AWS

AWS Lambda now supports OAuth authentication for self-managed Apache Kafka event source mappings, extending beyond previous SASL and mTLS options. This update enables serverless consumers to integrate with enterprise identity providers for improved security and compliance. The feature applies to customer-run clusters and managed services like Confluent Cloud, Aiven, and Redpanda.

• Lambda Kafka ESM now supports OAuth alongside existing SASL/PLAIN, SASL/SCRAM, and mTLS methods.
• Enables integration with enterprise identity providers for centralized authentication and compliance.
• Applies to self-managed Kafka clusters and major managed offerings including Confluent Cloud, Aiven, and Redpanda.
• Supports event-driven workloads like payment processing and fraud detection with automatic scaling and batching.

Amazon GuardDuty has expanded its RDS Protection capabilities to identify data exfiltration and destruction attacks targeting Amazon Aurora PostgreSQL and RDS for PostgreSQL. This new RDS Protection for data activity uses machine learning and threat intelligence to monitor query patterns for anomalies, requiring no agents or configuration changes. The update addresses the growing threat of attackers using valid credentials to steal or wipe data after initial compromise.

• Detects data exfiltration and destruction, not just login anomalies.
• Applies to Aurora PostgreSQL and RDS for PostgreSQL only.
• Uses ML and threat intelligence for continuous query monitoring.
• Zero-config deployment with no agents or infrastructure needed.
• Targets threats exploiting valid credentials via phishing or misconfig.

Amazon EC2 R8gd instances are now available in the AWS European Sovereign Cloud (Germany) region. These Graviton4-powered machines offer up to 11.4 TB of local NVMe storage and deliver up to 30% better performance than Graviton3. They support up to 50 Gbps network bandwidth and allow 25% adjustment of network and EBS bandwidth via weighting configuration.

• R8gd instances launched in AWS European Sovereign Cloud (Germany).
• Graviton4 processors provide up to 30% performance gain over Graviton3.
• Up to 11.4 TB local NVMe storage suits low-latency storage workloads.
• Network and EBS bandwidth can be adjusted by 25% using weighting config.

AWS Network Firewall now supports wildcard patterns in container attribute-based inspection filters for Amazon EKS and ECS. This update allows administrators to match multiple container workloads, such as all variants of an application, using a single rule. The feature eliminates the need to manually create individual container associations for each new deployment variant.

• Use wildcard patterns like app=payments-* to match multiple container variants in one rule.
• Reduces operational overhead by avoiding manual association of individual container instances.
• Ensures consistent security coverage as new application variants are deployed dynamically.
• Applies to both Amazon EKS and Amazon ECS container workloads.