Publicado el Deja un comentario

AWS KMS now supports Edwards-curve Digital Signature Algorithm (EdDSA)

AWS Key Management Service (KMS) announces support for the Edwards-curve Digital Signature Algorithm (EdDSA). With this new capability, you can create an elliptic curve asymmetric KMS key or data key pairs to sign and verify EdDSA signatures using the Edwards25519 curve (Ed25519). Ed25519 provides 128-bit security level equivalent to NIST P-256, faster signing performance, and small signature size (64 bytes) and public key sizes (32 bytes).

Ed25519 is ideal for situations that require small key and signature sizes, such as Internet of Things (IoT) devices and blockchain applications like cryptocurrency.

This new capability is available in all AWS Regions, including the AWS GovCloud (US) Regions and the China Regions. To learn more about this new capability, see Asymmetric key specs section in the AWS KMS Developer Guide.

 

​AWS Key Management Service (KMS) announces support for the Edwards-curve Digital Signature Algorithm (EdDSA). With this new capability, you can create an elliptic curve asymmetric KMS key or data key pairs to sign and verify EdDSA signatures using the Edwards25519 curve (Ed25519). Ed25519 provides 128-bit security level equivalent to NIST P-256, faster signing performance, and small signature size (64 bytes) and public key sizes (32 bytes). Ed25519 is ideal for situations that require small key and signature sizes, such as Internet of Things (IoT) devices and blockchain applications like cryptocurrency. This new capability is available in all AWS Regions, including the AWS GovCloud (US) Regions and the China Regions. To learn more about this new capability, see Asymmetric key specs section in the AWS KMS Developer Guide.  

Publicado el Deja un comentario

Amazon Cognito user pools now supports private connectivity with AWS PrivateLink

Amazon Cognito user pools now supports AWS PrivateLink for secure and private connectivity. With AWS PrivateLink, you can establish a private connection between your virtual private cloud (VPC) and Amazon Cognito user pools to configure, manage, and authenticate against your Cognito user pools without using the public internet. By enabling private network connectivity, this enhancement eliminates the need to use public IP addresses or relying solely on firewall rules to access Cognito. This feature supports user pool management operations (e.g., list user pools, describe user pools), administrative operations (e.g., admin-created users), and user authentication flows (sign in local users stored in Cognito). OAuth 2.0 authorization code flow (Cognito managed login, hosted UI, sign-in via social identity providers), client credentials flow (Cognito machine-to-machine authorization), and federated sign-ins via SAML and OIDC standards are not supported through VPC endpoints at this time.

You can use PrivateLink connections in all AWS Regions where Amazon Cognito user pools is available, except AWS GovCloud (US) Regions. Creating VPC endpoints on AWS PrivateLink will incur additional charges; refer to AWS PrivateLink pricing page for details. You can get started by creating an AWS PrivateLink interface endpoint for Amazon Cognito user pools using the AWS Management Console, AWS Command Line Interface (CLI), AWS Software Development Kits (SDKs), AWS Cloud Development Kit (CDK), or AWS CloudFormation. To learn more, refer to the documentation on creating an interface VPC endpoint and Amazon Cognito’s developer guide

 

​Amazon Cognito user pools now supports AWS PrivateLink for secure and private connectivity. With AWS PrivateLink, you can establish a private connection between your virtual private cloud (VPC) and Amazon Cognito user pools to configure, manage, and authenticate against your Cognito user pools without using the public internet. By enabling private network connectivity, this enhancement eliminates the need to use public IP addresses or relying solely on firewall rules to access Cognito. This feature supports user pool management operations (e.g., list user pools, describe user pools), administrative operations (e.g., admin-created users), and user authentication flows (sign in local users stored in Cognito). OAuth 2.0 authorization code flow (Cognito managed login, hosted UI, sign-in via social identity providers), client credentials flow (Cognito machine-to-machine authorization), and federated sign-ins via SAML and OIDC standards are not supported through VPC endpoints at this time. You can use PrivateLink connections in all AWS Regions where Amazon Cognito user pools is available, except AWS GovCloud (US) Regions. Creating VPC endpoints on AWS PrivateLink will incur additional charges; refer to AWS PrivateLink pricing page for details. You can get started by creating an AWS PrivateLink interface endpoint for Amazon Cognito user pools using the AWS Management Console, AWS Command Line Interface (CLI), AWS Software Development Kits (SDKs), AWS Cloud Development Kit (CDK), or AWS CloudFormation. To learn more, refer to the documentation on creating an interface VPC endpoint and Amazon Cognito’s developer guide.   

