Kategorie: Amazon AWS

AWS Network Firewall adds wildcard support for container attribute filters

AWS Network Firewall now supports wildcard matching in container attribute-based inspection filters for Amazon Elastic Kubernetes Service (Amazon EKS) and Amazon Elastic Container Service (Amazon ECS). This enhancement allows you to define attribute filters using wildcard patterns to match multiple container workloads in a single rule, eliminating the need to create individual container associations for each variant.
With wildcard support, you can use patterns like app=payments-* to automatically cover all variants of an application, such as payments-api, payments-worker, and payments-cron. This simplifies firewall rule management for dynamic container environments where new application variants are frequently deployed, reducing operational overhead and ensuring consistent security coverage across your containerized workloads. 
Wildcard support for container attribute filters is available in all AWS Regions where AWS Network Firewall container attribute-based inspection is supported. For a full list of supported Regions, see the AWS Region Table.
To get started, visit AWS Network Firewall product page and service documentation. 
Quelle: aws.amazon.com

Amazon RDS for Oracle now supports minor version upgrade prechecks and a new RDS event to help reduce patching downtime

Amazon Relational Database Service (Amazon RDS) for Oracle now lets you run a minor version upgrade precheck yourself, before you start an upgrade or before your scheduled maintenance window. RDS for Oracle now also emits a new event during patching that tells you when your DB instance is accepting connections again. With this event, you can bring your applications back while the remaining maintenance tasks are still in progress, which can reduce your application downtime during patching.
At the start of every minor version upgrade, RDS for Oracle checks for conditions that would prevent the upgrade from completing, such as insufficient free storage, invalid Oracle-maintained objects, or invalid triggers. If a check finds a problem, the upgrade stops, and you must fix the problem and schedule the upgrade again. Previously, these checks ran only as part of the upgrade itself. With the new rdsadmin.rdsadmin_precheck_tasks.precheck_minor_upgrade procedure, you can run the checks at any time. The precheck is read-only and doesn’t affect your workload. It reports every issue it finds in a single log so you can fix them and run the precheck again until it passes before your maintenance window.
During a minor version upgrade or an operating system update, RDS for Oracle now emits RDS-EVENT-0596 as soon as your DB instance is accepting connections. Any remaining maintenance tasks then complete while your database is online. You can subscribe to this event through Amazon RDS event notifications or Amazon EventBridge to automate application reconnection or notify your teams that the database is back online.
These capabilities are available in all AWS commercial and AWS GovCloud (US) Regions where Amazon RDS for Oracle is available. To learn more, see Running minor version upgrade prechecks in Amazon RDS for Oracle, Amazon RDS event categories and event messages, and Monitoring Amazon RDS events in the Amazon RDS User Guide.
Quelle: aws.amazon.com

AWS Cost Explorer, Budgets, and Dashboards now support Amazon Bedrock product attributes

AWS Cost Explorer, AWS Budgets, and AWS Cost Management Dashboards now let you analyze Amazon Bedrock costs by product attributes, a new dimension that breaks down Bedrock cost by model, model provider, inference type, and feature. In Cost Explorer and Dashboards, you can group and filter costs by these attributes. In Budgets, you can filter budgets by the same attributes.
With this launch, finance and platform teams get a direct view of which models and workloads drive their Bedrock spend, and can act on it in the billing tools they already use. The attributes include model (such as Claude Sonnet 5 or Claude Haiku 4.5), model provider (such as Anthropic or Cohere), inference type (such as input tokens or output tokens), and feature (such as on-demand inference or reranker). You can combine product attributes with cost allocation tags on application inference profiles, projects, or workspaces to see which applications drive spend on each model, and with IAM principal tags to see which users or roles drive it. Group a month of Bedrock spend by model in Cost Explorer to find your most expensive models, build a dashboard widget that tracks cost per provider, or set a budget that alerts on spend for a single model.
The Amazon Bedrock product attribute dimension is available today at no additional charge in all AWS Regions, excluding the AWS GovCloud (US) Regions and the China (Beijing) and China (Ningxia) Regions. To learn more, see the user guides for Cost Explorer, Budgets, and Dashboards.
Quelle: aws.amazon.com

OpenAI GPT-6.1 Sol now supports Ultrafast mode on Amazon Bedrock

Today, AWS announces the availability of Ultrafast mode for GPT-6.1 Sol from OpenAI on Amazon Bedrock. Ultrafast mode provides faster inference for workloads where speed matters most. The Amazon Bedrock inference engine delivers the performance, security, and reliability required for production workloads.
Use GPT-6.1 Sol Ultrafast for latency-sensitive applications such as real-time coding assistants, interactive agents, and customer-facing experiences that require fast, high-quality responses. GPT-6.1 Sol helps developers build features, debug issues, investigate complex codebases, and complete multistep workflows. Established AWS controls help you secure workloads, govern access, and audit model invocation activity.
You can get started in the Amazon Bedrock console or programmatically through supported Amazon Bedrock APIs. For information about supported AWS Regions, endpoints, APIs, features, inference profiles, and pricing, see the Amazon Bedrock documentation.
Quelle: aws.amazon.com

