AWS

Announcing AWS SDK for .NET 4.1

AWS Developer Tools Blog — 2026-11-12T00:39:22+00:00

In July 2026, we announced our annual minor release cycle for updating the AWS SDK for .NET build targets. Today we’re releasing 4.1, the first release on this schedule. Along with the build target changes, we made dependency changes that improve performance and make the SDK easier to use. If your project targets a version […]

Ornith-1.0-9B and Ornith-1.0-35B models now available on Amazon SageMaker JumpStart

AWS What's New — 2026-11-11T23:36:00+00:00

DeepReinforce AI's Ornith-1.0-9B and Ornith-1.0-35B models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These two models are part of the Ornith 1.0 family of open-source, self-scaffolding agentic coding models released under the MIT license, achieving state-of-the-art performance among open-source models of comparable size on coding benchmarks such as Terminal-Bench 2.1, SWE-Bench, NL2Repo, and OpenClaw. These models ad

DeepSeek-V4-Pro, DeepSeek-V4-Flash, and DeepSeek-V4.1-Flash models now available on Amazon SageMaker JumpStart

AWS What's New — 2026-11-11T23:18:00+00:00

DeepSeek's DeepSeek-V4-Pro, DeepSeek-V4-Flash, and DeepSeek-V4.1-Flash models are now available on Amazon SageMaker JumpStart, expanding the portfolio of foundation models available to AWS customers. These three open-weight Mixture-of-Experts (MoE) language models, released under the MIT license, deliver frontier-class performance across reasoning, coding, and agentic workloads while activating only a fraction of their total parameters per token, enabling high efficiency at scale. These models a

Troubleshooting CloudFront device-type viewer headers

AWS re:Post Articles — 2026-11-11T21:46:58.263000+00:00

CloudFront can add headers that tell your origin what kind of device made the request: CloudFront-Is-Mobile-Viewer, CloudFront-Is-Tablet-Viewer, CloudFront-Is-Desktop-Viewer, and CloudFront-Is-SmartTV-Viewer. If these headers don't match the device you expect, use this guide to diagnose the cause.

AWS Cloud WAN now supports Flow Logs

AWS What's New — 2026-11-11T20:05:00+00:00

AWS Cloud WAN now supports VPC Flow Logs, giving you central visibility into IP traffic across your global network. Flow Logs capture detailed information for each flow, so you can understand how traffic moves across your core network without leaving your AWS Cloud WAN account. Until now, network administrators had to stitch together VPC Flow Logs from many VPCs, accounts, and Regions to see traffic across their global network. They often depended on other teams for access to those logs. Cloud W

Amazon EKS Provisioned Control Plane now offers a 24 GB etcd database on 4XL and 8XL tiers

AWS What's New — 2026-11-11T19:45:00+00:00

Amazon Elastic Kubernetes Service (Amazon EKS) now offers a larger 24 GB etcd database, up from 16 GB, for 4XL and 8XL Provisioned Control Plane clusters. etcd is the key-value store in the Kubernetes control plane that holds your cluster state, so its size limits how many Kubernetes objects your cluster can store. With 50% more capacity, you can run bigger clusters with more pods, jobs, events, and custom resources. The larger database gives more headroom to workloads that create and update man

Why don't my AWS Agent Registry MCP servers appear in AWS Quick?

AWS re:Post Articles — 2026-11-11T19:09:47.444000+00:00

You linked an AWS Agent Registry to AWS Quick and the console shows the link as successful, but no MCP connectors appear on the Connectors page. This article shows how to confirm that your administrator identity is missing iam:AttachRolePolicy, and how to fix it.

AWS CLI 2.40.1

AWS CLI v2 Changelog — 2026-11-11T19:04:02+00:00

api-change:cloudhsmv2: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:mediapackagev2: This release adds the BandwidthReportingMode setting to DASH manifest configurations, which lets you choose whether the bandwidth attribute of video Representations in the DASH manifest reports the average (default) or peak bitrate of the video track. api-change:config: AWS Config now supports connectors for Google Cloud. PutConnector accepts a Google Cloud connector configuration, and ListConnectors returns Google Cloud connector details. api-change:bedrock-agentcore: Support SigV4 request signing (cryptographically signed) in the Bedrock AgentCore Harness MCP connector tool. api-change:datasync: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:acm-pca: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:identitystore: Updated ApiRestrictSourceVpcs in NetworkConfiguration to accept VPC ARNs in addition to VPC IDs. api-change:resourcegroupstaggingapi: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:kinesisanalyticsv2: This release adds support for Enhanced Snapshots in Amazon Managed Service for Apache Flink, enabling application state to be managed as a standalone resource that customers can export, import, and reuse across applications. api-change:transcribe: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:connectcases: This release adds APIs that allow customers to merge cases to consolidate case history, and get the status of an ongoing case merge operation. api-change:comprehend: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:route53domains: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:codebuild: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:memorydb: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:directconnect: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. api-change:shield: This release adds Smithy RPC v2 CBOR as

Test your applications against AWS locally with AWS Emulator

AWS News Blog — 2026-11-11T19:00:44+00:00

AWS Emulator is a free, open-source local emulator in Rust that lets developers test applications against nearly every AWS service on their own machine using the same CLI and SDK commands, with fidelity measured against real AWS behavior.

Amazon Cognito now supports user pool session management

AWS What's New — 2026-11-11T19:00:00+00:00

Amazon Cognito now supports session management for user pools, giving you visibility into and control over the sessions your users establish when they sign in to your applications. Single sign-on (SSO) sessions are created when a user signs in through managed login and let them access other app clients without re-authenticating. Token sessions are created when a user signs in to an app client and receives tokens. Session management lets you list a user's active SSO and token sessions across all

AWS Lambda MicroVMs now supports the x86 CPU architecture

AWS What's New — 2026-11-11T18:00:00+00:00

AWS Lambda MicroVMs now supports the x86 CPU architecture, so you can run your existing x86 applications, tools, and software dependencies without recompiling or porting them. When you create a MicroVM image, you can now choose between x86 and Arm (AWS Graviton) to give each user or job an isolated MicroVM on the architecture your workload uses. Lambda MicroVMs is a serverless compute primitive that provides VM-level isolation, near-instant launch and resume, and state preservation for running u

Amazon EKS Auto Mode now supports security groups for Pods

AWS What's New — 2026-11-11T17:26:00+00:00

Amazon EKS Auto Mode now supports security groups for Pods, letting you apply dedicated Amazon EC2 security group rules to individual Pods. Different workloads on the same node can carry different security groups, giving your Pods network-level segmentation without creating separate node pools for each application. Security groups for Pods extends your existing AWS network controls to the Pod level, so your Pods can reach resources such as Amazon RDS and Amazon ElastiCache databases that authori

AWS Emulator is now available for building and testing AWS applications locally

AWS What's New — 2026-11-11T17:00:00+00:00

AWS Emulator is now available for building and testing AWS applications locally. Starting today, you can use AWS Emulator to build and test AWS applications on your computer or in your continuous integration (CI) environment. Your existing AWS SDK and CLI calls go to AWS Emulator and come back in milliseconds, so you and your coding agents can find and fix errors locally, with no deployments or AWS account required. You create and manage resources with the same AWS SDK and AWS CLI calls you use

AWS Quick apps are now available in Asia Pacific (Singapore)

AWS What's New — 2026-11-11T15:20:00+00:00

The AWS Quick desktop app for macOS and Windows and the Quick mobile app for iOS and Android are now available in the Asia Pacific (Singapore) Region. This launch builds on the recent availability of Quick in Singapore . The desktop app works with your local files and connects to your calendar, email, and business apps. The mobile app lets you chat with Quick, review your activity feed, and open dashboards. Your conversations, context, and agents stay in sync across web, desktop, and mobile, so

Why do my image pulls from Amazon ECR Public fail with "toomanyrequests: Data limit exceeded"?

