Posts

Amazon VPC IPAM now supports BGP route protection monitoring and delegated RPKI for BYOIP prefixes - devamazonaws.blogspot.com

Amazon Virtual Private Cloud (VPC) IP Address Manager (IPAM) now supports BGP route protection monitoring and delegated Resource Public Key Infrastructure (RPKI) management for Bring Your Own IP (BYOIP) prefixes. Network administrators can centrally monitor BGP route protection and automate Route Origin Authorization (ROA) management across their organization. Using BGP route monitoring, you can view RPKI validity status, ROA strength, and route overlap detection for all BYOIP prefixes across accounts and regions from a single dashboard. Administrators can identify prefixes with invalid or missing ROAs, detect route overlaps that may indicate hijacking, and distinguish between strict and permissive ROA configurations. With Delegated RPKI, administrators perform a one-time setup with their Regional Internet Registry (ARIN, RIPE, APNIC, or LACNIC), after which IPAM automatically creates ROAs during BYOIP provisioning, renews them before expiration, and manages ROAs for on-premises pref...
Post a Comment
Read more

Amazon Connect Customer adds one-click drill-down on real-time metrics dashboards - devamazonaws.blogspot.com

Amazon Connect Customer dashboards now support drilling down into real-time queue and routing profile performance. With a single click, supervisors can drill from a summary view into pre-filtered routing profile, queue, agent, or routing step widgets. For example, a supervisor who sees a spike in queue wait times can immediately drill down to agent activity for a specific queue and reassign agents to reduce the backlog. One-click drill-down on real-time metrics dashboards is available in all AWS commercial and AWS GovCloud (US-West) regions where Amazon Connect Customer is offered. To learn more about Amazon Connect Customer analytics dashboards, see the Amazon Connect Customer Administrator Guide . To learn more about Amazon Connect Customer, the AWS cloud-based contact center, please visit the Amazon Connect Customer website . Post Updated on August 6, 2026 at 06:00PM
Post a Comment
Read more

AWS Marketplace now lets sellers configure net payment terms on private offers - devamazonaws.blogspot.com

AWS Marketplace now supports configurable net payment terms on private offers, with options including Net 30, Net 45, Net 60, or Net 90. Prior to this launch, net payment terms were uniform across all AWS Marketplace purchases, based on the buyer's payment terms with AWS. This new feature allows sellers to configure when payment is due, so invoice due dates match what buyers and sellers negotiate. This gives buyers upfront clarity on payment due dates, allows them to take advantage of more favorable payment terms, and gives sellers better cash flow predictability by setting net payment terms during private offer creation. Buyers see the configured payment terms on the procurement page before accepting a private offer. The net payment terms apply uniformly to all AWS Marketplace charges within a private offer, including upfront fees, scheduled payments, and usage-based charges. For Channel Partner Private Offers (CPPO), ISVs set maximum payment terms and channel partners can offer...
Post a Comment
Read more

AWS Backup for Amazon S3 now supports direct access to backup data - devamazonaws.blogspot.com

AWS Backup for Amazon S3 now supports creating S3 Access Points, providing immediate read-only access to backup data using standard S3 APIs without initiating a restore. This enables targeted file recovery, data validation, compliance auditing, and forensic investigation while your backup data remains protected in your backup vault. You can create an access point for an S3 recovery point and read backup data using standard S3 operations such as GetObject, HeadObject, and ListObjectsV2. Access points work with both snapshot and continuous (point-in-time) recovery points stored in standard backup vaults or logically air-gapped vaults, including recovery points shared across accounts through AWS Resource Access Manager or Multi-party approval. While an access point is active, the associated recovery point is protected from deletion. Get started with this capability by creating access points for your S3 recovery points using the AWS Backup console, API, or CLI. This capability is avail...
Post a Comment
Read more

AWS Glue Data Catalog now supports metadata exports to S3 Tables (Preview) - devamazonaws.blogspot.com

AWS Glue Data Catalog is a centralized metadata repository that helps you discover and understand data, with semantic search and support for adding business context to datasets currently in preview. Today, we are adding two new capabilities to this preview: exporting catalog metadata exports to S3 Tables for metadata querying, and expanding the semantic search preview to catalogs encrypted with AWS Key Management Service (AWS KMS) customer managed keys. When you enable the Glue metadata export, your catalog's technical and business metadata, including glossary terms, custom metadata attachments, and asset descriptions, are written to tables in the managed aws-catalog S3 table bucket. Metadata is stored in Apache Iceberg format, enabling you to query, audit, and perform time travel queries for historical analysis using standard SQL in query engines that support Iceberg, such as AWS analytics services like Amazon Athena and Amazon QuickSight as well as third-party tools. This lets ...
Post a Comment
Read more

[MS] You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token - devamazonaws.blogspot.com

Image
We're excited to announce the Azure DevOps service connection , a new way to access Azure DevOps from your pipelines using a Microsoft Entra workload identity (a service principal or managed identity) instead of a Personal Access Token (PAT) or session token. This post walks through what it is, how to set it up, and the many places you can use it, including several capabilities we've added based on your feedback. Why use an Azure DevOps service connection? Using an Azure DevOps service connection improves the security of your pipelines in several ways: PAT-free authentication: Eliminate the need to create, store, and rotate Personal Access Tokens Least privilege: Use per-pipeline or even task-level permissions instead of shared build service account permissions No persistent secrets: Use Microsoft Entra federated credentials instead of passwords Audit trail: All authentication attempts are logged in the Azure DevOps audit log Because the connection authenticate...
Post a Comment
Read more

[MS] Creating a fake agile wrapper that is technically agile but is not useful outside its home apartment, part 3 - devamazonaws.blogspot.com

Last time, we tried to execute on our plan to use the global interface table to hold hold a reference to an object in another apartment that automatically expires when the apartment runs down . But it broke down because objects that are marked INoMarshal can't go into the global interface table. So we will just force the square peg into the round hole: We can put the non-marshalable object inside an object that is marshalable. template<typename Smart> struct force_marshal : winrt::implements<force_marshal<Smart>, ::IUnknown, winrt::non_agile> { force_marshal(Smart const& p) : m_p(p) {} Smart m_p; }; The force_marshal<Smart> object babysits a non-marshalable smart pointer to a COM object and exposes a marshalable wrapper around it. Since the wrapped object is not agile, the wrapper cannot be either. (If the wrapper were agile, then we'd be back where we started: How do we ensure that the m_p is destructed in the correct apartment?)...
Post a Comment
Read more