Amazon Web Services (AWS)

Amazon Data Lifecycle Manager now offers customers the option to use Internet Protocol version 6 (IPv6) addresses for their new and existing endpoints. Customers moving to IPv6 can simplify their networks stack by running their Data Lifecycle Manager dual-stack endpoints on a network supporting both IPv4 and IPv6, depending on the protocol used by their network and client. Customers create Amazon Data Lifecycle Manager policies to automate the creation, retention, and management of EBS Snapshots and EBS-backed Amazon Machine Images (AMIs). The policies can also automatically copy created resources across AWS Regions, move EBS Snapshots to EBS Snapshots Archive tier, an…

AWS Config now supports 4 additional AWS resource types. This expansion provides greater coverage over your AWS environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources. With this launch, if you have enabled recording for all resource types, then AWS Config will automatically track these new additions. The newly supported resource types are also available in Config rules and Config aggregators. You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where the supported resources are available: AWS::EC2::VPCBlockPublicAccessExclusion AWS::EC2::VPCBlockPu…

AWS Marketplace now supports custom payment schedules for private offers, giving Channel Partners the ability to add margins on private offers with installment plans. Channel Partners can now adjust each scheduled payment individually, either through the AWS Marketplace Management Portal or the AWS Marketplace Catalog API. Previously, Channel Partners could only apply a uniform percentage markup across all installments in a private offer. With this update, they can now adjust the payment amount for each installment in the schedule, providing greater flexibility in structuring deals and managing cash flow. Once the buyer accepts and pays their invoices, the Channel Part…

Amazon FSx now offers customers the option to use Internet Protocol version 6 (IPv6) while accessing the Amazon FSx Service APIs. More and more customers are adopting IPv6 to mitigate IPv4 address exhaustion in their private networks or to satisfy government mandates such as such as the US Office of Management and Budget (OMB) M-21-07 memorandum. With this launch, customers can standardize their applications and workflows for managing their Amazon FSx resources on the new version of Internet Protocol by using the new dual-stack Amazon FSx Service endpoints. IPv6 support for Amazon FSx Service APIs is available in all commercial, AWS GovCloud (US), and AWS China regi…

AWS WAF’s console dashboard now includes richer visualizations that give you insights into the top sources of traffic in the AWS GovCloud (US). With this feature, customers with CloudWatch logging destinations can view a new top insights section within the all traffic dashboard. Customers previously used the all traffic dashboard, a default dashboard that populates visualizations based on CloudWatch metrics. As customers strive to continue gaining additional visibility into their traffic, they have requested richer visualizations based on logs in addition to visualizations based on CloudWatch metrics. Starting today, customers with CloudWatch logging destinations wi…

AWS IAM Identity Center now provides improved error messages to simplify troubleshooting when syncing users and groups. You can also build automated monitoring and auditing for these errors using the AWS CloudTrail logs. IAM Identity Center helps you securely connect your workforce identities and manage their access centrally across AWS accounts and applications. With improved error messaging, IAM Identity Center provides actionable information to troubleshoot provisioning issues as you sync your users and groups using SCIM or configurable AD sync. CloudTrail logs enable automated monitoring of synchronization processes and provide audit trails of provisioning issues. …

AWS Elemental MediaTailor now supports delivering logs to Amazon S3 and Amazon Data Firehose, in addition to Amazon CloudWatch Logs. Additionally, customers now receive 50 KB of MediaTailor logs per ad inserted (50,000 KB per 1,000 ads inserted) for free when delivering to supported destinations. Customers delivering MediaTailor logs to CloudWatch logs benefit from advanced log analytics features such as Live Tailing, Anomaly Detection, and Logs Insights as well as metrics and dashboards to monitor ad monetization. Delivery to S3 or Firehose enables offline analysis and real-time streaming to other AWS services and third-party tools. Usage over the free 50 KB per ad…

Topic was moved to forum Artificial Intelligence (AI)

