Enhance DNS protection with Palo Alto Networks on Amazon Route 53 DNS Firewall

Amazon Route 53 Resolver DNS Firewall now integrates Palo Alto Networks Advanced DNS Security, bringing more than 30 advanced DNS threat detections including fast flux, DNS hijacking, domain generation algorithms, and newly registered domains—directly into your DNS Firewall rules. Available from the DNS Firewall console under the Advanced rule tier, it activates in about two minutes with no additional infrastructure to deploy or manage. In this post, you’ll learn how the integration works, the threat coverage it adds, and how to extend protection across accounts, VPCs, and hybrid environments at scale.

aws.amazon.com

A decade of enterprise identity in the cloud with AWS Managed Microsoft AD

Ten years ago, we launched AWS Directory Service for Microsoft Active Directory, a fully managed Microsoft Active Directory in the AWS Cloud. In that original announcement, Jeff Barr described a straightforward promise: “You will spend less time administering and more time working on your applications and your business.” A decade later, AWS Managed Microsoft AD [...]

aws.amazon.com

Leading FMEG Player Builds Manufacturing Control Tower on AWS

Manufacturers operating multi-plant environments struggle with a common challenge: production data trapped in isolated systems across facilities, preventing teams from detecting anomalies early or responding to disruptions before they cascade. In this post, you will learn how to build a Manufacturing Control Tower on AWS that unifies plant-floor data streams, applies Agentic AI for autonomous [...]

aws.amazon.com

Securing your Amazon S3 buckets: Identifying and remediating over-permissioned access

Misconfigured Amazon Simple Storage Service (Amazon S3) buckets can expose your data to unauthorized access. Without proactive review, S3 bucket policies or Access Control Lists (ACLs) configured with broad access may go unnoticed in your environment. In this post, you learn how to identify and fix over-permissioned S3 buckets across your AWS environment, along with [...]

aws.amazon.com

Add Microsoft Office to an existing image using EC2 Image Builder

If you want to use software available from the AWS Marketplace, it can be challenging to use multiple software offerings on a single server because each offering is specific to a different Amazon Machine Image (AMI). For example, if your users needed Microsoft Office and Visual Studio, it would require two different Amazon Elastic Compute Cloud [...]

aws.amazon.com

How Cohere Health digitizes clinical policies using Amazon Bedrock AgentCore

In this post, you learn how Cohere Health built a multi-tenant agentic architecture on AgentCore using AgentCore Runtime’s secure MicroVM isolation, unified tool access through AgentCore Gateway, AgentCore Memory, and the Agent Skills open standard to rapidly scale policy digitization capabilities, while preserving transparency, version control, and human oversight.

aws.amazon.com

How TReNDS automates root-cause analysis with Amazon Bedrock

TReNDS, a research center at Georgia State University, built an agentic AI pipeline on Amazon Bedrock and the open-source Strands Agents SDK that automatically investigates production errors in real time, reducing root-cause analysis from 15 to 30 minutes of manual work to under 60 seconds.

aws.amazon.com

Determining playoff clinching scenarios in the NHL using constraint programming

The AWS Generative AI Innovation Center built an automated system that uses constraint programming and custom tree search to determine, with mathematical certainty, when and how an NHL team clinches a playoff spot. The approach was validated against four full NHL seasons of officially published results.

aws.amazon.com

Amazon OpenSearch Service extends version lifecycle support timelines

In November 2024, we announced Standard and Extended Support dates for legacy Elasticsearch and OpenSearch versions on Amazon OpenSearch Service. We are extending security and operating system patch coverage for these versions by 12 months, through November 7, 2027, and announcing support dates for additional Elasticsearch and OpenSearch versions.

aws.amazon.com

How to authenticate customers during chat with Amazon Connect Customer

Authentication during chat is a balancing act: require it too early and you lose customers who need quick answers; skip it entirely and you face compliance challenges when conversations shift to account-specific topics. When customers start a chat in Amazon Connect Customer, they might begin with a simple question but then need account-specific assistance that [...]

