Kategorie: Amazon AWS

AWS Continuum now supports credential testing and accessible domain suggestions

AWS Continuum for penetration testing is a frontier agent that proactively secures applications throughout the development lifecycle by offering on-demand, customized penetration testing with real exploitability testing. Developers and security teams can now test login credentials and receive suggested domains before a penetration test runs. This makes it easier to configure an accurate network scope from the start, reducing misconfiguration and wasted test cycles.
Previously, identifying all the URLs your application reaches required manual effort, and authentication failures were only discovered after a full test cycle completed, costing time and resources. With this launch, when you add login credentials during test configuration, AWS Continuum authenticates into your application exactly as a real user would, capturing every accessible domain reached during login and surfacing them as in-scope URL suggestions. You can review accessible domains, validate credentials, and confirm the agent covers the right endpoints, all before the real test begins. Accessible domains are returned regardless of whether the credential test succeeds, fails, or times out. You can learn more about this feature in our updated documentaiton.
This capability is available in all regions where AWS Continuum for penetration testing is available and is detailed on the AWS Continuum product page.
Quelle: aws.amazon.com

Amazon S3 Express One Zone is now available in 7 additional AWS Regions

The Amazon S3 Express One Zone storage class is now available in 7 additional AWS Regions: Asia Pacific (Singapore), South America (Sao Paulo), US West (N. California), Canada (Central), Europe (Paris), Asia Pacific (Sydney), and Asia Pacific (Seoul).
Amazon S3 Express One Zone is a high-performance, single-Availability Zone storage class purpose-built to deliver consistent single-digit millisecond data access for your most frequently accessed data and latency-sensitive applications. S3 Express One Zone delivers data access speed up to 10x faster and request costs up to 80% lower than S3 Standard. It enables workloads such as machine learning training, interactive analytics, and key-value caching in AI search engines to achieve fast data access with high durability and availability.
With this expansion, S3 Express One Zone is now available in 15 AWS Regions. For pricing details, visit the S3 pricing page. To learn more, visit the product page and documentation.
Quelle: aws.amazon.com

Introducing Amazon EC2 T8i instances

AWS is announcing the general availability of new low-cost burstable Amazon EC2 T8i instances. These instances are powered by custom sixth generation Intel Xeon 6 processors, available exclusively on AWS, and built on the latest sixth generation AWS Nitro cards. T8i instances deliver up to 30% better price performance compared to previous generation T3 instances, and offer four sizes: nano, micro, small, and medium. These instances are designed for workloads requiring low to moderate CPU utilization, including data processing, login gateways, small databases, batch processing, event driven functions, CI/CD pipelines, microservices, and low traffic websites.  
T8i instances deliver up to 70% higher compute performance, 1.25x higher network bandwidth, and 2.4x higher EBS bandwidth compared to T3 instances. They use the same CPU credit system as T3 with Standard and Unlimited modes, so existing T3 customers can upgrade to T8i and immediately benefit from better price performance, enabling them to lower their TCO. For customers new to AWS or migrating from on-premises, T8i instances provide one of the most cost-effective entry points to run a variety of workloads.
T8i.micro and T8i.small are available under the AWS Free Tier. T8i instances are available in US East (N. Virginia, Ohio), US West (Oregon, N. California), Europe (Frankfurt, Ireland, London, Paris), Asia Pacific (Hyderabad, Malaysia, Mumbai, Seoul, Singapore, Sydney, Tokyo), and Canada (Central) regions. T8i instances are available to purchase via On-Demand instances, and Spot instances with Savings Plan option coming soon. To learn more, visit the Amazon EC2 T8i instances page.
Quelle: aws.amazon.com

AWS Batch now supports bulk job cancellation and termination

AWS Batch now supports bulk job cancellation and termination, enabling you to cancel or terminate up to 50 jobs with a single API call. The new CancelJobs, TerminateJobs, and TerminateServiceJobs APIs reduce the operational complexity of managing large-scale batch workloads, letting you act on groups of jobs at once and receive per-job results in a single response. Additionally, ListJobs now returns isCancelled and isTerminated fields, and ListServiceJobs returns isTerminated, making it easier to track the lifecycle state of your jobs.
To get started, call CancelJobs for jobs in SUBMITTED, PENDING, or RUNNABLE states, or TerminateJobs and TerminateServiceJobs for jobs in any state, including STARTING and RUNNING. All three APIs accept up to 50 job IDs and work with individual and array jobs. You can access them through the AWS CLI or AWS SDKs.
Bulk job cancellation and termination is available in all AWS Regions where AWS Batch is available. For more information, see CancelJobs, TerminateJobs, and TerminateServiceJobs pages in the AWS Batch API Reference Guide.
Quelle: aws.amazon.com

