All news with #product update tag

🔒 Microsoft will begin enforcing stricter Content Security Policy (CSP) protections for Entra ID sign-ins starting mid-October 2026, allowing only scripts from trusted Microsoft CDN domains. The rollout will complete by late October 2026 and aims to block external script injection and cross-site scripting risks during browser-based authentication. Enterprise customers are urged to remove or test browser extensions and code-injection tools to avoid sign-in disruptions. MSAL and API-based flows are not affected because CSP applies only to browser-based sign-ins.

🧭 Cloudflare announces Auto Router in public beta via AI Gateway, automatically routing requests to the most cost-effective capable model without requiring user selection. Early internal use shows up to 30% cost savings versus always using frontier models like OpenAI Sol and Anthropic Opus. Auto Router classifies requests by task and dimensions, scores candidate models by quality and token costs, and accounts for cache-read/write penalties when switching models. The router returns a ranked list and falls back if a provider cannot serve the request.

🔍 Cloudflare has redesigned its domain search and Registrar experience to be faster, clearer, and less cluttered. The new interface shows the exact query across 420+ extensions, updates results as you type, and supports sorting, filtering, and transparent pricing including renewal costs. Developers and agents can use the expanded Registrar API, sandbox, and cf CLI to search, register, or transfer domains programmatically. The system balances speed and accuracy via prepared datasets, DNS checks, and live registry lookups while scaling on the Cloudflare developer platform.

🔔 Partner Revenue Measurement (PRM) now supports multi‑Partner Resource Tagging so multiple AWS Partners can receive revenue attribution for the same AWS resource. Previously, a single aws-apn-id tag limited attribution to one Partner. The new tag format, aws-apn-id-, lets each contributing Partner tag resources they work on, enabling shared attribution while keeping the legacy tag functional. This capability is available today in all commercial AWS regions and appears under the “Resource Tagging” method in the Attributed Revenue Dashboard.

🚀 AWS Transfer Family now auto-approves SFTP connector quota increase requests up to 1,000 connectors per AWS account in each Region. The default remains 100 connectors, and you can still request higher limits via the AWS Service Quotas console. Automatic approval covers connectors using service-managed egress or Amazon VPC Lattice egress. If you require more than 1,000 connectors, submit a higher quota request manually.

📱 AWS Accounts now support phone number verification using SMS one-time passcodes for primary contact numbers. Customers can initiate verification via the AWS Management Console or the new SendPhoneNumberVerification API, and confirm with VerifyPhoneNumber. Verification status is exposed in GetContactInformation and changes via PutContactInformation require re-verification. Organizations can inherit verified numbers from the management account for member accounts.

🔒 AWS IAM Identity Center's Identity Store APIs now accept ARNs for users, groups, group memberships, and identity stores wherever resource IDs were previously required. This additive change means existing integrations keep working while allowing callers to supply either resource IDs or full ARNs directly. Responses still return resource IDs and malformed or wrong-type ARNs result in a ValidationException. The feature is available in all Regions where IAM Identity Center is offered at no extra cost.

🆕 Amazon S3 Tables now support the Apache Iceberg Version 3 data types including geometry, geography, unknown, and nanosecond-precision timestamps, plus column default values. These additions let you store geospatial coordinates and nanosecond event times natively, reducing the need to encode values as strings or integers and improving efficiency and query performance. S3 Tables continue to provide automatic maintenance and compaction for Iceberg tables and are available in all Regions where S3 Tables are offered.

🆕 AWS Deadline Cloud introduces flexible expressions and richer parameter types for job templates, enabling teams to embed pipeline logic directly in templates. The update supports Python-style expressions (arithmetic, conditionals, string/path ops, list comprehensions) and new boolean, list, and frame-range parameters. Expressions are type-checked at submission and evaluate deterministically. The capability is provided via the EXPR extension to Open Job Description and is available in supported AWS Regions.

🔍 Amazon RDS now reports the full snapshot size for RDS Snapshots through a new FullSnapshotSizeInBytes field in the DescribeDBSnapshots API and a console column labeled 'Full Snapshot Size'. This value represents the total size of all blocks that constitute a snapshot, including referenced blocks from prior incremental snapshots, and differs from the incremental snapshot size that only counts newly stored blocks. The feature is available for all Amazon RDS instances in all commercial AWS Regions and can be used via the console, CLI, or SDKs starting today.

