Recent Announcements

Express Brokers in Amazon MSK now support Apache Kafka version 3.8

Tue, 10 Jun 2025 17:30:00 GMT

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.8 on Express Brokers, introducing new features, bug fixes, and performance improvements for Kafka workloads running on Express Brokers. The update brings enhancements in data compression capabilities. You can now configure compression levels for lz4, zstd, and gzip formats, allowing precise control over the balance between compression efficiency and resource usage.

The transition to version 3.8 is straightforward - you can either create new clusters or upgrade your existing ones. For a detailed understanding of the specific improvements and bug fixes included in this release, see the Apache Kafka release notes for version 3.8.

AWS AppSync Enhances Security with Default Encryption for GraphQL API Caching

Tue, 10 Jun 2025 17:00:00 GMT

AWS AppSync is a fully managed service that simplifies the development and deployment of GraphQL APIs. Starting today, AWS AppSync automatically enables encryption at-rest and in-transit for all new API caching configurations. This security enhancement applies to newly created caches, while existing caches maintain their current encryption settings. AWS AppSync SDKs have been updated to enforce encryption for new caches, ignoring any manual encryption configuration attributes.

This default encryption strengthens your GraphQL APIs' security posture by ensuring comprehensive protection of cached data without requiring additional configuration. The change aligns with AWS security best practices and simplifies the implementation of secure caching for your APIs. Customers can continue using their existing cache configurations without disruption while benefiting from enhanced security for new deployments.

This update is available in all AWS Regions where AWS AppSync is offered. To learn more about AWS AppSync caching, visit our documentation or explore the full range of AWS AppSync features in our Developer Guide.

Amazon Q Developer launches Java upgrade selective transformation in CLI (Preview)

Tue, 10 Jun 2025 17:00:00 GMT

Amazon Q Developer transformation capabilities now support customization of Java upgrades in Java upgrade transformation CLI (command line interface) with a new selective transformation feature. Using this feature, you can use natural language chat and/or an input file to tailor transformation plans and exercise greater control over Java upgrades. The following options are supported:

Selection of steps from a transformation plan and breakdown of a transformation job for granular code reviews
For first-party and third-party dependencies, the libraries and their versions you would like Q Developer to upgrade during JDK version upgrades

Amazon Q Developer Java upgrade capabilities now have been tested to offer enhanced transformation success rates, reducing the manual effort needed to complete your software modernization tasks.

The selective transformation feature for Java upgrades is available in the command line, on Linux and MacOS. To learn more and get started, please visit the documentation page.

Amazon RDS Custom now supports Cumulative Update 18 for Microsoft SQL Server 2022

Tue, 10 Jun 2025 17:00:00 GMT

Amazon Relational Database Service (Amazon RDS) Custom for SQL Server now supports Cumulative Update (CU) 18 for Microsoft SQL Server 2022. This update is available for SQL Server Developer, Web, Standard, and Enterprise editions, and includes performance improvements and bug fixes. For more details about the improvements in this update, please review Microsoft KB5050771 release notes.

You can upgrade with just a few clicks in the Amazon RDS Management Console or by using the AWS SDK or CLI. Learn more about upgrading your database instances from the Amazon RDS Custom User Guide.

This CU is available in all AWS Regions where Amazon RDS Custom for SQL Server is available.

RDS Custom is a managed database service that allows customization of the underlying operating system and database environment. RDS Custom for SQL Server supports two licensing models: License Included (LI) and Bring Your Own Media (BYOM). By using Bring Your Own Media (BYOM), customers can use their existing SQL Server licenses with Amazon RDS Custom for SQL Server. See Amazon RDS Custom Pricing for pricing details and regional availability.

Amazon Connect Customer Profiles for Travel and Hospitality

Tue, 10 Jun 2025 17:00:00 GMT

Launching today, travel and hospitality organizations can now more seamlessly ingest and map data from their industry-specific source systems to Amazon Connect Customer Profiles to create a unified and comprehensive view of their end customers.

Travel and hospitality organizations often have multiple source systems, including booking systems, loyalty programs, and customer service platforms with rich customer information, but it is difficult to integrate and analyze customer data because the schemas are complex and not standardized. Amazon Connect Customer Profiles now has industry-specific mapping to help unify customer data from over 75+ source systems with Amazon Connect data and other industry-specific systems like Amadeus.

With Amazon Connect Customer Profiles, and other new features like profile explorer, organizations can easily access instant insights on individuals and groups of customers. Organizations can empower their staff across all touchpoints—from check-in desks to customer service activation within channels in Amazon Connect - to access the information they need to deliver personalized service.

Amazon Connect Customer Profiles for travel and hospitality is available in 10 AWS Regions located here. Pricing is based on pay-as-you-go profile utilization.

To learn more, visit the Amazon Connect Customer Profiles blog.

Powertools for AWS Lambda introduces Bedrock Agents Function utility

Tue, 10 Jun 2025 17:00:00 GMT

Powertools for AWS Lambda now offers a new Amazon Bedrock Agents Function utility that simplifies building serverless applications integrated with Amazon Bedrock Agents. This utility enables developers to easily create AWS Lambda functions that can respond to Amazon Bedrock Agent action requests with built-in parameter injection, response formatting, eliminating boilerplate code and accelerating development.

With the Amazon Bedrock Agents function utility, developers can focus on business logic while the utility handles the complex integration patterns between AWS Lambda and Amazon Bedrock Agents. The utility provides seamless integration with other Powertools features like Logger, Metrics, among other utilities, making it easier to build, test, and deploy production-ready AI applications. This integration significantly improves developer experience when building agent-based solutions that require Lambda functions to process actions requested by Bedrock Agents.

To learn more about the Amazon Bedrock Agents Function utility, visit the Powertools for AWS Lambda documentation (Python, TypeScript, .NET), and explore code examples in our GitHub repository. Get started with this new feature today by updating your Powertools for AWS Lambda dependency to the latest version.

Amazon Elastic VMware Service now integrates with Amazon FSx for NetApp ONTAP

Mon, 09 Jun 2025 21:58:00 GMT

Amazon Elastic VMware Service (Amazon EVS), an AWS service that enables you to run VMware Cloud Foundation (VCF) within your Amazon Virtual Private Cloud, now integrates with Amazon FSx for NetApp ONTAP, a fully managed AWS service built on NetApp’s ONTAP file system. With this integration, Amazon EVS customers can use FSx for ONTAP as a scalable, high-performance external datastore for their VCF environments on AWS, enabling them to benefit from cost savings through independent scaling of storage and compute, and automated data tiering. If you’re running VMware with ONTAP on-premises, you can use the same tools and workflows to easily migrate those workloads to AWS and maintain operational consistency.

NetApp ONTAP is commonly used as the underlying storage for VMware workloads like databases, Virtual Desktop Infrastructure (VDI), and line-of-business applications due to its advanced data management features such as snapshots, clones, replication, and storage efficiencies. With this integration, you can improve agility and reduce costs by scaling storage independently from compute, improve data protection, and further optimize costs with automated data tiering to low-cost storage and storage efficiencies. And, you can now migrate and extend your VMware workloads easily to AWS while leveraging the same data management capabilities.

The Amazon EVS integration with FSx for ONTAP is now available for public preview in all AWS Regions where both Amazon EVS and FSx for ONTAP are available. To get started, visit the Amazon EVS website. For more information, visit the FSx for ONTAP documentation.

AWS launches public preview of Amazon Elastic VMware Service (Amazon EVS)

Mon, 09 Jun 2025 21:55:00 GMT

Today, AWS is expanding access to Amazon Elastic VMware Service (Amazon EVS) through public preview. Building on the momentum from the initial private preview announcement at AWS re:Invent 2024, public preview opens access for AWS customers who want to run VMware Cloud Foundation (VCF)-based workloads within their Amazon Virtual Private Cloud (Amazon VPC).

During public preview, you can leverage VCF license portability entitlements and migrate non-production workloads to Amazon EVS. You can provision and configure your environment through a guided workflow and automatically deploy a fully-functional VCF environment on AWS. Amazon EVS allows you to bring in familiar VCF tools and external storage solutions, including Amazon FSx for NetApp ONTAP, to meet the unique demands of your applications and optimize your virtualization stack in the cloud. At this time, Amazon EVS supports VCF version 5.2.1 and running workloads on i4i.metal instances. You can expect to have the same easy-to-use console interface and functionality at general availability. Additionally, any environments deployed during the public preview will carry forward without redeployment as the service moves into general availability.

The public preview of Amazon EVS is currently available in five Regions: US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Tokyo), and Europe (Frankfurt).

Access Amazon EVS on the AWS console. Learn more about Amazon EVS on the product page and user guide.

AWS Glue now available in Asia Pacific (Taipei) Region

Mon, 09 Jun 2025 21:50:00 GMT

AWS Glue, a serverless data integration service, is now available in the Asia Pacific (Taipei) region, enabling customers to build and run their ETL workloads closer to their data sources in these regions.

AWS Glue is a serverless data integration service that makes it simple to discover, prepare, and combine data for analytics, machine learning, and application development. AWS Glue provides both visual and code-based interfaces to make data integration simpler, so you can analyze your data and put it to use in minutes.

To learn more, visit the AWS Glue product page and our documentation. For AWS Glue region availability, please see the AWS Region table.

AWS Console Mobile Application adds support for CloudWatch Log Insights

Mon, 09 Jun 2025 19:20:00 GMT

AWS customers can now access CloudWatch Log Insights from within the AWS Console Mobile App to search and analyze log data in CloudWatch Logs while on the go. AWS customers can perform queries to more efficiently and effectively respond to operational issues. If an issue occurs, AWS customers can use CloudWatch Log Insights to identify potential causes and validate deployed fixes. Visit the Services tab in the AWS Console Mobile App and select CloudWatch. Then tap on Log Insights to get started.

The AWS Console Mobile App enables AWS customers monitor and manage a select set of resources and receive push notifications to stay informed and connected with their AWS resources while on-the-go. The sign-in process supports biometrics authentication, making access to AWS resources simple, secure, and quick. For AWS services not available natively, customers can access the AWS Management Console via an in-app browser to access service pages without additional authentication, manual navigation, or need to switch from the app to a browser.

Visit the AWS Console Mobile App product page for more information about the AWS Console Mobile App, including a full list of supported services and regions. Visit the CloudWatch Log Insights documentation page for more information about CloudWatch Log Insights.

Amazon Connect launches profile explorer for unified customer views

Mon, 09 Jun 2025 18:26:00 GMT

Amazon Connect Customer Profiles now offers profile explorer, a new capability that enables organizations to access a unified, customized view of Amazon Connect Customer Profiles. This intuitive interface enables organizations to better understand and engage with their customers across all touchpoints, enhancing the existing Amazon Connect Customer Profiles service by providing real-time user access to customer information, interaction history and AI-powered insights.

With profile explorer, users can search and find end customers using multiple identifiers simultaneously, such as email, phone number, or booking references, with real time results. Customer service teams can customize their views to highlight the most relevant information for their specific needs, including demographic data, communication history, behavioral patterns, and segment membership. Profile explorer also provides AI-generated customer summaries that highlight key patterns and deliver personalized behavioral insights, helping organizations make data-driven decisions to improve customer experiences and drive loyalty.

Profile explorer is available in US East (N. Virginia), US West (Oregon), Africa (Cape Town), Asia Pacific (Seoul), Asia Pacific (Tokyo), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Europe (Frankfurt) and Europe (London) AWS regions. AI summary is currently not available in Africa (Cape Town).

To learn more, visit Amazon Connect Customer Profiles webpage or see the Amazon Connect Customer Profiles profile explorer documentation page.

Announcing open sourcing pgactive: active-active replication extension for PostgreSQL

Mon, 09 Jun 2025 17:00:00 GMT

Today, AWS announces the open sourcing of pgactive, a PostgreSQL extension for active-active replication. pgactive lets you use asynchronous active-active replication for streaming data between database instances to provide additional resiliency and flexibility in moving data between database instances, including writers located in different regions. This helps maintain availability for operations like switching write traffic to a different instance.

pgactive builds on the foundation PostgreSQL logical replication features, such as bidirectional replication between tables starting in PostgreSQL 16, adding capabilities that simplify managing active-active replication scenarios. Open sourcing the pgactive extension allows for more collaboration on developing active-active capabilities of PostgreSQL, while offering features that simplify using PostgreSQL in scenarios that benefit from multiple active instances.

To learn more about pgactive and how to get started, visit the GitHub repository.

Amazon Connect introduces enhanced calculated attributes

Mon, 09 Jun 2025 17:00:00 GMT

Amazon Connect Customer Profiles now offers enhanced calculated attributes with timestamp controls, historical data backfill, and improved limits to help businesses transform customer data into actionable insights. Customers now can specify timestamps on their data, including future-dated events, and process historical data information with increased limits.

Amazon Connect Customer Profiles offers calculated attributes that transform customer behavior data (e.g., contacts, orders, web visits) into actionable insights such as a customer’s preferred channel to drive proactive outbound campaigns, dynamic routing, and personalize IVRs without requiring engineering resources. With new enhancements, customers can now create more accurate and relevant calculated attributes by controlling which timestamps are used for calculations and ensuring proper chronological ordering regardless of the ingestion sequence. The new historical calculation capability automatically includes previously ingested data when creating new attributes, eliminating the wait time for meaningful insights for customer engagement. These enhancements enable sophisticated use cases like tracking upcoming appointments, analyzing long-term customer behavior patterns, evaluating customer lifetime value, and ensuring agents are prepared with relevant context before customer interactions.

Amazon Connect Customer Profiles is available in US East (N. Virginia), US West (Oregon), Africa (Cape Town), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Seoul), Canada (Central), Europe (Frankfurt), and Europe (London). To learn more, refer to our help documentation, visit our webpage, and view the API reference guide.

