OffNet Newsroom

Daily topic roundup

AWS

Friday, October 09, 2026 · 5 stories, curated & summarized — click any story for the source.

AWS announced on September 30 that Aurora PostgreSQL supports direct querying of Apache Iceberg and Parquet data. This development adds to the existing ecosystem of vendors claiming Postgres can read Iceberg, resulting in at least four distinct implementations with varying compatibility. The clarification highlights the fragmentation in how different vendors interpret this capability.

  • Aurora PostgreSQL now queries Iceberg/Parquet directly, expanding data lake access.
  • Multiple vendor implementations of 'Postgres reads Iceberg' exist with limited commonality.
  • Verify specific implementation details when integrating with other Postgres distributions.
  • No additional vendor-specific features are mentioned beyond the direct query capability.
  • Fragmentation in Iceberg support means cross-vendor compatibility is not guaranteed.

Nvidia has released a patch for CVE-2026-47483, a high-severity vulnerability that can crash GPU monitoring services on servers with exposed interfaces. The flaw specifically impacts the stability of monitoring tools when interacting with vulnerable driver stacks. Administrators are advised to apply the fix immediately to prevent service disruption.

  • Nvidia patched CVE-2026-47483 to prevent GPU monitoring crashes.
  • Vulnerability affects servers with exposed GPU driver interfaces.
  • Apply the update immediately to maintain monitoring stability.
  • Check driver versions against Nvidia's advisory for compliance.

AWS has made C8gb instances generally available in the US East (Ohio), US West (N. California), EU (Frankfurt, Ireland, Paris, Stockholm), and Africa (Cape Town) regions. These new instances leverage AWS Graviton4 processors to deliver up to 30% better compute performance compared to Graviton3-based options. They also support up to 300 Gbps EBS bandwidth and 1600K IOPS, offering significantly higher block storage performance for demanding workloads.

  • C8gb instances now available in 10 global regions for broader geographic access.
  • Graviton4 processors provide up to 30% compute uplift over Graviton3.
  • EBS bandwidth reaches 300 Gbps with 1600K IOPS for high-throughput needs.
  • Optimized for high-performance file systems and cost-efficient scaling.
BY THE NUMBERSGraviton4 Compute Gains30%Better compute performanceOver Graviton3-based options
AWS What's New awsdatabase ↺ since 10-06

AWS Advanced Ruby Driver Wrapper GA for RDS and Aurora

AWS has released the GA version of its Advanced Ruby Driver Wrapper, designed to enhance connectivity for Amazon RDS and Aurora PostgreSQL and MySQL databases. By building upon the standard pg and mysql2 community drivers, this wrapper significantly reduces switchover and failover times, thereby improving application availability during database transitions. It also introduces robust authentication options, including integration with AWS Secrets Manager and IAM token-based authentication.

  • Reduces RDS Blue/Green and Aurora Global switchover and failover times for better availability.
  • Supports AWS Secrets Manager and IAM token-based authentication mechanisms.
  • Builds on standard pg and mysql2 drivers to add enhanced functionality.
  • Natively integrated with Aurora and RDS for seamless database connectivity.
HOW IT WORKSEnhanced Database Connectivity Flow1Leverage pg and mysql2 drivers2Integrate AWS Secrets Manager3Enable IAM token auth4Reduce switchover times
AWS What's New awsdatabase ↺ since 10-07

AWS Client VPN adds device posture assessment via Cedar policies

AWS Client VPN now integrates with device posture providers like CrowdStrike and Jamf to verify endpoint security before granting network access. Administrators can define fine-grained access rules using Cedar policies based on signals such as encryption status and risk scores. This extends previous certificate and SAML authentication by adding a layer of compliance checking for connecting devices.

  • Integrate with CrowdStrike, Jamf, or JumpCloud for automated device security evaluation.
  • Use Cedar policies to define granular access rules based on device compliance signals.
  • Check encryption status and risk levels before allowing connections to AWS resources.
  • Adds a compliance layer on top of existing certificate, SAML, and AD authentication.
HOW IT WORKSAWS Client VPN Access Flow1User initiates connection2Certificate and SAML auth3Device posture check via CrowdStrike4Cedar policy evaluation5Grant or deny access
↑