AWS Config now supports 77 new resource types

AWS Config now supports 77 additional AWS resource types across key services including Amazon EC2, Amazon S3 Files, and Amazon Q Business. This expansion provides greater coverage over your AWS environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources.
With this launch, if you have enabled recording for all resource types, then AWS Config will automatically track these new additions. The newly supported resource types are also available in Config rules and Config aggregators.
You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where the resources are available:

Resource Types:

AWS::ApplicationAutoScaling::ScalableTarget
AWS::GuardDuty::ThreatEntitySet
AWS::PCS::Queue

AWS::ApplicationSignals::Discovery
AWS::GuardDuty::TrustedEntitySet
AWS::QBusiness::DataSource

AWS::APS::AnomalyDetector
AWS::HealthLake::DataTransformationProfile
AWS::QBusiness::Index

AWS::APS::ResourcePolicy
AWS::InspectorV2::CodeSecurityScanConfiguration
AWS::QBusiness::Permission

AWS::ARCRegionSwitch::Plan
AWS::IoT::Logging
AWS::QBusiness::Plugin

AWS::Batch::QuotaShare
AWS::IoTWireless::WirelessDeviceImportTask
AWS::QBusiness::Retriever

AWS::Batch::ServiceEnvironment
AWS::LicenseManager::Grant
AWS::QBusiness::WebExperience

AWS::BedrockAgentCore::PaymentConnector
AWS::LicenseManager::License
AWS::QuickSight::OAuthClientApplication

AWS::BedrockAgentCore::ResourcePolicy
AWS::Lightsail::DatabaseSnapshot
AWS::RTBFabric::InboundExternalLink

AWS::Braket::SpendingLimit
AWS::MediaConnect::RouterInput
AWS::RTBFabric::RequesterGateway

AWS::CleanRooms::IdMappingTable
AWS::MediaConnect::RouterNetworkInterface
AWS::S3Files::AccessPoint

AWS::CleanRoomsML::ConfiguredModelAlgorithm
AWS::MediaLive::Multiplex
AWS::S3Files::FileSystem

AWS::CloudWatch::AlarmMuteRule
AWS::MediaLive::Node
AWS::S3Files::FileSystemPolicy

AWS::Connect::UserHierarchyStructure
AWS::MediaLive::SdiSource
AWS::S3Files::MountTarget

AWS::ConnectCampaignsV2::Campaign
AWS::MediaPackageV2::ChannelPolicy
AWS::SecurityAgent::Application

AWS::CUR::ReportDefinition
AWS::MediaPackageV2::OriginEndpointPolicy
AWS::SecurityAgent::TargetDomain

AWS::DataSync::LocationAzureBlob
AWS::MediaTailor::ChannelPolicy
AWS::SES::MailManagerAddressList

AWS::DataSync::LocationFSxONTAP
AWS::NeptuneGraph::GraphSnapshot
AWS::SSM::MaintenanceWindow

AWS::DataSync::LocationFSxOpenZFS
AWS::Notifications::EventRule
AWS::SSO::Application

AWS::EC2::TransitGatewayMeteringPolicy
AWS::Notifications::NotificationHub
AWS::Timestream::InfluxDBCluster

AWS::EC2::VPCCidrBlock
AWS::Omics::Configuration
AWS::Timestream::InfluxDBInstance

AWS::ECR::RegistryScanningConfiguration
AWS::Omics::WorkflowVersion
AWS::Transcribe::VocabularyFilter

AWS::EKS::Capability
AWS::OpenSearchServerless::CollectionGroup
AWS::Wisdom::AIGuardrail

AWS::ElementalInference::Feed
AWS::PCAConnectorAD::ServicePrincipalName
AWS::Wisdom::Assistant

AWS::EntityResolution::IdNamespace
AWS::PCS::Cluster
AWS::WorkSpacesWeb::NetworkSettings

AWS::Glue::Blueprint
AWS::PCS::ComputeNodeGroup
 

Quelle: aws.amazon.com

Claude Haiku 5.5 is now available on AWS GovCloud (US)

AWS GovCloud (US) now offers Claude Haiku 5.5, the fastest and most efficient model in the Claude 5.5 family, built for subagents and high-volume, cost-sensitive work. According to Anthropic, it costs around 75% less than Claude Haiku 4.5 for most tasks.
Claude Haiku 5.5 is Anthropic’s most capable Haiku yet, a significant step up from Haiku 4.5 across coding, tool use, computer use, and agents. It’s also the first Haiku with effort controls, so teams can tune cost against intelligence for each task. Haiku 5.5 fits work where speed and cost matter most: real-time experiences like voice agents, live support, and in-app assistants, and high-volume tasks like classification, summarization, and pulling key fields from documents. It’s also a fast, cost-efficient subagent. A more capable model like Claude Opus 5.5 can plan the work and hand off well-defined coding, tool use, and browser automation tasks to Haiku, making it practical to run many agents in parallel.
Amazon Bedrock gives you Haiku’s capabilities while keeping your data within AWS infrastructure with regional data residency and provides access through a unified service with AWS-managed features like Guardrails and Knowledge Bases. To learn more, see the Amazon Bedrock documentation and regional availability.
Quelle: aws.amazon.com