AWS re:Post Articles — 2026-11-11T10:31:51.372000+00:00

When I pull a container image from Amazon Elastic Container Registry Public (Amazon ECR Public) in an environment outside AWS, such as a GitHub-hosted runner in GitHub Actions, the pull sometimes fails with "429 Too Many Requests" and "toomanyrequests: Data limit exceeded". The same pull often succeeds when I retry it, for example when I rerun a CI job.

Amazon SES now supports higher limits for email identities, tenants, and configuration sets

AWS What's New — 2026-11-11T08:00:00+00:00

Amazon Simple Email Service (Amazon SES) now supports higher limits for email identities, tenants, and configuration sets. You can view your current usage against each limit and request increases in the AWS Service Quotas console. A single account can now keep pace with your growth, so you no longer need to split email workloads across several accounts to stay within per-account limits. Customers running multi-tenant workloads often create a separate email identity, tenant, or configuration set

Automating the investigation of cross-account Amazon EKS deployment failures with AWS DevOps Agent

AWS re:Post Articles — 2026-11-11T00:15:53.295000+00:00

Learn how to configure AWS DevOps Agent to automatically investigate AWS CodePipeline deployment failures for Amazon Elastic Kubernetes Service (Amazon EKS) clusters across multiple AWS accounts.

Updated default retry behavior for AWS SDKs and tools

AWS Developer Tools Blog — 2026-11-10T23:44:15+00:00

In May 2026, we announced an opt-in for updated retry behavior for the AWS SDKs, AWS Command Line Interface (AWS CLI), and AWS Tools for PowerShell. Starting November 10, 2026, the updated behavior is the default, and we have removed the opt-in. Availability varies by SDK and tool. See the SDK availability and GitHub issues […]

AWS Billing and Cost Management now supports AWS Billing Conductor and AWS Billing Transfer views as source views for custom billing views

AWS What's New — 2026-11-10T23:22:00+00:00

Custom billing views now support AWS Billing Conductor and AWS Billing Transfer views as source views. These are the views AWS maintains per billing group and per billing transfer relationship. You can combine them into a single custom billing view, apply filters, and use that view in Cost Explorer, AWS Budgets, and the Billing and Cost Management console. There are three source view types. Billing group views contain the cost of each Billing Conductor billing group, which you can combine for ch

Amazon EC2 G7 instances now available in additional regions

AWS What's New — 2026-11-10T19:30:00+00:00

Amazon Elastic Compute Cloud (Amazon EC2) G7 instances powered by NVIDIA RTX PRO 4500 Blackwell Server Edition GPUs are now available in Europe (London), Asia Pacific (Mumbai, Sydney) and South America (Sao Paulo) Regions. G7 instances deliver up to 4.6x AI inference performance and up to 2.1 graphics performance compared to G6 instances. G7 instances also deliver faster performance for GPU-accelerated data analytics workloads. Customers can use G7 instances for deploying AI models for language

AWS CLI 2.40.0

AWS CLI v2 Changelog — 2026-11-10T19:04:44+00:00

api-change:route53profiles: Adds support for having multiple profiles on one VPC. This is done using a priority system to handle conflicts on the dataplane. api-change:verifiedpermissions: Inconsequential changes to model formatting api-change:lakeformation: Adds support for governing AWS Glue user-defined functions with Lake Formation permissions. This release adds the UserDefinedFunction and AnyResource resources, the EXECUTE permission, and the GetTemporaryGlueFunctionCredentials and GetGlueFunctionSessionContext APIs. api-change:devicefarm: Adds the NONE insights type to disable insights generation for a run, a testPackageArn field in run details, and a new artifact type for device connect command logs. bugfix:Retries: Fix the standard and adaptive retry modes not applying the service-specific default max attempts. Amazon DynamoDB and Amazon DynamoDB Streams now default to 4 max attempts when max_attempts is not explicitly configured. api-change:marketplace-agreement: This release adds the freeTrialSummary.trialEndTime field to DescribeAgreement and the freeTrialEndTime field to SearchAgreements results, so you can see when an agreement's free trial ends. api-change:arc-region-switch: Adds RetryableConflictException to UpdatePlan so AWS SDKs automatically retry updates that conflict with a concurrent change. enhancement:Retries: The standard and adaptive retry modes now treat HTTP 429 responses as throttling errors and retry them when the error code does not match a modeled error for the operation, such as a 429 with an empty body or an unrecognized error code. If the error code matches a modeled error, the model decides whether the error is retried. api-change:connect: Amazon Connect now returns Contact Lens conversational analytics configuration in the DescribeContact API. Customers can retrieve a contact's analytics, redaction, summarization, and sentiment settings, consistent with the configuration already available in contact trace records and contact events. api-change:gamelift: Amazon GameLift Servers adds game session placement insights. Logs show how the queue's priority configuration, along with player latency and cost data, are applied to each placement request. Use game session placement insights to diagnose why game session placements succeed, fail, or time out. feature:Retries: The updated standard retry mode behavior previously available through the AWS_NEW_RETRIES_2026 opt-in environment variable is now the default, and the AWS_NEW_RETRIES_2026 environment variable has been removed. The standard retry mode now uses lower initial backoff delays (50ms base instead of 1s for non-throttling errors), honors the x-amz-retry-after response header for server-guided retry timing, adjusts retry behavior for long-polling operations, and uses updated retry quota costs. api-change:s3tables: Adds support for server access logging for Amazon S3 table buckets with the new PutTableBucketLogging and GetTableBucketLogging APIs. api-change:pcs: A

Amazon OpenSearch Service announces managed cross-Region disaster recovery

AWS What's New — 2026-11-10T19:00:00+00:00

Amazon OpenSearch Service now offers managed cross-Region disaster recovery, so you can meet strict availability and business continuity requirements for mission-critical search, AI, and analytics workloads without building or maintaining replication yourself. After you create domains in two Regions, you can pair them with a single API call or a few steps in the AWS Management Console. Managed disaster recovery delivers a recovery point objective (RPO) of under one minute and a recovery time obj

Amazon RDS for PostgreSQL announces Extended Support minor versions 13.23-rds.20260819, 12.22-rds.20260820 and 11.22-rds.20260822

AWS What's New — 2026-11-10T17:00:00+00:00

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor versions 13.23-rds.20260819, 12.22-rds.20260820 and 11.22-rds.20260822. Amazon RDS Extended Support provides up to three additional years of fixes for critical Common Vulnerabilities and Exposures (CVE) and bugs beyond a major version's end of standard support date, giving you more time to upgrade to a new major version. You can upgrade your database using Amazon RDS Blue/Green Deployments , in-pl

Amazon RDS for MySQL 26.10 is now available in Amazon RDS Database Preview Environment

