Amazon Web Services (AWS)

In today’s data-driven world, securely accessing, visualizing, and analyzing data is essential for making informed business decisions. Tens of thousands of customers use Amazon Redshift for modern data analytics at scale, delivering up to three times better price-performance and seven times better throughput than other cloud data warehouses. The Amazon Redshift Data API simplifies access to your Amazon Redshift data warehouse by removing the need to manage database drivers, connections, network configurations, data buffering, and more. With the newly released feature of Amazon Redshift Data API support for single sign-on and trusted identity propagation, you can build…

AWS WAF now supports JA4 fingerprinting of incoming requests, enabling customers to allow known clients or block requests from malicious clients. Additionally, you can now use both JA4 and JA3 fingerprints as aggregation keys within WAF's rate-based rules, allowing you to monitor and control request rates based on client fingerprints. A JA4 TLS client fingerprint contains a 36-character long fingerprint of the TLS Client Hello which is used to initiate a secure connection from clients. The fingerprint can be used to build a database of known good and bad actors to apply when inspecting HTTP requests. These new features enhance your ability to identify and mitigate soph…

Topic was moved to forum Artificial Intelligence (AI)

AWS Step Functions Workflow Studio is now available in the AWS Toolkit for Visual Studio Code, enabling you to visually create, edit, and debug state machine workflows directly in your local development environment. AWS Step Functions is a visual workflow service capable of orchestrating over 14,000+ API actions from over 220 AWS services to build distributed applications and data processing workloads. Workflow Studio is a visual builder that allows you to compose workflows on a canvas, while generating workflow definitions in the background. Workflow Studio for VS Code brings the console experience to the IDE, making it easier to create workflows in your local develop…

Today, AWS announces the general availability of MQTT enabled SiteWise Edge gateways for AWS IoT SiteWise. AWS IoT SiteWise is a managed service that makes it easy to collect, store, organize, and analyze data from industrial equipment at scale. With this launch, newly created gateways now include an MQTTv5 broker component that centralizes connectivity between SiteWise Edge and customer built edge components. Now you can integrate communications between your own edge components and AWS IoT SiteWise Edge using the MQTT protocol in a publish and subscribe topology. This eliminates building point-to-point connections between edge components simplifying the integration of…

We are excited to announce that Amazon OpenSearch Serverless is expanding availability to the Amazon OpenSearch Serverless to AWS Europe (Milan) Region. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple to run search and analytics workloads without the complexities of infrastructure management. OpenSearch Serverless’ compute capacity used for data ingestion, search, and query is measured in OpenSearch Compute Units (OCUs). To control costs, customers can configure maximum number of OCUs per account. Please refer to the AWS Regional Services List for more information about Amazon OpenSearch Service availability. T…

We are excited to announce that Amazon OpenSearch Serverless is expanding availability to AWS US West (SFO, N. California) and Europe (ARN, Stockholm) Regions. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple to run search and analytics workloads without the complexities of infrastructure management. OpenSearch Serverless’ compute capacity used for data ingestion, search, and query is measured in OpenSearch Compute Units (OCUs). To control costs, customers can configure maximum number of OCUs per account. Please refer to the AWS Regional Services List for more information about Amazon OpenSearch Service availabi…

Starting today, the general-purpose Amazon EC2 M7a instances are now available in AWS Asia Pacific (Sydney) Region. M7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz, deliver up to 50% higher performance compared to M6a instances. With this additional region, M7a instances are available in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Sydney, Tokyo), and Europe (Frankfurt, Ireland, Spain, Stockholm). These instances can be purchased as Savings Plans, Reserved, On-Demand, and Spot instances. To get started, visit the AWS Management Console, AWS Command Line Int…

AWS CodeConnections now allows you to securely share your Connection resource across individual AWS accounts or within your AWS Organization. Previously, to create a Connection, you installed the AWS connector App for GitHub or GitLab or Bitbucket for each AWS account from which source access was required. You can now use AWS Resource Access Manager (RAM) to securely share a Connection to your third-party source provider across AWS accounts. By using AWS RAM to share your Connection resource, you no longer need to create a Connection in each AWS account. Instead, you can create a Connection in an AWS account, and then share the Connection across multiple AWS accounts. …