Amazon Personalize introduces dual stack support for the Personalize API endpoints, enabling you to connect using Internet Protocol Version 6 (IPv6), Internet Protocol Version 4 (IPv4), or dual stack clients. Dual stack support is also available when you privately access the Personalize API endpoint from your Amazon Virtual Private Cloud (VPC) using AWS PrivateLink. The urgency to transition to Internet Protocol version 6 (IPv6) is driven by the continued growth of internet, which is exhausting available Internet Protocol version 4 (IPv4) addresses. With simultaneous support for both IPv4 and IPv6 clients on Personalize endpoints, you are able to gradually transition f…

Cost Optimization Hub now supports idle EC2 Auto Scaling group recommendations and rightsizing recommendations for EC2 Auto Scaling groups with scaling policies and multiple instance types. It also allows you to easily filter and aggregate EC2 Auto Scaling group cost optimization opportunities separately from standalone EC2 instances, making it easier to identify EC2 Auto Scaling groups with the highest cost-saving opportunities. With this launch, you can view, consolidate, and prioritize cost optimization opportunities for EC2 Auto Scaling groups across your organization’s member accounts and AWS Regions through a single dashboard. Cost Optimization Hub helps you quant…

Amazon MSK has added support for Express brokers in all AWS Regions where Amazon MSK offers Graviton3 based M7g instances. You can now benefit from Amazon MSK Express brokers in ten additional AWS Regions: Asia Pacific (Mumbai), Europe (Paris), South America (Sao Paulo), Asia Pacific (Hyderabad), Asia Pacific (Seoul), Asia Pacific (Malaysia), Europe (London), Canada (Central), Europe (Spain), and Middle East (Bahrain). Express brokers are a new broker type for Amazon MSK Provisioned designed to deliver up to 3x more throughput per broker, scale up to 20x faster, and reduce recovery time by 90% as compared to standard Apache Kafka brokers. Express brokers come pre-confi…

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, is now available in the Africa (Cape Town) Region. With Amazon Keyspaces, you can run your Cassandra workloads on AWS using the same Cassandra application code and developer tools that you use today. The service is completely serverless, eliminating the need to provision, patch, or manage servers, or handle software installation and maintenance. You pay only for the resources you use, and tables automatically scale up and down based on application traffic. Amazon Keyspaces supports applications serving thousands of requests per second with vir…

Amazon GuardDuty Malware Protection for Amazon S3 provides a fully-managed offering to scan new object uploads to S3 bucket for malware. Starting February 1, 2025, we are lowering the price for the data scanned dimension by 85%. Over the past few months we have made improvements to our scanning infrastructure and data processing efficiencies, enabling us to reduce the price as part of our commitment to pass savings back to customers. GuardDuty Malware Protection for S3 is priced based on two dimensions: the number of objects evaluated and the amount of data scanned. We are lowering the price for the data scanned dimension, for example in US East (N. Virginia) from $0.6…

AWS AppSync Events allows developers to create serverless WebSocket APIs that can broadcast real-time data to millions of subscribers without managing infrastructure or connection state. Developers simply create their API, and publish events without having the worry about scale and handling fan-out. Today, AWS AppSync announces the release of AWS Cloud Development Kit (CDK) L2 constructs for AWS AppSync Events, enabling developers to programmatically create and manage Event APIs and channel namespaces using infrastructure as code. These new constructs simplify the process of creating Event APIs and managing access controls, reducing the complexity of integrating real-time…

Today, AWS announces the general availability of AWS Verified Access’ support for secure access to resources that connect over protocols such as TCP, SSH, and RDP. With this launch, you can use Verified Access to provide secure VPN-less access to all your corporate applications and resources using AWS zero trust principles. This feature eliminates the need to manage separate access, and connectivity solutions for non-HTTP(S) resources on AWS and simplifies security operations. Verified Access allows admins to set access policies based on user identity and device posture. It evaluates access for new connections and continuously monitors active connections, terminating c…

AWS Toolkit for Visual Studio Code (VSCode) now includes Amazon DocumentDB (with MongoDB compatibility). This integration allows customers to use VS Code to view, create and manage Amazon DocumentDB resources. To get started, you can download the latest AWS-Toolkit extension from VSCode marketplace or update your AWS-Toolkit extension if you already have it installed in your VSCode environment. Then you can configure the extension with credentials for your AWS account and connect to AWS explorer in VSCode. Once connected, you can interact with the DocumentDB menu item to create DocumentDB clusters or manage your existing DocumentDB clusters. To learn more, see Amazon D…