Publicado el Deja un comentario

Amazon VPC Lattice now supports custom domain names for resource configurations

Starting today, VPC Lattice allows you to specify a custom domain name for a resource configuration. Resource configurations enable layer-4 access to resources such as databases, clusters, domain names, etc. across VPCs and accounts. With this feature, you can use resource configurations for cluster-based and TLS-based resources.

Resource owners can use this feature by specifying a custom domain for a resource configuration and sharing the resource configuration with consumers. Consumers can then access the resource using the custom domain, with VPC Lattice managing a private hosted zone in the consumer’s VPC.

This feature also provides resource owners and consumers control and flexibility over the domains they want to use. Resource owners can use a custom domain owned by them, or AWS, or a third-party. Consumers can use granular controls to choose which domains they want VPC Lattice to manage private hosted zones for.

This feature is available at no additional cost in all AWS Regions where VPC Lattice resource configuration is available. For more information, please read our blog or visit the Amazon VPC Lattice product detail page and Amazon VPC Lattice documentation.

 

​Starting today, VPC Lattice allows you to specify a custom domain name for a resource configuration. Resource configurations enable layer-4 access to resources such as databases, clusters, domain names, etc. across VPCs and accounts. With this feature, you can use resource configurations for cluster-based and TLS-based resources. Resource owners can use this feature by specifying a custom domain for a resource configuration and sharing the resource configuration with consumers. Consumers can then access the resource using the custom domain, with VPC Lattice managing a private hosted zone in the consumer’s VPC. This feature also provides resource owners and consumers control and flexibility over the domains they want to use. Resource owners can use a custom domain owned by them, or AWS, or a third-party. Consumers can use granular controls to choose which domains they want VPC Lattice to manage private hosted zones for.
This feature is available at no additional cost in all AWS Regions where VPC Lattice resource configuration is available. For more information, please read our blog or visit the Amazon VPC Lattice product detail page and Amazon VPC Lattice documentation.  

Publicado el Deja un comentario

AWS Advanced .NET Data Provider Driver is Generally Available

The Amazon Web Services (AWS) Advanced .NET Data Provider Driver is now generally available for Amazon RDS and Amazon Aurora PostgreSQL and MySQL-compatible databases. This advanced database driver reduces RDS Blue/Green switchover and database failover times, improving application availability. Additionally, it supports multiple authentication mechanisms for your database, including Federated Authentication, AWS Secrets Manager authentication, and token-based authentication with AWS Identity and Access Management (IAM).

The driver builds on top of Npgsql PostgreSQL, native MySql.Data, and MySqlConnector drivers to further enhance functionality beyond standard database connectivity. The driver is natively integrated with Aurora and RDS databases, enabling it to monitor database cluster status and quickly connect to newly promoted writers during unexpected failures that trigger database failovers. Furthermore, the driver seamlessly works with popular frameworks like NHibernate and supports Entity Framework (EF) with MySQL databases.

The driver is available as an open-source project under the Apache 2.0 license. Refer the instructions on the on the GitHub repository to get started. 

 

​The Amazon Web Services (AWS) Advanced .NET Data Provider Driver is now generally available for Amazon RDS and Amazon Aurora PostgreSQL and MySQL-compatible databases. This advanced database driver reduces RDS Blue/Green switchover and database failover times, improving application availability. Additionally, it supports multiple authentication mechanisms for your database, including Federated Authentication, AWS Secrets Manager authentication, and token-based authentication with AWS Identity and Access Management (IAM). The driver builds on top of Npgsql PostgreSQL, native MySql.Data, and MySqlConnector drivers to further enhance functionality beyond standard database connectivity. The driver is natively integrated with Aurora and RDS databases, enabling it to monitor database cluster status and quickly connect to newly promoted writers during unexpected failures that trigger database failovers. Furthermore, the driver seamlessly works with popular frameworks like NHibernate and supports Entity Framework (EF) with MySQL databases. The driver is available as an open-source project under the Apache 2.0 license. Refer the instructions on the on the GitHub repository to get started.   