AWS What's New — 2026-11-10T17:00:00+00:00

Starting today, Amazon RDS for MySQL 26.10 is available in the Amazon RDS Database Preview Environment , allowing you to evaluate the pre-release of MySQL 26.10 on Amazon RDS for MySQL. MySQL 26.10 includes bug fixes, security patches, and some improvements to READ COMMITTED workload performance and purge lag warnings in the error log. On busy READ COMMITTED workloads, NUMA systems performance could be impacted as each read view that closed required a global mutex. Read-view objects can now be r

AWS Partner Central now provides an improved business planning experience

AWS What's New — 2026-11-10T16:00:00+00:00

AWS Partner Central now offers a new business planning experience in the AWS Console. AWS Partners can initiate plans for growing their AWS business or collaborate on plans initiated by AWS teams. Partners can collaborate with AWS partner development, technology, marketing, and specialist teams to define plan narratives, goals, and initiatives. AI-assisted plan readiness scores help partners identify areas to improve, while real-time tracking shows progress against goals. Partners can also add a

Secure IoT Device Authentication with AWS KMS and IoT Core Custom Authorizers

AWS re:Post Articles — 2026-11-10T15:11:53.326000+00:00

This blog post demonstrates how to implement secure, scalable custom authentication for AWS IoT Core devices using AWS KMS asymmetric keys for token signing, providing an alternative to certificate-based authentication that's easier to manage at scale while maintaining strong security guarantees.

Amazon S3 Access Grants now support listing grants across multiple AWS accounts

AWS What's New — 2026-11-10T14:00:00+00:00

Amazon S3 Access Grants can now discover and list all your grants across multiple AWS accounts with a single API call, eliminating the need to query each account separately. A single ListCallerAccessGrants call returns grants from your own S3 Access Grants instance and every instance shared with you, giving you a complete view of the S3 data you can access. By setting the new InstanceScope parameter to ALL in your ListCallerAccessGrants request, S3 Access Grants queries every instance shared wit

Amazon Bedrock adds bedrock-runtime endpoint support for Daybreak models

AWS What's New — 2026-11-10T10:14:00+00:00

Eligible customers can now access OpenAI’s specialized cybersecurity models Daybreak Red: GPT-5.6 Cyber and Daybreak Blue: GPT-5.6 Sol through the bedrock-runtime endpoint on Amazon Bedrock. Daybreak Blue is the starting point for most security teams across defensive workflows, including vulnerability discovery, detection engineering, and incident response. Daybreak Red is designed for advanced, authorized tasks such as vulnerability research, exploit reproduction, and mitigation development. Fo

Amazon S3 Tables now support S3 server access logging

AWS What's New — 2026-11-10T08:00:00+00:00

Amazon S3 Tables now support server access logging, providing you detailed records of the requests made to your table buckets. You can now track table operations, namespace management, and data access to support security audits, access analysis, and cost attribution. Log delivery is available at no additional cost, and you pay only for the storage of the log files. When you enable server access logging on a table bucket, S3 delivers logs for requests to all tables and namespaces in that bucket t

AWS Marketplace SaaS free trials now convert automatically to paid subscriptions

AWS What's New — 2026-11-10T08:00:00+00:00

Today, AWS Marketplace announces that free trials of usage-based software as a service (SaaS) products can now convert automatically to paid subscriptions. When a free trial ends, the buyer's subscription continues at the seller's usage-based pricing, so buyers pay only for what they use after the trial. This helps sellers turn more trial users into paying customers. Buyers get a simple way to evaluate software before they buy, with no new subscription and no interruption in access. Sellers can

AWS Network Firewall launches next-generation firewall policy

AWS What's New — 2026-11-10T08:00:00+00:00

Today, AWS announces next-generation firewall (NGFW) policy for AWS Network Firewall, a new policy model that provides security teams with a simpler policy structure and increased rule capacity. AWS Network Firewall is a managed network security service that protects your Amazon VPCs with access control and threat detection. The new policy model strengthens your security posture by layering firewall and IPS protections instead of combining them, which also makes policies easier to manage. You au

Amazon ElastiCache Serverless now supports vector, full-text and hybrid searches plus aggregations

AWS What's New — 2026-11-10T08:00:00+00:00

Amazon ElastiCache Serverless for Valkey now supports vector, full-text, and hybrid search, along with aggregations. Applications searching live data often face a hard trade-off between latency and recall, along with delays before updates become searchable. With search on ElastiCache Serverless, applications can search data with latency as low as microseconds at up to 99% recall for vector search, while serving billions of queries per day. Updates are searchable in as little as microseconds, as

Amazon GameLift Servers now supports Game Session Placement Insights

AWS What's New — 2026-11-10T08:00:00+00:00

Amazon GameLift Servers now offers Game Session Placement Insights, delivering detailed, per-placement diagnostic logs for game session queue routing. Amazon GameLift Servers routes game session placement requests through queues that evaluate multiple fleet locations based on latency and cost factors. This feature is designed for game developers and engineers who need greater transparency into how their game session queues operate. Previously, developers had limited visibility into why placement

CloudWatch PromQL alarms now support EC2 and Application Auto Scaling

AWS What's New — 2026-11-10T03:00:00+00:00

Amazon CloudWatch alarms that use Prometheus Query Language (PromQL) can now trigger Amazon EC2 and Application Auto Scaling step and simple scaling policies. You can scale your EC2 Auto Scaling groups on CloudWatch OpenTelemetry metrics using the same kind of PromQL queries you use for dashboards and alerting. In this release, PromQL alarms also support EC2 Auto Scaling simple and step scaling policies. Target tracking is not currently a supported policy type for PromQL alarms. Teams moving to

Amazon OpenSearch Service now lets you validate and roll back version upgrades

AWS What's New — 2026-11-10T02:30:00+00:00

Amazon OpenSearch Service now supports clone-based upgrades, which let you validate a new OpenSearch version alongside your current one and cut over to it only when you're satisfied. If you find a problem, you can cancel before you cut over or roll back afterward. With clone-based upgrades, you can move to new versions with more confidence. When you start a clone-based upgrade, OpenSearch Service copies the data from your existing cluster (the primary cluster) to a second cluster running the new

Amazon Bedrock AgentCore now offers a Web Search API

AWS What's New — 2026-11-10T00:00:00+00:00

Today, AWS announces the general availability of the Web Search API on Amazon Bedrock AgentCore, which lets you search the web with a single API call. Web Search on AgentCore has been available as an MCP tool through AgentCore Gateway. The new InvokeWebSearch API gives applications, custom agent loops, and data pipelines search results with no resources to create. The API returns ranked results from the Amazon-operated web index behind Web Search on AgentCore. Each result includes a text extract

Amazon DocumentDB (with MongoDB compatibility) now supports post-quantum TLS, wildcard indexes, and $unionWith in version 8.0.3

AWS What's New — 2026-11-10T00:00:00+00:00

Amazon DocumentDB (with MongoDB compatibility) 8.0.3 adds hybrid post-quantum key exchange for TLS, wildcard indexes, the $unionWith aggregation stage, and new change stream events. Post-quantum TLS protects data in transit from traffic that is recorded today and decrypted later with a quantum computer. The new MongoDB APIs let you move more MongoDB workloads to Amazon DocumentDB without changing application code. What's new in 8.0.3: Post-quantum TLS: TLS 1.3 connections use hybrid key exchange

Deploy a self-service portal to request AWS Service Quota increases across multiple Regions

AWS re:Post Articles — 2026-11-09T22:22:31.215000+00:00

Requesting Service Quota increases by hand is slow when you need the same quota raised in several Regions: you open the Service Quotas console (or a support case) Region by Region, write a justification for each, and track them separately. The Request Portal for AWS Service Quotas turns this into a single guided web form backed by one consolidated support case. This article shows how to deploy it and submit a multi-Region request.