Data streaming applications continuously process incoming data, much like a never-ending query against a database. Unlike traditional database queries where you request data one time and receive a single response, streaming data applications constantly receive new data in real time. This introduces some complexity, particularly around error handling. This post discusses the strategies for handling errors in Apache Flink applications. However, the general principles discussed here apply to stream processing applications at large. Error handling in streaming applications When developing stream processing applications, navigating complexities—especially around error handl…

Amazon Elastic Container Service (Amazon ECS) launches its networking capability called ECS Service Connect in the AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions. Amazon ECS is a fully managed container orchestration service that makes it easier for you to deploy, manage, and scale containerized applications. With ECS Service Connect, customers can easily configure service discovery, connectivity, traffic observability, and encryption for services running in Amazon ECS. This enables more efficient application development by allowing you to focus on writing application code instead of managing complex networking infrastructure To learn more about how to ge…

Starting today, you can build, train, and deploy machine learning (ML) models in Asia Pacific (Malaysia). Amazon SageMaker AI is a fully managed platform that provides every developer and data scientist with the ability to build, train, and deploy machine learning (ML) models quickly. SageMaker AI removes the heavy lifting from each step of the machine learning process to make it easier to develop high quality models. To learn more and get started, see SageMaker AI documentation and pricing page. View the full article

Starting today, you can connect to your Amazon DocumentDB (with MongoDB compatibility) clusters with a single click through AWS CloudShell directly from the AWS Management Console. This new feature allows our customers to easily connect to their DocumentDB clusters directly from their browser, without requiring any local setup. One-click connectivity with Cloudshell automatically configures VPCs, security groups, and MongoDB shell installation, eliminating the need for manual tasks like setting up security groups and ingress/egress rules. This streamlines the process for database administrators and developers, enabling them to connect quickly to their DocumentDB cluste…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6in and M6idn instances are available in AWS Europe (Zurich) region. These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, for 2x more network bandwidth over comparable fifth-generation instances. Customers can use M6in and M6idn instances to scale their performance and throughput of network-intensive workloads such as high-performance file systems, distributed web scale in-memory caches, caching fleets, real-time big data analytics, and Telco applications such as 5G User Plane Functio…

Clinical trials involve the ingestion and processing of vast amounts of highly regulated data, including complex protocol documents that describe how the trial will be conducted. Managing this volume of information can be overwhelming, but generative AI offers a solution by helping automate the process and enabling clinical researchers to quickly focus on the most relevant information. Currently, the drug approval process takes on average 10–12 years, with clinical trial study startup time accounting for 1 year of that timeframe. Much of the challenge with study startup lies in the complex and non-standard nature of protocol documents. These often require weeks or months …

Topic was moved to forum Artificial Intelligence (AI)

AWS Step Functions has increased the default quota for the maximum number of registered state machines and activities from 10,000 to 100,000. This tenfold increase enables customers to create and manage significantly more workflows within a single AWS account, providing greater scalability and flexibility. AWS Step Functions is a visual workflow service capable of orchestrating over 14,000+ API actions from over 220 AWS services to build distributed applications and orchestrate data processing workloads. With this quota increase, customers can now create up to 100,000 state machines and activities, unblocking use cases that require a large number of workflows such as a…

Today, AWS is announcing the general availability of a new smaller size of Amazon EC2 F2 instances, F2.6xlarge. Amazon EC2 F2 instances are the second-generation of FPGA-powered instances, purpose built for developing and deploying reconfigurable hardware in the cloud. The new F2.6xlarge instance size has 1 FPGA, compared to the currently available F2 sizes with 4 and 8 FPGAs. Amazon EC2 F2 instances are ideal for FPGA-accelerated solutions in genomics, multimedia processing, big data, network acceleration, and more. AWS customers can use the new instance size, F2.6xlarge, for applications that are more cost-efficient or performant when running on a single FPGA. F2.6xl…