Publicado el Deja un comentario

IA en el trabajo: La IA remodela los negocios, y eso es solo el comienzo

noviembre 7, 2025

IA en el trabajo: La IA remodela los negocios, y eso es solo el comienzo

Los cambios de paradigma en el trabajo se extenderán a la educación, los mercados laborales, el comercio y más.

Ilustración abstracta con un paisaje montañoso en blanco y negro, un círculo amarillo en el centro de ondas concéntricas sobre agua, rodeado de figuras geométricas y patrones tecnológicos.

Por: Jared Spataro, CMO de IA en el trabajo de Microsoft

Las Empresas Frontera, organizaciones dirigidas por humanos y operadas por IA, han comenzado a reescribir el libro de jugadas sobre cómo se realiza el trabajo. Cambian suposiciones centenarias sobre dónde vive la experiencia, cómo funciona el trabajo y cómo crece el conocimiento. Y están preparadas para remodelar casi todos los aspectos de la sociedad. 

Las empresas siempre han liderado el cambio tecnológico, y la razón es simple: el dinero no solo habla, habla más rápido. Los mismos incentivos económicos que alguna vez impulsaron la difusión del telégrafo, la electricidad e Internet ahora empujan a las empresas a tejer inteligencia en cada capa de sus operaciones.

Pero esos cambios no se limitaron a los negocios por mucho tiempo. El telégrafo comenzó como una herramienta para ferrocarriles y comerciantes, pero pronto conectó a personas de todos los continentes. La luz eléctrica de Edison comenzó en fábricas y oficinas, pero al final dio lugar a ciudades que nunca duermen. Internet nació como una red de investigación, pero ahora impulsa no solo la economía global, sino casi todos los aspectos de la vida moderna.

La IA sigue el mismo arco. Los cambios de paradigma que comienzan dentro de las empresas se extenderán hacia afuera, para transformar la educación, los mercados laborales, el comercio y más en las próximas décadas.

El próximo sistema operativo del trabajo

1. El costo de la especialización se derrumba

A nivel histórico: La experiencia era escasa y costosa. Las empresas dependían de un grupo reducido de expertos, y escalar sus conocimientos requería años de rigurosa contratación, capacitación y retención. La «economía del conocimiento» moderna, en especial en las industrias de servicios y basadas en la experiencia, se basó en la lógica de la división del trabajo de Adam Smith: cuanto más estrecha es la especialización, mayor es el valor. 

El cambio de Empresa Frontera: Con la IA, el costo marginal de crear un «especialista» se acerca a cero. Los agentes basados en el conocimiento especializado de una empresa sobre un producto, mercado o función pueden ponerse en marcha con rapidez y conectarse directo a los datos, sistemas y barreras de seguridad de la organización. Esto no es una pérdida, es una expansión, una liberación. Al liberar a los humanos para que apunten más alto, diseñen mejor e innoven más rápido. Es como el cambio de la pintura a la fotografía: la nueva tecnología no borró al artista; expandió sus horizontes creativos. 

Por qué es importante: Cuando la especialización se vuelve barata y accesible, las organizaciones pueden expandir su banco de talentos casi al infinito, lo que les permite innovar, satisfacer necesidades de nicho y adaptarse a nuevos desafíos con una velocidad y eficiencia sin precedentes. Los mercados se interrumpen a medida que las organizaciones más pequeñas comienzan a competir con los gigantes. En un mundo donde el trabajo competente se vuelve abundante, el dominio humano es fundamental: las empresas dependerán de los humanos para evaluar y refinar de manera efectiva los resultados generados por IA.  

Pero hay tensión: mientras que el dominio humano se vuelve más esencial, también se vuelve más difícil de alcanzar. Los sistemas que producen una profunda experiencia humana (universidades, aprendizajes, gremios profesionales) evolucionan con lentitud y crean brechas entre lo que las empresas necesitan y lo que el mercado de talento puede proporcionar. El resultado es una brecha cada vez mayor entre la adecuación automatizada y la verdadera experiencia. Las empresas que cierren esa brecha, al invertir en un aprendizaje más profundo, tutoría y experiencia práctica, darán un paso adelante.

