AWS

AWS allows AMI owners to explicitly define compatible or incompatible instance types for their images. Launches on non-permitted instance types are automatically blocked, preventing failures caused by hardware mismatches. Existing workflows remain unaffected until restrictions are explicitly applied to an AMI.

• AMI owners can now restrict which instance types can launch their images
• Prevents failed launches due to incompatible instance-AMI pairings
• No additional cost; available in all AWS Regions
• Existing AMIs remain open until explicit restrictions are added

AWS Transfer Family SFTP Connectors now support seamless credential rotation by retrieving secrets from an ordered list of AWS Secrets Manager version stages. The connector automatically attempts authentication using specified versions, such as current and previous, proceeding with the first successful match. This eliminates the need for manual connector updates during rotation windows and prevents transfer failures caused by credential mismatches.

• Connectors retry authentication against an ordered list of Secrets Manager version stages.
• Transfers continue uninterrupted during credential rotation on either side.
• Manual connector updates are no longer required when secrets rotate.
• Configure version order at connector creation or update to define fallback behavior.

AWS now allows programmatic management of CloudFront flat-rate pricing plans via CLI, SDKs, and IaC tools. These plans bundle global delivery, WAF, DDoS protection, DNS, logging, and edge compute for a fixed monthly fee without usage-based overages. Previously limited to console enrollment, users can now automate subscriptions, upgrades, and cancellations. A two-phase activation flow is available for paid plans.

• Enable IaC automation for CloudFront billing and security bundling
• Eliminate variable costs with fixed monthly pricing for global edge services
• Manage plan lifecycle programmatically via API, CLI, or SDKs
• Bundles WAF, DDoS, DNS, logging, and edge compute in one price
• Use two-phase activation for controlled paid plan rollout

Amazon Redshift allows single-node clusters on rg.large instances, which use AWS Graviton processors, starting with P204 patch versions. This feature targets smaller workloads like proofs of concept that do not require high availability. The rg.large instances offer up to 2.4x faster performance than RA3 instances at a 30% lower cost per vCPU.

• Single-node rg.large clusters are available on P204+ patches for cost-effective testing.
• Graviton-powered rg.large instances deliver 2.4x speedup over previous RA3 generations.
• Pricing is 30% lower per vCPU compared to prior generation instances.
• Vectorized data lake engine supports SQL analytics on Iceberg and Parquet data.

Amazon Aurora MySQL now supports multi-source replication, allowing a single cluster to ingest data from multiple independent MySQL sources simultaneously. This capability simplifies data consolidation tasks such as merging shards or aggregating regional and departmental databases for centralized reporting. Additionally, delayed replication enables administrators to configure a binlog replica to intentionally lag behind the source by a specified duration, providing a safeguard against human error. These features expand the engine's utility for complex data aggregation and operational safety without requiring external middleware.

• Consolidate multiple MySQL shards or regional databases into a single Aurora cluster for unified reporting.
• Use delayed replication as a safety net to recover from accidental data modifications or deletions.
• Simplify architecture by removing the need for ETL tools to aggregate data from separate sources.
• Configure lag time on binlog replicas to create a time-window buffer against logical errors.

Amazon Bedrock Managed Knowledge Base now supports user-managed three-legged OAuth (3LO) for SharePoint, OneDrive, and Confluence data sources. This update replaces the previous two-legged credential generation process, allowing users to authenticate with their existing third-party accounts without requiring admin-level access. The streamlined flow enables faster setup times, reducing the barrier to prototyping AI assistants grounded in these enterprise repositories.

• Eliminates need for admin-level 2LO credentials to configure enterprise data sources
• Users authenticate directly with existing accounts via 3LO OAuth flow
• Significantly reduces setup time for SharePoint, OneDrive, and Confluence integrations
• Lowers barrier to entry for non-admin users to prototype knowledge-based AI