Amazon CloudWatch agent adds support for EBS detailed performance statistics

Mon, 09 Jun 2025 17:00:00 GMT

Amazon CloudWatch agent now supports collecting detailed performance statistics for Amazon Elastic Block Store (EBS) volumes attached to Amazon EC2 instances and Amazon EKS nodes. The CloudWatch agent can be configured to collect NVMe-based metrics including queue depth, number of operations, bytes sent and received, and time spent on read and write I/O operations, making them available as custom metrics in CloudWatch.

This enhancement provides customers more granular visibility into their volume's I/O performance so they can quickly identify and proactively troubleshoot application performance bottlenecks. Customers can use these detailed metrics in CloudWatch to analyze I/O patterns, track performance trends, create custom dashboards, and set up automated alarms based on performance thresholds, helping them maintain optimal storage performance and improve resiliency for their workloads and applications.

EBS detailed performance statistics via Amazon CloudWatch agent are available for all EBS volumes attached to Nitro-based EC2 instances in all AWS Commercial and AWS GovCloud (US) Regions. See the Amazon CloudWatch pricing page for CloudWatch pricing details.

To get started with detailed performance statistics for Amazon Elastic Block Store (EBS) volumes in CloudWatch, see Configuring the CloudWatch agent in the Amazon CloudWatch User Guide. To learn more about detailed performance statistics for Amazon Elastic Block Store (EBS) volumes, see Amazon EBS detailed performance statistics in the Amazon EBS User Guide.

AWS HealthLake is now available in the AWS Europe (Ireland) Region

Mon, 09 Jun 2025 17:00:00 GMT

Starting today, European healthcare and life sciences customers can use AWS HealthLake to store, transform, and analyze their health data in FHIR (Fast Healthcare Interoperable Resources) standards while maintaining data residency within the EU.

AWS HealthLake is a fully managed FHIR storage, transactional, and analytics service. Customers can normalize and store health data from disparate raw data sources into a FHIR data store, and leverage HealthLake FHIR-based APIs to build interactive applications and interoperability workflows. Next, customers can leverage the HealthLake Analytics module to automatically transform FHIR data into an analytics-ready format for population health analytics, build patient cohorts, or train predictive models to improve quality of care. HealthLake data stores easily integrate with AWS AI and analytics tools such as Amazon Athena for SQL queries, Amazon QuickSight for visualization, and Amazon SageMaker for training and drawing inferences from ML models.

In addition to Europe (Ireland), AWS HealthLake is available in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Mumbai), Europe West (London), and Asia Pacific SouthEast (Sydney) Regions. Visit the AWS Region Table to see all the regions.

To learn more, see the AWS HealthLake product page.

Amazon EFS now supports Internet Protocol Version 6 (IPv6)

Mon, 09 Jun 2025 17:00:00 GMT

Amazon Elastic File System (EFS) now supports Internet Protocol Version 6 (IPv6) for both EFS APIs and mount targets, enabling customers to manage and mount file systems using IPv4, IPv6, or dual-stack clients.

This launch helps customers meet IPv6 compliance requirements and eliminates the need for complex infrastructure to handle IPv6 to IPv4 address translation. Customers can now use IPv6 clients to access EFS APIs through new dual-stack endpoints. Additionally, customers can mount file systems using IPv6 by specifying an IP address type when creating mount targets.

EFS offers IPv6 support in all AWS Commercial and the AWS GovCloud (US) Regions. To get started using IPv6 on EFS, refer to the EFS user guide.

AWS Backup is now available in AWS Asia Pacific (Taipei) Region

Fri, 06 Jun 2025 19:00:00 GMT

Today, we are announcing the availability of AWS Backup in the Asia Pacific (Taipei) Region. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning compute, storage, and databases. Using AWS Backup, you can centrally create and manage backups of your application data, protect your data from inadvertent or malicious actions with immutable recovery points and vaults, and restore your data in the event of a data loss incident.

You can get started with AWS Backup using the AWS Backup console, SDKs, or CLI by creating a data protection policy and then assigning AWS resources to it using tags or Resource IDs. For more information on the features available in the Asia Pacific (Taipei) Region, visit the AWS Backup product page and documentation. To learn about the Regional availability of AWS Backup, see the AWS Regional Services List.

Amazon SageMaker AI Training Jobs announces general availability of P6-B200 instances powered by NVIDIA B200 GPUs

Fri, 06 Jun 2025 17:50:00 GMT

Today, Amazon SageMaker AI announces the general availability of Amazon EC2 P6-B200 instances in Training Jobs, powered by NVIDIA B200 GPUs. Amazon EC2 P6-B200 instances offer up to 2x performance compared to P5en instances for AI training.

P6-B200 instances feature 8 Blackwell GPUs with 1440 GB of high-bandwidth GPU memory and a 60% increase in GPU memory bandwidth compared to P5en, 5th Generation Intel Xeon processors (Emerald Rapids), and up to 3.2 terabits per second of Elastic Fabric Adapter (EFAv4) networking. P6-B200 instances are powered by the AWS Nitro System, so you can reliably and securely scale AI workloads within Amazon EC2 UltraClusters to tens of thousands of GPUs.

The instances are available through SageMaker HyperPod Flexible Training Plans in US West (Oregon) AWS Region. For on-demand reservation of B200 instances, please reach out to your account manager.

Amazon SageMaker Model Training lets you easily train machine learning models at scale using fully managed infrastructure optimized for performance and cost. To get started with Training Jobs, visit SageMaker Model Training.

Ingest data from Atlassian Jira and Confluence into Amazon OpenSearch Service

Fri, 06 Jun 2025 17:30:00 GMT

Amazon OpenSearch Ingestion now allows you ingest data from Atlassian Jira and Confluence and seamlessly index it in Amazon OpenSearch managed clusters and serverless collections. With this integration, you can now create a unified searchable knowledge base of all your data in Atlassian Jira and Confluence to power your RAG applications.

This integration allows data ingestion with flexible filtering options for projects and types in Jira and spaces and pages in Confluence ensuring that only the information you need is imported. Updates to your data in Jira and Confluence is continuously monitored and automatically synchronized with indices in Amazon OpenSearch Service. To ensure secure and reliable connectivity, multiple authentication methods, including basic API key authentication and OAuth2 authentication, with the added security of managing credentials using a secret stored in AWS Secrets Manager are supported.

This feature is available in all the 16 AWS commercial regions where Amazon OpenSearch Ingestion is currently available: US East (Ohio), US East (N. Virginia), US West (Oregon), US West (N. California), Europe (Ireland), Europe (London), Europe (Frankfurt), Europe (Spain), Asia Pacific (Tokyo), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Mumbai), Asia Pacific (Seoul), Canada (Central), South America (Sao Paulo), and Europe (Stockholm).

To get started, you can start ingesting data from Atlassian Jira and Confluence using the AWS Management Console, AWS SDK, or CLI. To learn more about this feature, see the Amazon OpenSearch Service Developer Guide.

Upgrade Experience from Amazon SageMaker Studio to SageMaker Unified Studio

Fri, 06 Jun 2025 17:00:00 GMT

Amazon SageMaker now offers an upgrade experience that enables customers to transition from SageMaker Studio to SageMaker Unified Studio while preserving their existing resources and maintaining consistent access controls. This new capability allows customers to import their SageMaker AI domains, user profiles, and spaces into SageMaker Unified Studio without redeploying infrastructure. The upgrade tool ensures that identity, authentication, and authorization experiences remain consistent, with users retaining access to only the resources they were previously permitted to use.

With this upgrade experience, customers can continue to access their resources from both SageMaker Studio and SageMaker Unified Studio during the transition period, allowing teams to gradually adapt to the new experience. The tool preserves access to existing JupyterLab and CodeEditor spaces, as well as other SageMaker AI resources like training jobs, ML pipelines, models, inference endpoints etc, previously created from SageMaker Studio. Administrators maintain control over the upgrade process and can disable access to SageMaker Studio once users are comfortable with the SageMaker Unified Studio experience. The upgrade tool is available as an open-source solution that provides a guided, step-by-step process to ensure a smooth transition to SageMaker Unified Studio.

The upgrade experience is available in all AWS Commercial Regions where the next generation of Amazon SageMaker is available. See the supported regions list for more details. To learn more about upgrading from SageMaker Studio to SageMaker Unified Studio, visit the GitHub repository, and to learn more about the next generation of Amazon SageMaker, visit the product detail page.

Amazon Connect enhances hold duration tracking for multiparty calls

Fri, 06 Jun 2025 17:00:00 GMT

Amazon Connect now allows you to track durations of holds initiated by individual agents in multiparty calling scenarios through the new Agent Initiated Hold Duration field on the contact record. This new field allows contact center managers to gain insights into hold patterns at the individual agent level during customer interactions. This also provides other benefits including better agent performance management, allowing managers to identify areas for improvement in call handling. Additionally, it helps in optimizing your customers’ experience by providing insights into hold patterns and durations across different agents and scenarios. This level of granularity in data can lead to more informed decision-making in workforce management and training initiatives.

To learn more refer to our public documentation. This new feature is available in all AWS regions where Amazon Connect is available. To learn more about Amazon Connect, the AWS cloud-based contact center, please visit the Amazon Connect website.

Amazon EFS is now available in the AWS Asia Pacific (Taipei) region

Fri, 06 Jun 2025 17:00:00 GMT

Customers can now create file systems using Amazon Elastic File System (Amazon EFS) in the AWS Asia Pacific (Taipei) Region.

Amazon EFS is designed to provide serverless, fully elastic file storage that lets you share file data without provisioning or managing storage capacity and performance. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files. Because Amazon EFS has a simple web services interface, you can create and configure file systems quickly and easily. The service is designed to manage file storage infrastructure for you, meaning that you can avoid the complexity of deploying, patching, and maintaining complex file system configurations.

For more information, visit the Amazon EFS product page, and see the AWS Region Table for complete regional availability information.

AWS KMS launches on-demand key rotation for imported keys

Fri, 06 Jun 2025 17:00:00 GMT

AWS Key Management Service (KMS) is announcing support for on-demand rotation of symmetric encryption KMS keys with imported key material. This new capability enables you to rotate the cryptographic key material of Bring Your Own Keys (BYOK) keys without changing the key identifier (key ARN). Rotating keys helps you meet compliance requirements and security best practices that mandate periodic key rotation.

Organizations can now better align key rotation with their internal security policies when using imported keys within AWS KMS. This new on-demand rotation capability supports both immediate rotation as well as scheduled rotation. Similar to flexible rotation for standard KMS keys, this new rotation capability offers seamless transition to new key material within an existing KMS key ARN and key alias, with zero downtime and complete backwards compatibility with existing data protected under this key.

On-demand key rotation is available in all AWS Regions, including the AWS GovCloud (US) Regions and in the China Regions. To learn more, see the AWS Security Blog for how to use on demand rotation with imported keys, and the rotate on-demand topic in the AWS KMS developer guide.

Announcing ASN match support for AWS WAF

Thu, 05 Jun 2025 20:55:00 GMT

AWS WAF now supports matching incoming request against Autonomous System Numbers (ASNs). By monitoring and restricting traffic from specific ASNs, you can mitigate risks associated with malicious actors, comply with regulatory requirements, and optimize the performance and availability of your web applications. This new ASN Match Statement integrates seamlessly with existing WAF rules, making it easy for you to incorporate ASN based security controls into your overall web application defense strategy.

You can specify a list of ASNs to match against incoming request and take appropriate action such as block or allow the request. You can also use ASN in your rate-based rule statements. These rules aggregate requests according to your criteria, counts and rate limits the requests based on the rule's evaluation window, request limit, and action settings.

ASN Match statement is available in all regions where AWS WAF is available. The rate-based rule support with ASN is available in regions where the enhanced rate-based rules are currently supported. There is no additional cost for using ASN in Match statement and rate-based rules, however standard AWS WAF charges still apply. For more information about the service, visit the AWS WAF page. For more information about pricing, visit the AWS WAF Pricing page

AWS Invoice Summary API is now generally available

Thu, 05 Jun 2025 20:15:00 GMT

Today, AWS announces the general availability of the Invoice Summary API. This allows you to retrieve your AWS invoice summary details programmatically via SDK. You can retrieve multiple invoice summary details by making a single API call that accepts input parameters like AWS Account ID, AWS Invoice ID, billing period, or a date range as input.

The output of the Invoice Summary API will include data elements like Invoice Amount in base currency and tax currency, purchase order number and other meta data that can be found in this link. You can integrate the API to your accounts payable systems to automate invoice processing and improve efficiency.

Invoice Summary API is available in all AWS Regions, except the AWS GovCloud (US) Regions and the China Regions.

Amazon Q Developer agentic coding experience is now available within JetBrains and Visual Studio

Thu, 05 Jun 2025 20:00:00 GMT

Today, Amazon Q Developer announces support for the agentic coding experience within the JetBrains and Visual Studio IDEs. This experience, already available in Visual Studio Code and the Amazon Q Developer CLI, redefines how you write, modify, and maintain code by leveraging natural language understanding to seamlessly run complex workflows.

Agentic coding provides intelligent task execution, enabling Q Developer to perform actions beyond code suggestions, such as reading files, generating code diffs, and running command-line tasks. To get started, simply type in your prompt in your preferred spoken language. As Q Developer works through your tasks, it provides continuous status updates, instantly applying your changes and feedback along the way. This allows you to seamlessly complete tasks, while improving and streamlining the development process.

The agentic coding experience is available in all AWS regions where Q Developer is supported. To learn more about agentic coding in Visual Studio and JetBrains, read our blog.

Amazon EC2 now enables you to delete underlying EBS snapshots when deregistering AMIs

Thu, 05 Jun 2025 19:00:00 GMT

Amazon EC2 now enables you to automatically delete underlying Amazon EBS snapshots when deregistering Amazon Machine Images (AMIs), allowing you to better manage your storage costs and simplify your AMI cleanup workflow.

Previously, when deregistering an AMI, you had to separately delete its associated EBS snapshots, which required additional steps. This process could lead to abandoned snapshots, resulting in unnecessary storage costs and resource management overhead. Now you can automatically delete EBS snapshots at the time of AMI deregistration.