2. El trabajo se rediseña para la colaboración entre humanos y agentes

A nivel histórico: El trabajo ha sido diseñado para humanos, anclado a la jornada laboral de 9 a 5, optimizado para reuniones y correo electrónico, y moldeado por un Internet creado para «buscar y hacer clic». Las máquinas o herramientas han estado en la escena durante mucho tiempo: la fabricación se basa en líneas de ensamblaje mecanizadas, el servicio al cliente está cada vez más automatizado, pero la arquitectura del trabajo en sí se ha mantenido centrada en el ser humano. 

El cambio de Empresa Frontera: la IA se une a la fuerza laboral y el trabajo se rediseñará en consecuencia. Las organizaciones se han comenzado a convertir en empresas dirigidas por humanos y operadas por agentes: los humanos establecen la intención y las barandillas, los agentes ejecutan a escala. A medida que los trabajadores digitales se entretejen en cada función, el contexto cambia: de un mundo diseñado para que los humanos procesen la información, a uno optimizado para los agentes.  

A nivel técnico, significa reestructurar los sistemas y los datos para que estén optimizados para el uso de los agentes, en lugar de los humanos. A nivel operativo, significará introducir una nueva disciplina en cada función y cada organización: las evaluaciones comerciales. Los líderes definirán cómo se ve lo «bueno», medirán el desempeño de los agentes con respecto a esa barra, refinarán los sistemas para cerrar brechas y luego volverán a subir el listón. Enjuagar y repetir. Es un ciclo de medición y mejora que aporta un nivel de rigor al trabajo del conocimiento que nunca habíamos visto.

Para las personas, significa nuevas definiciones para el liderazgo, la delegación y la responsabilidad exitosos. Administrar un equipo de agentes se vuelve tan crítico, en cuanto a habilidades, como administrar un equipo de personas. Los líderes tienen que generar confianza, establecer la gobernanza y decidir qué flujos de trabajo vale la pena rediseñar y cuáles pueden seguir como «buenos».

Por qué es importante: Rediseñar el trabajo para la colaboración entre humanos y agentes desbloqueará una productividad duradera para cada función. No es difícil imaginar un futuro en el que la previsión se adapte cada hora, las cadenas de suministro puedan recuperarse por sí mismas, los argumentos de venta se personalicen a nivel de cliente y los problemas básicos de servicio se puedan resolver en segundos. También exigirá nuevos enfoques para la coordinación y el cambio. Sólo implementar agentes no es suficiente. Las Empresas Frontera hacen el arduo trabajo de aprender a construirlas, evaluarlas, medirlas, gobernarlas y administrarlas.  

3. El conocimiento se compone de intereses

A nivel histórico: Hasta la fecha, el conocimiento se ha construido de manera lenta en todas las empresas. Las personas aprenden, aplican, comparten y mejoran con el tiempo, pero cuando dejan una empresa, a menudo se van con ellos. El conocimiento experiencial es difícil de codificar y la memoria institucional es frágil. 

El cambio de Empresa Frontera: los agentes crean un nuevo tipo de bucle de conocimiento a una velocidad que ningún sistema humano puede igualar, al ejecutar tareas miles de veces al día y aplicar y recombinar el conocimiento a escala. Igual de importante, pueden retener y compartir ese conocimiento al instante en toda la organización. Pero aquí está el truco: los ciclos de retroalimentación más rápidos no garantizan ciclos de retroalimentación más inteligentes. Sin un diseño deliberado, pueden agravar el ruido, el sesgo o el error con la misma rapidez con la que agravan la información. 

Lo que distingue a las Empresas Frontera no es solo el volumen de conocimiento que generan, sino cómo se aseguran de que se combine en la dirección correcta. Estas organizaciones conectan a sus agentes, estructuran sus datos y evalúan los resultados para definir cómo se ve lo que es bueno, al ajustar sus sistemas de IA para lograrlo de manera consistente. Tratan el conocimiento menos como un archivo estático y más como un sistema vivo: uno que aprende, se adapta y se fortalece con cada iteración.