🛈 Microsoft has begun broad rollout of the Windows 11 2026 Update (26H2), but most users will see incremental changes since many features were already delivered via monthly updates. The update installs as a small enablement package for systems on 24H2 or 25H2, making it more like a regular cumulative update. Devices that shipped with 26H1 cannot upgrade directly to 26H2, and installing 26H2 resets the support lifecycle (24 months for Home/Pro, 36 months for Enterprise/Education).

📣 Administrators can now store up to 20,000 values per data table in Amazon Connect Customer to define contact center configurations such as operating hours, escalation rules, AI prompts, and queue assignments. The update enables export, bulk editing, instance-to-instance table moves, and loading data from sources like Excel and DynamoDB. Business teams can maintain reference data themselves to adjust configurations in real time without relying on technical staff, and the feature is available in all AWS commercial and GovCloud regions where Amazon Connect Customer is offered.

🖥️ Amazon WorkSpaces Applications now offers unified graphics images that work across G4dn, G5, G6, and G7 instance families. This single image type replaces generation-specific images, simplifying image management and making it easier to adopt newer GPU generations. The console shows compatible instance types when creating a fleet, and fleets can change instance types across supported families via the console or the UpdateFleet API. Unified graphics images are available in all supported AWS commercial and GovCloud (US) Regions, and customers can upgrade existing images or launch builders from a unified base image.

🔔 This update summarizes availability changes across several AWS services, including transitions to Maintenance, announced Sunset schedules, and services that have reached End of Support. Services moving to maintenance will stop accepting new customers after October 29, 2026, while existing customers can continue operation with AWS support. Several services—including Amazon Managed Blockchain, Amazon DevOps Guru, AWS Backint Agent for SAP ASE, and AWS Infrastructure Composer—have sunset timelines through 2027. Amazon Mechanical Turk reached end of support on September 29, 2026. AWS provides migration guides and support resources to help customers plan transitions.

🗂️ AWS Transfer Family web apps now allow users to select and download multiple files and folders in a single action. The selection is packaged as a zip archive that preserves folder structure and shows real-time progress and per-file status. This feature works in Google Chrome, Mozilla Firefox, and Chromium-based browsers (including Edge) but is not yet supported in Safari. It is available in all Regions where Transfer Family Web Apps are offered.

🔒 AWS DataSync now supports shared Virtual Private Clouds (VPCs) enabling agents and transfer tasks to use subnets shared across AWS accounts with AWS Resource Access Manager (RAM). This lets you transfer data privately over a centrally managed subnet and VPC endpoint instead of provisioning one per account. Shared VPC support reduces IP address consumption and operational overhead and works for both Enhanced and Basic agent modes. The feature is available in all AWS Regions offering DataSync except Secret Regions.

🔎 Amazon CloudWatch Logs Insights now provides an estimate of the number of bytes a query would scan across selected log groups and a specified time range, without executing the query. The estimate appears automatically in the CloudWatch console when you change log group selection, time range, or query text, and can be requested via the AWS CLI or API by appending the estimate command. Queries using the estimate command do not incur CloudWatch Logs Insights query charges, and the feature is available in all AWS commercial regions.

🛰️ Amazon CloudWatch Logs now automatically indexes frequently queried fields, removing the need for manual selection and setup. It detects fields used with = and IN filters and indexes them to speed up CloudWatch Logs Insights queries while reducing scanned data. Automatically indexed fields are retained for 30 days and don't count toward the 20-field-per-log-group limit; you can promote fields to a permanent index via console or API. Auto-indexing is available in supported AWS Regions at no extra cost.

🔒 Amazon Route 53 Resolver DNS Firewall now supports Palo Alto Networks Advanced DNS Security and is generally available across 32 AWS Regions. The integration lets security teams detect and block malicious DNS traffic from VPCs and hybrid environments using PANW threat rules without deploying separate firewalls or changing VPC setups. Administrators can subscribe via the Route 53 DNS Firewall console, share licenses with AWS License Manager, and associate rule groups using RAM, Route 53 Profiles, or AWS Firewall Manager.

🔔 Amazon EC2 Future-dated Capacity Reservations let you secure capacity up to 120 days ahead by specifying capacity, start date, and commitment duration. You can now postpone a reservation start date if plans change; EC2 provides a quote showing the updated start date and any adjusted commitment duration. After you accept the quote, EC2 updates the reservation with the new start date. The feature is available to all Future-dated Capacity Reservation customers; check regional availability in AWS documentation.