This capability is available to all customers at no additional costs, and is enabled in all AWS commercial regions including AWS GovCloud (US), AWS China (Beijing) Region, operated by Sinnet, and in the AWS China (Ningxia) Region, operated by NWCD.

You can deregister AMIs from the EC2 Console, CLI, API, or SDK, and learn more in the AMI documentation.

Amazon RDS for MariaDB now supports community MariaDB minor versions 10.11.13 and 11.4.7

Thu, 05 Jun 2025 17:20:00 GMT

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports new community MariaDB minor versions 10.11.13 and 11.4.7. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

You can leverage automatic minor version upgrades to automatically upgrade your databases to more recent minor versions during scheduled maintenance windows. You can also leverage Amazon RDS Managed Blue/Green deployments for safer, simpler, and faster updates to your MariaDB instances. Learn more about upgrading your database instances, including automatic minor version upgrades and Blue/Green Deployments, in the Amazon RDS User Guide.

Amazon RDS for MariaDB makes it straightforward to set up, operate, and scale MariaDB deployments in the cloud. Learn more about pricing details and regional availability at Amazon RDS for MariaDB. Create or update a fully managed Amazon RDS database in the Amazon RDS Management Console.

AWS HealthOmics now supports automatic detection of WDL workflow parameters

Thu, 05 Jun 2025 17:00:00 GMT

Today, AWS HealthOmics announces automatic parameter interpolation for Workflow Description Language (WDL) workflows to help streamline the workflow creation process. This new capability automatically identifies and extracts required and optional parameters along with their descriptions directly from WDL workflow definitions, eliminating the need for customers to manually create input parameter templates. AWS HealthOmics is a HIPAA-eligible service that helps healthcare and life sciences customers accelerate scientific breakthroughs with fully managed biological data stores and workflows.

Removing the need to define parameters simplifies and accelerates building and deploying bioinformatics workflows. Customers can now onboard new WDL workflows more rapidly while retaining complete flexibility through optional customization. For organizations with extensive WDL workflow libraries, this feature significantly reduces the time required to migrate or deploy new workflows. Additionally, HealthOmics customers still maintain full control by providing custom input parameter templates when needed to override the automatic interpolation.

Input parameter interpolation for WDL workflows is now supported in all regions where AWS HealthOmics is available: US East (N. Virginia), US West (Oregon), Europe (Frankfurt, Ireland, London), Asia Pacific (Singapore), and Israel (Tel Aviv).

To learn more about automatic parameter interpolation and how to implement WDL workflows, see the AWS HealthOmics documentation.

Amazon OpenSearch Serverless now available in Asia Pacific (Hyderabad) and Asia Pacific (Osaka) regions

Thu, 05 Jun 2025 17:00:00 GMT

We are excited to announce that Amazon OpenSearch Serverless is now available in Asia Pacific (Hyderabad) and Asia Pacific (Osaka) regions. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple to run search and analytics workloads without the complexities of infrastructure management. OpenSearch Serverless' compute capacity used for data ingestion, search, and query is measured in OpenSearch Compute Units (OCUs). To control costs, customers can configure the maximum number of OCUs per account.

Please refer to the AWS Regional Services List for more information about Amazon OpenSearch Service availability. To learn more about OpenSearch Serverless, see the documentation.

Amazon CloudWatch Logs Insights launches Query Results Summarization and OpenSearch PPL enhancements

Thu, 05 Jun 2025 17:00:00 GMT

Amazon CloudWatch Logs Insights launches Query Results Summarization and OpenSearch PPL enhancements to help accelerate your logs analysis.

The new logs summarizer generates a natural language summary of the query results, providing users with clear, actionable insights. Interpreting log entries can be time-consuming and this natural language summarization capability transforms complex query results into clear, concise summaries that help you quickly identify issues and gain actionable insights from your log data.

With CloudWatch Logs Insights, you can interactively search and analyze your logs with Logs Insights query language, OpenSearch Service Piped Processing Language (PPL), and OpenSearch Service Structured Query Language (SQL). Customers using OpenSearch PPL can now analyze their logs more efficiently with new PPL commands and functions such as JOIN, SubQuery, Fillnull, Expand, Flatten, Cidrmatch and JSON functions. These new capabilities help accelerate your troubleshooting. For example, you can use subqueries to find those services which have more than 20 errors in the last day using an inner query, and then use the results of the inner query to get the average response times of those services from a different log group.

The logs summarizer is available in the US East (N. Virginia) region. OpenSearch PPL query enhancements are available in regions where OpenSearch Service direct query is available.

To learn about the log summarizer in CloudWatch Logs Insights, visit the Amazon CloudWatch Logs documentation. To learn about the new PPL commands and functions, visit the CloudWatch Logs documentation.

AWS Wickr announces a Preview experience for files

Thu, 05 Jun 2025 17:00:00 GMT

AWS Wickr announces the launch of Wickr File Previews. This new feature empowers organizations to protect sensitive files and lower the risk of data loss, by allowing network administrators to configure a “view-only” mode in the Security Groups section of the AWS Management Console for Wickr. Users within these security groups will be restricted to only viewing the supported files, and will be unable to download them.

AWS Wickr is a security-first messaging and collaboration service with features designed to help keep your communications secure, private, and compliant. AWS Wickr protects one-to-one and group messaging, voice and video calling, file sharing, screen sharing, and location sharing with end-to-end encryption. Customers have full administrative control over data, which includes addressing information governance polices, configuring ephemeral messaging options, and deleting credentials for lost or stolen devices. You can log internal and external conversations in an AWS Wickr network to a private data store that you manage for data retention and auditing purposes.

AWS Wickr is available in commercial AWS Regions that include US East (N. Virginia), AWS Canada (Central), AWS Asia Pacific (Malaysia, Singapore, Sydney, and Tokyo), and AWS Europe (London, Frankfurt, Stockholm, and Zurich). It is also available in AWS GovCloud (US-West) as FedRAMP High and Department of Defense Impact Level 5 (DoD IL5)-authorized AWS WickrGov.

To learn more and get started, see the following resources:

Amazon Q Developer CLI now supports Claude Sonnet 4

Thu, 05 Jun 2025 17:00:00 GMT

Amazon Q Developer CLI now supports Anthropic's Claude Sonnet 4 and allows developers to select specific Claude Sonnet models when performing tasks in the Q Developer CLI. With Claude Sonnet 4, you can optimize everyday development tasks through enhanced coding and reasoning capabilities, including performing complex actions, implementing bug ﬁxes, running bash commands and developing new features with immediate feedback loops and more precise responses.

You can choose from premium models - Claude Sonnet 4, Claude 3.7 Sonnet, and Claude 3.5 Sonnet - using the “/model” command, launch a new chat with a specific model using the "q chat --model <model_name>" command, or configure default model settings using the "q settings chat.defaultModel <model_name>" command. This allows you to refine specific use cases such as long-running development tasks, while providing greater control over your development workflows and increased flexibility in model selection.

Anthropic's Claude Sonnet 4 is available in the Q Developer CLI across all supported Amazon Q Developer regions at no additional cost. For more information, visit the Amazon Q Developer documentation.

Amazon Managed Service for Prometheus now available in 7 additional AWS Regions

Thu, 05 Jun 2025 17:00:00 GMT

Amazon Managed Service for Prometheus is now available in Africa (Cape Town), Asia Pacific (Thailand), Asia Pacific (Hong Kong), Asia Pacific (Malaysia), Europe (Milan), Europe (Zurich), and Middle East (UAE). Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor and alarm on operational metrics at scale.

The list of all supported regions where Amazon Managed Service for Prometheus is generally available can be found on the user guide. Customers can send up to 1 billion active metrics to a single workspace and can create many workspaces per account, where a workspace is a logical space dedicated to the storage and querying of Prometheus metrics.

To learn more about Amazon Managed Service for Prometheus collector, visit the user guide or product page.

Amazon Connect now supports external voice transfers in five additional AWS Regions

Thu, 05 Jun 2025 17:00:00 GMT

Amazon Connect external voice transfer is now available in the Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), and Europe (London) AWS Regions.

Amazon Connect external voice transfer enables Amazon Connect to directly transfer voice calls and metadata to other voice systems without using the public telephone network. You can use Amazon Connect telephony and Interactive Voice Response (IVR) with your existing voice systems to help improve customer experience and reduce costs.

For the list of AWS Regions where Amazon Connect external voice transfer is available, refer to Availability of Amazon Connect features by Region in the Amazon Connect Administrator Guide.

To learn more about Amazon Connect and other voice systems, review the following resources:

Amazon Q Developer Eclipse IDE plugin is now generally available

Thu, 05 Jun 2025 17:00:00 GMT

Amazon Q Developer plugin for the Eclipse IDE is now generally available. With this launch, developers can leverage the power of Amazon Q Developer, the most capable generative AI-powered assistant for software development, within the Eclipse IDE.

Within the Eclipse IDE, you’ll now be able to utilize Amazon Q Developer’s agentic coding experience to seamlessly execute complex workflows. With this coding experience, Q Developer can intelligently take actions on your behalf. It can read your project files to intelligently build the context it needs, suggest code diffs, and run shell commands. As Q Developer works through your tasks, it provides continuous status updates, instantly applying your changes and feedback along the way. This helps Q Developer create code, generate unit tests, and perform code reviews significantly faster, streamlining development workflows across the entire software development lifecycle.

The Amazon Q Developer plugin for the Eclipse IDE is available in all AWS regions where Q Developer is supported. Learn more and download the free Amazon Q Developer plugin for Eclipse to get started.

Amazon MWAA now available in additional Region

Thu, 05 Jun 2025 17:00:00 GMT

Amazon Managed Workflows for Apache Airflow (MWAA) is now available in AWS Region Asia Pacific (Malaysia).

Amazon MWAA is a managed service for Apache Airflow that lets you use the same familiar Apache Airflow platform as you do today to orchestrate your workflows and enjoy improved scalability, availability, and security without the operational burden of having to manage the underlying infrastructure. Learn more about using Amazon MWAA on the product page.
Please visit the AWS region table for more information on AWS regions and services. To learn more about Amazon MWAA visit the Amazon MWAA documentation.

Apache, Apache Airflow, and Airflow are either registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries.

Pricing and usage model updates for Amazon EC2 instances accelerated by NVIDIA GPUs

Thu, 05 Jun 2025 17:00:00 GMT

AWS announces two updates to Amazon EC2 instances accelerated by NVIDIA GPUs.

Availability of savings plans for Amazon EC2 P6-B200 instances which were available at launch only through EC2 Capacity Blocks for ML.

Reduced pricing for Amazon EC2 P5 and P5en instances and Amazon EC2 P4d and P4de instances: The following pricing reductions apply to On Demand pricing beginning June 1, 2025 and to Savings Plan purchases effective after June 4, 2025: P5 - up to 45% reduction, P5en - up to 26% reduction, and P4d and P4de - up to 33% reduction. The percentages apply to instances running Amazon Linux, slightly smaller reductions apply to instances running other operating systems. To provide increased accessibility to reduced pricing, we are also making at-scale, On-Demand capacity available for:

P4d in Asia Pacific (Seoul), Asia Pacific (Sydney), Canada (Central), Europe (London) Regions
P4de in US East (N. Virginia) Region
P5 in Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Jakarta), South America (São Paulo) Regions
P5en in Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Jakarta) Regions

The new pricing reflects AWS's commitment to making advanced GPU computing more accessible while passing cost savings directly to customers. To learn more about the updated pricing please consult the EC2 pricing page.

AWS Network Firewall launches new monitoring dashboard

Wed, 04 Jun 2025 21:20:00 GMT

Today, AWS announces the launch of a new monitoring dashboard in the AWS Network Firewall console, enhancing customers ability to monitor their network traffic. This new feature provides visibility into network activities, allowing for more effective management and troubleshooting of firewall configurations.

The new dashboard offers valuable insights into traffic patterns, including top traffic flows, TLS Server Name Indication (SNI), and HTTP Host headers. This level of detail allows customers to quickly identify and analyze their most significant network interactions. Additionally, the dashboard provides visibility into long-lived TCP flows and traffic flows where TCP handshake failed, which is particularly useful for troubleshooting network issues and identifying potential security concerns.

This new monitoring dashboard is available in all AWS Regions where AWS Network Firewall is supported, see AWS Region table. There are no additional charges on AWS Network Firewall to use this dashboard. Please check Amazon CloudWatch pricing or Amazon Athena pricing to understand charges related to Logs and Queries.

To take advantage of this new feature, customers need to configure Flow logs and Alert logs in their AWS Network Firewall, and enable the monitoring dashboard. For more information on how to set up and use the new monitoring dashboard, please visit the AWS Network Firewall documentation or log in to the AWS Management Console.

ENA Express supports 120 new instances

Wed, 04 Jun 2025 21:15:00 GMT

120 EC2 instances now support ENA Express, including network optimized, storage, high-memory, and accelerated computing. With this launch, ENA Express is adding support for 35 network optimized instances, 6 storage instances, 7 high-memory instances, and 5 accelerated computing instances. Additionally, ENA Express has added support for 67 different compute, general purpose, and memory optimized EC2 instances.

ENA Express is a networking feature that uses the AWS Scalable Reliable Datagram (SRD) protocol to improve network performance in two key ways: higher single flow bandwidth and lower tail latency for network traffic between EC2 instances. SRD is a proprietary protocol that delivers these improvements through advanced congestion control, multi-pathing, and packet reordering directly from the Nitro card. ENA Express works transparently to your applications with TCP and UDP protocols.

ENA Express with network optimized instances is great for file systems and media encoding workloads that need higher single flow bandwidth and consistent tail latency. ENA Express coupled with storage instances improves performance for large object transactions to and from databases. ENA Express on high-memory instances is great for single flow performance for in memory databases transactions like with SAP HANA. Finally, for accelerated computing instances ENA Express provides better single flow performance for file system access to services like FSx Lustre.

ENA Express is available in all AWS Commercial Regions and AWS GovCloud (US) Regions and comes at no additional cost. For a complete list of supported instances, please review the latest EC2 Documentation.