Topic was moved to forum Artificial Intelligence (AI)

Amazon GameLift Streams is a new managed capability that allows developers to stream games at up to 1080p resolution and 60 frames per second to any device with a WebRTC-enabled browser. In just a few clicks, you can upload games built with a variety of 3D engines with little to no modification, provision streaming capacity in specific AWS Regions, and immediately start test streaming. Players can start playing AAA, AA, and Indie games over the internet in just a few seconds on their PCs, phones, tablets, and smart TVs without waiting hours for a download. With Amazon GameLift Streams, you can create new direct-to-player distribution channels, launch instant-play game d…

Amazon Connect, Amazon WorkSpaces, and Amazon AppStream 2.0 have earned Chrome Enterprise Recommended (CER) certification. This designation validates that these services are fully optimized for ChromeOS, ChromeOS Flex, and Chrome browser environments, ensuring seamless integration and performance for businesses using Chrome devices. These Chrome-optimized services deliver significant advantages for organizations with users gaining browser-based access to contact center capabilities through Amazon Connect, Windows or Linux virtual desktops through Amazon WorkSpaces, and streaming applications without refactoring with Amazon AppStream 2.0. Customers can take advantage of…

Today, AWS has announced that Bottlerocket, the Linux-based operating system purpose-built for containers, now supports NVIDIA's Multi-Instance GPU (MIG) feature, enabling customers to partition NVIDIA GPUs into multiple GPU instances on Kubernetes nodes. This capability allows system administrators to maximize GPU resource utilization by running multiple workloads simultaneously on a single GPU while maintaining hardware-level isolation between workloads. With MIG support, customers can optimize GPU resource allocation for workloads that don't fully utilize the GPU's compute capacity, such as machine learning inference tasks. Each GPU partition operates with complete …

Starting today, Amazon Elastic Kubernetes Service (EKS) enables default envelope encryption for all Kubernetes API data in EKS clusters running Kubernetes version 1.28 or higher. This provides a managed, default experience that implements defense-in-depth for your Kubernetes applications. Using AWS Key Management Service (KMS) with Kubernetes KMS provider v2, EKS now provides an additional layer of security with an AWS owned, KMS encryption key or the option of bringing your own key. Previously, Amazon EKS provided optional envelope encryption with Kubernetes KMS provider v1. Now this is a default configuration for all objects in the Kubernetes API. By default, AWS own…

Today, AWS announced that Bottlerocket, the Linux-based operating system purpose-built for containers, now supports AWS Neuron-powered instances with its Amazon Elastic Kubernetes Service (EKS) and Amazon Elastic Container Service (ECS) AMIs. Customers using Bottlerocket AMIs can now deploy and manage machine learning inference and training workloads on AWS Neuron accelerated instance types, including Inf1, Inf2, Trn1, and Trn2. EKS customers can use these Bottlerocket AMIs with Karpenter version 1.2.2 and above. This integration enables automated device management and scheduling capabilities while maintaining Bottlerocket's focus on security and operational simplicity…

Amazon Connect now offers the ability to target up to 4 different combinations of agent proficiencies per routing step. By using up to 3 OR conditions, routing will try to match a contact with 4 different types of agents and increase the possibility of finding a suitable match. For example, if the back-up for a niche banking skills consists of agents trained on account management, registration, and tax then after an initial search for balance transfer agents you can attempt a match across all four types of agents at the same time. This feature is available in all AWS regions where Amazon Connect is offered. To learn more about routing criteria, see the Amazon Connect A…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M8g instances are available in AWS Europe (Ireland) region. These instances are powered by AWS Graviton4 processors and deliver up to 30% better performance compared to AWS Graviton3-based instances. Amazon EC2 M8g instances are built for general-purpose workloads, such as application servers, microservices, gaming servers, midsize data stores, and caching fleets. These instances are built on the AWS Nitro System, which offloads CPU virtualization, storage, and networking functions to dedicated hardware and software to enhance the performance and security of your workloads. AWS Graviton4-based Amazon EC2 instances…

