All news with #cloud security tag

⚡ The Ultra Low Latency (ULL) Solution and new U4 machine family are now GA, delivering deterministic, low-jitter compute and hardware-accelerated multicast networking for high-frequency trading workflows in Google Cloud. The solution combines bare metal and VM options, precision timing, 24/7 packet capture, and isolated multicast fabrics to match co-location performance while providing cloud elasticity and observability. Available in select private regions, it targets exchanges, market participants, and trading service providers.

🆕 AWS Config now supports 77 additional AWS resource types across services including Amazon EC2, Amazon S3 Files, and Amazon Q Business, expanding visibility and governance. If you have enabled recording for all resource types, these additions are tracked automatically and are available for use in Config rules and Config aggregators. The new resource types can be monitored in all AWS Regions where the resources are available, enabling more comprehensive discovery, assessment, audit, and remediation.

🔖 Amazon EC2 now supports AMI tag sharing, enabling AMI owners to expose selected tags to any AWS account the AMI is shared with. Owners prepend the tag key with ec2:SharedTag/ so the tag is automatically visible to recipient accounts without manual replication. Shared tags are read-only for recipients and count only against the owner's tag quota, and the feature is available in all Regions at no extra cost.

🚀 Google Cloud announces Google Cloud Modernize, an end-to-end portfolio that consolidates migration and modernization tools to accelerate enterprise transformation with AI. The offering centers on Modernization Hub, an in-console experience for analyzing code and mapping dependencies for Java, .NET, and mainframe apps. New Gemini-powered capabilities in Migration Center provide rapid TCO estimates and interactive cost modeling. Purpose-built compute, VMware support, and agentic migration tools (EKS-to-GKE) help organizations modernize infrastructure and application estates with enterprise-grade controls.

🔎 This vendor-focused overview summarizes how cloud expansion, AI, distributed systems, and complex digital environments are reshaping security. It highlights shifts toward continuous visibility, least-privilege identity controls, telemetry management, AI-native SOCs, and exposure reduction. The piece profiles vendors addressing identity, telemetry, endpoint, human risk, exposure, email, device, AI, and cloud security.

📈 Amazon ElastiCache for Valkey now exports OpenTelemetry metrics to Amazon CloudWatch for node-based clusters, with each metric carrying attributes usable in PromQL expressions. Two monitoring modes are available: Standard monitoring (60s) which now includes a core OpenTelemetry set, and Detailed monitoring (15s) which exposes the full metric set for finer diagnostics. Detailed monitoring supports detection of short-lived events and feeds ElastiCache Insights dashboards; CloudWatch OpenTelemetry pricing applies.

🛠️ Amazon Q Developer in the AWS Management Console now provides enhanced visualizations that reason across hundreds of AWS APIs to deliver comprehensive answers about an account. The update adds health dashboards with status indicators, interactive time-series charts with trend and anomaly detection, troubleshooting diagnostics, and detailed resource views. Responses are faster and more actionable, replacing multi-step text replies with immediate visual summaries. The features are available in all Regions where Amazon Q Developer is supported.

🔒 Amazon GuardDuty now supports AWS Organizations declarative policies to centrally enable threat detection across all accounts and Regions. Using a centrally managed organization policy, you can apply a consistent GuardDuty enablement configuration that automatically extends to existing accounts and to new accounts as they join. The policy allows a default baseline across all Regions where GuardDuty is available, with optional per-Region overrides, and prevents overrides through the GuardDuty console or API. This feature is available in all AWS commercial Regions and AWS GovCloud (US) Regions.

🚀 The Google Cloud team has released google-cloud-swift, an official server-side SDK built for Swift 6.2+ that leverages Swift NIO, HTTP/2, gRPC, and compile-time concurrency safety. Designed for high-throughput microservices and DevOps tooling, the SDK supports over 100 Google Cloud services and works on macOS and Linux. It enables ARC-based deterministic memory management, async/await ergonomics, and integrates with Application Default Credentials and Workload Identity Federation for secure authentication.

🛠️ Today Cloudflare announces Basin, the generally available name for its serverless data analytics platform built on Apache Iceberg and R2 Object Storage. Basin includes Pipelines for ingestion, Catalog for managed Iceberg tables, and SQL for distributed querying, all designed for speed, openness, and cost efficiency. The platform supports Iceberg-compatible tools, provides free egress, usage-based billing, and a developer-friendly workflow with integrations across Cloudflare services.

