AWS

AWS has expanded Amazon Redshift RG instances, powered by Graviton processors, to the Europe (Zurich) region. These instances offer up to 2.4x better performance than RA3 generations at a 30% lower cost per vCPU. They feature a vectorized query engine for unified SQL analytics across data warehouses and lakes using Apache Iceberg and Parquet.

• Graviton-based RG instances are now live in Zurich for EU compliance.
• Performance up to 2.4x faster than RA3 with 30% lower vCPU cost.
• Unified engine processes Iceberg and Parquet alongside warehouse data.
• Available in rg.large through rg.12xlarge sizing options.
• Existing RA3 clusters can upgrade via Snapshot, Elastic, or Classic Resize.

AWS Transform for .NET has added the ability to automatically generate unit tests for the code it modernizes. The tool assesses application testability in parallel with the standard .NET assessment and plans coverage for testable classes like business logic and controllers. This eliminates the previous requirement for teams to manually write test coverage for the transformed, buildable codebase.

• Unit tests are generated automatically as part of the same migration job.
• Coverage targets business logic and controllers in the modernized .NET app.
• Assesses testability in parallel with standard .NET assessment.
• Replaces manual test writing with automated code generation.
• Provides an immediate safety net for modernized codebases.

AWS has launched the general availability of second-generation single-rack Outposts, a self-contained 42U unit integrating compute, storage, and networking. This compact solution supports up to 2,688 vCPU and 100 TB of EBS storage, targeting space and power-constrained environments. It accommodates the latest x86 EC2 instances, including general purpose, compute-optimized, and memory-optimized families, alongside accelerated networking options.

• Self-contained 42U rack ideal for space/power-constrained sites like manufacturing floors.
• Scales up to 2,688 vCPU and 100 TB EBS within a single physical footprint.
• Supports latest M7i/M8i, C7i/C8i, R7i/R8i, and accelerated networking instances.
• Enables low-latency local processing and strict data residency requirements.

Amazon ECS extends the ecs:task-cpu and ecs:task-memory IAM condition keys to the RunTask and StartTask APIs. This allows administrators to apply consistent resource limits across all task launch methods, including ad-hoc runs. The update closes a policy gap that previously only covered task definition and service management endpoints. Organizations can now prevent unexpected cost overruns through unified IAM enforcement.

• RunTask and StartTask now evaluate ecs:task-cpu and ecs:task-memory condition keys
• Unified IAM policy enforcement across services, definitions, and ad-hoc task launches
• Prevents cost overruns by blocking tasks that exceed defined CPU or memory limits
• Closes previous gap where ad-hoc launches bypassed resource policy checks

AWS Storage Gateway now allows Amazon S3 File Gateway to route traffic through FIPS 140-3 validated endpoints over AWS PrivateLink. This update moves FIPS compliance from public internet connections to the private AWS network, reducing exposure for regulated workloads. Users can configure FIPS interface VPC endpoints for both the Storage Gateway service and Amazon S3 to secure end-to-end file transfers.

• Enables FIPS 140-3 compliance over AWS PrivateLink, removing public internet exposure.
• Supports end-to-end private connectivity for NFS and SMB file shares in regulated environments.
• Requires creating FIPS interface VPC endpoints for Storage Gateway and S3 services.

AWS Lambda Managed Instances now allow asynchronous and event source mapping invocations to run for up to 90 minutes, a sixfold increase from the previous 15-minute cap. This change eliminates the need for complex architectural workarounds for data-intensive tasks such as media transcoding, Monte Carlo simulations, and AI inference. The update specifically targets serverless applications that require continuous execution for extended periods without re-architecting the underlying logic.

• Timeout limit for Lambda Managed Instances increases from 15 to 90 minutes.
• Applies to both asynchronous invocations and event source mappings.
• Eliminates need for orchestration workarounds for long-running batch jobs.
• Directly supports media transcoding, financial modeling, and AI inference.
• Enables continuous execution within the existing serverless Lambda model.

Amazon EBS Volume Clones now enables copying volumes between AWS accounts while applying re-encryption using a target account's KMS key. This update allows organizations to securely move production data into isolated development or test accounts without sharing source encryption keys. The feature supports strict key separation controls and facilitates safe data cloning for non-production environments.

• Clone production EBS volumes into separate dev/test accounts with full data isolation.
• Re-encrypt data using target account KMS keys for strict key separation compliance.
• Eliminates need to share production encryption keys with development teams.
• Simplifies secure data provisioning for testing and experimentation workflows.