Announcing Amazon RDS for PostgreSQL Extended Support versions R2 11.22-rds.20250508 and 12.22-rds.20250508

Wed, 04 Jun 2025 19:00:00 GMT

Amazon RDS for PostgreSQL introduces Extended Support minor versions 11.22-rds.20250508 and 12.22-rds.20250508, which include important security updates and bug fixes for PostgreSQL databases.. We recommend upgrading your RDS instances to these latest versions to maintain optimal security and performance of your PostgreSQL deployments.

Amazon RDS Extended Support provides you more time, up to three years, to upgrade to a new major version to help you meet your business requirements. During Extended Support, Amazon RDS will provide critical security and bug fixes for your RDS for PostgreSQL databases after the community ends support for a major version. You can run your PostgreSQL databases on Amazon RDS with Extended Support for up to three years beyond a major version’s end of standard support date.

You can use automatic minor version upgrades to automatically upgrade your databases to more recent minor versions during scheduled maintenance windows. You can also use Amazon RDS Blue/Green deployments for RDS for PostgreSQL using physical replication for your minor version upgrades. Learn more about upgrading your database instances, including automatic minor version upgrades and Blue/Green Deployments in the Amazon RDS User Guide.

Amazon RDS for PostgreSQL makes it simple to set up, operate, and scale PostgreSQL deployments in the cloud. See Amazon RDS for PostgreSQL Pricing for pricing details and regional availability. Create or update a fully managed Amazon RDS database in the Amazon RDS Management Console.

Amazon EC2 M7g instances are now available in AWS GovCloud (US-West) Region

Wed, 04 Jun 2025 17:00:00 GMT

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7g instances are available in the AWS GovCloud (US-West) Region. These instances are powered by AWS Graviton3 processors that provide up to 25% better compute performance compared to AWS Graviton2 processors, and built on top of the the AWS Nitro System, a collection of AWS designed innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

Amazon EC2 Graviton3 instances also use up to 60% less energy to reduce your cloud carbon footprint for the same performance than comparable EC2 instances. For increased scalability, these instances are available in 9 different instance sizes, including bare metal, and offer up to 30 Gbps networking bandwidth and up to 20 Gbps of bandwidth to the Amazon Elastic Block Store (EBS).

To learn more, see Amazon EC2 M7g. To explore how to migrate your workloads to Graviton-based instances, see AWS Graviton Fast Start program and Porting Advisor for Graviton. To get started, see the AWS GovCloud (US) Console.

Amazon Redshift now supports increased concurrency for vacuum operations

Wed, 04 Jun 2025 17:00:00 GMT

Amazon Redshift has enhanced its vacuum operations to support increased concurrency across different tables in data warehouses. This feature reduces maintenance time and improves resource utilization by allowing multiple vacuum operations to run simultaneously.

Vacuum operations maintain optimal query performance by performing two critical functions: sorting table data and reclaiming disk space from deleted rows. Redshift already offers automatic vacuum operations to minimize the need for manual maintenance. Now, these operations run at a higher concurrency automatically managed by Redshift. Further, users can also run multiple manual vacuum operations concurrently on different tables across sessions. This enhancement also extends support to run automatic and manual vacuum operations simultaneously across various vacuum modes. Concurrent vacuum operations reduces the maintenance time and enables better resource utilization of the data warehouse, solving a key operational challenge for database administrators.

This support for concurrent vacuum operations is available in all AWS Regions where Amazon Redshift is available. For more information, please refer to our documentation.

AWS Resource Groups now supports IPv6

Wed, 04 Jun 2025 17:00:00 GMT

AWS Resource Group APIs now supports IPv6 for dual stack subnets so you can filter IPv4 and IPv6 traffic flows to and from the public internet, on-premises network, or any endpoint in your Amazon Virtual Private Cloud (VPC).

AWS Resource Groups enables you to model, manage and automate tasks on large numbers of AWS resources by using tags to logically group your resources. You can create logical collections of resources such as applications, projects, and cost centers, and manage them on dimensions such as cost, performance, and compliance in AWS services such as myApplications, AWS Systems Manager and Amazon CloudWatch.

IPv6 support is available in all AWS Regions where AWS Resource Groups is available today. To get started, learn how to configure IPv6 support or learn more about AWS Resource Groups.

Amazon EKS add-ons now supports Private CA Connector for Kubernetes

Wed, 04 Jun 2025 17:00:00 GMT

Today, AWS announces the general availability of Private CA Connector for Kubernetes Amazon EKS add-on. This new integration allows customers to easily issue certificates from AWS Private Certificate Authority (AWS Private CA) to their Kubernetes clusters running on Amazon Elastic Kubernetes Service (Amazon EKS). The add-on installs and manages the Private CA Connector for Kubernetes. The connector enables customers to use AWS Private CA certificates for Transport Layer Security (TLS) termination at load balancers, Kubernetes ingress controllers, and pods, as well as securing pod-to-pod communication.

Now, with the new Amazon EKS add-on, customers can quickly and easily set up new and existing clusters using automation to leverage AWS Private CA certificates, enhancing security and simplifying certificate management. Previously, this process could take hours or even days and involved numerous manual steps. The connector works in conjunction with cert-manager, an open-source certificate lifecycle management Kubernetes add-on, to provide a comprehensive solution for certificate issuance and management within Kubernetes environments. cert-manager is also available through the Amazon EKS add-ons catalog. Amazon EKS add-ons are curated extensions that automate the installation, configuration, and lifecycle management of operational software for Kubernetes clusters, simplifying the process of maintaining cluster functionality and security. AWS Private CA is a managed service that lets you create private certificate authority hierarchies to issue private certificates. AWS Private CA secures private key material using Federal Information Processing Standard (FIPS) 140-3 Security Level 3 hardware security modules (HSMs).

This new Amazon EKS add-on is available in all commercial AWS Regions.

To get started, see the following resources:

Amazon EC2 C7a instances are now available in AWS Europe (London) Region

Wed, 04 Jun 2025 17:00:00 GMT

Starting today, the compute optimized Amazon EC2 C7a instances are now available in AWS Europe (London) Region. C7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz, deliver up to 50% higher performance compared to C6a instances.

C7a instances offer new processor capabilities such as AVX-512, VNNI, and bfloat16. They feature Double Data Rate 5 (DDR5) memory to enable high-speed access to data in memory and 2.25x more memory bandwidth compared to C6a instances, making these instances ideal for even latency sensitive workloads. C7a instances offer 12 sizes from medium to 48xlarge, including a bare-metal size. And with the launch of C7a instances, customers can attach up to 128 EBS volumes to an EC2 instance — by comparison, C6a instances allow up to 28 EBS volume attachments to an EC2 instance. These instances are built on the AWS Nitro System and ideal for high performance, compute-intensive workloads such as batch processing, distributed analytics, high performance computing (HPC), ad serving, highly-scalable multiplayer gaming, and video encoding.

C7a instances are available through On-Demand, Spot Instances, and Savings Plans. To get started, visit the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs. To learn more, see C7a instances.

AWS Resource Groups adds support AWS PrivateLink

Wed, 04 Jun 2025 17:00:00 GMT

AWS Resource Group APIs now come with AWS PrivateLink support, allowing you to invoke AWS Resource Group APIs from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet.

AWS Resource Groups enables you to model, manage and automate tasks on large numbers of AWS resources by using tags to logically group your resources. You can create logical collections of resources such as applications, projects, and cost centers, and manage them on dimensions such as cost, performance, and compliance in AWS services such as myApplications, AWS Systems Manager and Amazon CloudWatch.

AWS PrivateLink support for AWS Resource Groups is available in all AWS Regions where AWS Resource Groups is available. To get started, follow the directions provided in the AWS PrivateLink documentation or visit AWS Resource Groups.

Amazon Lex extends custom vocabulary feature to additional languages

Wed, 04 Jun 2025 17:00:00 GMT

Amazon Lex now extends custom vocabulary support to multiple languages, including Chinese, Japanese, Korean, Portuguese, Catalan, French, German, and Spanish locales. This enhancement enables you to improve speech recognition accuracy for domain-specific terminology, proper nouns, and rare words across a wider range of languages, creating more natural and accurate conversational experiences. With custom vocabulary, you can provide Amazon Lex with specific phrases that should be recognized during audio conversations, even when the spoken audio might be ambiguous. For example, you can ensure technical terms like "Cognito" or industry-specific vocabulary like "solvency" are correctly transcribed during bot interactions, providing consistent speech recognition capabilities that work both for intent recognition and improving slot value elicitation.

This feature is now available in all AWS Regions where Amazon Lex operates for the supported languages.

To learn more about implementing custom vocabulary for your bots, visit the Amazon Lex V2 Developer Guide.

ENA Express for AWS GovCloud (US) Regions

Tue, 03 Jun 2025 21:45:00 GMT

AWS announces ENA Express, a purpose-built network interface powered by the SRD (scalable reliable datagram) protocol, for EC2 instances in AWS GovCloud (US) Regions. ENA Express is an ENA feature that uses the SRD protocol to improve network performance in two key ways: higher single flow bandwidth and lower tail latency for network traffic between EC2 instances.

Workloads such as databases, file systems, and distributed storage systems need larger single flows and are sensitive to variance in tail latency. Before today, customers could use multipath TCP to increase bandwidth, but this adds complexity and at times, it maybe incompatible with the application layer. TCP is also not equipped to handle congestion when your server is overloaded with requests. SRD is a proprietary protocol that delivers these improvements through congestion control, multi-pathing, and packet reordering directly from the Nitro card. Enabling ENA Express is a simple configuration that makes enabling SRD as easy as a single command or console toggle for your EC2 instances.

Using the SRD protocol, ENA Express increases the maximum single flow bandwidth and improves tail latencies for high throughput workloads. ENA Express works transparently to your applications with the TCP and UDP protocols. When configured, ENA Express works between any two supported instances in an Availability Zone.

ENA Express is now available in the AWS GovCloud (US) Regions and comes at no additional cost. To learn more and get started, please review the latest EC2 Documentation.

AWS Site-to-Site VPN introduces three new capabilities for enhanced security

Tue, 03 Jun 2025 20:25:00 GMT

AWS Site-to-Site VPN, a fully managed service that allows you to create a secure connection between your data center or branch office and your AWS resources using IP Security (IPSec) tunnels, is adding three new capabilities for enhanced security and ease of configuration.

AWS Secrets Manager Integration: With the AWS Secrets Manager integration, when customers store their pre-shared keys (PSKs) in Secrets Manager, VPN connection API responses will redact the PSK and instead display the Secrets Manager ARN (Amazon Resource Name), providing enhanced security.
New API to track VPN algorithms: You can now easily track the currently negotiated internet key exchange (IKE) version, Diffie-Hellman (DH) groups, encryption algorithms, and integrity algorithms using the “GetActiveVpnTunnelStatus” API. This new API eliminates the need for you to enable Site-to-Site VPN logs to get this information, saving time and reducing operational overhead.
Recommended Configuration: “GetVpnConnectionDeviceSampleConfiguration” API now includes “recommended” parameter to help you use the best-practices security configuration - IKE version 2, DH group 20, SHA-384 integrity algorithm, and AES-GCM-256 encryption algorithm - on your customer gateway devices, reducing configuration time and potential errors.

There is no additional charge for using these capabilities. These capabilities are available in all AWS commercial Regions where AWS Site-to-Site VPN is available, except Europe (Milan) Region. To learn more and get started, visit the AWS Site-to-Site VPN documentation.

Amazon Athena announces managed query results to streamline analysis workflows

Tue, 03 Jun 2025 20:22:00 GMT

Amazon Athena announces managed query results, a new feature that automatically stores, encrypts, and manages the lifecycle of query results for you at no additional cost. Managed query results streamlines analysis and administration workflows by providing temporary query results storage, removing the requirement for Amazon S3 buckets to store results and separate processes to clean up results that you no longer need. Now, Athena offers both service-managed, temporary result storage and customer-managed S3 storage options to meet different needs.

Whether you're working on a team conducting interactive analysis across multiple workgroups or automating workgroup creation through code, managed query results allows you to run queries in fewer steps. For example, if you create a new workgroup for an analysis that you'll perform, you can now choose to have Athena manage your result data for you. This allows you to run queries without first specifying the S3 result location, ensures results are encrypted, and avoids cost from storing query results after they're no longer needed. When you use managed query results, you can continue to access query results through the same interfaces as you can when using an S3 bucket in your account.

To get started, use the AWS Management Console, AWS SDK, or CLI to configure your new or existing workgroups to use managed query results.

Managed query results is generally available in all regions where Athena is available, except GovCloud and China regions. To learn more, see Managed query results in the Athena User Guide.

Amazon API Gateway introduces routing rules for REST APIs

Tue, 03 Jun 2025 19:10:00 GMT

Amazon API Gateway now supports routing rules for REST APIs using custom domain names. This new capability enables you to dynamically route incoming requests based on HTTP header values, URL base paths, or a combination of both.

This flexibility enables various use cases, including A/B testing, API versioning, and dynamic backend selection. To use this feature, you define routing rules by assigning priorities, defining conditions (HTTP headers, URL paths, or both), and associating actions. API Gateway then evaluates these rules in priority order with lower numbers taking precedence. When a request meets all conditions in a rule, API Gateway routes it to the configured REST API ID and stage. By implementing routing logic directly within API Gateway, you can eliminate proxy layers and complex URL structures while maintaining granular routing control over your API traffic. This feature is supported on both public and private REST APIs and is compatible with existing API mappings.

Routing rules for custom domain names are available in all AWS Regions, including the AWS GovCloud (US) Regions. To learn more, please refer to the blogpost and the API Gateway documentation.

AWS Backup adds support for SNS notifications and EventBridge events for backup indexes

Tue, 03 Jun 2025 18:50:00 GMT

Today, AWS Backup announces the addition of notification support for backup indexes in AWS Backup. You can now subscribe to Amazon SNS notifications and Amazon EventBridge events for backup indexing, allowing you to proactively monitor the status of your backup indexes. You can now receive notifications when a backup index is created, deleted, or fails to create, enhancing your ability to monitor and track your backup operations.