AWS HealthOmics now supports IAM session policies

AWS HealthOmics now supports IAM session policies, enabling you to restrict permissions for individual runs without creating and managing multiple IAM roles. Until now, there was no way to dynamically scope down permissions for a single run, requiring you to create a separate IAM role for each tenant or run. AWS HealthOmics is a HIPAA-eligible service that helps healthcare and life sciences customers accelerate scientific breakthroughs with fully managed bioinformatics workflows.
An IAM session policy is an inline policy that limits the maximum permissions of a run without modifying the underlying service role. Your effective permissions during a run are the intersection of permissions allowed by both the underlying identity-based policy and the temporary session policy. For example, if you operate a multi-tenant application, you can pass a session policy that limits a run’s access to only that tenant’s Amazon S3 buckets, without provisioning a dedicated IAM role for that tenant. You can also use IAM session policies to grant temporary access to specific Amazon S3 objects for a single run, and isolate access to sensitive resources on a per-run basis.
IAM session policy support is available in all AWS Regions where AWS HealthOmics is available: US East (N. Virginia, Ohio), US West (Oregon), Europe (Frankfurt, Ireland, London), Israel (Tel Aviv), and Asia Pacific (Tokyo, Singapore, Seoul). To learn how to configure IAM session policies for your runs, visit the Permissions section of the  AWS HealthOmics User Guide. To learn more about the service, visit  AWS HealthOmics.
Quelle: aws.amazon.com

AWS Transfer Family now supports source IP preservation for SFTP servers behind a Network Load Balancer (NLB)

AWS Transfer Family now preserves the client’s source IP address using Proxy Protocol v2 (PPv2) when you place a Network Load Balancer (NLB) in front of your SFTP server that uses a VPC-hosted endpoint. You can now retain visibility of the client’s source IP for IP-based auditing, access controls, and compliance when you use your own NLB.
Previously, an NLB replaced the client’s source IP with its own private IP address, so your Transfer Family logs and events recorded the NLB’s address instead of the client’s source IP. Because the NLB’s private IP was the address presented to your custom identity provider during authentication, you couldn’t authorize users based on their true source IP. With this launch, you can enable source IP preservation on your SFTP server so that the client’s source IP is preserved. The preserved source IP is recorded in your logs and events and presented to your custom identity provider during authentication. You can enable the feature on each Transfer Family server individually through the console, CLI, or API.
Source IP preservation for SFTP servers is available in all AWS Regions where AWS Transfer Family is available. To get started, visit the AWS Transfer Family console or use the AWS CLI/SDK. To learn more, visit the Transfer Family User Guide.
Quelle: aws.amazon.com

Amazon Connect Customer can now import evaluation form PDFs using AI

Amazon Connect Customer now lets managers import a PDF of an evaluation form from a third-party quality management application, and automatically recreates it in Connect using AI, making it easier to migrate an existing quality program into Connect. Instead of rebuilding an existing form question by question, you upload the PDF and choose the preferred scoring method, either percentage or points-based, and Connect Customer automatically extracts the sections, questions, answer options, and scoring into a draft evaluation form. You can also provide natural language instructions to import the form more accurately or to adjust it as it’s created — for example, splitting a broad question into simpler ones — minimizing the manual edits needed before you activate the form.
This feature is available in the following AWS Regions: US East (N. Virginia), US West (Oregon), Canada (Central), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), and Europe (Frankfurt). To learn more, please visit our documentation and our webpage. For information about Amazon Connect Customer pricing, please visit our pricing page.
Quelle: aws.amazon.com

Amazon SageMaker AI now supports serverless model customization for NVIDIA Nemotron 3.5 Lightning