Por qué es importante: Cuando el conocimiento se retiene, organiza y aplica en tiempo real, las organizaciones comienzan a parecerse a sistemas de automejora. Los ciclos de retroalimentación se aceleran. Las ideas se basan en ideas. La empresa se vuelve más inteligente, más rápida. Pero esto solo funciona si los líderes implementan los sistemas correctos, donde los agentes capturan y recuerdan las ideas, y los humanos proporcionan los marcos, el juicio y la creación de sentido que guían el verdadero progreso. 

Ahora viene la parte difícil

Reconocer estos cambios de paradigma es el primer paso. El paso más desafiante e importante es preparar a nuestras empresas, y a nosotros mismos, para prosperar a medida que se desarrollan estos cambios.

Las ramificaciones se extenderán más allá de las Empresas Frontera hacia la educación, los mercados laborales, el comercio e incluso la sociedad misma. En el próximo número, analizaré el primero de esos sectores: la educación. ¿Cómo evolucionará el aprendizaje? ¿Y cómo se adaptarán las escuelas y universidades para preparar a la próxima generación para un mundo donde la inteligencia es abundante, el trabajo se comparte con los agentes y el conocimiento genera interés?

Para obtener más información sobre la IA y el futuro del trabajo, suscríbanse a este boletín.

The post IA en el trabajo: La IA remodela los negocios, y eso es solo el comienzo appeared first on Source LATAM.

 

​The post IA en el trabajo: La IA remodela los negocios, y eso es solo el comienzo appeared first on Source LATAM.  

Publicado el Deja un comentario

Amazon CloudWatch Application Signals now available in AWS GovCloud (US) Regions

Amazon CloudWatch Application Signals expands its availability to AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions, enabling government customers and regulated industries to automatically monitor and improve application performance in these regions. CloudWatch Application Signals provides comprehensive application monitoring capabilities by automatically collecting telemetry data from applications running on Amazon EC2, Amazon ECS, Amazon EKS and AWS Lambda, helping customers meet their compliance and monitoring requirements while maintaining workload visibility.

With CloudWatch Application Signals, customers in AWS GovCloud (US) regions can now monitor application health in real time, track performance against business goals, visualize service relationships and dependencies, and quickly identify and resolve performance issues. This automated observability solution eliminates the need for manual instrumentation while providing detailed insights into application behavior and performance patterns. The service automatically detects anomalies and helps correlate issues across different AWS services, enabling faster problem resolution and improved application reliability.

CloudWatch Application Signals will be available in AWS GovCloud (US-East) and AWS GovCloud (US-West). For pricing information, visit the Amazon CloudWatch pricing page. To get started, visit the Amazon CloudWatch Application Signals documentation.

 

​Amazon CloudWatch Application Signals expands its availability to AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions, enabling government customers and regulated industries to automatically monitor and improve application performance in these regions. CloudWatch Application Signals provides comprehensive application monitoring capabilities by automatically collecting telemetry data from applications running on Amazon EC2, Amazon ECS, Amazon EKS and AWS Lambda, helping customers meet their compliance and monitoring requirements while maintaining workload visibility. With CloudWatch Application Signals, customers in AWS GovCloud (US) regions can now monitor application health in real time, track performance against business goals, visualize service relationships and dependencies, and quickly identify and resolve performance issues. This automated observability solution eliminates the need for manual instrumentation while providing detailed insights into application behavior and performance patterns. The service automatically detects anomalies and helps correlate issues across different AWS services, enabling faster problem resolution and improved application reliability. CloudWatch Application Signals will be available in AWS GovCloud (US-East) and AWS GovCloud (US-West). For pricing information, visit the Amazon CloudWatch pricing page. To get started, visit the Amazon CloudWatch Application Signals documentation.  

Publicado el Deja un comentario

Deadline Cloud expands support with latest 6th, 7th, and 8th generation instances

AWS announces expanded instance family support in Deadline Cloud, adding new 6th, 7th, and 8th generation EC2 instances to enhance visual effects and animation rendering workloads. This release includes support for C7i, C7a, M7i, M7a, R7a, R7i, M8a, M8i, and R8i instance families, along with additional 6th generation instance types that were previously unavailable. Deadline Cloud is a fully managed service that helps customers run visual compute workloads in the cloud without having to manage infrastructure.