Amazon CloudWatch Logs announces account-level retention policies

AWS What's New — 2026-11-09T22:15:00+00:00

Amazon CloudWatch Logs now supports account-level retention policies, so you can use a single policy to set how long log data is kept across all or subset of log groups in an AWS account. Account-level policies allow platform and security teams to bring each log group in line with their retention standards. With today's launch, you can create policies that cover all log groups in the account or apply to a specific set of log groups with names that start with a prefix, such as /aws/lambda. You ca

AI Gets More Autonomous. Your Accountability Doesn't. Part 3: The Power to Say No

AWS re:Post Articles — 2026-11-09T21:37:08.977000+00:00

When Instacart ended its AI pricing tests, the prices could change back at once. Shoppers' trust could not. Most AI reviews ask whether an agent can do the job. Few ask what happens when it gets the job wrong, and whether that harm can be undone. Part 3 of a four-part series for leaders who sponsor AI splits undo into four kinds, shows how an agent earns more freedom step by step, and gives you a plan to contain a mistake before it goes live.

AWS Glue adds 100 new native connectors for popular SaaS applications

AWS What's New — 2026-11-09T21:33:00+00:00

AWS Glue now supports 100 new native connectors that simplify access to data in popular SaaS and REST API-based applications. Previously, bringing data from SaaS applications into AWS required writing custom code. Now, teams can create a connection once in the AWS Glue Data Catalog and reuse it across ETL jobs with the same permissions model they already use for AWS Glue. The new connectors span generative AI, finance, payments, marketing, product analytics, human resources, engineering, IT oper

Why an Amazon ECR lifecycle policy can delete an image your ECS service still needs — and how to prove it

AWS re:Post Articles — 2026-11-09T21:18:32.652000+00:00

An Amazon ECR lifecycle rule expires images by push date or count, not by whether something is running them. A task already running keeps working after its image is expired, so nothing breaks until that task is replaced — then the service can't start and a single-task service stays down. This article shows how to confirm, read-only with the AWS CLI, whether a lifecycle rule deleted the exact image digest an ECS service needs, and how to recover and prevent it.

AWS STS now supports cross-partition federation for AWS identities

AWS What's New — 2026-11-09T20:03:00+00:00

AWS Security Token Service (AWS STS) now lets your workloads use their AWS Identity and Access Management (IAM) identity in one partition to get temporary credentials for an IAM role in a different partition, without storing long-term credentials, which can help improve your security posture. Partitions are groups of AWS Regions, such as the commercial and AWS GovCloud (US) Regions, and each partition has an independent instance of IAM, creating a hard boundary between them. Previously, organiza

AWS CLI 2.39.7

AWS CLI v2 Changelog — 2026-11-09T19:37:08+00:00

api-change:es: Adds cloned blue-green upgrades for Amazon OpenSearch Service domains. UpgradeElasticsearchDomain accepts DeploymentStrategyOptions to upgrade on a cloned cluster, the new UpdateClone API shifts search traffic, cuts over and sets retention, and DescribeDomainChangeProgress reports upgrade details. api-change:s3control: Adds support for cross-account access grants with InstanceScope parameter for GetDataAccess and ListCallerAccessGrants operations in S3 Access Grants. api-change:bedrock-agentcore: Adds the InvokeWebSearch API, which searches the web using the AWS-managed web search and returns ranked results with a text extract from each page. Results can be filtered by domain and by publication time. api-change:datazone: Adds support for Workday Data Connect and Workday Live Data Query connection types in Amazon DataZone connection APIs. api-change:evs: Amazon EVS adds support for r7i.metal-24xl and r7i.metal-48xl EC2 bare metal instance types for self-deployed VMware Cloud Foundation environments. These diskless instance types use customer-connected external NFS storage, such as Amazon FSx for NetApp ONTAP, instead of local NVMe and vSAN. api-change:glue: We are releasing five new APIs to allow customers to enable Catalog-level data quality monitoring in AWS Glue Data Catalog, a new feature to perform data quality evaluation on collections of GDC tables selected by the customer, on a schedule or event-driven basis, using a custom or managed ruleset. api-change:ecs: Amazon ECS Managed Instances now supports isolated and confidential tasks, which run in AWS Nitro Sandboxes. Configure them with trustedExecutionConfiguration in task definitions and nitroEnclavesEnabled in capacity providers. api-change:sagemaker: Adds support for pipelines that AWS manages, filter ListPipelines by ManagedBy and run them with your own role via RoleArn on StartPipelineExecution. Adds pipeline version aliases to reference versions by name. Adds HubContent step metadata to ListPipelineExecutionSteps. bugfix:IMDS: Fixes region resolution from IMDS in Local Zones by reading the region directly instead of deriving it from the availability zone. api-change:opensearch: Adds cloned blue-green upgrades for Amazon OpenSearch Service domains. UpgradeDomain accepts DeploymentStrategyOptions to upgrade on a cloned cluster, the new UpdateClone API shifts search traffic, cuts over and sets retention, and DescribeDomainChangeProgress reports the upgrade details. api-change:batch: Adds support for additional Amazon EKS security context settings in AWS Batch. Pod-level settings include fsGroup, runAsUser, runAsGroup, runAsNonRoot, and seccompProfile. Container-level settings add Linux capabilities and seccompProfile to existing runAsUser, runAsGroup, and runAsNonRoot support. api-change:signin: Adds the CreateBearerToken API, which exchanges your IAM credentials for a bearer token that can be used to access supported AWS services.

Amazon Quick is now AWS Quick

AWS What's New — 2026-11-09T19:00:00+00:00

Amazon Quick, the AI workspace built only for work, is now AWS Quick, a name that reflects the enterprise security and governance built into Quick from the start as an AWS service. The new name now appears across the Quick website, the web, desktop, and mobile apps, and AWS documentation. Existing customers don't need to take any action, and Quick works the same way it did before. Amazon Quick Sight, the business intelligence capability in Quick, is now AWS Quick Sight. Quick Sight customers can

Amazon Bedrock now offers Claude Mythos 5.2 to Eligible Customers in AWS GovCloud (US)

AWS What's New — 2026-11-09T18:30:00+00:00

Amazon Bedrock, the platform for building generative AI applications and agents at production scale, now offers Claude Mythos 5.2 to eligible customers in AWS GovCloud (US). Claude Mythos 5.2 is Anthropic's most advanced AI model to date for use cases across cybersecurity, software coding, and complex reasoning tasks. The model can identify sophisticated security vulnerabilities in software and demonstrate exploitability. It can also comprehend large codebases and deliver actionable findings wit

Claude Fable 5.2 is now available on AWS GovCloud (US)

AWS What's New — 2026-11-09T18:30:00+00:00

Claude Fable 5.2 is now available on AWS GovCloud (US) and brings Anthropic's most capable generally available model for technical work to regulated customers. Fable 5.2 sets a new standard on the hardest projects in coding, math, and science, and Anthropic recommends it for fields like software engineering, scientific research, and finance, where judgment, iteration, and accuracy are critical. Claude Mythos 5.2, the same underlying model as Claude Fable 5.2, with its full cyber and bio capabili