Today, AWS Identity and Access Management (IAM) announced support for encrypted SAML assertions. SAML is an open standard that many identity providers (IdPs) use for federated single sign-on (SSO), enabling users or applications in your company to log into the AWS Management Console or call AWS API operations. You can now configure your identity provider to encrypt the SAML assertions that it sends to IAM. This ensures that your assertions are encrypted when passed through intermediaries (for example, the end user’s web browser). You can use the AWS IAM console, APIs, or CLI to configure SAML encryption for your identity providers that support encryption. Please refer …

AWS Database Migration Service Serverless (AWS DMSS) now supports files on S3 source endpoints. Using AWS DMSS, you can now migrate data in CSV or parquet format from S3 to any supported AWS DMSS target endpoint. AWS DMSS supports both full load and Change Data Capture (CDC) migration modes for CSV and Parquet files with S3 source endpoints using AWS DMS console, AWS CLI, or AWS SDKs in all regions where DMSS is available. For information about AWS DMS S3 source endpoints see DMS S3. Visit AWS DMS to get started. For AWS DMS regional availability, please refer to the AWS Region Table. View the full article

AWS Wickr is excited to announce the launch of "Wickr Files," a dedicated space that allows you to access and manage files in conversations. Moderators of Wickr rooms and users in self-moderated group conversations, can now upload and organize files in folders. Users can toggle between “Messages” and “Files” tabs to access relevant content and streamline collaboration. AWS Wickr is a security-first messaging and collaboration service with features designed to help keep your internal and external communications secure, private, and compliant. AWS Wickr protects one-to-one and group messaging, voice and video calling, file sharing, screen sharing, and location sharing wi…

Contact Lens now enables businesses to send automatic email notifications to agents when their contacts are evaluated, so they can review the evaluations and improve their performance. Managers can create rules to send emails based on specific evaluation criteria. For example, you can set up automatic notifications for agents who receive evaluation scores below 50%, ensuring prompt attention to performance opportunities. Managers can also personalize email content based on performance levels — whether recognizing top performers or providing constructive guidance for improvement areas. This feature is available in all regions where Contact Lens performance evaluations a…

Amazon CloudWatch and OpenSearch Service integrated analytics experience is now available in 2 additional commercial regions: Asia Pacific (Hong Kong) and Europe (Stockholm). With this integration, CloudWatch Logs customers have two more query languages for log analytics, in addition to CloudWatch Logs Insights QL. Customers can use SQL to analyze data, correlate logs using JOIN, sub-queries, and use SQL functions, namely, JSON, mathematical, datetime, and string functions for intuitive log analytics. They can also use the OpenSearch PPL to filter, aggregate and analyze their data. With a few clicks, CloudWatch Logs customers can create OpenSearch dashboards for VPC, W…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6in instances are available in AWS Region Asia Pacific (Malaysia). These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, for 2x more network bandwidth over comparable fifth-generation instances. Customers can use C6in instances to scale the performance of applications such as network virtual appliances (firewalls, virtual routers, load balancers), Telco 5G User Plane Function (UPF), data analytics, high performance computing (HPC), and CPU based AI/ML workloads. C6in instances are a…

Topic was moved to forum Artificial Intelligence (AI)

Amazon Connect Cases now supports conditionally required fields to streamline case field population for agents and reduce data entry errors. Administrators can now configure case templates that prompt agents to enter relevant information in specific situations, such as providing a “Close Reason” when a case moves to “Closed” status, “Product Serial Number” when the “Issue Type” is “Hardware Problem”, or “Disposition Code” when handling a system-generated case. Conditionally required fields help agents follow processes for capturing necessary information, improving data quality for reporting, resolution tracking, and compliance. For region availability, please see the a…

AWS Batch on EKS now supports configurable Kubernetes namespaces, Persistent Volume Claims (PVCs), subPath to Kubernetes pod container volumes, and Kubernetes pod annotations. Using different Kubernetes namespaces for your AWS Batch jobs, you can improve workload isolation by defining job permission boundaries both within EKS cluster and for access to other AWS services. With Kubernetes PVCs and subPath you can give your AWS Batch jobs access only to the right data or particular subPath within a data volume. Finally, EKS pod annotations make it easier to integrate with external tools and other AWS services such as AWS Secrets Manager by allowing you to attach necessary me…