This post was jointly authored by Kevin Liu (Senior PMT), Jens-Uwe Walther (Senior STAM-Containers), and Drew Sirenko (Software Dev Engineer). Introduction In this post, we explore how to modify Amazon Elastic Block Store (Amazon EBS) volumes on Kubernetes without application downtime. Learn how to use the VolumeAttributesClass API alongside the Amazon EBS Container Storage Interface (CSI) driver to tune provisioned performance, migrate to gp3 volumes, and automate your data backup workflows. Modern containerized applications that use persistent storage, such as data analytics, databases, or video encoding and decoding, need a wide variety of storage characteristics …

Starting March 5, 2025, Amazon FSx for NetApp ONTAP eliminates SnapLock licensing fees for data stored in SnapLock volumes, making it more cost-effective for customers to protect their business-critical data from ransomware, unauthorized deletions, and malicious modifications. SnapLock is an ONTAP feature that offers Write Once, Read Many (WORM) protection to prevent alteration or deletion of data for specified retention periods, enabling customers to meet regulatory compliance and improve data protection. After this billing change, volumes with SnapLock enabled will no longer incur licensing charges. This license removal requires no changes to customer applications an…

Today, AWS has announced that Bottlerocket, the Linux-based operating system purpose-built for containers, now provides a default bootstrap container image that simplifies system setup tasks, eliminating the need for most customers to maintain their own container images for initial configuration. Bootstrap containers are special-purpose containers that handle pre-startup operations such as directory creation, environment variable setup, and node-specific configurations before the main application containers start. This enhancement allows customers to focus on their startup scripts rather than container image maintenance and regional availability. Previously, customers …

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7g instances are available in the AWS Europe (Zurich) region. These instances are powered by AWS Graviton3 processors that provide up to 25% better compute performance compared to AWS Graviton2 processors, and built on top of the the AWS Nitro System, a collection of AWS designed innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. Amazon EC2 Graviton3 instances also use up to 60% less energy to reduce your cloud carbon footprint for the same performance than comparable EC2 instances. For increased scalability, these ins…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C8g instances are available in AWS Asia Pacific (Mumbai) region. These instances are powered by AWS Graviton4 processors and deliver up to 30% better performance compared to AWS Graviton3-based instances. Amazon EC2 C8g instances are built for compute-intensive workloads, such as high performance computing (HPC), batch processing, gaming, video encoding, scientific modeling, distributed analytics, CPU-based machine learning (ML) inference, and ad serving. These instances are built on the AWS Nitro System, which offloads CPU virtualization, storage, and networking functions to dedicated hardware and software to enhanc…

Amazon Nova Pro foundation model now supports latency-optimized inference in preview on Amazon Bedrock, enabling faster response times and improved responsiveness for generative AI applications. Latency-optimized inference speeds up response times for latency-sensitive applications, improving the end-user experience and giving developers more flexibility to optimize performance for their use case. Accessing these capabilities requires no additional setup or model fine-tuning, allowing for immediate enhancement of existing applications with faster response times. Latency optimized inference for Amazon Nova Pro is available via cross-region inference in US West (Oregon),…

Starting today, you can use AWS WAF in the AWS Asia Pacific (Thailand) and AWS Mexico (Central) Region. AWS WAF is a web application firewall that helps you protect your web application resources against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. To see the full list of regions where AWS WAF is currently available, visit the AWS Region Table. Please note that only core AWS WAF features like AWS Managed Rules and rules are currently available in these new regions. For more information about the service, visit the AWS WAF page. AWS WAF pricing may vary between regions. For more information about pri…

AWS Identity and Access Manager (IAM) Access Analyzer now supports Internet Protocol version 6 (IPv6) addresses via our new dual-stack endpoints. The existing IAM Access Analyzer endpoints supporting IPv4 will remain available for backwards compatibility. The new dual-stack domains are available either from the internet or from within an Amazon Virtual Private Cloud (VPC) using AWS PrivateLink. To learn more on best practices for configuring IPv6 in your environment, visit the whitepaper on IPv6 in AWS. Support for IPv6 on IAM Access Analyzer is available in the AWS Commercial Regions, the AWS GovCloud (US) Regions, and the China Regions. To get started with using IAM …

