Posts

Amazon EBS Volume Clones now supports copying volumes across accounts - devamazonaws.blogspot.com

Amazon Elastic Block Store (Amazon EBS) Volume Clones now supports copying EBS volumes across AWS accounts with re-encryption. You can copy EBS volumes to any AWS account, re-encrypting with an AWS Key Management Service (AWS KMS) key in the target account. This enables organizations that separate production and development workloads into different accounts to copy data across those account boundaries. With cross-account copy, you can clone a production database volume into an isolated development account, giving developers a fresh copy of production data to experiment with safely. This capability also supports teams that require encryption key separation across environments, such as maintaining separate KMS keys for production and non-production accounts. Cross-account copy is supported for all volume types, including unencrypted volumes and volumes encrypted with customer managed keys. To copy a volume across accounts, you first share the volume with the target account using AWS ...
Post a Comment
Read more

Amazon Connect Customer Profiles now sends events when customers enter or exit segments - devamazonaws.blogspot.com

Amazon Connect Customer Profiles now sends segment membership events, providing the ability to receive real-time and scheduled notifications when customer profiles enter or exit a segment, such as high-value customers or low-satisfaction customers. Previously, detecting when customer profiles joined or left a segment required exporting entire segments at regular intervals and running custom scripts to identify differences. This manual process consumed resources, introduced errors, and created multi-hour delays between a customer qualifying for a segment and downstream systems acting on it. With segment membership events, Customer Profiles automatically evaluates and streams membership changes directly to your Amazon Kinesis Data Stream. For segments built with standard conditions, changes are detected in near real-time as profile attributes update. For enhanced segments (using Spark SQL), periodic snapshots evaluate membership at configurable intervals and notify you of changes. Each ...
Post a Comment
Read more

[MS] What's new in Microsoft Foundry | July and August 2026 - devamazonaws.blogspot.com

Image
Author's note : After a long summer break and a small US holiday, we have a lot to catch up on! I've brought July and August's Foundry updates together in one roundup, with code examples and migration notes to help you get started. TL;DR Hosted Agents, Voice Live integration, and Toolboxes are generally available (GA). Bring agent code to a managed runtime, add real-time voice, and manage reusable tools outside your agent code. Claude capabilities arrive on deployments hosted on Azure. The August 17 announcement brings structured outputs, Web search, Web fetch, MCP connector, and Tool search to that hosting option. The MCP connector uses the beta API. Model Router expands in August. The update adds regions, refreshes the routing pool with GPT-5.6 variants and Claude Opus 4.8, and expands agentic routing to eligible Anthropic and open-source models. Foundry Local on Azure Local adds preview evaluation and multi-GPU inference capabilities. Extension 2607...
Post a Comment
Read more

Amazon S3 Object Lock now supports variable retention with event holds - devamazonaws.blogspot.com

Amazon S3 Object Lock now supports variable retention, allowing you to apply write-once-read-many (WORM) protection to objects whose required retention period starts with a future event, such as a contract closing or an audit completing. You place an event hold with a retention duration on an object and S3 protects the object while the hold is in place. When you release the hold, S3 retains the object for the duration you specified. Unlike legal holds, which end protection immediately upon removal, event holds provide WORM compliance for the required retention period after the triggering event, so you can meet event-based retention requirements without retaining data longer than your policy requires. You can apply event holds to individual objects, configure them as a bucket default, or apply them at scale with S3 Batch Operations. New AWS IAM and bucket policy condition keys let you control who can set or release holds and enforce minimum or maximum hold durations. AWS CloudTrail lo...
Post a Comment
Read more

[MS] A sample use of the winstart.bat file in Windows 95 - devamazonaws.blogspot.com

In my earlier discussion of the the litte-known winstart.bat batch file in Windows 3.1 and Windows 95 , Danielix Klimax wondered whether it was useful in Windows 95, or whether it was primarily used only in Windows 3.x . I found a reference to winstart.bat in the Windows 3.1 SETUP.TXT file : Using the TIGA Display Driver ------------------------------- If you are using the TIGA display driver, you must load the TIGACD.EXE MS-DOS driver manually before running Setup to upgrade Windows. Otherwise, Windows will not upgrade your system properly. After successfully setting up Windows, you can increase the amount of conventional memory available to non-Windows applications when Windows is running in 386 enhanced mode by loading TIGACD.EXE from the WINSTART.BAT file. The WINSTART.BAT file runs only in 386 enhanced mode. If you want to run Windows in standard mode, you must load TIGACD.EXE manually. For more information, see the README.WRI online document. TIGA is the Texas Instrume...
Post a Comment
Read more

Amazon GuardDuty adds optional threat detection rules - devamazonaws.blogspot.com

Amazon GuardDuty now offers Custom Detection Rules, a library of 35 prebuilt, opt-in rules for CloudTrail management events that let you extend threat detection coverage to match your environment. Custom Detection Rules produces 26 unique finding types mapped to 10 MITRE ATT&CK® tactics, without the heavy lifting of log ingestion, normalization, or storage. Some threat techniques, such as sharing an AMI externally, disabling flow logs, or signing in without MFA, could be meaningful indicators of compromise in some accounts but routine in others. Custom Detection Rules lets you enable these detections only where the activity is unexpected — expanding your TTP coverage tailored to your environment. To get started, browse Custom Detection Rules via the GuardDuty console or API, and enable rules in dry-run mode to evaluate detection efficacy before going live. Custom Detection Rules is available in all AWS commercial Regions and the AWS GovCloud (US) Regions. To learn more, s...
Post a Comment
Read more

[MS] Why don't we allow stacks to be sparse, instead of forcing them to be contiguous? - devamazonaws.blogspot.com

When I discussed why we don't just make the entire stack out of guard pages , commenter BCS wondered , "Why require that the stack use contiguously mapped pages? What would break if only touched pages got mapped in? That could actually be a good thing for example with a function that wanted to alloca 512MB on the stack but only read/writes a few pages." So the question is asking why the stack must be contiguous. Why not let it be sparse and fault in only the pages that are touched? The first issue is that the stack check code would have to include an explicit check against the stack limit, instead of just walking down the stack a page at a time. This explicit check is needed to avoid security vulnerabilities if somebody manages to alloca a buffer so large that it goes past the end of the stack reservation entirely. If you go a single page at a time, you will eventually hit the no-access page that marks the end of the stack. But if you can leap over multiple pages at...
Post a Comment
Read more