OffNet Newsroom

Daily topic roundup

AWS

Thursday, September 03, 2026 · 7 stories, curated & summarized — click any story for the source.

AWS What's New awsdatabase

AWS Outposts Gen2 Racks Now Available in GovCloud Regions

AWS has extended second-generation Outposts rack support to the GovCloud (US-East) and (US-West) regions. This expansion allows public sector and regulated enterprises to deploy consistent hybrid infrastructure directly in their data centers or colocation facilities. The update enables workloads requiring low-latency local access while maintaining management connectivity to the home GovCloud region.

  • Gen2 Outposts racks are now orderable for GovCloud US-East and US-West.
  • Enables strict data residency compliance for public sector and regulated workloads.
  • Maintains consistent hybrid experience with local compute and regional management.
  • Optimizes latency for on-premises systems while connecting to GovCloud APIs.
HOW IT WORKSGovCloud Hybrid Deployment1Deploy Gen2 Outposts Rack Locally2Run Low-Latency On-Prem Workloads3Connect to GovCloud Management4Ensure Data Residency Compliance
AWS What's New awsdatabase ↺ since 09-01

Aurora Serverless gets 30% perf boost and expands to 5 new regions

Amazon Aurora Serverless now offers up to 30% better performance and smarter scaling across five new AWS Regions, including Cape Town and Milan. The enhanced algorithm better manages resource contention for busy web apps and API services. These updates apply to both Aurora PostgreSQL and Aurora MySQL, optimizing the service for unpredictable traffic patterns like those seen in agentic AI workloads.

  • Performance uplift of 30% applies to both PostgreSQL and MySQL engine versions.
  • Expanded availability in NZ, Thailand, Cape Town, Milan, and Mexico Central.
  • Smarter scaling handles multi-task resource contention more efficiently.
  • Ideal fit for agentic AI apps with bursty, unpredictable traffic patterns.
BY THE NUMBERSAurora Serverless Performance Boost30%Performance improvementApplies to PostgreSQL and MySQL engines
AWS What's New awsdatabase ↺ since 09-01

Redshift adds IAM Identity Center auth with enhanced VPC routing

Amazon Redshift now allows provisioned clusters and serverless workgroups to authenticate users via AWS IAM Identity Center when configured with enhanced VPC routing. This integration enables single sign-on using corporate credentials while ensuring all traffic remains within the AWS network, bypassing the public internet. The feature supports strict data residency and regulatory requirements by keeping analytics traffic isolated and governed by VPC security controls.

  • Provisioned clusters and serverless workgroups now support IAM Identity Center SSO.
  • Enhanced VPC routing ensures traffic stays on the AWS network without public internet egress.
  • Traffic is governed by security groups, NACLs, and endpoint policies within the VPC.
  • VPC Flow Logs can observe all Redshift traffic for improved security monitoring.
  • Ideal for workloads with strict data residency or network isolation mandates.
HOW IT WORKSSecure Redshift Traffic Flow1User authenticates via IAM Identity Center2Traffic enters VPC via enhanced routing3Security groups and NACLs filter access4Flow Logs monitor all internal traffic
AWS What's New awsdatabase ↺ since 09-01

AWS GA: EC2 R9g and R9gd instances powered by Graviton5

Amazon EC2 has generally available the R9g and R9gd memory-optimized instance families, built on fifth-generation AWS Graviton5 custom processors. These instances are designed to deliver superior price performance for memory-intensive workloads such as databases, in-memory caches, and real-time big data analytics. The R9gd variant adds local NVMe-based SSD block-level storage, catering to workloads requiring high local I/O alongside memory capacity.

  • Graviton5 CPUs offer best-in-class price performance for memory-heavy workloads.
  • R9g targets databases, caches, and containerized microservices (K8s, Docker).
  • R9gd includes local NVMe SSDs for high-throughput local storage needs.
  • Supports major languages: C/C++, Rust, Go, Java, Python, .NET, Node.js.
TRADE-OFFR9g vs R9gd InstancesR9g (Memory-Optimized)Graviton5 CPU performanceIdeal for databasesNo local storageR9gd (With Storage)Includes NVMe SSDsHigh local I/OBig data analyticsvs
AWS What's New awsdatabase ↺ since 09-02

AWS launches preview of Interconnect for direct Azure connectivity

AWS has introduced a public preview of AWS Interconnect, a managed service enabling direct multicloud connectivity with Microsoft Azure. This offering replaces the previous do-it-yourself approach that required customers to build and maintain complex global multi-layered networks. The new product aims to simplify interoperability and accelerate application deployment across AWS and Azure environments.

  • AWS Interconnect is the first purpose-built product for direct AWS-Azure connectivity.
  • Eliminates the operational burden of managing DIY global multicloud networks.
  • Supports multicloud strategies focused on interoperability and technology freedom.
  • Currently available in public preview for early adopters.
CHECKLISTWhy AWS Interconnect MattersFirst purpose-built direct AWS-Azure connectivity productEliminates DIY global multicloud network managementSupports interoperability and technology freedomAvailable now in public preview

An article details the migration from long-lived service account keys to Workload Identity Federation across more than 120 production GCP projects. The author argues that while keys are persistent secrets requiring constant rotation and care, federated identities establish trust relationships configured once and secured by attribute conditions. This approach fundamentally shifts machine identity management from secret handling to conditional access control.

  • Long-lived service account keys are high-risk secrets that require perpetual management and rotation.
  • Workload Identity Federation reduces attack surface by eliminating static credentials from compute resources.
  • Scaling to 120+ projects demonstrates that federated identities are manageable at enterprise scale.
  • Trust is defined once via configuration and enforced dynamically through attribute-based conditions.
  • Engineers should prioritize moving from key-based auth to federated identity for new and existing workloads.
AWS What's New awsdatabase ↺ since 09-02

OpenSearch Service Cluster Insights automates Red/Yellow status diagnosis

Amazon OpenSearch Service has expanded Cluster Insights with 17 new checks that pinpoint root causes for Red and Yellow cluster statuses. These updates automatically detect issues like JVM memory exhaustion, CPU saturation, zone imbalances, and replica misconfigurations. The service now replaces manual metric correlation with actionable recommendations, such as scaling instance types, to resolve unassigned shard problems.

  • Cuts diagnosis time for Red/Yellow clusters by automating root cause analysis.
  • Detects JVM OOM, CPU saturation, and zone imbalance without manual correlation.
  • Provides specific remediation steps like scaling instance types.
  • Addresses 17 new scenarios including misconfigured replica counts.
BY THE NUMBERS17 New Diagnostic Checks17New automated cluster checksPinpoint root causes for Red and Yellow statuses
↑