aws.amazon.com

Migrating and Modernizing Oracle Databases to PostgreSQL on AWS – Part 4: Post-cutover optimization

Introduction In this blog post, we cover the post-cutover phase of an Oracle-to-PostgreSQL migration on Amazon Web Services (AWS), demonstrating how to transform a functional PostgreSQL system into an operationally excellent one. We walk through immediate validation, comprehensive observability, systematic performance optimization, disaster recovery validation, Oracle decommissioning, and the operational excellence foundation, including the continuous [...]

aws.amazon.com

Migrating and Modernizing Oracle Databases to PostgreSQL on AWS – Part 2: Assessment

Introduction In this blog post, we explore the assessment phase of migrating Oracle databases to PostgreSQL on Amazon Web Services (AWS), the critical step that transforms your discovery inventory into an actionable migration strategy. After completing discovery of your Oracle estate in Part 1, you face the critical question: what will it take to migrate [...]

aws.amazon.com

Migrating and Modernizing Oracle Databases to PostgreSQL on AWS – Part 3: Planning and Execution

Introduction In this blog post, we outline the target architectures and wave-based strategies needed to build functional PostgreSQL environments on Amazon Web Services (AWS), using Zulon City Insurance (ZCINS), a fictional carrier managing 42 Oracle databases, as a model for a successful transition. Once you have assessed your Oracle estate, as laid out in part [...]

aws.amazon.com

Migrating and Modernizing Oracle Databases to PostgreSQL on AWS – Part 1: Discovery

Introduction In this blog post, we explore the discovery phase of migrating Oracle databases to PostgreSQL on Amazon Web Services (AWS), the foundational step that determines the success of every migration that follows. This is the first installment of a four-part series covering the Oracle-to-PostgreSQL migration journey, from initial discovery through post-migration optimization. Evolving licensing [...]

aws.amazon.com

Modernize ASP.NET Apps with Bedrock AgentCore Gateway and Strands Agents

Organizations running ASP.NET applications face a common dilemma: adding AI capabilities typically means significant refactoring or building entirely new systems. Your existing REST APIs contain years of valuable business logic, but there’s no straightforward path to make them AI-accessible without a rewrite. What if you could keep your code and add intelligence on top? In [...]

aws.amazon.com

Runtime instances: persistent compute for production AI agents on Amazon Bedrock AgentCore

Announcing runtime instances in Amazon Bedrock AgentCore—persistent, managed EC2 infrastructure for production AI agents with multi-agent collaboration, GPU support, and sessions lasting up to 14 days.

aws.amazon.com

Serverless Real-time Voice AI on AWS: A Pattern for Enterprise Sales Coaching

In this post, we introduce a fully serverless pattern that solves this problem using AWS AppSync Events, Amazon Nova Sonic, and Amazon Bedrock AgentCore.

aws.amazon.com

Automate certificates with ACME support in AWS Certificate Manager

Customers tell us that managing TLS certificates at scale is one of their biggest operational concerns. The Certification Authority Browser Forum (CA/Browser Forum) has mandated a phased reduction in maximum certificate validity for public certificates. By March 2027, the maximum validity drops to 100 days. By March 2029, it lasts for 47 days. For an [...]

aws.amazon.com

Automate customer complaint classification with AI agents on AWS

In this post, you’ll learn how financial institutions can use Amazon Bedrock AgentCore and Strands Agents SDK — an open source framework for building intelligent, model-driven AI agents — to automate their complaint management process through a near real-time agentic solution that classifies complaints with defensible rationale, captures evidence at each decision point, tracks SLA compliance, assigns clear remediation ownership, and improves mean time to resolution.

aws.amazon.com

Run HPC Simulations faster with Siemens Teamcenter and AWS ParallelCluster

Manufacturing organizations can now reduce simulation cycle times from days to hours by integrating Teamcenter Simulation with AWS ParallelCluster — eliminating high performance compute (HPC) queuing bottlenecks while maintaining full data traceability. The demand for high-fidelity engineering simulations such as Computational Fluid Dynamics (CFD), Finite Element Analysis (FEA), and Multi-physics analyses continues to grow as [...]