Data sharing has become a crucial aspect of driving innovation, contributing to growth, and fostering collaboration across industries. According to this Gartner study, organizations promoting data sharing outperform their peers on most business value metrics. A straightforward data access and sharing mechanism is crucial for enabling effective data sharing across an organization. There are challenges such as complexity in managing cross-account permissions and difficulty in discovering the right data across accounts that organizations face when trying to share data products across AWS accounts. Amazon DataZone is a fully managed data management service that customers can …

This post was jointly authored by Praseeda Sathaye (Principal Solutions Architect, Containers & OSS), AJ Davis (AWS Enterprise Support) and Arvind Viswanathan (Principal Solutions Architect). Introduction In the rapidly evolving world of containerized applications, maintaining resilience and observability across Kubernetes environments has become a critical challenge. As organizations increasingly adopt Amazon Elastic Kubernetes Service (Amazon EKS) to manage their containerized workloads, the need for cluster version lifecycle management and discovery mechanisms becomes crucial. As Amazon EKS environments grow more complex and span multiple AWS Regions and account…

Topic was moved to forum Artificial Intelligence (AI)

As of February 14, 2025, SageMaker Flexible Training Plans now supports instant start times that allow customers to book a plan starting as soon as the next 30 minutes. Amazon SageMaker‘s Flexible Training Plan (FTP) makes it easy for customers to access GPU capacity to run ML workloads. Customers who use Flexible Training Plans can plan their ML development cycles with confidence in knowing they’ll have the GPUs they need on a specific date for the amount of time they reserve. There are no long-term commitments, so customers get capacity assurance while only paying for the amount of GPU time necessary to complete their workloads. With the ability to start a reservatio…

Amazon Lex now supports Confirmation and Alphanumeric slot types in Korean (ko-KR) locale. These built-in slot types help developers build more natural and efficient conversational experiences in Korean language applications. The Confirmation slot type automatically resolves various Korean expressions into 'Yes', 'No', 'Maybe', and 'Don't know' values, eliminating the need for custom slots with multiple synonyms. The Alphanumeric slot type enables capturing combinations of letters and numbers, with support for regular expressions to validate specific formats, making it easier to collect structured data like identification numbers or reference codes. Korean support f…

AWS Secrets Manager now supports higher request rates for the core set of API operations: GetSecretValue and DescribeSecret. GetSecretValue now supports up to 10,000 requests per second and DescribeSecret supports 40,000 requests per second. The increased API limits are available at no additional cost and will automatically be applied to your AWS accounts. No further action required on your end. Increased API limits for GetSecretValue and DescribeSecret are available in all regions where the service operates. For a list of regions where Secrets Manager is available, see the AWS Region table. To learn more about Secrets Manager API operations, visit our API reference. V…

Amazon S3 Tables are now available in three additional AWS Regions: Asia Pacific (Seoul), Asia Pacific (Singapore), and Asia Pacific (Sydney). S3 Tables deliver the first cloud object store with built-in Apache Iceberg support, and the easiest way to store tabular data at scale. S3 Tables are specifically optimized for analytics workloads, resulting in up to 3x faster query performance through continual table optimization compared to unmanaged Iceberg tables, and up to 10x higher transactions per second compared to Iceberg tables stored in general purpose S3 buckets. You can use S3 Tables with AWS analytics services through the preview integration with Amazon SageMa…

AWS CodeBuild now supports non-container builds on Linux x86, Arm, and Windows on-demand fleets. You can run build commands directly on the host operating system without containerization. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment. With non-container builds, you can execute build commands that require direct access to the host system resources or have specific requirements that make containerization challenging. This feature is particularly useful for scenarios such as building device drivers, running system-level tests, or working with tools that require hos…