To get started, you can subscribe to SNS notifications or create a rule in EventBridge. Once opted in, you will receive notifications on the status of your backup index, including when it is created, deleted or failed to create. This is valuable, as backup indexes are a pre-requisite to the search metadata of your backups and conduct file-level item restores.
Prepare for potential data loss events by knowing when your backup indexes are created as it expedites search and recovery granular data if needed.

AWS Backup support for notification backup indexes is available in all AWS Commercial and AWS GovCloud (US) Regions, where AWS Backup indexes, Amazon SNS, and Amazon EventBridge are supported are available. You can get started by using the User Notifications Console or CLI and Amazon EventBridge Console or CLI. For more information, visit our documentation.

Amazon Managed Service for Apache Flink adds IPv6 endpoints

Tue, 03 Jun 2025 18:00:00 GMT

Amazon Managed Service for Apache Flink now supports dual-stack endpoints for both IPv4 and IPv6 traffic. When you make a request to a dual-stack endpoint, the endpoint URL resolves to an IPv6 or an IPv4 address. You can access dual-stack endpoints using the SDK, a configuration file, or an environment variable.

The continued growth of the internet is exhausting available Internet Protocol version 4 (IPv4) addresses. IPv6 increases the number of available addresses by several orders of magnitude so customers will no longer need to manage overlapping address spaces in their VPCs. Amazon Managed Service for Apache Flink makes it easier to transform and analyze streaming data in real time with Apache Flink. Apache Flink is an open source framework and engine for processing data streams. Create or update an Amazon Managed Service for Apache Flink application in the Amazon Managed Service for Apache Flink console.

This capability is available in all AWS regions where Amazon Managed Service for Apache Flink is currently available. For Amazon Managed Service for Apache Flink region availability, refer to the AWS Region Table. You can find out more about IPv6 on AWS here. For a full list of dual-stack endpoints, see the SDK Reference guide.

Amazon Q Developer now helps customers optimize AWS costs

Tue, 03 Jun 2025 17:00:00 GMT

Amazon Web Services (AWS) announces that Amazon Q Developer now provides personalized cost optimization recommendations to help customers easily identify and implement savings opportunities. This new capability helps customers find and implement opportunities for rightsizing instances, purchasing Savings Plans and Reserved Instances, terminating idle resources, and more - all through natural language conversations. Amazon Q Developer combines recommendations from AWS Cost Optimization Hub with expert guidance to help customers accelerate their cost optimization journey and maximize savings.

With this launch, customers can ask Amazon Q Developer questions like "How can I lower my AWS bill?" to receive prioritized recommendations based on potential savings, implementation effort, and performance risk. Customers can also ask detailed follow-up questions like "How was this recommendation calculated?" or "How was this instance identified as idle?", and receive narrative explanations including metrics, configurations, and customization options. Customers can also ask Amazon Q Developer to analyze their costs, check resource details, and receive step-by-step implementation guidance, completing more of their end-to-end cost optimization workflow through natural conversations.

This feature is available in the US East (N. Virginia) region, and provides cost optimization recommendations spanning all commercial AWS Regions, except the China Regions, and the AWS GovCloud (US) Regions.

To learn more about using Amazon Q Developer for cost optimization, see the Amazon Q Developer User Guide. To get started, simply open the Amazon Q chat panel in the AWS Management Console and ask about ways to optimize your costs.

Amazon VPC Route Server announces logging enhancements

Tue, 03 Jun 2025 17:00:00 GMT

Amazon VPC Route Server enhances connectivity monitoring and logging with new network metrics. These metrics allow customers to proactively monitor network health, troubleshoot network issues and gain visibility into route propagation and peer connectivity.

Previously, customers would manually track Border Gateway Protocol (BGP) and Bidirectional Forwarding Detection (BFD) session changes and often required AWS Support assistance for network troubleshooting. With these new logging capabilities, customers can independently monitor and diagnose network connectivity issues, leading to faster resolution times and improved network visibility. The enhancement offers real-time monitoring of BGP and BFD session states, historical peer-to-peer session data logging and flexible log delivery options through CloudWatch, S3, Data Firehose or AWS CLI.

Enhanced logging for VPC Route Server is available in all AWS commercial regions where VPC Route Server is supported. Data charges for vended logs will apply for Amazon CloudWatch, Amazon S3, and Amazon Data Firehose. To learn more about this feature, please refer to our documentation.

Amazon EC2 I4i instances now available in AWS Europe (Spain) region

Tue, 03 Jun 2025 17:00:00 GMT

Amazon Web Services (AWS) announces the availability of Amazon EC2 I4i Instances in the AWS Europe (Spain) region. Designed for large I/O intensive storage workloads, these instances are powered by 3rd generation Intel Xeon Scalable processors (Ice Lake) and deliver high local storage performance within Amazon EC2 using 2nd generation AWS Nitro NVMe SSDs.

I4i instances offer up to 30 TB of NVMe storage from Amazon Nitro SSDs and Torn Write Prevention (TWP) feature which can improve database transactions per seconds without compromising resiliency. These instances deliver high performance and are ideal for databases such as MySQL, Oracle DB, and Microsoft SQL Server, and NoSQL databases such as MongoDB, Couchbase, Aerospike, and Redis where low latency local NVMe storage is needed in order to meet application service level agreements (SLAs). I4i instances offer up to 75 Gbps of network bandwidth and up to 40 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS).

Customers can purchase the I4i instances via Savings Plans, Reserved, On-Demand, and Spot instances.

To learn more, please visit the Amazon EC2 I4i instances page.

Near real-time matching available in AWS Entity Resolution

Tue, 03 Jun 2025 17:00:00 GMT

Today, AWS Entity Resolution introduces near real-time rule-based matching to enable customers to match new and existing records within seconds.

With this launch, organizations can match records in near real-time to support use cases across multiple industries that require low-latency, time-sensitive matching on consumer records. For example, travel and hospitality companies can match consumer records in near real-time to prioritize callers in contact centers, recognize loyal customers, deliver tailored product recommendations, and personalize guest check-in experiences. Healthcare organizations can match patient records in near real-time, with appropriate patient consent, to provide clinicians with a complete view of medical history and improve care coordination. Additionally, financial institutions can match new and historical financial transactions within seconds to identify discrepancies and detect fraudulent transactions. When processing incremental records using rule-based matching, AWS Entity Resolution compares the incoming record against existing records, returns a match using a consistent match ID, or generates a new match ID, all within seconds.

AWS Entity Resolution helps organizations match, link, and enhance related customer, product, business, or healthcare records stored across multiple applications, channels, and data stores. You can get started in minutes using matching workflows that are flexible, scalable, and can seamlessly connect to your existing applications, without any expertise in entity resolution or ML. AWS Entity Resolution is generally available in these AWS Regions. To learn more, visit AWS Entity Resolution.

Amazon EC2 High Memory U7i instances are now available in Europe (Frankfurt) Region

Tue, 03 Jun 2025 17:00:00 GMT

Amazon EC2 U7i-6tb instances are now available in the Europe (Frankfurt) region. U7i-6tb instances are part of AWS 7th generation and are powered by custom fourth generation Intel Xeon Scalable Processors (Sapphire Rapids). U7i-6tb instances offer 6TiB of DDR5 memory enabling customers to scale transaction processing throughput in a fast-growing data environment.

U7i-6tb instances offer 448 vCPUs, support up to 60Gbps Elastic Block Storage (EBS) for faster data loading and backups, deliver up to 100Gbps of network bandwidth, and support ENA Express. U7i instances are ideal for customers using mission-critical in-memory databases like SAP HANA, Oracle, and SQL Server.

To learn more about U7i instances, visit the High Memory instances page.

Amazon CloudWatch now supports logs transformation for Contributor Insights

Mon, 02 Jun 2025 21:00:00 GMT

Amazon CloudWatch Contributor Insights now supports analyzing transformed or enriched logs. With today’s launch, customers can now create Contributor Insights rules on CloudWatch logs that have been transformed into JSON format to create time series that display the top-N contributors, total number of unique contributors, and their usage.

Using transformation and enrichment, customers can structure their logs using pre-configured templates for common AWS services such as AWS Web Application Firewall (WAF), Amazon Virtual Private Cloud (VPC) Flow Logs, or custom transformers such as Grok to analyze transformed log data at account level or log group level. Customers can define the Contributor Insights rules leveraging these transformed logs. Customers can also rename attributes and add additional metadata. For example, customers can create Contributor Insights rules that have been enriched with metadata like accountID or loggroupname, which improves troubleshooting.

Log transformation and enrichment capabilities are available in all AWS Commercial Regions and are included with the existing Standard log class ingestion price. Customers can create Contributor Insights rules on transformed and enriched logs in the Amazon CloudWatch Console or using AWS Command Line Interface (CLI), AWS CloudFormation, AWS Cloud Development Kit (CDK), and AWS SDKs. To learn more about log transformation and enrichment in Amazon CloudWatch Logs and how to leverage it with Contributor Insights, visit the Amazon CloudWatch documentation.

AWS Private CA announces support for Microsoft Active Directory child domains

Mon, 02 Jun 2025 19:05:00 GMT

AWS Private Certificate Authority (AWS Private CA) now supports Active Directory (AD) child domains through the Private CA Connector for AD. With this feature, customers get a consistent experience using AWS Private CA across parent and child AD domains. AD administrators can issue certificates to users, computers, and devices in a child domain independently of the parent domain and other child domains. This feature works with on-premises and self-hosted AD deployments that are connected to AWS through AWS Directory Service AD Connector.

Private CA Connector for AD allows you to replace your certificate authorities (CAs) with AWS Private CA, a highly-available, fully-managed cloud CA that secures private key material using hardware security modules (HSMs). Connector for AD supports auto-enrollment to ensure AD domain-joined users, computers, and devices get and maintain valid certificates automatically. In addition to Connector for AD, AWS Private CA provides connectors that enable integration with Kubernetes clusters and enterprise mobile device management (MDM) solutions.

AD child domain support is available in all regions where both AWS Private CA Connector for AD and AWS Directory Service are available. To learn more about using AWS Private CA with Active Directory child domains, visit the AWS Private CA User Guide.

AWS Marketplace now supports a localized experience in four additional languages

Mon, 02 Jun 2025 18:40:00 GMT

AWS Marketplace has expanded its global accessibility by introducing support for French, Spanish, Korean, and Japanese languages across both the website and AWS console. This enhancement allows customers to discover, evaluate, procure, and deploy solutions in their preferred language, reducing friction for global customers and enhancing their purchasing process.

For a localized experience, buyers select their preferred language out of 5 options in the language dropdown. The resulting language switch extends across the customer journey, allowing customers to browse the AWS Marketplace homepage, search for products, view details, and buy products and services in their chosen language. The localization covers SaaS products, AMI-based products, container-based products, and professional services.

For AWS Marketplace sellers, this launch expands their global reach. AWS Marketplace automatically translates product information into all supported languages, allowing the translated versions to become available to buyers with no additional seller effort. Sellers maintain control over their global presence and can opt out from this feature on a language or listing basis. Furthermore, sellers can now provide End User License Agreements (EULAs) in the primary language of the country for geo-fenced listings.

To get started, select your preferred language in the upper right corner of the website or console header. To learn more about AWS Marketplace's language support, visit the AWS Marketplace Buyer Guide and Seller Guide.

Second-generation Amazon FSx for NetApp ONTAP now available in the AWS Mumbai and Tokyo Regions

Mon, 02 Jun 2025 18:12:00 GMT

Amazon FSx for NetApp ONTAP second-generation file systems are now available in additional AWS Regions: Asia Pacific (Mumbai), and Asia Pacific (Tokyo).

Amazon FSx makes it easier and more cost effective to launch, run, and scale feature-rich high-performance file systems in the cloud. Second-generation FSx for ONTAP file systems give you more performance scalability and flexibility over first-generation file systems by allowing you to create or expand file systems with up to 12 highly-available (HA) pairs of file servers, providing your workloads with up to 72 GBps of throughput and 1 PiB of provisioned SSD storage.

With this regional expansion, second-generation FSx for ONTAP file systems are available in the following AWS Regions: US East (N. Virginia, Ohio), US West (N. California, Oregon), Europe (Frankfurt, Ireland, Stockholm), and Asia Pacific (Mumbai, Singapore, Sydney, Tokyo). You can create second-generation Multi-AZ file systems with a single HA pair, and Single-AZ file systems with up to 12 HA pairs. To learn more, visit the FSx for ONTAP user guide.

Introducing agentic capabilities for Amazon Q Developer Chat in the AWS Management Console and chat applications

Mon, 02 Jun 2025 18:00:00 GMT

Today, we’re announcing new and improved agentic Amazon Q Developer experience in the AWS Management Console, Microsoft Teams, and Slack. Amazon Q Developer can now answer more complex queries than ever before in the AWS Management Console chat, offering deeper resource introspection and a dynamic, more interactive troubleshooting experience for users.

Till today, Amazon Q Developer helped simplify manual work needed from cloud engineering teams to monitor and troubleshoot resources by answering basic AWS questions and providing specialized guidance. Now, it combines deep AWS expertise with new multi-step reasoning capabilities that enable it to consult multiple information sources and resolve complex queries within the AWS Management Console and chat applications.Customers can ask questions about AWS services and their resources, leaving Amazon Q to automatically identify the appropriate capabilities tools for the task, selecting from AWS APIs across 200+ services. Amazon Q breaks all queries into executable steps, asks for clarification when needed, and combines information from multiple services to solve the task. For example, you can ask, “Why am I getting 500 errors from my payment processing Lambda function?” and Q automatically gathers relevant CloudWatch logs, examines function’s configuration and permissions, checks connected services like API Gateway and DynamoDB and analyzes recent changes - all while showing progress and reasoning to enable builders to work more efficiently.

These new capabilities are accessible in all AWS regions where Amazon Q Developer is available. Learn more in this deep-dive blog.