Amazon Connect Customer launches evaluation form templates

AWS What's New — 2026-11-09T18:00:00+00:00

Amazon Connect Customer now provides evaluation form templates so managers don't have to build forms from scratch, reducing the time to deploy automated evaluations of human and AI agent performance. These templates cover typical customer interaction scenarios: customer service, inbound sales, and self-service. Each template assesses human and AI agent behaviors. For example, the customer service template includes questions such as "Did the agent show empathy toward the customer's issue?" Templa

Amazon MWAA now supports DuckDB operators

AWS What's New — 2026-11-09T18:00:00+00:00

Amazon Managed Workflows for Apache Airflow (Amazon MWAA) now supports DuckDB operators. DuckDB is an embedded analytical database that lets customers perform data quality checks, summaries, and transformations on data from sources DuckDB supports, including Amazon S3. Native support is available for DuckDB on Amazon MWAA Provisioned environments running Apache Airflow 3.3.1. DuckDB comes preinstalled and preconfigured for AWS connections in the latest MWAA Airflow 3.3.1 update. After updating t

AWS Weekly Roundup: AgentCore Runtime V2, Amazon DynamoDB bulk put items, and more (November 9, 2026)

AWS News Blog — 2026-11-09T17:55:26+00:00

Most of the cost of adopting something new isn’t the new thing, it’s the move. Moving a Hive table to Apache Iceberg has typically meant weeks of engineering work. Last week, Amazon S3 Tables turned that into three steps: start, sync as often as you need, complete. The source stays writable except for a few […]

Introducing an open-source UI for graph analytics over data lakes with Amazon Neptune Analytics

AWS What's New — 2026-11-09T17:00:00+00:00

Today, AWS is introducing an open-source solution with a local web UI that helps customers turn data lake records into graphs for analysis with Amazon Neptune Analytics. By projecting selected records and relationships, customers can investigate connections across tables and run graph algorithms without building their own ETL pipelines. For example, a customer could project accounts and transactions into a graph to explore how accounts are connected or identify communities that may warrant inves

Amazon DocumentDB Serverless now provides up to 35% higher throughput

AWS What's New — 2026-11-09T16:00:00+00:00

Amazon DocumentDB Serverless now provides up to 35% higher throughput with the launch of platform version 4. Platform versions represent improvements in performance, scaling capabilities, or features, and are automatically managed at the cluster level. All new serverless clusters launch on the latest platform version available in your AWS Region. You can upgrade existing clusters on platform version 3 to platform version 4 by applying the serverless-platform-version-update pending maintenance ac

Amazon Athena introduces system tables for observability, auditing, and usage analytics

AWS What's New — 2026-11-09T16:00:00+00:00

Amazon Athena now offers system tables which automatically capture your usage data and make it available for observability, usage analysis, and audit use cases. When you enable system tables, usage data is available within minutes of query completion across your workgroups and stored as service-managed, read-only Iceberg tables on Amazon S3 Tables with configurable retention. You can query it directly with Athena, while AWS manages the tables for you, including schema definition, partitioning, c

Claude Fable 5.2 is now available on AWS

AWS What's New — 2026-11-09T15:00:00+00:00

Claude Fable 5.2 is now available on AWS and brings Anthropic's most capable generally available model for technical work to all customers. Fable 5.2 sets a new standard on the hardest projects in coding, math, and science, and Anthropic recommends it for fields like software engineering, scientific research, and finance, where judgment, iteration, and accuracy are critical. Claude Mythos 5.2, the same underlying model as Claude Fable 5.2 with its full cyber and bio capabilities retained for cyb

Why does an Amazon Athena "primary" workgroup appear in AWS Regions that I never use, and how do I find what created it?

AWS re:Post Articles — 2026-11-09T12:29:25.346000+00:00

Every AWS account has a default Amazon Athena workgroup named primary in each Region where Athena has been used. Read-only calls such as ListWorkGroups count as first use, so inventory and security services (AWS Resource Explorer, AWS Config, posture scanners) create it in Regions you never use and then raise findings on it.

Amazon Route 53 Profiles now supports multiple Profiles per VPC

AWS What's New — 2026-11-09T08:00:00+00:00

Amazon Route 53 Profiles now lets you associate more than one Profile with a VPC. Previously, a VPC could have only one Profile, so teams that managed Route 53 configurations separately (for example, security teams managing DNS Firewall rule groups while cloud infrastructure and network admin teams manage private hosted zones and Resolver forwarding rules) all had to share a single Profile and associate their private hosted zones, Resolver rules, and DNS Firewall rule groups with it. With this l

AWS Analytics services now support Workday Data Cloud integration

AWS What's New — 2026-11-09T08:00:00+00:00

Today, AWS announces a new bi-directional, zero-copy integration between AWS Analytics services and Workday Data Cloud. Instead of building and maintaining ETL pipelines to replicate data between systems, joint customers can now query across their AWS and Workday datasets in place, without moving or copying data, while retaining existing security controls in both environments. From AWS, you can use Amazon SageMaker Unified Studio, Amazon EMR, AWS Glue, Amazon Redshift, and Amazon Athena to query

Introducing AWS Nitro Sandboxes on Amazon EKS, ECS and EC2 for hardware isolated pods, tasks and VMs

AWS What's New — 2026-11-09T08:00:00+00:00

AWS Nitro Sandboxes are now available as lightweight VMs managed by the Nitro Hypervisor. You can use Nitro Sandboxes for an Amazon EKS pod, or Amazon ECS task, or lightweight Virtual Machines (VMs), including AI agents running inside them, in their own hardware-isolated virtual machine powered by the AWS Nitro System . Each workload gets the isolation boundary of a Nitro isolated virtual machine. This allows you to safely run untrusted, multi-tenant, or regulated workloads within the resources

Amazon S3 Access Points for Amazon FSx are now available in additional AWS Regions

AWS What's New — 2026-11-09T08:00:00+00:00

You can now attach Amazon S3 Access Points to your Amazon FSx for NetApp ONTAP file systems in 4 additional AWS Regions, and to your Amazon FSx for OpenZFS file systems in 20 additional AWS Regions. With this capability, your file data in Amazon FSx is accessible for use with the broad range of artificial intelligence, machine learning, and analytics services and applications that work with S3, while your data continues to reside on your FSx file system. An S3 Access Point for Amazon FSx is an S

Migrate a server to AWS with AWS Transform MGN — step by step

AWS re:Post Articles — 2026-11-09T07:57:35.795000+00:00

Migrating a server to AWS sounds scary and complex. AWS Transform MGN removes that fear: it automates a lift-and-shift rehost from anywhere — other clouds, on-premises, or any virtualization platform — with minimal downtime. It also applies to servers already in AWS: move an EC2 instance to another Region, or into another account.

Amazon EKS Auto Mode and Karpenter now support Dynamic Resource Allocation

AWS What's New — 2026-11-09T06:00:00+00:00

Amazon Elastic Kubernetes Service (Amazon EKS) now supports Dynamic Resource Allocation (DRA) for NVIDIA GPUs and Elastic Fabric Adapter (EFA) network devices when using Amazon EKS Auto Mode and Karpenter. You can now define the device attributes your Kubernetes workloads need with DRA, share GPU devices across Pods, and allocate topology-aligned GPU and EFA devices while Amazon EKS Auto Mode and Karpenter dynamically scale Amazon EC2 instances based on workload demand. With DRA, you define Reso

TrustCon 2026: 5 practical trust and safety patterns for operating on AWS

AWS re:Post Articles — 2026-11-06T23:38:24.932000+00:00

Learn how customers and peer organizations approach abuse prevention today based on learnings from TrustCon 2026.