Claude Haiku 5.5 is now available on AWS

AWS now offers Claude Haiku 5.5, the fastest and most efficient model in the Claude 5.5 family, built for subagents and high-volume, cost-sensitive work. According to Anthropic, it costs around 75% less than Claude Haiku 4.5 for most tasks.
Claude Haiku 5.5 is Anthropic’s most capable Haiku yet, a significant step up from Haiku 4.5 across coding, tool use, computer use, and agents. It’s also the first Haiku with effort controls, so teams can tune cost against intelligence for each task. Haiku 5.5 fits work where speed and cost matter most: real-time experiences like voice agents, live support, and in-app assistants, and high-volume tasks like classification, summarization, and pulling key fields from documents. It’s also a fast, cost-efficient subagent. A more capable model like Claude Opus 5.5 can plan the work and hand off well-defined coding, tool use, and browser automation tasks to Haiku, making it practical to run many agents in parallel.
Customers have two ways to access Claude Haiku 5.5: Amazon Bedrock and Claude Platform on AWS.
Amazon Bedrock gives you Haiku’s capabilities while keeping your data within AWS infrastructure with regional data residency and provides access through a unified service with AWS-managed features like Guardrails and Knowledge Bases. To learn more, see the Amazon Bedrock documentation and regional availability.
Claude Platform on AWS gives you direct access to Anthropic’s native platform experience and capabilities via the AWS Console. Build, test, and deploy with the same APIs, features, and console experience you’d get working with Anthropic directly, unified with AWS billing and authentication. To get started, see the Claude Platform on AWS documentation.
Quelle: aws.amazon.com

AWS Capabilities by Region now offers availability notifications for individual features and advanced filters

Today, AWS announces feature-level availability notifications and advanced filters for AWS Capabilities by Region in AWS Builder Center. You can now set availability notifications for AWS service, or to an individual feature of an AWS service, in the AWS Regions you are interested in, and receive an in-app notification and a weekly email digest covering all the capabilities that became available since you enabled availability notifications. Setting availability notifications for a service covers every feature within it, and an ‘All regions’ option covers every Region, including AWS Regions that launch in the future.
In addition to the feature level availability notifications , you can now filter API operations and CloudFormation resources by availability status and compare Regions to show all capabilities, only matching ones, or only differences. With over 19,000 API operations and more than 5,000 CloudFormation resource types, these filters quickly narrow a full listing down to the exact differences between Regions, working alongside search and existing display preferences. 
Comparing capabilities in AWS Capabilities by Region requires no account. Setting up availability notifications requires a Builder ID, which is free. To get started, visit AWS Capabilities by Region on AWS Builder Center. To learn more, explore the AWS Builder Center FAQ
Quelle: aws.amazon.com

AWS Certificate Manager now supports ACME issuance through AWS PrivateLink

AWS Certificate Manager (ACM) now supports AWS PrivateLink for ACME public certificate issuance, allowing you to request and renew public TLS certificates over a private network path that stays within the AWS network. You can now create a VPC interface endpoint to the ACM ACME service and route issuance traffic from any ACMEv2-compatible client through your VPC.
If you’re already using ACME with ACM, setup requires no changes to your ACME clients. After you create your managed ACME endpoint in ACM, you create a standard VPC interface endpoint using the VPC console, AWS CLI, or AWS CloudFormation. Private DNS resolves your existing ACME directory URL to the interface endpoint inside your VPC automatically, so the same client configuration and directory URL continue to work with no reconfiguration. Issuance operations—account creation, order creation, domain validation, finalization, and certificate retrieval—then flow over PrivateLink. All activity remains visible in the ACM console with AWS CloudTrail logging and Amazon CloudWatch metrics for auditability.
AWS PrivateLink support for ACME certificate issuance is available in all commercial AWS Regions. Standard AWS PrivateLink charges apply for interface endpoints; see the AWS PrivateLink pricing page. For ACM pricing details, see the  ACM pricing page. To get started with ACME and PrivateLink, visit the  AWS News blog post  or read the documentation.
Quelle: aws.amazon.com

AWS Batch now publishes job metrics to Amazon CloudWatch

AWS Batch now publishes job metrics to Amazon CloudWatch, providing native observability for batch workloads. AWS Batch emits metrics throughout the job lifecycle, giving you visibility into job queue health, failure rates, and job durations.
AWS Batch automatically publishes job state transition and duration metrics to the AWS/Batch namespace in Amazon CloudWatch, with JobQueueName dimension. State transition metrics track how many jobs entered a given state, such as submitted, running, succeeded, or failed. Duration metrics track how long jobs spent between states, such as time from submission to runnable or total execution time. You can view these metrics in the AWS Batch console, the Amazon CloudWatch console, or through the AWS CLI and AWS SDKs.
AWS Batch CloudWatch metrics are now published in all AWS Regions where AWS Batch is available. For more information, see CloudWatch Metrics page in the AWS Batch User Guide.
Quelle: aws.amazon.com