AWS Security Hub führt fünf Kontrollen und einen neuen Integrationspartner ein

AWS Security Hub hat 5 neue Kontrollen für seinen Foundational-Security-Best-Practice-Standard (Foundational Security Best Practices, FSBP) veröffentlicht, um Ihre Cloud-Sicherheitsstatus-Verwaltung (Cloud Security Posture Management, CSPM) zu verbessern. Diese Kontrollen führen vollautomatische Prüfungen in Übereinstimmung mit bewährten Sicherheitsmethoden für Amazon CloudFront, Amazon Elastic Container Registry (ECR), Amazon Elastic Load Balancer (ELB) und Amazon Simple Storage Service (S3) durch. Sofern Sie Security Hub so eingestellt haben, dass neue Kontrollen automatisch aktiviert werden und Sie bereits die AWS Foundational Security Best Practices verwenden, sind diese Kontrollen standardmäßig aktiviert. Security Hub unterstützt jetzt 192 Sicherheitskontrollen zur automatischen Überprüfung Ihres Sicherheitsstatus in AWS.  
Quelle: aws.amazon.com

Amazon Connect führt eine aktualisierte Benutzeroberfläche für Benutzer, Routing-Profile und Warteschlangen mit AWS-CloudTrail-Unterstützung ein

Amazon Connect verfügt jetzt über eine aktualisierte Benutzeroberfläche für Benutzer, Routing-Profile und Warteschlangen, die alle vorgenommenen Änderungen als Ereignisse in AWS CloudTrail aufzeichnet. Auf diese Weise können Sie in AWS CloudTrail nachsehen, wer welche Aktion durchgeführt hat, auf welche Ressourcen reagiert wurde, wann das Ereignis aufgetreten ist, und andere Details, die Ihnen bei der Analyse und Reaktion helfen.
Quelle: aws.amazon.com

AWS Shield Advanced unterstützt jetzt Application Load Balancer für automatische DDoS-Abwehr auf der Anwendungsebene

Sie können jetzt die automatische DDoS-Abwehr auf Anwendungsebene für Ressourcen von Application Load Balancer (ALB) aktivieren, zusätzlich zu den CloudFront-Verteilungen, die durch AWS Shield Advanced geschützt sind. Wenn Sie Ihre Ressourcen mit AWS Shield Advanced schützen und die automatische DDoS-Abwehr auf der Anwendungsebene aktivieren, werden Muster, die mit DDoS-Ereignissen der Ebene 7 verbunden sind, durch automatisch erstellte AWS-WAF-Regeln in Ihren Web-Zugriffskontrolllisten (ACLs) erkannt und isoliert. Diese Regeln können im Zählmodus implementiert werden, um zu beobachten, wie sie sich auf den Ressourcenverkehr auswirken und jederzeit im Blockmodus bereitgestellt werden. Sie können auch Erkennungs-, Schutz- und Top-Beitragenden-Metriken im Zusammenhang mit DDoS-Ereignissen auf Anwendungsebene anzeigen, um weitere Untersuchungen durchzuführen oder die Auswirkungen der Schutzmaßnahmen zu bewerten, die Shield Advanced erstellt. Mit diesen Funktionen können Sie schnell auf DDoS-Ereignisse reagieren und diese abschwächen, die die Verfügbarkeit Ihrer Anwendungen bedrohen.
Quelle: aws.amazon.com

Accelerate your AI applications with Azure NC A100 v4 virtual machines

Real-world AI has revolutionized and changed how people live during the past decade, including media and entertainment, healthcare and life science, retail, automotive, finance service, manufacturing, and oil and gas. Speaking to a smart home device, browsing social media with recommended content, or taking a ride with a self-driving vehicle is no longer in the future. With the ease of your smartphone, you can now deposit checks without going to the bank? All of these advances have been made possible through new AI breakthroughs in software and hardware.

At Microsoft, we host our deep learning inferencing, cognitive science, and our applied AI services on the NC series instances. The learnings and advancements made in these areas with regard to our infrastructure are helping drive the design decisions for the next generation of NC system. Because of our approach, our Azure customers are able to benefit from our internal learnings.

We are pleased to announce that the next generation of NC A100 v4 series is now available for preview. These virtual machines (VMs) come equipped with NVIDIA A100 80GB Tensor Core PCIe GPUs and 3rd Gen AMD EPYC™ Milan processors. These new offerings improve the performance and cost-effectiveness of a variety of GPU performance-bound real-world AI training and inferencing workloads. These workloads cover object detection, video processing, image classification, speech recognition, recommender, autonomous driving reinforcement learning, oil and gas reservoir simulation, finance document parsing, web inferencing, and more.

The NC A100 v4-series offers three classes of VM ranging from one to four NVIDIA A100 80GB PCIe Tensor Core GPUs. It is more cost-effective than ever before, while still giving customers the options and flexibility they need for their workloads.

Size

vCPU

Memory (GB)

GPUs (NVIDIA A100 80 GB Tensor Core)

Azure Network (Gbps)

Standard_NC24ads_A100_v4

24

220

1

20

Standard_NC48ads_A100_v4

48

440

2

40

Standard_NC96ads_A100_v4

96

880

4

80

Compared to the previous NC generation (NCv3) with NVIDIA Volta architecture-based GPUs, customers will experience between 1.5 and 2.5 times the performance boost due to:

Two times GPU to host bandwidth.
Four times vCPU cores per GPU VM.
Two times RAM per GPU VM.
Seven independent GPU instances on a single NVIDIA A100 GPU through Multi-Instance GPU (MIG) on Linux OS.