Amazon DataZone launches upgrade domain to SageMaker

Mon, 02 Jun 2025 17:00:00 GMT

Today, Amazon DataZone and Amazon SageMaker announced a new user interface (UI) capability allowing a DataZone domain to be upgraded and used directly in the next generation of Amazon SageMaker. This makes the investment customers put into developing Amazon DataZone transferable to Amazon SageMaker. All content created and curated through Amazon DataZone such as assets, metadata forms, glossaries, subscriptions, etc. are available to users through Amazon SageMaker Unified Studio after the upgrade.

As an Amazon DataZone administrator, you can choose which of your domains to upgrade to Amazon SageMaker via a UI driven experience. The upgraded domain lets you leverage your existing Amazon DataZone implementation in the new Amazon SageMaker environment and expand to new SQL analytics, data processing and AI uses cases. Additionally, after upgrading both Amazon DataZone and Amazon SageMaker portals remain accessible. This provides administrators flexibility with user rollout of Amazon SageMaker, while ensuring business continuity for users operating within Amazon DataZone. By upgrading to Amazon SageMaker, users can build on their investment from Amazon DataZone by utilizing Amazon SageMaker's unified platform that serves as the central hub for all data, analytics, and AI needs.

The domain upgrade capability is available in all AWS Regions where Amazon DataZone and Amazon SageMaker is supported, including: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Seoul), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (Stockholm), Europe (London), South America (São Paulo), Mumbai (BOM), Stockholm (ARN), and Paris (CDG).

To learn more, visit Amazon DataZone and Amazon SageMaker then get started with the upgrade domain documentation.

Amazon Lex adds AWS CloudFormation support for GovCloud (US-West) and advanced features

Mon, 02 Jun 2025 17:00:00 GMT

Amazon Lex now offers AWS CloudFormation support in AWS GovCloud (US-West), extending infrastructure-as-code capabilities to government agencies and their partners.Additionally, CloudFormation support also now includes composite slots and QnAIntent features across all AWS regions where Amazon Lex operates, allowing developers to define, deploy, and manage these advanced conversational components through CloudFormation templates.

With CloudFormation support in AWS GovCloud (US-West), government agencies can now automate the deployment of Amazon Lex chatbots while maintaining compliance with strict security requirements. Additionally, two key conversational AI features are now supported via CloudFormation: composite Slots, which enable more natural interactions by collecting multiple data points in a single prompt (e.g., "Please provide your city and state" instead of separate questions), and QnAIntent, which automatically answers user questions by searching configured knowledge bases and returning relevant information from documents, FAQs, or knowledge bases.

CloudFormation support for Amazon Lex including composite slots and QnAIntent, is available in all AWS Regions where Amazon Lex operates.

To get started with these features, see the CloudFormation resources for Amazon Lex in the Amazon Lex Developer Guide.

AWS Compute Optimizer now supports Aurora I/O-Optimized recommendations

Mon, 02 Jun 2025 17:00:00 GMT

AWS Compute Optimizer now provides Amazon Aurora I/O-Optimized recommendations for Aurora DB Cluster Storage. These recommendations help make informed decisions about adopting Aurora I/O-Optimized configurations to increase pricing predictability and achieve potential cost savings based on your cluster's storage patterns and usage.

AWS Compute Optimizer automatically analyzes your Aurora DB clusters' instance storage and I/O costs to provide detailed cost comparisons between Aurora I/O-Optimized and Aurora Standard configurations. By default, Compute Optimizer analyzes 14 days of metrics, which you can extend to 32 days for free or up to 93 days with enhanced infrastructure metrics enabled. With enhanced metrics, you can also view month-over-month I/O usage variations to better evaluate the benefits of each storage configuration.

This new feature is available in all AWS Regions where AWS Compute Optimizer is available except the AWS GovCloud (US) and the China Regions. To learn more about the new feature updates, please visit Compute Optimizer’s product page and user guide.

Cost Optimization Hub supports recommendations for Amazon Aurora

Mon, 02 Jun 2025 17:00:00 GMT

Cost Optimization Hub now supports instance and cluster storage recommendations for Amazon Aurora databases. These recommendations help you identify idle database instances and choose the optimal DB instance class and storage configuration for your Aurora databases.

With this launch, you can view, filter, consolidate, and prioritize Aurora optimization recommendations across your organization's member accounts and AWS Regions through a single dashboard. Cost Optimization Hub quantifies estimated savings from these recommendations, taking into account your specific discounts, such as Reserved Instances, enabling you to evaluate Aurora cost savings alongside other cost optimization opportunities.

The new Amazon Aurora recommendations are now available in Cost Optimization Hub across all AWS Regions where Cost Optimization Hub is supported.

Amazon MWAA now provides option to update environments without interrupting task execution

Fri, 30 May 2025 22:00:00 GMT

Amazon Managed Workflows for Apache Airflow (MWAA) now provides the option to update environments without interrupting running tasks on supported Apache Airflow versions (v2.4.3 or later).

Amazon MWAA is a managed service for Apache Airflow that lets you use the same familiar Apache Airflow platform as you do today to orchestrate your workflows and enjoy improved scalability, availability, and security without the operational burden of having to manage the underlying infrastructure. Amazon MWAA now allows you to update your environment without disrupting your ongoing workflow tasks. By choosing this option, you are now able to update an MWAA environment in graceful manner where MWAA will replace Airflow Scheduler and Webserver components, provision new workers, and wait for ongoing worker tasks to complete before removing older workers. The graceful option is available only for supported Apache Airflow versions (v2.4.3 or later) on MWAA.

You can enable graceful updates in your MWAA environment by performing an update with just a few clicks in the AWS Management Console in all currently supported Amazon MWAA regions. To learn more about graceful updates of MWAA environments, visit the Amazon MWAA documentation. To learn more about the Apache Airflow versions on MWAA, visit the Apache Airflow versions on Amazon Managed Workflows for Apache Airflow.

Apache, Apache Airflow, and Airflow are either registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries.

Announcing Red Hat Enterprise Linux for AWS

Fri, 30 May 2025 19:50:00 GMT

Red Hat Enterprise Linux (RHEL) for AWS, starting with RHEL 10, is now generally available, combining Red Hat’s enterprise-grade Linux software with native AWS integration. RHEL for AWS is built to achieve optimum performance of RHEL running on AWS. This offering features pre-tuned images with AWS-specific performance profiles, built-in Amazon CloudWatch telemetry, integrated AWS Command Line Interface (CLI), image mode using container-native tooling, enhanced security from boot to runtime, and optimized networking with Elastic Network Adapter (ENA) support.

For organizations looking to accelerate innovation and meet customer demands, RHEL for AWS combines the stability of RHEL with native AWS integration. This purpose-built solution is designed to deliver optimized performance, improved security, and simplified management through AWS-specific configurations and tooling. Whether migrating existing workloads or deploying new instances, RHEL for AWS provides a standardized, ready-to-use software that can help teams reduce operational overhead and focus on business initiatives rather than infrastructure management. Customers can save valuable time with built-in AWS service integration, automated monitoring, and streamlined deployment options.

Customers can access RHEL for AWS Amazon Machine Images (AMIs) through the Amazon EC2 Console or AWS Marketplace with flexible procurement options. Please visit Red Hat Enterprise Linux on Amazon EC2 FAQs page for more details.

The service is available across all AWS Commercial and AWS GovCloud (US) Regions. To get started with RHEL for AWS, visit EC2 console or AWS Marketplace.

AWS CDK Toolkit Library is now generally available

Fri, 30 May 2025 17:00:00 GMT

Today, AWS announces the general availability of the AWS CDK Toolkit Library, a Node.js library that provides programmatic access to core AWS CDK functionalities such as synthesis, deployment, and destruction of stacks. This library enables developers to integrate CDK operations directly into their applications, custom CLIs, and automation workflows, offering greater flexibility and control over infrastructure management.

Prior to this release, interacting with CDK required using the CDK CLI, which could present challenges when integrating CDK actions into automated workflows or custom tools. With the CDK Toolkit Library, developers can now build custom CLIs, integrate CDK actions in their existing CI/CD workflows, programmatically enforce guardrails and policies, and manage ephemeral environments.

The AWS CDK Toolkit Library is available in all AWS Regions where the AWS CDK is supported.

For more information and a walkthrough of the feature, check out the blog. To get started with the CDK Toolkit Library, please find the documentation here.

Amazon Redshift now enables cluster relocation by default for RA3 provisioned clusters

Fri, 30 May 2025 17:00:00 GMT

Amazon Redshift now enables cluster relocation by default for RA3 provisioned clusters when creating new clusters or restoring from snapshots. This feature allows you to move a cluster to another Availability Zone (AZ) when resource constraints disrupt cluster operations, maintaining the same endpoint so applications continue without modifications.

Amazon Redshift already provides resiliency by automatically detecting and recovering from drive and node failures. Cluster relocation adds another layer of availability protection against AZ-level issues that might prevent optimal cluster operations. While this setting is now enabled by default for new or restored clusters, existing RA3 provisioned clusters maintain their current configuration unless manually changed. You can manage cluster relocation settings through the AWS Management Console, AWS CLI, or API.

This feature is available at no additional cost for RA3 provisioned clusters across all AWS Regions where RA3 instance types are supported. For more information about cluster relocation, visit our documentation page.

Mountpoint for Amazon S3 now lets you automatically mount your S3 buckets using fstab

Fri, 30 May 2025 17:00:00 GMT

Mountpoint for Amazon S3 now lets you automatically mount an S3 bucket when your Amazon EC2 instance starts up. This simplifies how you define a consistent mounting configuration that automatically applies when your instance starts up and persists the mount when the instance reboots.

Previously, to use Mountpoint for Amazon S3, you had to manually mount an S3 bucket after every boot and validate the correct mount options. Now, with support for automatic bucket mounting, you can add your Mountpoint configuration to the fstab file so it is automatically applied every time your instance starts up. Linux system administrators commonly use fstab to manage mount configurations centrally. It contains information about all the available mounts on your compute instance. Once you modify the fstab file to add a new entry for Mountpoint for Amazon S3, your EC2 instance will read the configuration to automatically mount the S3 bucket whenever it restarts.

Mountpoint for Amazon S3 is an open source project backed by AWS support, which means customers with AWS Business and Enterprise Support plans get 24/7 access to cloud support engineers. To get started, visit the GitHub page and product overview page.

Amazon EKS introduces configuration insights for Amazon EKS Hybrid Nodes

Fri, 30 May 2025 17:00:00 GMT

Today, Amazon Elastic Kubernetes Services (Amazon EKS) announced the general availability of configuration insights for Amazon EKS Hybrid Nodes. These new insights surface configuration issues impacting the functionality of Amazon EKS clusters with hybrid nodes, and provide actionable guidance on how to remediate identified misconfigurations. Configuration insights are available through the Amazon EKS cluster insights APIs and on the observability dashboard in the Amazon EKS console.

Amazon EKS cluster insights now automatically scans Amazon EKS clusters with hybrid nodes to identify configuration issues impairing Kubernetes control plane-to-webhook communication, kubectl commands like exec and logs, and more. Configuration insights surface issues and provide remediation recommendations, accelerating the time to a fully functioning hybrid nodes setup.

Configuration insights for Amazon EKS Hybrid Nodes are available in all AWS Regions where Amazon EKS Hybrid Nodes is available. To get started visit the Amazon EKS User Guide.

AWS Pricing Calculator, now generally available, supports discounts and purchase commitment

Fri, 30 May 2025 17:00:00 GMT

Today, AWS announces the general availability of the AWS Pricing Calculator in the AWS console. This launch enables customers to create more accurate and comprehensive cost estimates by providing two types of cost estimates: cost estimation for a workload, and estimation of a full AWS bill. You can also import your historical usage or create net new usage when creating a cost estimate. Additionally, the AWS Pricing Calculator now offers three rate configurations, including an after discounts and commitments view, allowing customers to see how both AWS pricing and volume discounts, as well as existing commitments, impact the total estimated cost of a workload estimate.

With the new rate configuration inclusive of both pricing discounts and purchase commitments, customers can gain a clearer picture of potential savings and cost optimizations for their cost scenarios. This feature is particularly useful for organizations looking to understand the impact of their existing commitments, such as Savings Plans or Reserved Instances, on their overall AWS costs. Additionally, customers can now export workload estimates directly from the console in both CSV and JSON formats, including resource-level details for estimated and historical costs. This enhancement facilitates easier analysis, sharing, and integration of estimates with internal financial planning tools.

The enhanced Pricing Calculator is available in all AWS commercial regions, excluding China. To get started with new Pricing Calculator, visit the AWS Billing and Cost Management Console. To learn more visit the AWS Pricing Calculator user guide.

Amazon EKS and Amazon EKS Distro now supports Kubernetes version 1.33

Fri, 30 May 2025 17:00:00 GMT

Kubernetes version 1.33 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon Elastic Kubernetes Service (EKS) and Amazon EKS Distro to run Kubernetes version 1.33. Starting today, you can create new EKS clusters using version 1.33 and upgrade existing clusters to version 1.33 using the EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

Kubernetes version 1.33 includes stable support for sidecar containers, topology-aware routing and traffic distribution, and consideration of taints and tolerations when calculating pod topology spread constraints, ensuring that pods are distributed across different topologies according to their specified tolerance. This release also adds support for user namespaces within Linux pods, dynamic resource allocation for network interfaces, and in-place resource resizing for vertical scaling of pods. To learn more about the changes in Kubernetes version 1.33, see our documentation and the Kubernetes project release notes.

EKS now supports Kubernetes version 1.33 in all the AWS Regions where EKS is available, including the AWS GovCloud (US) Regions.

You can learn more about the Kubernetes versions available on EKS and instructions to update your cluster to version 1.33 by visiting EKS documentation. You can use EKS cluster insights to check if there any issues that can impact your Kubernetes cluster upgrades. EKS Distro builds of Kubernetes version 1.33 are available through ECR Public Gallery and GitHub. Learn more about the EKS version lifecycle policies in the documentation.

