OffNet Newsroom

Daily topic roundup

AWS

Sunday, September 27, 2026 · 7 stories, curated & summarized — click any story for the source.

Google released benchmarks showing GKE Pod snapshots can reduce startup latency by up to 89%, loading a 70B parameter model in just 37 seconds. The mechanism checkpoints CPU and GPU memory using gVisor and stores the state in Cloud Storage. A key operational consideration is snapshot invalidation, which relies on matching spec hashes, machine series, and kernel driver versions.

  • GKE Pod snapshots leverage gVisor to checkpoint CPU/GPU memory into Cloud Storage.
  • Real-world benchmarks show 89% lower startup latency for large AI workloads.
  • A 70B parameter model loads in 37 seconds instead of minutes.
  • Invalidation is complex, requiring matches on spec hash and kernel versions.
  • Shift focus from runtime loading to snapshot lifecycle management.

AWS IAM outbound identity federation now allows access to OIDC discovery and JWKS endpoints through interface VPC endpoints using AWS PrivateLink. This change enables workloads to retrieve short-lived JWTs and verify them without routing traffic over the public internet. It enhances security by keeping identity federation metadata within the VPC boundary.

  • Route OIDC discovery and JWKS traffic through AWS PrivateLink to avoid public internet exposure.
  • Maintain short-lived JWT workflows for external service access without long-lived credentials.
  • Reduce attack surface by keeping identity federation metadata within the VPC boundary.
  • No public internet gateway or NAT required for OIDC metadata retrieval from within VPC.
HOW IT WORKSSecure OIDC Federation via PrivateLink1Workload requests OIDC discovery2Route through VPC Endpoint3AWS PrivateLink handles traffic4Retrieve JWTs securely5No public internet exposure

Amazon RDS Custom for SQL Server now supports the latest Cumulative Update, specifically SQL Server 2022 CU26 (KB5093420). This update maps to RDS version 16.00.4265.3.v1 and includes various improvements and fixes detailed in Microsoft's documentation. Administrators can apply these patches via the AWS Management Console, CLI, or SDKs.

  • RDS Custom for SQL Server now supports CU26 KB5093420 (RDS v16.00.4265.3.v1).
  • Patches include Microsoft-recommended fixes and improvements for SQL Server 2022.
  • Upgrade instances using the RDS Console, AWS CLI, or AWS SDKs.
BY THE NUMBERSLatest SQL Server 2022 Patch26Cumulative Update Version SupportedKB5093420 now available for RDS Custom
AWS What's New awsdatabase

EC2 M8i and M8i-flex expand to AWS European Sovereign Cloud

Amazon EC2 M8i and M8i-flex instances are now live in the AWS European Sovereign Cloud (Germany) region. Powered by custom Intel Xeon 6 processors exclusive to AWS, these instances deliver significantly higher memory bandwidth and performance compared to previous generations. The new hardware offers up to 20% better overall performance than M7i instances, with specific gains for database and AI workloads.

  • M8i/M8i-flex now available in AWS European Sovereign Cloud (Germany)
  • Custom Intel Xeon 6 processors provide 2.5x memory bandwidth vs prior gen
  • Up to 30% faster for PostgreSQL and 40% faster for AI deep learning models
  • 20% general performance uplift over M7i with 15% better price-performance
COMPARISONPerformance Gains Over M7iGeneral Performance20%PostgreSQL Speed30%AI Deep Learning40%
AWS What's New awsdatabase ↺ since 09-25

Amazon EMR on EKS adds Spark Connect for interactive sessions

Amazon EMR on EKS now supports interactive Apache Spark sessions via Spark Connect, allowing developers to run persistent Spark contexts from local IDEs or SageMaker Unified Studio. This architecture decouples the application client from the Spark driver, enabling seamless blending of local Python execution with remote Spark operations on existing EKS clusters. The feature is designed to improve developer productivity by maintaining preferred tooling while leveraging managed compute resources.

  • Developers can debug Spark apps interactively from local IDEs like VS Code or Jupyter.
  • Spark Connect architecture decouples client code from the remote Spark driver.
  • Persistent Spark contexts span across cells and scripts for iterative development.
  • Integrates with Amazon SageMaker Unified Studio for managed notebook workflows.
HOW IT WORKSInteractive Spark Workflow1Write code in local IDE2Connect via Spark Connect3Remote Spark driver executes4Return results to client
AWS What's New awsdatabase ↺ since 09-24

Amazon EMR adds Long Term Support for Apache Spark 4.1

Amazon EMR now offers 36-month support for designated LTS releases, starting with emr-spark-8.1.0 and Apache Spark 4.1. This release includes critical security and bug fixes to help teams stabilize production workloads without immediate upgrade pressure. It also introduces full support for Apache Iceberg v3, enabling advanced features like geospatial queries and schema evolution.

  • LTS releases get 36 months of support for critical and high severity issues.
  • Apache Iceberg v3 support brings geospatial and high-precision timestamp capabilities.
  • Spark SQL can now reference catalogs by name, including cross-account S3 Tables.
  • Automatic detection works for Apache Iceberg, Delta Lake, and Apache Hudi.
BY THE NUMBERS36 Months of LTS Support36Months of long term supportFor Apache Spark 4.1 on Amazon EMR
AWS What's New awsdatabase ↺ since 09-24

DynamoDB MRSC expands to 15 regions with cross-continent support

Amazon DynamoDB Global Tables with Multi-Region Strong Consistency now supports five new regions, including Canada Central, Europe Stockholm, Europe Spain, Asia Pacific Mumbai, and Asia Pacific Singapore. This brings the total supported regions to 15, allowing teams to configure global tables across three regions in any combination of replicas and witnesses. The expansion enables cross-continent setups that maintain zero recovery point objective while placing endpoints closer to users in more geographies.

  • MRSC now covers 15 regions total, adding Canada, Europe, and Asia Pacific locations.
  • Supports 3-region configurations with mixed replica and witness roles across continents.
  • Enables zero RPO strong consistency for global applications with local read latency.
  • Allows routing traffic to nearest endpoints in newly supported regions like Mumbai and Singapore.
BY THE NUMBERSMRSC Now Covers 15 Regions15Total supported regions for MRSCEnables cross-continent strong consistency setups
↑