Kimi K3.1 Pro (Highspeed) now available on Amazon Bedrock

AWS What's New — 2026-11-06T22:47:00+00:00

Today, Kimi K3.1 Pro from Moonshot AI is available on Amazon Bedrock, expanding our open weight model portfolio with the security and governance that customers rely on. Customers using Amazon Bedrock can now run agentic use cases such as coding and document processing on Kimi K3.1 Pro (Highspeed), which delivers high output tokens per second (OTPS) for faster, more responsive results. According to Moonshot AI, Kimi K3.1 Pro is an open-weight, natively multimodal agentic model with a 1-million-to

Agent Registry is now generally available in AWS GovCloud (US-West) Region

AWS What's New — 2026-11-06T19:48:00+00:00

AWS Agent Registry, available through Amazon Bedrock AgentCore, is now available in the AWS GovCloud (US-West) Region. AWS Agent Registry is a fully managed discovery service that gives your organization a central catalog for organizing, curating, and discovering resources. You can publish MCP servers, tools, agents, agent skills, and custom resources to a searchable registry, and control what becomes discoverable through an approval workflow. People and AI agents can then find the right tools a

AWS CLI 2.39.6

AWS CLI v2 Changelog — 2026-11-06T19:34:37+00:00

api-change:datazone: Adds support for updating OAuth 2.0 connection settings with UpdateConnection. api-change:ssm: AWS Systems Manager now provides two new APIs - RegisterDefaultHostManagementConfiguration and DeregisterDefaultHostManagementConfiguration - along with a new DefaultHostManagementConfiguration CloudFormation resource type. api-change:mediaconvert: Smart subtitling uses AWS Elemental Inference to generate captions from your content's audio, in embedded, burn-in, DVB-Sub, IMSC, SMI, SRT, teletext, TTML, or WebVTT outputs. Also fixes HEVC passthrough writing an incomplete codecs string to DASH and HLS manifests. api-change:connectcases: Amazon Connect Cases adds two Bulk Case Actions operations. BatchCreateRelatedItem adds a Comment-type related item to up to 100 cases per request, BatchUpdateCase updates fields (title, status, customer ID, custom) on up to 100 cases. Same domain, per-case success and failure results returned. api-change:connect: Rules in Amazon Connect now support ending email contacts associated to a case based on case events. api-change:ram: Adds support for using managed permission template parameters, discovering shared customer-managed permissions, and managing customer-managed permission deprecation. api-change:autoscaling: Amazon EC2 Auto Scaling now lets you exclude managed resources from describe API responses using the new optional IncludeManagedResources parameter. Set this parameter to false to exclude managed resources from the response. By default, managed resources are included. enhancement:help: Add a --help parameter that renders the same help as the help parameter on every command. api-change:lightsail: Marking fields as sensitive in GetInstanceAccessDetails, CreateKeyPair, DownloadDefaultKeyPair, CreateBucketAccessKey, CreateContainerServiceRegistryLogin, and GetRelationalDatabase responses. api-change:glue: Adds support for user-defined functions governed by AWS Lake Formation. api-change:athena: Added support for Athena System Tables which writes Athena usage data to AWS S3 managed tables in Apache Iceberg format. Adds CreateSystemTableConfiguration, UpdateSystemTableConfiguration, DeleteSystemTableConfiguration, GetSystemTableConfiguration, and ListSystemTableStatuses. api-change:eks-auth: Added workloadIdentityProviderArn to the AssumeRoleForPodIdentity API response. api-change:bedrock-agent: Add support for configuring searchability for metadata fields via UpdateKnowledgeBase request for Managed Knowledge Base. Once a field is marked as searchable it can be queried via query text and is factored into Managed Knowledge Base's ranking algorithm. enhancement:awscrt: Update awscrt to version 0.38.1

Amazon S3 Lifecycle rules for originals, derivatives, temporary exports, and legal-hold records

AWS re:Post Articles — 2026-11-06T19:20:26.634000+00:00

A four-rule lifecycle configuration for a bucket that holds originals, derivatives, temporary exports, and records under legal hold, and how it works with S3 Object Lock.

Amazon MWAA Serverless supports Apache Airflow connections and variables

AWS What's New — 2026-11-06T18:00:00+00:00

Amazon Managed Workflows for Apache Airflow (Amazon MWAA) Serverless now supports Apache Airflow connections and variables, so your workflows can reach databases, APIs, and other external systems. You can manage credentials and configuration outside your workflow code. You store sensitive connections and variables in the secrets backend of your choice, such as AWS Secrets Manager, AWS Systems Manager Parameter Store, or your own custom backend, configure it on your workflow, and grant your workf

Amazon MWAA Serverless now supports custom and provider package operators

AWS What's New — 2026-11-06T18:00:00+00:00

Amazon MWAA Serverless now supports operators from Apache Airflow provider packages, such as HTTP, Snowflake, or dbt, and custom operators that you write. This gives data engineers the flexibility to integrate with more systems and build specialized workflow tasks without provisioning infrastructure. To get started, add the provider package or your own operator to a code package, upload it to Amazon S3, and reference the operator in your workflow definition when you create or update a workflow.

Amazon Redshift expands SUPER data type to store strings up to 16 million bytes

AWS What's New — 2026-11-06T16:00:00+00:00

Amazon Redshift now supports individual strings up to 16 million bytes within SUPER data types . Once you opt in through a database parameter, this enhancement applies when ingesting structured or semi-structured data from JSON, PARQUET, TEXT, and CSV source files, and when transforming data through extract load and transform (ELT) processes. Previously, individual strings within SUPER data types were limited to 65,535 bytes. Storing large individual strings in the SUPER data type helps avoid co

Amazon MSK Replicator is now available in AWS GovCloud (US-East, US-West) Regions

AWS What's New — 2026-11-06T16:00:00+00:00

You can now use Amazon MSK Replicator in the AWS GovCloud (US-East, US-West) Regions to replicate streaming data across Amazon MSK clusters and from external Apache Kafka clusters including on-premises, self-managed on AWS, or other cloud providers to Amazon MSK Provisioned clusters. MSK Replicator is a feature of Amazon MSK that automates data replication between Kafka clusters, eliminating the need to manage custom replication infrastructure or configure open-source tools. With MSK Replicator,

AWS launches support for amortization of EC2 Capacity Blocks for ML

AWS What's New — 2026-11-06T15:00:00+00:00

AWS Data Exports for Cost and Usage Report (CUR) 2.0 and AWS Cost Explorer now amortize the upfront fee for Amazon EC2 Capacity Blocks for ML across the duration of each reservation. You can see the amortized cost of each instance launched into a Capacity Block and the amortized cost of unused capacity, so you can attribute your upfront fee to the workloads that used it and identify capacity that went unused. Previously, a Capacity Block's upfront fee appeared as a single charge on the purchase

How to replace manual AWS health checks with a multi-agent solution on Amazon Bedrock AgentCore

AWS re:Post Articles — 2026-11-06T14:50:53.133000+00:00

During a 3 Day AWS Experience-Based Acceleration (EBA) event A platform team supporting 20+ product teams replaced a 1–2 hour weekly AWS infrastructure review with a scheduled multi-agent health check on Amazon Bedrock AgentCore. This article shares the architecture, six design decisions that took it from demo to production-ready, a readiness checklist, and a reusable three-day build plan.

