Customers can select tiers optimized for production, backup, or archival use cases while maintaining familiar S3 management and features.

🚀 AWS Deadline Cloud integrates with Foundry Nuke CopyCat, enabling machine learning training jobs for visual effects to run directly on cloud render farms. Artists can submit CopyCat training jobs to scale workloads, run multiple trainings in parallel, and free local workstations for creative work. Training and render jobs are tracked together in the Deadline Cloud interface for unified project monitoring. The integration is available in all AWS Regions where Deadline Cloud is supported.

⚠️ A critical CodeBuild misconfiguration, dubbed CodeBreach by Wiz, could have allowed attackers to take over several AWS-managed GitHub repositories, including aws-sdk-js-v3, by bypassing webhook actor ID filters. The flaw—missing ^ and $ anchors in regex filters—enabled unauthorized build triggers and potential leakage of privileged GitHub tokens. AWS fixed the issue in September 2025, rotated credentials, implemented mitigations, and reported no evidence of exploitation.

🧩 AWS Clean Rooms now supports parameters in PySpark analysis templates, allowing template authors to define input values that collaborators supply at job submission time without editing the template code. When a collaborator is approved to run an analysis, they submit parameter values directly to the PySpark job, enabling reusable templates and faster iteration. This feature lets partners vary time windows, geographic regions, and other inputs dynamically to adapt analyses. It supports collaboration across companies on AWS or Snowflake and helps accelerate time-to-insights for use cases like advertising attribution.