Last week, I had an amazing time attending AWS Community Day Thailand in Bangkok. This event came at an exciting time, following the recent launch of the AWS Asia Pacific (Bangkok) Region. We had over 300 attendees and featured 15 speakers from the community, including an AWS Hero and 4 AWS Community Builders who shared their technical expertise and experiences. The highlight was definitely Jeff Barr, AWS Vice President & Chief Evangelist, delivering an inspiring keynote titled “Next-Generation Software Development”, which set the perfect tone for the day. The day kicked off with welcoming remarks from Vatsun Thirapatarapong, AWS Country Manager for Thailand, and wa…

Amazon EC2 now supports automated recovery of Microsoft SQL Server databases from Volume Shadow Copy Services (VSS) based EBS snapshots. Customers can use an AWS Systems Manager Automation Runbook and specify a restore point of time to automate the recovery process without needing to stop a running Microsoft SQL Server database. Volume Shadow Copy Services (VSS) allows application data to be backed up while applications are still running. This new feature allows customers to automate the recovery from VSS-based EBS snapshots and ensure rapid recovery of large databases within minutes. This feature also offers customers the flexibility to restore to a new database or ac…

Amazon Connect now provides the ability to choose which states an agent can be in when adhering to their schedule, making it easier for you to customize adherence tracking to match your unique operational needs. With this launch, you can now define custom mappings between agent statuses and schedule activities. For example, schedule activity “Work” can be mapped to multiple agent statuses such as “Available” and “Back-office work.” An agent scheduled for “Work” from 8 AM to 10 AM will be considered adherent if they are either in “Available” or “Back-office work” status. Additionally, you can now view the actual name of the scheduled activity in the real-time adherence das…

AWS CodeBuild now offers native support for self-hosted Buildkite runners, enabling you to execute Buildkite pipeline jobs within the CodeBuild environment. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment. Buildkite is a continuous integration and continuous delivery platform. With this feature, your Buildkite jobs can access CodeBuild’s comprehensive suite of instance types and managed images, and utilize native integrations with AWS services. You have control over the build environment, without the overhead of manually provisioning and scaling the compute resour…

The journey from implementing Well-Architected principles in a single workload to operating many workloads across multiple teams can be challenging. While the AWS Well-Architected Framework provides essential guidance for building secure, high-performing, resilient, and efficient workloads in the AWS Cloud, to fully benefit from Well-Architected, organizations must extend its principles beyond individual teams or workloads. To help organizations implement Well-Architected best practices consistently while they expand, we’ve launched Well-Architected for Enterprises, a new free digital course. Designed for technical professionals who architect, build, and operate AWS sol…

Dashboard Q&A by Amazon Q in QuickSight enables QuickSight Authors to add Data Q&A to their dashboards in one-click. With dashboard Q&A, QuickSight users can ask and answer questions about their data using natural language. Dashboard Q&A capabilities of Q in QuickSight automatically extract semantic information presented in dashboards and use it to enable Q&A over specific data and improves existing Topic based Q&A experiences by automatically using semantics from dashboards to improve Q&A answers. With Dashboard Q&A Authors can quickly deliver self-service access to customized data insights for the entire organization. Dashboard Q&am…

AWS Transfer Family web apps are now available in the following additional Regions: North America (N. California, Canada West, Canada Central), South America (São Paulo), Europe (London, Paris, Zurich, Milan, Spain), Africa (Cape Town), Israel (Tel Aviv), Middle East (Bahrain, UAE), and Asia Pacific (Osaka, Hong Kong, Hyderabad, Jakarta, Melbourne, Seoul, Mumbai). This expansion allows you to create Transfer Family web apps in additional commercial Regions where Transfer Family is available. AWS Transfer Family web apps provide a simple interface for accessing your data in Amazon S3 through a web browser. With Transfer Family web apps, you can provide your workforce wi…