Capacity Reservation Resource Groups now support Amazon EC2 Capacity Blocks and interruptible Capacity Reservations in AWS GovCloud (US) Regions

AWS What's New — 2026-11-06T14:00:00+00:00

Starting today, you can add Amazon EC2 Capacity Blocks for ML and interruptible Capacity Reservations to Capacity Reservation Resource Groups in AWS GovCloud (US) Regions. Amazon EC2 offers different reservation offerings such as On-Demand Capacity Reservations (ODCRs), interruptible Capacity Reservations, and Capacity Blocks for ML. Previously, a Capacity Reservation Resource Group could only include ODCRs. Now you can add any type of Capacity Reservation to a Capacity Reservation Resource Grou

AWS Elemental MediaConvert adds a native integration with AWS Elemental Inference Smart Subtitles

AWS What's New — 2026-11-06T08:00:00+00:00

AWS Elemental MediaConvert now integrates Smart Subtitles, an AI-powered subtitling solution built on AWS Elemental Inference and the latest speech recognition models. This feature brings automated subtitle generation directly into your video-on-demand (VOD) transcoding and packaging workflows, eliminating the need for separate external captioning pipelines. Customers can now manage both transcoding and subtitle creation within a single, unified workflow. Smart subtitles automatically transcr

Amazon Simple Email Service is now available in six new AWS Regions

AWS What's New — 2026-11-06T08:00:00+00:00

Amazon Simple Email Service (Amazon SES) is now available in the Asia Pacific (New Zealand, Melbourne, Taipei, Thailand), Mexico (Central), EU (Spain). Customers can now use these new Regions to leverage Amazon SES to send emails and, if needed, to help manage data requirements. Amazon SES is a scalable, cost-effective, and flexible cloud-based email service that allows digital marketers and application developers to send marketing, notification, and transactional emails from within any applicat

AWS Glue Data Catalog now supports catalog-vended credentials with Apache Iceberg REST catalog federation

AWS What's New — 2026-11-06T08:00:00+00:00

AWS Glue Data Catalog now supports external catalog's vended credentials in Apache Iceberg REST catalog federation. You can now read external Iceberg tables from Amazon Athena, Amazon EMR, Amazon Redshift, and AWS Glue using coarse-grained table grants in your external Iceberg catalog. Glue Data Catalog already federates to external Iceberg REST catalogs through an AWS IAM role that you configure with access to your Amazon S3 buckets. This enhancement in Glue Data Catalog provides another way to

Monitoring EC2 capacity and vCPU utilization for large-scale EDA grids with Amazon EC2 Capacity Manager

AWS re:Post Articles — 2026-11-06T04:22:24.227000+00:00

This article shows semiconductor/EDA platform teams how to monitor total vCPU usage, ODCR utilization, and per-family quota headroom across a multi-account EDA grid using Amazon EC2 Capacity Manager, Service Quotas alarms, and Cost Explorer Net metrics — one cross-account view for capacity planning.

AWS Security Hub now provides an SBOM inventory for your compute resources

AWS What's New — 2026-11-06T00:30:00+00:00

Today, AWS announces that AWS Security Hub now provides a Software Bill of Materials (SBOM) inventory, giving central security teams a continuously updated, organization-wide view of the software packages and applications installed on their compute resources. Security Hub builds the inventory from the SBOMs that Amazon Inspector generates for Amazon EC2 instances, Amazon ECR container images, and AWS Lambda functions, with no additional configuration. The SBOM page lists each package with its ve

AWS Interconnect - last mile announces new metro in Northern Virginia, USA

AWS What's New — 2026-11-05T21:30:00+00:00

Today, AWS announced a new AWS Interconnect - last mile metro in Northern Virginia, USA. Northern Virginia joins New York as the second metro where you can connect your data center, branch office, or colocation facility to AWS. AWS Interconnect - last mile gives you managed, private, resilient connections to AWS, so you don't have to order cross-connects or configure routers. Every connection is provisioned by default across two physically diverse locations with four redundant links, providing m

Announcing Web Answer on Amazon Bedrock AgentCore

AWS What's New — 2026-11-05T20:56:00+00:00

Today, we are announcing the general availability of Web Answer on Amazon Bedrock AgentCore. Web Answer is a managed tool that returns a synthesized, grounded, cited answer to a natural-language question in a single call, so agent builders can attach it to an agent and get back a finished answer grounded in current web sources, without building and maintaining their own search, retrieve, synthesis, and citation pipeline. Web Answer builds on Web Search on Amazon Bedrock AgentCore, which launched

AWS Network Load Balancer is now available in the AWS Phoenix Local Zone

AWS What's New — 2026-11-05T20:00:00+00:00

AWS Network Load Balancer is now available in the Phoenix Local Zone (us-west-2-phx-2a). AWS Local Zones is a type of AWS infrastructure deployment that places AWS compute, storage, database, and other select services closer to large population, industry, and IT centers where no AWS Region exists today. With this launch, you can create an AWS Network Load Balancer directly in the Phoenix Local Zone. Previously, if your targets ran in the Phoenix Local Zone, you had to place the load balancer in

Why can't I change the audio language, track name, or DEFAULT flag in my MediaPackage manifest?

AWS re:Post Articles — 2026-11-05T19:46:55.406000+00:00

Customers find no MediaPackage setting to fix an audio language reading "und", a DEFAULT flag on the wrong rendition, or extra CMAF audio renditions. Most manifest attributes are carried through from the input, so the value was set upstream and the packager config holds nothing to change. The hidden cost: teams scope a full re-encode when the wrong value often sits in a text file beside the media. Readers learn which of three routes produced the attribute, and where each fix belongs.

Why is my AWS Elemental MediaPackage segment duration longer than the value I configured?

AWS re:Post Articles — 2026-11-05T19:22:18.111000+00:00

Customers set a segment duration in MediaPackage and get longer segments, or find lowering it does nothing. The value is a minimum that rounds up to whole GOPs, documented in the MediaLive guide but easy to miss since the cause sits upstream. The undocumented cost: rounding raises EXT-X-TARGETDURATION, which RFC 8216 forbids changing once published, so standard HLS pays permanent live-edge latency. Readers learn to predict the real duration and fix it at the right service.

