Amazon MSK now supports TLS 1.3 for data in transit

Amazon MSK now supports version 1.3 of Transport Layer Security (TLS) protocol for MSK Provisioned clusters through encryption policies. TLS 1.3 delivers faster, more secure encryption for streaming data and is increasingly required by compliance frameworks and enterprise security standards. It is also one of the prerequisites for post-quantum cryptography for protecting data against attacks that collect encrypted traffic now with the intent to decrypt it later.
Customers can opt in to TLS 1.3 by selecting a named security policy in their MSK cluster configuration, with no change to existing clusters until a policy is applied. A named security policy defines which TLS version and cipher suites a cluster can accept. With this launch, Amazon MSK provides a set of policies customers can select and any connection that does not meet the selected policy requirements is rejected. This allows customers to stay in control of their security and compliance posture. Policies that support both TLS 1.2 and TLS 1.3 allow connections to negotiate the highest version the client supports allowing clients that support TLS 1.3 to connect on it immediately while clients on TLS 1.2 continue to connect on TLS 1.2. This lets customers upgrade their clients at their pace before applying a stricter policy. Customers can also select stricter policies that align closer with their compliance requirements to restrict connections to TLS 1.3 only.
This capability is available at no additional cost in all AWS Regions where Amazon MSK Provisioned is available. To learn more, see the Amazon MSK documentation.
Quelle: aws.amazon.com

Amazon RDS for Oracle no longer requires automatic minor version upgrades for JVM, Spatial, Locator, and OLAP options

Amazon Relational Database Service (Amazon RDS) for Oracle now lets you turn off automatic minor version upgrades on new and existing DB instances that use the JVM, Spatial, Locator, or OLAP option. Previously, these options required automatic minor version upgrades to be enabled.
With this change, you decide when to apply minor version upgrades to DB instances using these options. If you turn off automatic minor version upgrades, we recommend that you apply new minor versions regularly so your DB instances keep the latest Oracle security fixes. To keep automatic minor version upgrades turned on and still control the order in which your environments are upgraded, you can use AWS Organizations upgrade rollout policy.
This change is available in all commercial AWS Regions and the AWS GovCloud (US) Regions where Amazon RDS for Oracle is available. To learn more about options available in Amazon RDS for Oracle, see Adding options to Oracle DB instances in the Amazon RDS User Guide.
Quelle: aws.amazon.com

Daybreak Red from OpenAI now available to eligible customers on Amazon Bedrock in AWS GovCloud (US-East)

Security teams need powerful tools to find vulnerabilities, test exploits, and build defenses. Daybreak Red from OpenAI is now available to eligible customers on Amazon Bedrock in AWS GovCloud (US-East), bringing advanced AI to this work.
 
Part of OpenAI’s Daybreak cyber defense initiative, Daybreak Red: GPT-5.6 Cyber is built for authorized vulnerability research, exploit reproduction, and mitigation development. It gives verified defenders more room to investigate complex security problems, with fewer refusals for this work and stronger identity verification, monitoring, and access controls.
Daybreak Red runs on Bedrock’s next-generation inference engine, with zero-operator access enforced at the chip. Your inference data is not used to train models, and you do not need to share your Daybreak Red data with OpenAI.
 
The model is available in US East (Ohio) and AWS GovCloud (US-East). Access to the model requires enrollment in Daybreak access from OpenAI. To get started, contact OpenAI or your AWS account team about Daybreak eligibility. Once approved, work with your AWS account team to enable access. Learn more in the blog.
Quelle: aws.amazon.com

Amazon Connect Customer automatically saves in-progress emails as drafts

Amazon Connect Customer automatically saves in-progress emails as drafts, helping agents resume work without losing progress when connectivity is interrupted or when their browser is accidentally closed or refreshed. When agents return, their drafts are restored with the message body, recipients, subject line, and attachment references intact. Customers can also access saved draft data in their Amazon S3 buckets to build integrations with other applications.
Quelle: aws.amazon.com

Web Search now available on Kiro in AWS GovCloud (US)

Kiro web search gives the agent real-time access to current information on the internet, so its answers draw on up-to-date search results and page content. The agent uses web search automatically when a question involves recent changes or topics beyond the model’s training data. Answers that use web results include citations.
Kiro enterprise administrators can turn off web search and web fetch for their organization from the Kiro console under Settings. Teams can also remove web tools from individual custom agents, or block them with capability-based permission rules.
For more details, visit the AWS GovCloud (US) documentation, the monitoring and tracking guide, or contact your AWS account team. To learn more about Kiro, visit the Kiro product page.
Quelle: aws.amazon.com

October 2026 PTG Recap: Kicking Off the 2027.1 “Indri” Cycle

Following the tradition of our Project Teams Gathering (PTG) summaries, the October 2026 PTG brought together developers, operators, and ecosystem contributors for a week of intensive cross-service alignment. With total attendance across all sessions exceeding 700 participants involved in conversations throughout the week, the community showed incredible engagement as it pivoted straight from the delivery… Read more »
The post October 2026 PTG Recap: Kicking Off the 2027.1 “Indri” Cycle appeared first on OpenStack Blog | Open Infrastructure Foundation.
Quelle: openstack.org