🔔 Amazon Managed Grafana now supports creating new workspaces with Grafana version 13.2, bringing features from Grafana 13.0–13.2 such as Git Sync, dynamic dashboards, and PromQL support in the Amazon CloudWatch plugin. Git Sync enables treating dashboards as code by linking a workspace to a Git repository for version control. Dynamic dashboards allow responsive layouts driven by data and variables. The CloudWatch data source plugin now accepts PromQL queries for metrics ingested via OTLP. Grafana 13.2 is available in all AWS regions where the service is generally available.

🚀 Spanner Omni, the deploy-anywhere edition of Google Cloud Spanner, is now generally available to run in on-premises data centers, other clouds, or local environments. It brings Spanner's distributed SQL capabilities, multi-model features like vector search and graph, and enterprise-grade security and backup to customer-managed infrastructure. Two licensing tiers and enterprise support options are provided, while operational responsibility and some cloud-integrated features remain the customer's.

🔍 AWS CloudTrail has launched Event Coverage, a console feature that displays data plane event logging coverage across accounts and organizations. It highlights which services and resource types have data event logging enabled and which do not, helping teams identify logging gaps without manual scans. The dashboard consolidates supported data event sources and lets users subscribe to data events directly to close coverage gaps quickly.

🔍 Palo Alto Networks today announced CLARA Agent, an integration that connects Strata Cloud Manager to Google Cloud Gemini Enterprise to deliver conversational, evidence-backed cloud and AI security insights. The agent discovers infrastructure, surfaces production and shadow AI/ML models, and prioritizes critical exposures and vulnerabilities. Available via Google Cloud Marketplace, CLARA Agent leverages A2A and MCP protocols to provide secure, context-aware responses without extra infrastructure, and aims to democratize visibility across cloud, platform, and AI teams.

🔒 Over the last three decades, cybersecurity has evolved rapidly and today’s landscape is defined by AI-driven attackers operating at machine speed. Reactive, manual security reviews no longer suffice, so resilience requires proactive defenses with continuous posture validation and autonomous remediation built into workloads from day one. Google AI Threat Defense integrates Gemini, Wiz, CodeMender, and Mandiant to provide unified, continuous protection across code and cloud, enabling agencies to monitor and neutralize threats and protect mission-critical services.

📢 AWS Systems Manager now supports sharing Systems Manager Documents (SSM Documents) with an entire AWS organization or specific OUs using AWS Resource Access Manager (AWS RAM). Previously limited to public or per-account sharing, this update lets you create an AWS RAM resource share, select SSM Documents and target organizations or OUs, and have access automatically kept in sync as accounts change. Sharing uses standard AWS authorization and resource-based policies, and external accounts receive an invitation they must accept. The feature is available in the console, AWS CLI, and SDKs across all Regions where Systems Manager is offered, with no additional charge.

🔒 AWS DataSync now supports shared Virtual Private Clouds (VPCs) enabling agents and transfer tasks to use subnets shared across AWS accounts with AWS Resource Access Manager (RAM). This lets you transfer data privately over a centrally managed subnet and VPC endpoint instead of provisioning one per account. Shared VPC support reduces IP address consumption and operational overhead and works for both Enhanced and Basic agent modes. The feature is available in all AWS Regions offering DataSync except Secret Regions.

🔒 Amazon ElastiCache Serverless for Valkey now supports public endpoints, enabling direct connections from laptops, serverless functions, or external applications without VPNs or bastion hosts. A public endpoint creates a managed, internet-reachable cache with no VPC configuration and can be provisioned in under a minute. Connections use IAM authentication over TLS 1.3, eliminating stored passwords; clients use Valkey GLIDE 2.2+ or the Developer Toolkit for token management. Public endpoints are available in all commercial and China AWS Regions with standard pricing.

🛡️ The AWS European Sovereign Cloud will run an exercise on October 24, 2026, demonstrating it can operate without using the AWS Global Network backbone or any non-EU infrastructure. The EU-based operational team will execute the test using only in-EU hardware and software, routing traffic over European ISPs and disabling dedicated global systems to validate independent operation. Customers should expect brief convergence-related connectivity interruptions, but no service availability impact within the sovereign cloud or other AWS Regions.

📣 Google Cloud announces the GA release of Storage Intelligence advisor and expanded storage batch operations to help teams detect anomalies and remediate them at scale. Advisor provides out-of-the-box findings and baselines daily activity to surface spikes, errors, cross-region egress, and growth trends without heavy engineering. Batch operations let you execute large-scale changes (transitions, deletes, retention updates) across millions of objects with serverless execution, dry-run validation, and advanced filters.