Amazon Elastic Block Store (Amazon EBS) now supports additional resource-level permissions for creating EBS volumes from snapshots. With this launch, you now have more granular controls to set resource-level permissions for the creation of a volume and selection of the source snapshot when calling the CreateVolume action in your IAM policy. This allows you to control the IAM identities that can create EBS volumes from source snapshots, and the conditions that they can use these snapshots to create EBS volumes. To meet your specific permission needs on the source snapshots, you can also specify any of 5 EC2-specific condition keys in your IAM policy: ec2:Encrypted, ec2:…

Topic was moved to forum Artificial Intelligence (AI)

Amazon Managed Service for Prometheus collector, a fully-managed agentless collector for Prometheus metrics, adds support for cross-account ingestion. Starting today, you can agentlessly scrape metrics from Amazon Elastic Kubernetes Service clusters in different accounts than your Amazon Managed Service for Prometheus workspace. While it was previously possible to apply AWS multi-account best practices for centralized observability with Amazon Managed Service for Prometheus workspaces, you had to use self-managed collection. This meant that you had to run, scale, and patch telemetry agents yourself to scrape metrics from Amazon Elastic Kubernetes Service clusters in va…

The Amazon EventBridge console now displays the source and detail type of all available AWS service events when you create a rule in the EventBridge console. This makes it easier for customers to discover and utilize the full range of AWS service events when building event-driven architectures. Additionally, the EventBridge documentation now includes an automatically updated list of all AWS service events, facilitating access to the most current information. Amazon EventBridge Event Bus is a serverless event router that enables you to create highly scalable event-driven applications by routing events between your own applications, third-party SaaS applications, and oth…

Amazon Connect Cases now allows agents and supervisors to filter cases in the agent workspace by custom field values, making it easier to narrow down search results and find relevant cases. Users can also customize the case list view and search results layout by adding custom columns, hiding or rearranging existing columns, and adjusting the number of cases per page. These enhancements enable users to tailor the case list view to meet their needs and manage their case workloads more effectively. For region availability, please see the availability of Amazon Connect features by Region. To learn more and get started, visit the Amazon Connect Cases webpage and documentati…

AWS Glue announces 14 new connectors for applications, expanding its connectivity portfolio. Customers can now use AWS Glue native connectors to ingest data from Blackbaud Raiser’s Edge NXT, CircleCI, Docusign Monitor, Domo, Dynatrace, Kustomer, Mailchimp, Microsoft Teams, Monday, Okta, Pendo, Pipedrive, Productboard and Salesforce Commerce Cloud. As enterprises increasingly rely on data-driven decisions, they need to integrate with data from various applications. With 14 new connectors, customers have more options to easily establish a connection to their applications using the AWS Glue console or AWS Glue APIs without the need to learn application-specific APIs. Glue…

Amazon AppStream 2.0 now allows administrator to control whether admin consent is required when users link their OneDrive for Business accounts as a persistent storage option. The new capability simplifies the management of AppStream 2.0 persistent storage and the admin consent process. After enabling OneDrive for Business for an AppStream 2.0 stack and specifying the OneDrive domains, administrators can now configure whether admin consent is needed for each OneDrive domain. If admin consent is required, administrators must approve users’ OneDrive connections within their Azure Active Directory environment when users attempt to link their account to AppStream 2.0. T…

Amazon Connect now includes the ability for agents to schedule time off up to 24 months in the future, making it easier for managers and agents to plan ahead of time. With this launch, agents can now book time off in Connect up to 24 months ahead of time (an increase from 13 months). Additionally, you can now upload pre-approved time off windows for a scheduling group (group allowance) for up to 27 months at a time (an increase from 13 months). These increased limits provide agents more flexibility to plan their personal time and also provide managers better visibility into future staffing needs, thus enabling more efficient resource allocation. This feature is availab…

AWS Deadline Cloud now includes the ability to specify a limit for a specific resource, like a floating license, and also constrain the maximum number of workers that work on a job. AWS Deadline Cloud is a fully managed service that simplifies render management for teams creating computer-generated graphics and visual effects, for films, television and broadcasting, web content, and design. By adding a limit to your Deadline Cloud farm, you can specify a maximum amount of concurrent usage of resources by workers in your farm. Capping resource usage ensures tasks don't start until the resources needed to run are available. For example, if you have 50 floating licenses f…