Below is a sample of what we experienced while running ResNet50 AI model training across a variety of batch sizes using the VM size NC96ads_A100_v4 compared to the existing NCv3 4 V100 GPUs VM size NC24s_v3. Tests were conducted across a range of batch sizes, from one to 256.

Figure 1: ResNet50 results were generated using NC24s_v3 and NC96ads_A100_v4 virtual machine sizes.

For additional information on how to run this on Azure and additional results please check out our performance technical community blog.

With our latest addition the NC series, you can reduce the time it takes to train your model training in around half the time and still within budget. You can seamlessly apply the trained cognitive science models to applications through batch inferencing, run multimillion atomics biochemistry simulations for next-generation medicine, host your web and media services in the cloud for tens of thousands of end-users, and so much more.

Learn more

The NC A100 v4 series are currently available in the South Central US, East US, and Southeast Asia Azure regions. They will be available in additional regions in the coming months.
For more information on the Azure NC A100 v4-series, please see:

Sign up for the preview of the NVIDIA A100 Tensor Core PCIe GPU in the Azure NC A100 v4-series. 
Performance of NC A100 v4-series.
Find out more about high-performance computing (HPC) in Azure.
Microsoft documentation for NC A100 v4-series VM.
Azure HPC optimized OS images.
Azure GPU virtual machines.

Quelle: Azure

Optimize your cloud investment with Azure Reservations

Continuous cost optimization can take place at all stages of an Azure workload’s lifecycle, but your Azure subscription provides a very effective benefit to further optimize your investment when you are ready to deploy that workload.

For cloud workloads with consistent resource usage, you can buy reserved instances at a significant discount and reduce your workload costs by up to 72 percent compared to pay-as-you-go prices. Azure Reservations can be obtained by committing to one-year or three-year plans for virtual machines, Azure Blob storage or Azure Data Lake Storage Gen2, SQL Database compute capacity, Azure Cosmos DB throughput, and other Azure resources.

When you can predict and commit to needed capacity, it gives us visibility into your resource requirements in advance, allowing us to be more efficient in our operations. We can then pass the savings on to you. This benefit applies to both Windows and Linux virtual machines (VMs).

In addition, you now can combine the cost savings of reserved instances with the added Azure Hybrid Benefit when running on-premises and Azure workloads to save up to 80 percent over pay-as-you-go pricing.

How to get your reservation

A reservation discount only applies to resources associated with Enterprise Agreement, Microsoft Customer Agreement, Cloud Solution Provider (CSP), or subscriptions with pay-as-you-go rates. These are billing discounts (paid upfront or monthly) and do not affect the runtime state of your resources. And do not worry, you will not pay any extra fees when you choose to pay monthly.

To determine which reservation to purchase, analyze your usage data in the Azure portal, or use reservation recommendations available in Azure Advisor (VMs only), the Cost Manage Power BI app, or the Reservation Recommendations REST API.

Reservation purchase recommendations are calculated by analyzing your hourly usage data over the last seven, 30, and 60 days.

Simple and flexible

You can purchase Azure Reserved VM Instances in three easy steps—just specify your Azure region, virtual machine type, and term (one year or three years)—that's it.

Here is how it works: Discounts are generally applied to the resource usage matching the attributes you select when you buy the reservation. Attributes include the scope where the matching VMs, SQL databases, Azure Cosmos DB, or other resources run. Attributes include the SKU, regions (where applicable), and scope. Reservation scope selects where the reservation savings apply. You can scope a reservation to a subscription or resource group. When you scope the reservation to a resource group, reservation discounts apply only to the resource group—not the entire subscription.

You can manage reservations for Azure resources including updating the scope to apply reservations to a different subscription, changing who can manage the reservation, splitting a reservation into smaller parts, or changing instance size. Enhanced data for reservation costs and usage is available for Enterprise Agreement (EA) and Microsoft Customer Agreement (MCA) usage in Azure Cost Management and Billing. Those same customers can view amortized cost data for reservations and use that data to chargeback the monetary value for a subscription, resource group, or resource.

Capacity on demand

The ability for you to access compute capacity with service-level agreements, and ahead of actual VM deployments, is important to ensure the availability of mission-critical applications running on Azure. On-demand capacity reservations, now in preview, enable you to reserve compute capacity for one or more virtual machine size(s) in an Azure region or availability zone for any length of time. You can create and cancel an on-demand capacity reservation at any time, no commitment is required.

You also can exchange a reservation for another reservation of the same type or refund a reservation, up to $50,000 USD in a 12-month rolling window if you no longer need it, or cancel a reserved instance at any time and return the remaining months to Microsoft.

Learn more

Purchase reservations from the Azure portal, APIs, PowerShell, or CLI. Cloud solution providers can use the Azure portal or Partner Center to purchase Azure Reservations.

To dive deeper, check out the learning module, “Save money with Azure Reserved Instances.”
Quelle: Azure