AWS WAF now includes pre-parse text transformations and ten new text transformations to help you normalize requests before inspection. These tools—like URL decode, Uppercase, and SHA256—work together to close security gaps from HTTP parameter pollution and parser evasion. You can chain up to ten transformations in a single rule, and each costs just 10 WCUs with no extra charge.
AWS now lets you use Instance Refresh directly in CloudFormation templates. When you update properties requiring instance replacement, CloudFormation automatically handles the refresh with zero-downtime deployments. You get features like launch-before-terminate, alarm monitoring, and controlled rollouts—all while keeping your scaling policies and health checks active.
Amazon Redshift Data API now features long polling to cut API calls, session management for tracking active queries, and flexible batch execution with AUTO_COMMIT mode. Each SQL statement in a batch runs independently, so one failure won't roll back everything—perfect for ETL pipelines. You can also reuse parameters across statements, making queries cleaner and more efficient.
Amazon EKS Provisioned Control Plane just got a serious boost—HPA sync concurrency is now up to 40x faster than default Kubernetes. Your pods will scale way quicker when demand spikes, with zero config changes needed. Perfect for clusters running hundreds of HPA objects.
Good news for data nerds! AWS DataSync Enhanced mode now supports Amazon EFS and FSx for Lustre as source or destination. This means parallel processing, no file limits, and detailed metrics for your large-scale migrations, ML training, and HPC workloads. Level up your data transfer game today.
AWS Outposts second-gen racks just hit the Asia Pacific (Mumbai) region, letting you run hybrid workloads with low latency right from your data center. Perfect for orgs needing data residency compliance or quick access to on-prem systems while staying connected to AWS. Now you can optimize for both latency and regulatory requirements without the usual trade-offs.
Good news for security-conscious DevOps folks: Amazon EKS now lets you access OIDC endpoints privately through AWS PrivateLink, ditching the need for internet egress. Your VPC-based tools like eksctl and Terraform can now validate IRSA tokens without leaving your network. No extra costs—just standard PrivateLink pricing.
Good news, database nerds! Amazon RDS for SQL Server now lets you restore TDE-encrypted databases directly to Multi-AZ instances and read replicas—no more painful workarounds. Just back up your TDE cert to S3, restore it with TDE enabled, and you're golden. Your encrypted, highly available databases just got way easier to manage.
AWS Glue Data Quality just leveled up with ML-powered anomaly detection that catches weird data behavior—think sudden drops in distinct values or row count spikes—without needing explicit thresholds. Now you can write evaluation results straight to AWS Glue Data Catalog tables, making your quality checks queryable via SQL. Perfect for data engineers juggling hundreds of tables who want issues surfaced automatically.