aws.amazon.com

How ASCENDING’s Jarvis Registry bridges agents and developer tools

You’ve deployed your agents on Amazon Bedrock AgentCore but making them reachable from Claude Desktop, VS Code, Cursor, or GitHub Copilot means building an “experience layer” that handles identity, authorization, discovery, and developer UX. In this post, ASCENDING shares how they turned that recurring integration work into the Jarvis Registry, an open source experience layer that runs inside your AWS environment and connects agents to every IDE and copilot. See how one customer uses it to serve both business users and engineers from the same set of agents, with department-scoped access enforced across every tool.

aws.amazon.com

Access Amazon S3 backup data directly using S3 Access Points in AWS Backup

AWS Backup for Amazon S3 now lets you access your backup data through Amazon S3 Access Points. You create an access point for a recovery point, and AWS Backup provisions an S3 endpoint with an alias that works anywhere you would use a bucket name. You can then read backup data using standard S3 APIs, [...]

aws.amazon.com

Scaling Autonomous Operations with AWS DevOps Agent and ServiceNow

This post is co-written with Govind Menon, Head of MCP Product at ServiceNow. Introduction Enterprise teams managing applications on AWS often rely on ServiceNow as their IT service management (ITSM) system for incident tracking, change management, and configuration management. When incidents occur, engineers must context-switch between AWS, third party observability tools and ServiceNow, manually correlating [...]

aws.amazon.com

Introducing Release Notes: Stay current with AWS Transform for migrations

When a service evolves quickly, knowing where to look for the latest changes matters just as much as the changes themselves. Today, we’re introducing the AWS Transform for migrations Release Notes. This Releases Notes page, part of the Change Log, the single page where product updates are captured, such as new features and behavioral changes. [...]

aws.amazon.com

Route Amazon Bedrock Guardrails interventions to Amazon Security Lake

Security teams investigating AI-related incidents need guardrail intervention data alongside their existing security telemetry. Routing Amazon Bedrock Guardrails violations to Amazon Security Lake makes this possible. With this integration, you can query guardrail events alongside identity, network, and application security data in a single layer. When a guardrail blocks a prompt injection attempt or redacts [...]

aws.amazon.com

Securing AI agents with temporal policies in Amazon Bedrock AgentCore

Temporal policies in Amazon Bedrock AgentCore let you define stateful rules that evaluate authorization based on an agent’s session history. Learn how to enforce workflow sequencing, prevent data fabrication, cap financial exposure, and require human approval for high-value actions.

aws.amazon.com

Use CloudWatch syslog and Log Alarms to give AWS DevOps Agent on-premises visibility

Your on-premises firewalls, routers, and switches emit syslog that record device events such as denied connections, tunnel state changes, and routing changes. Network devices send their logs over syslog rather than the Amazon CloudWatch Logs API, so bringing that data into AWS takes extra components. A common approach has been to run a collection tier [...]

aws.amazon.com

Configure rate limits for AI traffic on AgentCore gateway

Learn how to configure rate limits on Amazon Bedrock AgentCore gateway to enforce per-user and per-target traffic controls. Define request, token, and connection limits scoped by JWT claims or IAM identity to protect downstream models, tools, and agents from traffic spikes.

aws.amazon.com

AWS Supports Agent Plugins: An Open Standard for Portable Agent Extensions

If you’ve ever built an MCP server or agent skill, you know that packaging it means adapting for one client, re-writing for another, and repeating that for every tool your team uses. Agent Plugins 1.0.0 is an open source, vendor-neutral specification that gives AI agent extensions a common packaging format so you can package an [...]

aws.amazon.com

SaaS design levers for sovereignty on AWS

In this post, we explore practical design patterns for SaaS offerings on Amazon Web Services (AWS) and show how sovereignty can be a tunable design dimension rather than an all-or-nothing rebuild.

aws.amazon.com