AWS Lambda now supports Amazon CloudWatch Logs Live Tail in VS Code IDE through the AWS Toolkit for Visual Studio Code. Live Tail is an interactive log streaming and analytics capability which provides real-time visibility into logs, making it easier to develop and troubleshoot Lambda functions. We previously announced support for Live Tail in the Lambda console, enabling developers to view and analyze Lambda logs in real time. Now, with Live Tail support in VS Code IDE, developers can monitor Lambda function logs in real time while staying within their development environment, eliminating the need to switch between multiple interfaces for coding and log analysis. This…

Amazon Neptune Database is now available in the Asia Pacific (Malaysia) Region on engine versions 1.1.0.0 and later. You can now create Neptune clusters using R6g, R6i, T4g, and T3 instance types in the AWS Asia Pacific (Malaysia) Region. Amazon Neptune Database is a fast, reliable, and fully managed graph database as a service that makes it easy to build and run applications work with highly connected datasets. You can build applications using Apache TinkerPop Gremlin or openCypher on the Property Graph model, or using the SPARQL query language on W3C Resource Description Framework (RDF). Neptune also offers enterprise features such as high availability, automated bac…

AWS Transfer Family has reduced the service side login latency from 1-2 seconds to under 500 milliseconds. AWS Transfer Family offers fully managed support for the transfer of files over SFTP, AS2, FTPS, FTP, and web browser-based transfers directly into and out of AWS storage services. With this launch, you benefit from significantly reduced latency from the service to initiate the transfer over SFTP. This optimization offers substantial benefits, particularly for high-frequency, low-latency use cases with automated processes or applications requiring rapid file operations. Reduced server-side login latency is immediately available at no additional cost for all new…

In this blog, you will learn more about AWS Lambda, a powerful serverless computing service that empowers AI inference and model execution without infrastructure management, and a major service used by AWS Certified AI Practitioners. Read through to know more about how it supports AI inference and model executions, serverless architecture, model deployment strategies, scalable AI workloads, and others, with use cases for better understanding... View the full article

Amazon API Gateway (APIGW) now supports all features of HTTP APIs as well as Mutual TLS and multi-level base path mappings on REST APIs in the following additional Regions: Middle East (UAE), Asia Pacific (Jakarta), Asia Pacific (Osaka), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Zurich), Europe (Spain), Israel (Tel Aviv), and Canada West (Calgary). AWS Web Application Firewall (WAF) for REST APIs is now available in two additional regions: Asia Pacific (Kuala Lumpur) and Canada West (Calgary). HTTP APIs simplify API development for serverless applications with a simpler user interface that includes support for OAuth2.0 and automatic deployments. Mutua…

Game developers face a common challenge: building cloud expertise while staying focused on game creation. Modern games require sophisticated cloud infrastructure to handle millions of concurrent players, manage real-time multiplayer experiences, and deliver seamless global gameplay—making cloud expertise key to game development. This guide organizes essential training resources to help you build cloud expertise, from foundational courses to hands-on workshops and industry-recognized certifications. Whether you’re an independent developer looking to scale your first game, a technical artist requiring cloud-based rendering solutions, or a studio engineer architecting large-…

Amazon Web Services (AWS) is headed to London for KubeCon + CloudNativeCon Europe 2025. Join us at Booth S300 in Excel London from April 1-4 to discover our latest innovations and learn how our customers, partners, and community members are transforming their businesses with Kubernetes. Experience hands-on demonstrations of AWS solutions that simplify Kubernetes operations, optimize costs, and leverage AI/ML capabilities. Meet our AWS experts who will share best practices, implementation strategies, and insights to help you build scalable platforms. Don’t miss the special book signing session with Kubernetes thought leader Kelsey Hightower at our booth. AWS Hands-O…

Today, we are announcing the general availability of Amazon Bedrock Data Automation (BDA), a feature of Amazon Bedrock that enables developers to automate the generation of valuable insights from unstructured multimodal content such as documents, images, video, and audio to build GenAI-based applications. By leveraging BDA, developers can reduce development time and effort, making it easier to build intelligent document processing, media analysis, and other multimodal data-centric automation solutions. BDA can be used as a standalone feature or as a parser in Amazon Knowledge Bases RAG workflows. Further, Amazon Q Business now uses BDA to process multimodal assets and del…