With this enhancement, studios can utilize a broader range of AWS compute technology to optimize their rendering workflows. The compute-optimized (C-series), general-purpose (M-series), and memory-optimized (R-series) instances provide tailored options for different rendering workloads – from compute-intensive simulations to memory-heavy scene processing. The inclusion of latest-generation instances like M8a and R8i enables customers to access improved performance and efficiency for their most demanding rendering tasks.

These instance families are available in all 10 AWS Regions where Deadline Cloud is offered. The specific instance types available in each Region depend on the regional availability of the EC2 instance types themselves.

To learn more about the new instance types supported in Deadline Cloud and their regional availability, see the AWS Deadline Cloud pricing page.

 

​AWS announces expanded instance family support in Deadline Cloud, adding new 6th, 7th, and 8th generation EC2 instances to enhance visual effects and animation rendering workloads. This release includes support for C7i, C7a, M7i, M7a, R7a, R7i, M8a, M8i, and R8i instance families, along with additional 6th generation instance types that were previously unavailable. Deadline Cloud is a fully managed service that helps customers run visual compute workloads in the cloud without having to manage infrastructure. With this enhancement, studios can utilize a broader range of AWS compute technology to optimize their rendering workflows. The compute-optimized (C-series), general-purpose (M-series), and memory-optimized (R-series) instances provide tailored options for different rendering workloads – from compute-intensive simulations to memory-heavy scene processing. The inclusion of latest-generation instances like M8a and R8i enables customers to access improved performance and efficiency for their most demanding rendering tasks. These instance families are available in all 10 AWS Regions where Deadline Cloud is offered. The specific instance types available in each Region depend on the regional availability of the EC2 instance types themselves. To learn more about the new instance types supported in Deadline Cloud and their regional availability, see the AWS Deadline Cloud pricing page.  

Publicado el Deja un comentario

AWS announces a new Regional planning tool in Builder Center

Today, AWS announced a new tool called AWS Capabilities by Region in Builder Center. This tool helps you discover and compare AWS services, features, APIs, CloudFormation resources across AWS Regions. You can explore service availability through an interactive interface, compare multiple Regions side-by-side, and view forward-looking roadmap information. This detailed visibility helps you make informed decisions about global deployments and prevent project delays due to service unavailability.

In addition to this tool, AWS also enhanced the AWS Knowledge Model Context Protocol (MCP) Server to include information about Regional capabilities in an LLM-compatible format. MCP clients and agentic frameworks can connect to the AWS Knowledge MCP Server to get real-time insights into regional service availability and suggestions for alternative solutions when specific services or features are unavailable.

You can begin exploring AWS Capabilities by Region in AWS Builder Center today. The Knowledge MCP server is also publicly accessible at no cost and does not require an AWS account. Usage is subject to rate limits. Follow the getting started guide for setup instructions. 

 

​Today, AWS announced a new tool called AWS Capabilities by Region in Builder Center. This tool helps you discover and compare AWS services, features, APIs, CloudFormation resources across AWS Regions. You can explore service availability through an interactive interface, compare multiple Regions side-by-side, and view forward-looking roadmap information. This detailed visibility helps you make informed decisions about global deployments and prevent project delays due to service unavailability. In addition to this tool, AWS also enhanced the AWS Knowledge Model Context Protocol (MCP) Server to include information about Regional capabilities in an LLM-compatible format. MCP clients and agentic frameworks can connect to the AWS Knowledge MCP Server to get real-time insights into regional service availability and suggestions for alternative solutions when specific services or features are unavailable. You can begin exploring AWS Capabilities by Region in AWS Builder Center today. The Knowledge MCP server is also publicly accessible at no cost and does not require an AWS account. Usage is subject to rate limits. Follow the getting started guide for setup instructions.   

Publicado el Deja un comentario

AWS Backup now supports AWS KMS customer managed keys with logically air-gapped vaults

AWS Backup now supports encrypting backups in logically air-gapped vaults with AWS Key Management Service (KMS) customer managed keys (CMKs). This enhancement provides additional encryption options beyond the existing AWS-owned keys, helping organizations meet their regulatory and compliance requirements.