Amazon SageMaker AI now supports serverless model customization for the NVIDIA Nemotron 3.5 Lightning model using supervised fine-tuning (SFT), Direct Preference Optimization (DPO), and reinforcement fine-tuning (RFT). This is one of the latest open-weight models from NVIDIA and employs a hybrid Mixture-of-Experts architecture with 3B active parameters and 30B parameters in total. In addition to deploying this model on SageMaker AI, you can now adapt it to your specific domains and workflows.
Model customization enables you to tailor foundation models with your proprietary data so a smaller, right-sized model can match frontier-model quality on your tasks, reducing cost and latency. You can use labeled data with SFT to improve accuracy on domain-specific tasks, preference data with DPO to align outputs with your organization’s tone, or reward signals with RFT to enhance performance on new tasks. With serverless customization, SageMaker AI handles all infrastructure provisioning and training orchestration, so you can focus on your data and evaluation rather than cluster management, and only pay for what you use.
Serverless model customization for NVIDIA Nemotron 3.5 Lightning on SageMaker AI is available in US East (N. Virginia), US West (Oregon), Asia Pacific (Tokyo), and Europe (Ireland). To get started, navigate to the Models page in Amazon SageMaker Studio to launch a customization job, or use the SageMaker Python SDK for programmatic access. To learn more, see the Amazon SageMaker AI model customization documentation. 
Quelle: aws.amazon.com

Amazon Corretto 27 is now generally available

Amazon Corretto 27, a Feature Release (FR) version, is now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK. You can download Corretto 27 for Linux, Windows, and macOS from our downloads page. Corretto 27 will be supported through April 2027. Noticeable features: 

G1 as the Default Garbage Collector in All Environments – Makes G1 the default garbage collector across all environments, delivering more consistent performance and predictable pause times regardless of where your application runs (JEP 523)
Post-Quantum Hybrid Key Exchange for TLS 1.3 – Adds protection against future quantum computing threats by combining classical and post-quantum key exchange algorithms in TLS 1.3 connections (JEP 527)
Compact Object Headers by Default – Reduces the memory footprint of Java objects by enabling smaller object headers by default, improving memory efficiency and cache utilization (JEP 534)
JFR In-Process Data Redaction – Allows sensitive data to be redacted from Java Flight Recorder recordings before they leave the JVM, helping protect confidential information during profiling and diagnostics (JEP 536)
Enhanced Pattern Matching (continued preview) – Extends support for primitive types in patterns, instanceof, and switch, letting developers write cleaner type and value checks including for types like int and boolean (JEP 532)
Structured Concurrency (continued preview) – Refines the API for structured concurrency, treating groups of related tasks running in different threads as single units of work, streamlining error handling and cancellation, improving reliability, and enhancing observability (JEP 533)
Lazy Constants (continued preview) – Provides an API to defer initialization of immutable data until it is actually needed, combining the performance benefits of final fields with the flexibility of lazy initialization (JEP 531)
Vector API (continued incubator) – Improves support for high-performance mathematical operations that can take advantage of modern CPU vector capabilities (JEP 537)

A detailed description of these features can be found on the OpenJDK 27 Project page. Amazon Corretto 27 is distributed by Amazon under an open source license.
Quelle: aws.amazon.com

AWS Elemental MediaTailor Monetization Functions adds ad response hooks

AWS Elemental MediaTailor now supports two additional lifecycle hooks for monetization functions: post ad decision server (ADS) response, and pre manifest insertion. MediaTailor is a video service that personalizes and inserts ads into live and on-demand streams. Monetization functions run customer-defined logic at defined points in an ad-personalized playback session, removing the need for a middleware tier between MediaTailor and the ADS.
The post ADS response hook runs after MediaTailor parses an ADS response and resolves all Video Ad Serving Template (VAST) wrappers, before ads are selected and transcoded. Customers use it to call a secondary ad source when the primary ADS returns less demand than the ad break can hold, remove ads that their content or brand policies do not permit, and add house ads or promotions from their own marketing systems. The pre manifest insertion hook runs at the last point before MediaTailor returns the ad pod to the viewer, and receives every newly personalized ad break in a single invocation. Customers use it as a final check on what is about to play, including inserting a personalized slate when a break cannot be filled any other way. Pre-built recipes in the MediaTailor console give customers a starting point for each of these use cases. Both hooks are fail-open: on a timeout, expression error, or resource limit, MediaTailor discards the function output and continues with default ad insertion, so viewer playback is unaffected.
The new hooks are available in all AWS Regions where AWS Elemental MediaTailor is available. To learn more, see Monetization Functions in the AWS Elemental MediaTailor User Guide and the MediaTailor pricing page. To get started, sign in to the AWS Elemental MediaTailor console.
Quelle: aws.amazon.com