I have fond memories of the time I built an application live at the AWS GenAI Loft London last September. AWS GenAI Lofts are back in locations such as San Francisco, Berlin, and more, to continue providing collaborative spaces and immersive experiences for startups and developers. Find a loft near you for hands-on access to AI products and services events, workshops, and networking opportunities, that you can’t miss! Last week’s launches Here are some launches that got my attention during the previous week. Four ways to grant cross-account access in AWS — For some situations, you may want to enable centralized operations across multiple AWS accounts or share reso…

Topic was moved to forum Artificial Intelligence (AI)

Amazon Cognito now allows customers to customize access tokens for M2M flows, enabling you to implement fine-grained authorization in your applications, APIs, and workloads. M2M authorization is commonly used for automated processes such as scheduled data synchronization tasks, event-driven workflows, microservices communication, or real-time data streaming between systems. In M2M authorization flows, an app client can represent a software system or service that can request access tokens to interact with resources, such as a reporting system or a data processing service. With this launch, customers can now customize their access tokens with custom claims (attributes about…

CloudWatch RUM, which provides real-time monitoring into web application performance by tracking user interactions, now supports resource based policies that simplify access for data ingestion to RUM. With resource-based policies, you can specify which Identity and Access Management (IAM) principals have access to ingest data to your RUM app monitors— effectively which clients can write data to RUM. This would also allow you to ingest data at higher volume and gives you greater control over data ingress in RUM. Using resource based policies allows you to manage ingestion access to your app monitor without using Amazon Cognito to assume an IAM role, and AWS Security Tok…

AWS CodeBuild managed images now support Node 22, Python 3.13, and Go 1.23. These new runtime versions are available in Linux x86, Arm, Windows and macOS platforms. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment. For CodeBuild managed images based on Linux, you can specify a runtime of your choice in the runtime-versions section of your buildspec file. You can select specific major and minor versions supported by CodeBuild, or define a custom runtime version. Additionally with this release, we added commonly used tools that are available in GitHub Actions environ…

Today, AWS IoT Device Management announces the preview of managed integrations, a new feature that enables you to simplify control and management of a diverse set of devices across multiple manufacturers and connectivity protocols. The new feature helps you streamline cloud onboarding of Internet of Things (IoT) devices and enables you to control both self-managed and third-party devices, including cloud-based devices, from a single application. Managed integrations provides cloud and device Software Development Kits (SDKs) for device connectivity and protocol support for ZigBee, Z-Wave, and Wi-Fi specifications, eliminating the need to handle dedicated connectivity pr…

AWS announces the preview of new AWS Outposts racks designed specifically for on-premises high throughput, network-intensive workloads. With these new Outposts racks, telecom service providers (telcos) can extend AWS infrastructure and services to telco locations, enabling them to deploy on-premises network functions requiring low latency, high throughput, and real-time performance. The new Outposts racks feature new Amazon Elastic Compute Cloud (Amazon EC2) 4th Generation Intel Xeon Scalable-based (Sapphire Rapids) bare metal instances along with a high-performance bare metal network fabric. This architecture delivers the low latency and high throughput required for d…

Amazon Connect now supports outbound campaign calling to Brazil in the US East (Virginia) and US West (Oregon) regions, making it easier to proactively communicate across voice, SMS, and email for use cases such as delivery notifications, marketing promotions, appointment reminders, or debt collection. Communication capabilities include features such as point-of-dial checks, calling controls for time of day, time zone, number of attempts per contact, and predictive dialing with integrated voicemail detection. A list management capability provided by Amazon Pinpoint can also be used to build customer journeys and multi-channel user contact experiences. Outbound campaigns c…

AWS Amplify now supports HttpOnly cookies for server-rendered Next.js applications when using Amazon Cognito's Managed Login. This enhancement builds upon existing cookie functionality in server-rendered sites, opting in to the HttpOnly attribute strengthens your application's security posture by blocking client-side JavaScript from accessing cookie contents. With HttpOnly cookies, your applications gain an additional layer of protection against cross-site scripting (XSS) attacks. This ensures that sensitive information remains secure and will only be transmitted between the browser and the server, and is particularly valuable when handling authentication tokens in you…