Amazon GameLift Servers SDKs are now on GitHub

Thu, 29 May 2025 21:49:00 GMT

The Amazon GameLift Servers team is excited to announce that the Amazon GameLift Server SDKs for C++, C#, and Go are now open source and available on the amazon-gamelift GitHub organization. The game engine plugins and SDKs for Unreal Engine and Unity along with developer scripts have been moved under the same GitHub organization for improved accessibility.

With this launch, we’ve simplified the integration experience by removing common setup hurdles like the need for external tools like CMake and OpenSSL. Developers can quickly get started integrating the server SDKs with native support for cross-compilation, ARM server builds, and the Unreal Engine toolchain. By open-sourcing the Amazon Game Server SDKs, we want to encourage stronger collaboration with the developer community, offer faster issue resolution, enable direct contribution paths, and provide greater transparency in ongoing development.

You can start today by exploring the repositories, raising issues, and contributing to the Amazon GameLift Server SDKs on GitHub. This new capability is available in all Amazon GameLift Servers supported regions globally, except China.

To learn more about version updates and full release details, visit the Amazon GameLift Servers Release Notes.

Amazon FSx for Lustre adds new storage class that delivers the lowest-cost and only fully elastic Lustre file storage

Thu, 29 May 2025 20:58:00 GMT

Amazon FSx for Lustre launches the Intelligent-Tiering storage class, which delivers virtually unlimited scalability, the only fully elastic Lustre storage, and the lowest-cost Lustre file storage in the cloud. FSx for Lustre is a fully managed storage service that delivers terabytes per second of throughput, millions of IOPS, and the fastest storage performance for GPU instances in the cloud. The FSx Intelligent-Tiering storage class is optimized for HDD-based or mixed HDD/SSD workloads that have a mix of hot and cold data and don’t require consistent SSD-level performance. For these workloads, the FSx for Lustre Intelligent-Tiering storage class delivers up to 34% better price-performance compared to on-premises HDD file storage and up to 70% better price-performance compared to other cloud-based Lustre storage.

FSx for Lustre Intelligent-Tiering delivers high performance whether you're starting with gigabytes of experimental data or managing massive petabyte-scale datasets for your most demanding HPC and AI workloads. The Intelligent-Tiering storage class helps you lower costs by automatically scaling your file storage up or down based on your access patterns. This new storage class eliminates expensive overprovisioning and storage management by only charging for the data you store, with automatic tiering between Frequent Access, Infrequent Access, and Archive tiers. For your latency-sensitive workloads, an optional SSD read cache delivers SSD-level performance at HDD pricing. The FSx for Lustre Intelligent-Tiering storage class is optimized to deliver the lowest cost and simplest storage management for compute-intensive workloads like weather forecasting, seismic imaging, genomic analysis, and ADAS training.

To learn more about the AWS Regions where the FSx Intelligent-Tiering storage class is available, see deployment options for FSx Lustre file systems.

For more information about this new storage class, see the Amazon FSx for Lustre documentation and AWS News Blog.

Amazon EMR enables enhanced Apache Spark capabilities for Lake Formation tables with full table access

Thu, 29 May 2025 20:40:00 GMT

Amazon EMR now supports read and write operations from Apache Spark jobs on AWS Lake Formation registered tables when the job role has full table access. This capability enables Data Manipulation Language (DML) operations including CREATE, ALTER, DELETE, UPDATE, and MERGE INTO statements on Apache Hive and Iceberg tables from within the same Apache Spark application.

While Lake Formation's fine-grained access control (FGAC) offers granular security controls at row, column, and cell levels, many ETL workloads simply need full table access. This new feature enables Apache Spark to directly read and write data when full table access is granted, removing FGAC limitations that previously restricted certain ETL operations. You can now leverage advanced Spark capabilities including RDDs, custom libraries, UDFs, and custom images (AMIs for EMR on EC2, custom images for EMR-Serverless) with Lake Formation tables. Additionally, data teams can run complex, interactive Spark applications through SageMaker Unified Studio in compatibility mode while maintaining Lake Formation's table-level security boundaries.

This feature is available in all AWS Regions where Amazon EMR and AWS Lake Formation are supported.

To learn more about this feature, visit the Lake Formation unfiltered access section in EMR Serverless documentation.

Announcing new Model Context Protocol (MCP) Servers for AWS Serverless and Containers

Thu, 29 May 2025 20:25:00 GMT

Today, AWS announces the release of Model Context Protocol (MCP) servers for AWS Lambda, Amazon Elastic Container Service (ECS), Amazon Elastic Kubernetes Service (EKS), and Finch. MCP servers are a standard interface to enhance AI-assisted application development by equipping AI code assistants with real-time, contextual understanding of AWS Serverless and Container services including AWS Lambda, Amazon ECS, and Amazon EKS. With MCP servers, you can get from idea to production faster by giving your AI assistants access to an up-to-date framework on how to correctly interact with your AWS service of choice.

MCP servers enable AI code assistants to generate production-ready results by incorporating AWS operational best practices, Well-Architected principles, and service-specific optimizations. When building applications on AWS Lambda, Amazon ECS, Amazon EKS, and Finch, developers can use natural language to describe their requirements while AI code assistants handle service configurations, infrastructure setup, and cross-service integrations. The code assistant will use the tools and configurations provided in the MCP server to build and deploy applications. MCP servers also simplify operations by enabling AI-assisted, service-specific configuration of logging, monitoring, security controls, and troubleshooting failures.

To learn more about MCP servers for AWS Serverless and Containers and how they can transform your AI-assisted application development, visit the AWS News Blog. To download and try out the open-source MCP servers for these services locally with your AI-enabled IDE of choice, visit the aws-labs GitHub repository.

Amazon S3 Express One Zone now supports granular access controls with S3 Access Points

Thu, 29 May 2025 18:38:00 GMT

Amazon S3 Express One Zone, a high-performance S3 storage class for latency-sensitive applications, now supports granular access controls using S3 Access Points. With S3 Access Points you can refine access based on specific prefixes or API actions.

Now you can create tailored access policies for teams, applications, or individuals accessing data in S3 Express One Zone. Each access point provides a unique hostname, customizable permissions for granular access controls, and the ability to restrict access to a Virtual Private Cloud. S3 Access Points can help with various use cases such as data ingestion with write-only permissions, analytics processing with read-only access, or cross-account data sharing with specific restrictions.

S3 Express One Zone support for granular access controls with S3 Access Points is available in all AWS Regions where the storage class is available. You can get started with S3 Access Points using the AWS Management Console, Amazon S3 REST API, AWS Command Line Interface, or the AWS Software Development Kit. To learn more about S3 Access Points, visit the S3 User Guide.

AWS Amplify Hosting announces customizable build instances

Thu, 29 May 2025 18:29:00 GMT

AWS Amplify Hosting is excited to offer customizable build instances to provide you with more memory and CPU configurations to build your applications. This new feature allows developers to select from multiple build instances to optimize their build environment based on their application's specific requirements.

Developers can now choose from three instance types:

(Default) Standard (8 GB Memory, 4 vCPUs)
Large (16 GB Memory, 8 vCPU)
XLarge (72 GB Memory, 36 vCPU)

You can adjust the build instance on any Amplify app in the in the Amplify Console under Hosting→ Build settings. Pricing for these instances can be found on Amplify’s pricing page.

This feature is available in all 20 AWS Amplify Hosting regions: US East (Ohio), US East (N. Virginia), US West (N. California), US West (Oregon), Asia Pacific (Hong Kong), Asia Pacific (Tokyo), Asia Pacific (Osaka) Asia Pacific (Seoul), Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Europe (Frankfurt), Europe (Stockholm), Europe (Milan), Europe (Ireland), Europe (London), Europe (Paris), Middle East (Bahrain) and South America (São Paulo).

To get started, check out our blog post. Or read the documentation.

AWS Security Hub now supports NIST SP 800-171 Revision 2

Thu, 29 May 2025 17:25:00 GMT

AWS Security Hub now supports automated security checks that align with the National Institute of Standards and Technology (NIST) Special Publication 800-171 Revision 2 (NIST SP 800-171 Rev. 2). NIST SP 800-171 Rev. 2 is a cybersecurity and compliance framework developed by NIST, an agency that's part of the U.S. Department of Commerce. This compliance framework provides recommended security requirements for protecting the confidentiality of Controlled Unclassified Information (CUI) in systems and organizations that aren't part of the U.S. federal government. In Security Hub, the NIST SP 800-171 Rev. 2 standard includes 63 automated controls that perform automated checks against AWS resources to evaluate compliance with NIST SP 800-171 Rev. 2 requirements.

The new standard is now available in all AWS Regions where Security Hub is currently available, including the AWS GovCloud (US) and the China Regions. To quickly enable the standard across your AWS environment, we recommend that you use Security Hub central configuration. With this approach, you can enable the standard in all or only some of your organization's accounts and across all AWS Regions that are linked to Security Hub with a single action.

To learn more, see NIST SP 800-171 Revision 2 in the AWS Security Hub User Guide. To receive notifications about new Security Hub features and controls, subscribe to the Security Hub SNS topic. You can also try Security Hub at no cost for 30 days with the AWS Free Tier offering.

Amazon IVS Real-Time Streaming now supports participant replication

Thu, 29 May 2025 17:00:00 GMT

Amazon Interactive Video Service (Amazon IVS) Real-Time Streaming now supports participant replication, allowing you to copy a participant from one IVS stage to another. With this capability, participants can appear in multiple stages simultaneously, facilitating cross-stage interactions.

One common use case in social live streaming applications is competitive modes, where two streamers are temporarily matched so they can interact with each other in real time. With participant replication, you can copy a participant to another stage and allow viewers of each video to see both streamers.

Amazon IVS is a managed live streaming solution that is designed to make low-latency or real-time video available to viewers around the world. Video ingest and delivery are available over a managed network of infrastructure optimized for live video. Visit the AWS region table for a full list of AWS Regions where the Amazon IVS console and APIs for control and creation of video streams are available.

To learn more, please visit the participant replication documentation page.

AWS Cost Explorer now offers new Cost Comparison feature

Thu, 29 May 2025 17:00:00 GMT

AWS announces Cost Comparison, a new AWS Cost Explorer capability that helps customers understand cost changes between two months. Cost Comparison automatically detects significant cost changes between two months and surfaces the key factors driving these changes. With this launch, customers can now effortlessly gain insights into their monthly cost changes across their organization and quickly identify key drivers of spending changes.

Cost Comparison streamlines the time-consuming process of cost analysis by automatically identifying the most substantial cost changes across services, accounts, and Regions. It eliminates the need to switch between different views in Cost Explorer or export data to spreadsheets for manual comparison. The feature provides detailed breakdowns of cost drivers, including usage changes, credits, refunds, and volume discounts impacts. A new Top Trends widget on the AWS Billing and Cost Management console home page shows the top 10 cost variations between the previous two months. For deeper analysis, customers can use the new Compare view within AWS Cost Explorer. This view offers comprehensive cost analysis capabilities, with insights into cost drivers that reveal changes between any two selected months in usage, credits, refunds, and volume discount impacts.

Cost Comparison is available at no additional cost in all AWS commercial Regions, excluding AWS China Regions. To get started, customers can visit the AWS Billing and Cost Management console and view the Top Trends widget on the home page, or navigate to Cost Explorer and choose "Compare" in the Report Parameters panel. To learn more, see the AWS Cost Explorer documentation.

CloudTrail Lake now supports event enrichment and expanded event size

Thu, 29 May 2025 17:00:00 GMT

Today, AWS announces two enhancements to CloudTrail Lake: Event enrichment, which makes it easier to categorize, search, and analyze your AWS activity; and expanded event size, which improves visibility into API actions for more comprehensive security analysis. CloudTrail Lake is a managed data lake that enables you to aggregate, immutably store, and analyze your activity logs at scale.

With event enrichment, you can enrich your CloudTrail management and data events with additional information relevant to your business context. You can append resource tags and select AWS global condition keys to your events, making it easy to categorize, search, and analyze your AWS activity. Using resource tags in your events, you can easily create application-specific activity reports, or view AWS API activity based on the properties of the IAM principal. For example, you can see all delete actions taken by principals with a specific Principal Tag. Event enrichment integrates with CloudTrail Lake's analytical capabilities, including AI-powered natural language query and summarization (Preview).

With expanded event size, you can now expand events size to up to 1 MB, a significant increase from the 256 KB limit. This reduces the need for CloudTrail to truncate events, giving you higher visibility into API actions for a more comprehensive security analysis.

To get started, enable event enrichment and expanded event size through the AWS Management Console or AWS APIs on your CloudTrail Lake event data stores. These features are available in AWS commercial regions where CloudTrail Lake is available. To learn more, see CloudTrail documentation.

AWS DataSync simplifies and accelerates cross-cloud data transfers

Thu, 29 May 2025 17:00:00 GMT

AWS DataSync customers can now transfer data directly between storage in other clouds and Amazon S3, without needing to deploy DataSync agents. This new capability uses DataSync Enhanced mode to deliver increased performance and scalability, helping customers streamline their data pipelines and accelerate migrations from other clouds to AWS.

AWS DataSync is a secure, reliable, high-speed data transfer service that simplifies moving data over networks. This launch enables direct transfers to and from storage services in other clouds including Google Cloud Storage, Microsoft Azure Blob Storage, and Oracle Cloud Object Storage. Using Enhanced mode, this new capability provides faster transfer speeds through parallel processing of data preparation, transfer, and verification, while supporting virtually unlimited object counts. Customers can monitor transfers using detailed metrics and reporting capabilities, all with a simplified setup that requires no agent deployment.

This new capability is available in all AWS Regions where AWS DataSync is offered. To get started, visit the AWS DataSync console. For more information, see the AWS DataSync documentation.

Amazon Neptune Database is now available in AWS Canada West (Calgary) and Asia Pacific (Melbourne) Regions

Thu, 29 May 2025 17:00:00 GMT

Amazon Neptune Database is now available in the Canada West (Calgary) and Asia Pacific (Melbourne) Regions on engine versions 1.4.5.0 and later. You can now create Neptune clusters using R8g, R7g, R7i, R6g, R6i, T4g, and T3 instance types in the Canada West (Calgary) and Asia Pacific (Melbourne) Regions.