You can now create logically air-gapped vaults using your own customer managed keys (CMKs) in AWS KMS, giving you more control over your backup protection strategy. Whether you want to use keys from the same account or across accounts, you maintain centralized key management while preserving the security benefits of logically air-gapped vaults. This integration works seamlessly with your existing logically air-gapped vaults and other AWS Backup features, ensuring no disruption to your backup workflows.

AWS KMS customer managed key support with logically air-gapped vaults is available in all AWS Regions where logically air-gapped vaults are currently supported.

You can get started with logically air-gapped vault support for CMKs using the AWS Backup console, API, or CLI. When creating a new logically air-gapped vault, you can now choose between an AWS-owned key or your own CMK for encryption. For more information about implementing this feature, visit the AWS Backup product page, documentation, and blog.

 

​AWS Backup now supports encrypting backups in logically air-gapped vaults with AWS Key Management Service (KMS) customer managed keys (CMKs). This enhancement provides additional encryption options beyond the existing AWS-owned keys, helping organizations meet their regulatory and compliance requirements. You can now create logically air-gapped vaults using your own customer managed keys (CMKs) in AWS KMS, giving you more control over your backup protection strategy. Whether you want to use keys from the same account or across accounts, you maintain centralized key management while preserving the security benefits of logically air-gapped vaults. This integration works seamlessly with your existing logically air-gapped vaults and other AWS Backup features, ensuring no disruption to your backup workflows. AWS KMS customer managed key support with logically air-gapped vaults is available in all AWS Regions where logically air-gapped vaults are currently supported. You can get started with logically air-gapped vault support for CMKs using the AWS Backup console, API, or CLI. When creating a new logically air-gapped vault, you can now choose between an AWS-owned key or your own CMK for encryption. For more information about implementing this feature, visit the AWS Backup product page, documentation, and blog.  

Publicado el Deja un comentario

Amazon SageMaker launches custom tags for project resources

Today, Amazon SageMaker Unified Studio announced new capabilities allowing SageMaker projects to add custom tags to resources created through the project. This helps customers enforce tagging standards that conform to Service Control Policies (SCP) and helps enable cost tracking reporting practices on resources created across the organization.

As an Amazon SageMaker Unified Studio administrator, you can configure a project profile with tag configurations that will be pushed down to all projects using the project profile. Project profiles can be setup to pass Key and Value tag pairings or pass the Key of the tag with a default Value that can be modified during project creation. All tag values passed to the project will result in the resources created by that project being tagged. This provides administrators a governance mechanism that enforces project resources have the expected tags.

This first release of custom tags for project resources is supported only through application programming interface (API).

Custom tags for project resources capability is available in all AWS Regions where Amazon SageMaker Unified Studio is supported, including: Asia Pacific (Tokyo), Europe (Ireland), US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Frankfurt), South America (São Paulo), Asia Pacific (Seoul), Europe (London), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Asia Pacific (Mumbai), Europe (Paris), Europe (Stockholm)

To learn more, visit Amazon SageMaker then get started with the custom tag API documentation.

 

​Today, Amazon SageMaker Unified Studio announced new capabilities allowing SageMaker projects to add custom tags to resources created through the project. This helps customers enforce tagging standards that conform to Service Control Policies (SCP) and helps enable cost tracking reporting practices on resources created across the organization. As an Amazon SageMaker Unified Studio administrator, you can configure a project profile with tag configurations that will be pushed down to all projects using the project profile. Project profiles can be setup to pass Key and Value tag pairings or pass the Key of the tag with a default Value that can be modified during project creation. All tag values passed to the project will result in the resources created by that project being tagged. This provides administrators a governance mechanism that enforces project resources have the expected tags. This first release of custom tags for project resources is supported only through application programming interface (API). Custom tags for project resources capability is available in all AWS Regions where Amazon SageMaker Unified Studio is supported, including: Asia Pacific (Tokyo), Europe (Ireland), US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Frankfurt), South America (São Paulo), Asia Pacific (Seoul), Europe (London), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Asia Pacific (Mumbai), Europe (Paris), Europe (Stockholm) To learn more, visit Amazon SageMaker then get started with the custom tag API documentation.