AWS CLI 2.39.5

AWS CLI v2 Changelog — 2026-11-05T19:11:59+00:00

enhancement:s3: Add --tags parameter to s3 cp, s3 mv, and s3 sync commands to set tags on objects when transferring from a local path to S3. api-change:appintegrations: This release adds a LastModifiedRegion field to GetApplication and ListApplications so customers can see which Region an application was last modified in. api-change:wafv2: AWS WAF customers who monetize AI traffic on Web ACLs can now configure payments through connected accounts (Stripe). api-change:qconnect: Adds support for real-time agent assistance and self-service with Amazon Connect Global Resiliency, including cross-Region replication of supported AI agent resources and configurations. api-change:lambda-microvms: AWS Lambda MicroVMs now support the x86-64 CPU architecture, which you can select in addition to ARM64 (Graviton) when launching a MicroVM. api-change:glue: AWS Glue Spark ETL jobs can now auto-upgrade to the latest version. Set GlueVersion to Auto, then track progress with the AutoVersionStatus field in GetJob. Use StartJobUpgradeAnalysis to approve or decline an upgrade, GetJobUpgradeAnalysis to view details, and StopJobUpgradeAnalysis to stop it. bugfix:update: On Windows, clear the inherited PSModulePath regardless of its case before verifying the install script signature, so aws update no longer fails when run from PowerShell 7. api-change:route53domains: Route 53 Domains now supports restoring domains. This release adds the RestoreDomain API to self-serve domain restoration. api-change:sagemaker: Fixed the ImageDeleted and ImageVersionDeleted waiters to succeed on the ResourceNotFound error returned by DescribeImage and DescribeImageVersion bugfix:codedeploy: Tighten file permissions for the on-premises instance configuration file written by aws deploy install api-change:quicksight: Amazon QuickSight adds APIs to view account service role settings and switch to or replace a customer-managed IAM role. api-change:bedrock-agent-runtime: Amazon Bedrock Managed Knowledge Base now supports an optional mediaId parameter in GetDocumentContent that you can use to retrieve images embedded in source documents. api-change:securityagent: Adds support for IAM Identity Center groups as Agent Space members. CreateMembership, DeleteMembership, and ListMemberships now accept the GROUP member type. ListMemberships can filter by USER, GROUP, or ALL, and returns group display name and description. api-change:agent-registry-control: Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer. api-change:account-access-runtime: Adds SDK support for Account Access user portal operations, enabling users to list out and get credentials for role assignments configured in AWS IAM Account Access Manager. api-change:bedrock-agentcore-control: Adds support for OAuth2 Authorization Server Metadata (RFC 8414) discovery URLs in custom JWT authorizer and OAuth2 credential provider configurations. api-change:logs: Adds account-level retention polici

Amazon Cognito announces 99.99% Service Level Agreement for the Plus feature plan

AWS What's New — 2026-11-05T18:00:00+00:00

Starting November 1, 2026, the Amazon Cognito Service Level Agreement (SLA) commits to a Monthly Uptime Percentage of 99.99% for user pools on the Plus feature plan, up from 99.9%. User pools already on Plus are automatically covered by the new Service Commitment. User pools on Essentials and Lite stay at the 99.9% Service Commitment with no change to their terms. To qualify for the 99.99% Service Commitment, you can switch a user pool to the Plus feature plan using the AWS Management Console, A

Amazon DynamoDB now supports bulk put items

AWS What's New — 2026-11-05T18:00:00+00:00

Today, AWS announces the general availability of bulk put items for Amazon DynamoDB, a fully managed feature that writes data from Amazon S3 into your existing DynamoDB tables. Many DynamoDB applications use data that other systems produce and store in Amazon S3. Writing this data into existing DynamoDB tables has typically meant building custom pipelines and managing table capacity. With bulk put items, developers and data engineers can write this data without impacting existing workloads or bu

IAM Roles Anywhere now supports automatic certificate revocation checking

AWS What's New — 2026-11-05T17:38:00+00:00

AWS Identity and Access Management (IAM) Roles Anywhere now supports automatic revocation checking using certificate revocation list (CRL) distribution points (CDPs). This helps keep revocation checks in sync with your certificate authority (CA) and can help improve your security posture. When you enable this capability on a trust anchor, IAM Roles Anywhere reads the CDP URLs embedded in authenticating certificates, downloads the corresponding CRLs, and denies credential requests that use revoke

Amazon OpenSearch Service optimized engine now supports agent traces

AWS What's New — 2026-11-05T17:00:00+00:00

Today, the Amazon OpenSearch Service optimized engine adds support for agent traces, including OpenTelemetry traces. Your traces and logs now live in the same place. You can follow a request or an agent session from start to finish, find the step that failed or slowed down, and check the related logs without switching tools. The optimized engine maps OpenTelemetry logs and traces to object, nested, and flat object fields, with support for multi-valued arrays. Span events, span links, prompts, an

How do I choose between the bedrock-runtime and bedrock-mantle endpoints in Amazon Bedrock?

AWS re:Post Articles — 2026-11-05T16:37:15.345000+00:00

You are building on models hosted in Amazon Bedrock and ready to send inference requests. Bedrock offers two endpoints, `bedrock-runtime` and `bedrock-mantle`, and many models are available on both. This article explains how they relate, what differs, and how to choose.

Introducing presigned URL downloads in the AWS SDK for Java 2.x

AWS Developer Tools Blog — 2026-11-05T15:43:21+00:00

Until now, the AWS SDK for Java 2.x could generate presigned URLs through S3Presigner but could not consume one to download an object. Developers had to fall back to a low-level HTTP client, forgoing the SDK’s built-in retries, metrics, and checksum validation. Starting with version 2.48.0, you can download Amazon Simple Storage Service (Amazon S3) […]

Amazon FSx for Lustre delivers 16x higher metadata IOPS on Intelligent-Tiering file systems

AWS What's New — 2026-11-05T15:39:00+00:00

Amazon FSx for Lustre now supports up to 192,000 metadata I/O operations per second (IOPS) on file systems that use the Intelligent-Tiering storage class, 16x higher than the previous maximum of 12,000 IOPS. The FSx for Lustre Intelligent-Tiering storage class delivers the lowest-cost and only fully elastic Lustre file storage in the cloud. It is optimized for workloads that mix hot and cold data and do not require consistent SSD-level performance. A file system's metadata IOPS determine how man

Amazon RDS for Oracle now supports Kerberos authentication with self-managed Active Directory

AWS What's New — 2026-11-05T10:30:00+00:00

Amazon Relational Database Service (Amazon RDS) for Oracle ( Amazon Relational Database Service (Amazon RDS) for Oracle ) now allows customers to join their RDS for Oracle DB instances directly to their self-managed Microsoft Active Directory (AD) domain. Your self-managed AD can run on premises, on Amazon EC2, or with another cloud provider. Users in your AD domain can authenticate to RDS for Oracle DB instances using Kerberos. Previously, in order to use Kerberos authentication with self-manag

AWS Security Hub Network Scanning now available in AWS GovCloud (US)

AWS What's New — 2026-11-05T09:00:00+00:00

AWS Security Hub Network Scanning feature is now supported in AWS GovCloud (US). Network Scanning probes your resources from the internet to detect actual reachability, not just what could be reachable based on security group rules and route tables. It discovers public IP addresses, virtual machines, and load balancers across your AWS environments, identifies reachable ports, and determines what services are running behind them. This complements Security Hub's existing network reachability findi

Resolve "redirect_uri_mismatch" when you authorize an AWS Glue Salesforce OAuth connection with AWS Management Console multi-session support turned on

AWS re:Post Articles — 2026-11-05T08:50:30.935000+00:00

With AWS Management Console multi-session support turned on, authorizing an AWS Glue Salesforce connection (OAuth 2.0 Authorization Code flow) sends the redirect URI https://3rdp.oauth.console.api.aws instead of the regional gluestudio/oauth URL. If only the regional callback URL is registered in the Salesforce Connected App, Salesforce returns redirect_uri_mismatch. This article explains the cause and how to fix it by registering both callback URLs.

AWS CodeConnections is now available in the AWS GovCloud (US-West) Region