Amazon Neptune Database is a fast, reliable, and fully managed graph database as a service that makes it easy to build and run applications work with highly connected datasets. You can build applications using Apache TinkerPop Gremlin or openCypher on the Property Graph model, or using the SPARQL query language on W3C Resource Description Framework (RDF). Neptune also offers enterprise features such as high availability, automated backups, and network isolation to help customers quickly deploy applications to production. Amazon Neptune supports Neptune Global Database designed for globally distributed applications, allowing a single Neptune database to span multiple AWS Regions.

To get started, you can create a new Neptune cluster using the AWS Management Console, AWS CLI, or a quickstart AWS CloudFormation template. For more information on pricing and region availability, refer to the Neptune pricing page and AWS Region Table.

Amazon OpenSearch Service adds support for Script Plugins

Thu, 29 May 2025 17:00:00 GMT

Amazon OpenSearch Service now supports Script Plugins that allow you to add new scripting languages or custom scripting functionality to OpenSearch for operations like scoring, sorting, and field value transformations during search or indexing.

Until now, you could extend Search and Analysis functions of OpenSearch using custom plugins. With this launch, you can implement the ScriptPlugin interface as part of your custom plugin to extend scripting functionality in OpenSearch. You can use the OpenSearch Service console or APIs to upload and associate the custom plugin with your domains. OpenSearch Service validates plugin package for version compatibility, security, and permitted plugin operations.

Script Plugins are now supported on all Amazon OpenSearch Service domains running OpenSearch version 2.15 or later, and are available in 14 regions globally: US West (Oregon), US East (Ohio), US East (N. Virginia), South America (Sao Paulo), Europe(Paris), Europe (London), Europe (Ireland), Europe (Frankfurt), Canada (Central), Asia Pacific (Tokyo), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Seoul) and Asia Pacific (Mumbai).

To get started with custom plugins, visit our documentation. To learn more about Amazon OpenSearch Service, please visit the product page.

Amazon Managed Service for Prometheus now supports 95 day time range queries

Thu, 29 May 2025 17:00:00 GMT

Amazon Managed Service for Prometheus now supports queries with time ranges up to 95 days, an increase from the previous 32-day limit. With this feature, customers can query any 95-day window, including historical data, allowing them to perform month-over-month comparisons, analyze long-term system trends and review historical incidents.

This feature is now available across all Amazon Managed Service for Prometheus workspaces in all regions where the service is available. To get started, check out the product page and quotas page for more information about limits.

Amazon FSx for NetApp ONTAP now supports write-back mode for ONTAP FlexCache volumes

Wed, 28 May 2025 20:26:00 GMT

Amazon FSx for NetApp ONTAP, a service that provides fully managed shared storage built on NetApp’s popular ONTAP file system, now supports write-back mode for ONTAP FlexCache volumes. Write-back mode is a new ONTAP capability that helps you achieve faster performance for your write-intensive workloads that are distributed across multiple AWS Regions and on-premises file systems.

FlexCache is an ONTAP caching technology that enables distributed access to data. Previously, FlexCache only supported write-around mode, where every write operation to a FlexCache volume had to go back to the origin volume before it was acknowledged, increasing write latency. Starting today, FSx for ONTAP now supports the new write-back mode for FlexCache. Write-back mode improves the performance of write-heavy workloads by caching writes locally on FlexCache volumes and asynchronously updating the origin volume, reducing write latency. You can now use write-back mode to improve write performance for write-intensive distributed applications such as collaborative content creation, distributed databases, and engineering workflows that need to operate across multiple AWS Regions or between cloud and on-premises environments.

Starting today, you can enable FlexCache write-back mode at no additional cost on all FSx for ONTAP file systems in all AWS Regions where the service is available. For more information, refer to the FSx for ONTAP User Guide.

Amazon DocumentDB (with MongoDB compatibility) Announces 99.99% Service Level Agreement

Wed, 28 May 2025 17:00:00 GMT

Amazon DocumentDB (with MongoDB compatibility) announces an updated Service Level Agreement (SLA), promising a 99.99% availability when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, Amazon DocumentDB offered a 99.9% SLA. Now, Amazon DocumentDB has updated the SLA to 99.99%, increasing our commitment to service availability.

Amazon DocumentDB (with MongoDB compatibility) is a fully managed native JSON document database that makes it easy and cost effective to operate critical document workloads at virtually any scale without managing infrastructure. The updated SLA for Amazon DocumentDB applies to all regions where DocumentDB is generally available, at no additional cost. To learn more about Amazon DocumentDB, please see our product page and documentation.

Amazon EC2 C8gd, M8gd, and R8gd instances are now available Europe (Spain) and Asia Pacific (Tokyo)

Wed, 28 May 2025 17:00:00 GMT

Amazon Elastic Compute Cloud (Amazon EC2) C8gd instances, M8gd instances, and R8gd instances with up to 11.4 TB of local NVMe-based SSD block-level storage are now available in AWS Regions Europe (Spain) and Asia Pacific (Tokyo). These instances are powered by AWS Graviton4 processors, delivering up to 30% better performance over Graviton3-based instances. They have up to 40% higher performance for I/O intensive database workloads, and up to 20% faster query results for I/O intensive real-time data analytics than comparable AWS Graviton3-based instances. These instances are built on the AWS Nitro System and are a great fit for applications that need access to high-speed, low latency local storage.

Each instance is available in 12 different sizes. They provide up to 50 Gbps of network bandwidth and up to 40 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS). Additionally, customers can now adjust the network and Amazon EBS bandwidth on these instances by 25% using EC2 instance bandwidth weighting conﬁguration, providing greater ﬂexibility with the allocation of bandwidth resources to better optimize workloads. These instances offer Elastic Fabric Adapter (EFA) networking on 24xlarge, 48xlarge, metal-24xl, and metal-48xl sizes.

These instances are now available in AWS Regions US East (Ohio, N. Virginia), US West (Oregon), Europe (Frankfurt, Spain), and Asia Pacific (Tokyo).

To learn more, see Amazon C8gd instances, Amazon M8gd Instances, and Amazon R8gd Instances. To learn how to migrate your workloads to AWS Graviton-based instances, see the Getting started with Graviton.

Amazon CloudWatch Synthetics Adds Java Runtime for Lightweight API Monitoring

Wed, 28 May 2025 17:00:00 GMT

Amazon CloudWatch Synthetics now supports the Java programming language for authoring canaries, enabling developers to write monitoring scripts using the Java 21 runtime environment. This new runtime, syn-java-1.0, allows customers to leverage existing Java expertise to continuously monitor the availability and performance of their services and applications using CloudWatch Synthetics.

With Java support, customers can now bring their existing Java-based tests—often used in integration pipelines—into production environments as part of their synthetic monitoring strategy. These canaries support modular step execution with built-in metric generation, queryable logs using the canaryRunId, and optional X-Ray tracing to visualize request paths across services. The Java runtime is designed for non-browser use cases, making canaries lightweight and faster and letting customers bring their own libraries and frameworks suited to their differentiated monitoring needs. Customers can use Java build tools like Maven or Gradle to package their monitoring code—along with a synthetics.json configuration file—into a deployable ZIP artifact, which can then be used with the Synthetics APIs, SDKs, or infrastructure-as-code tools such as Terraform and CloudFormation for deploying canaries.

The Java runtime is now available in all commercial AWS Regions where CloudWatch Synthetics is supported. Visit this page to learn more about the features and support policy for the Java runtime, or visit CloudWatch Synthetics user guide to create your first canary today.

AWS Network Firewall Adds Support for Multiple VPC Endpoints

Wed, 28 May 2025 17:00:00 GMT

AWS Network Firewall now supports configuring multiple VPC endpoints for a single firewall. This new capability gives you more options to scale your Network Firewall deployment across multiple Amazon Virtual Private Clouds (VPCs), using a centralized security policy.

AWS Network Firewall is a managed, cloud-native firewall service that makes it easy to deploy essential network protections for all your Amazon VPCs. A Network Firewall instance is deployed within a VPC subnet, with a VPC endpoint providing a secure connection to the firewall. Now you can associate up to 50 VPC endpoints per Availability Zone with the firewall and route traffic through the firewall for inspection, reducing operational complexity and lowering costs as you protect more VPCs.

The multiple VPC endpoints feature is supported in all AWS Regions where AWS Network Firewall is available today, including the AWS GovCloud (US) Regions and China Regions.

You can enable multiple VPC endpoints from the Amazon VPC Console or the Network Firewall API. To learn more about this feature and pricing, please see the AWS Network Firewall product page and service documentation.

Cost Optimization Hub now supports Savings Plans and reservations preferences

Wed, 28 May 2025 17:00:00 GMT

Cost Optimization Hub, a feature within the Billing and Cost Management Console, now allows you to configure preferred Savings Plans and reservation term and payment options preferences, so you can see your resulting recommendations and savings potential based on your preferred commitments.

Cost Optimization Hub allows you to easily identify, filter, and aggregate AWS cost optimization recommendations, such as EC2 instance rightsizing recommendations, graviton recommendations, idle recommendations, reservations recommendations and Savings Plans recommendations. By providing new preferences, you can now select 1 or 3 year term lengths, as well as All upfront, Partial upfront, and No upfront payment options. This helps align the savings potential with your organization’s preferred commitment settings, giving you even more accurate potential savings.

Cost Optimization Hub is available at no additional charge in all AWS Regions, except for the AWS China Regions and AWS GovCloud (US) Regions.

You can start using Cost Optimization Hub and the new Preferences options through the AWS Management Console, AWS CLI, or AWS SDK. Visit product details page and user guides to learn more.

Amazon Neptune announces MCP (Model Context Protocol) Server

Wed, 28 May 2025 17:00:00 GMT

Today, AWS announces the launch of the Amazon Neptune MCP Server, now available in the AWS MCP open-source repository. This new server makes it easier for developers and AI assistants to interact with Amazon Neptune, enabling seamless integration of graph queries into generative AI workflows.

Part of AWS’s growing suite of Model Context Protocol (MCP) tools, the Neptune MCP Server supports openCypher and Gremlin queries, schema discovery, and natural language querying. Users can now seamlessly integrate Neptune into MCP capable tools like Amazon Q CLI, Cursor, Claude Code, as well as the ability to ask questions in plain English and receive accurate graph responses—without writing complex code. Whether you're building a knowledge graph, analyzing relationships, or powering an AI assistant, the Neptune MCP Server lets you explore and query graph data more intuitively and efficiently than ever before.

Amazon Neptune MCP Server is now available in all AWS regions where Amazon Neptune is offered. For more details, learn more about Neptune MCP Server on our blog.

AWS Backup enhances Amazon EC2 restores with custom volume configuration support

Wed, 28 May 2025 17:00:00 GMT

AWS Backup now offers enhanced Amazon EC2 restore capability that allows you to customize volume configurations during the restoration process. This new feature enables users to specify custom settings for all the attached Amazon EBS volumes to an EC2 AMI, including volume type, size, IOPS, AWS KMS encryption keys and others, directly through AWS Backup. The capability works seamlessly for restores from standard backup vaults and logically air-gapped vaults.

You can start using this feature through the AWS Backup CLI, or SDK. During EC2 backup restoration, you can now include a new section (block device mappings) in your restore metadata to configure Amazon EBS volume settings. You can also specify additional volumes in the block device mappings to attach when launching the instance. The enhancement applies to both existing and new EC2 backups and is available at no extra cost.

AWS Backup support for enhanced EC2 restores is available in all commercial and AWS GovCloud (US) Regions, where AWS Backup is supported. To learn more about AWS Backup support for this feature, visit the AWS Backup product documentation.

AWS Neuron introduces NxD Inference GA, new features, and improved tools

Tue, 27 May 2025 21:00:00 GMT

Today, AWS announces the release of Neuron 2.23, featuring enhancements across inference, training capabilities, and developer tools. This release moves the NxD Inference library (NxDI) to general availability (GA), introduces new training capabilities including Context Parallelism and ORPO, and adds support for PyTorch 2.6 and JAX 0.5.3.

The NxD Inference library moves from beta to general availability, now recommended for all multi-chip inference use-cases. Key enhancements include Persistent Cache support to reduce compilation times and optimized model loading time.

For training workloads, the NxD Training library introduces Context Parallelism support (beta) for Llama models, enabling sequence lengths up to 32K. The release adds support for model alignment using ORPO with DPO-style datasets, upgraded support for 3rd party libraries, specifically: PyTorch Lightning 2.5, Transformers 4.48, and NeMo 2.1.

The Neuron Kernel Interface (NKI) introduces new 32-bit integer operations, improved ISA features for Trainium2, and new performance tuning APIs. The Neuron Profiler now offers 5x faster profile result viewing, timeline-based error tracking, and improved multiprocess visualization with Perfetto.

AWS Neuron SDK supports training and deploying models on Trn1, Trn2, and Inf2 instances, available in AWS Regions as On-Demand Instances, Reserved Instances, Spot Instances, or part of Savings Plan.

For a full list of new features and enhancements in Neuron 2.23 and to get started with Neuron, see:

AWS Secrets Manager announces support for cost allocation tags for secrets

Tue, 27 May 2025 20:55:00 GMT

AWS Secrets Manager now enables customers to allocate and track cost for their secret usage. Customers can categorize their secret costs by department, team, or application using AWS cost allocation tags. You can leverage this feature by tagging your secrets and enabling them in Cost Allocation Tags.

Secrets Manager is a fully managed service that helps you manage, retrieve, and rotate database credentials, application credentials, API keys, and other secrets throughout their lifecycles. You can use Secrets Manager to replace hard-coded credentials in application source code with a runtime call to the Secrets Manager service to retrieve credentials dynamically when you need them.

For more information about cost allocation tags, visit the AWS Secrets Manager documentation. To get started, visit the launch blog post. The feature is available in all regions where AWS Secrets Manager is available. For a list of regions where Secrets Manager is available, see the AWS Region table.