OffNet Newsroom

Daily topic roundup

AWS

Sunday, July 05, 2026 · 6 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
AWS Database Blog awsdatabase ↺ since 07-03

AWS details user auth and session management for Aurora DSQL

The AWS Database Blog outlines design patterns for implementing user authentication and session management on Amazon Aurora DSQL. It maps the full request flow from client to database, highlighting architectural considerations specific to the DSQL engine. The post shares practical lessons learned from building and testing these services against a live cluster.

  • Aurora DSQL requires specific design patterns for user authentication services.
  • Session management must account for the unique request flow in DSQL.
  • Live cluster testing reveals practical implementation lessons and edge cases.
  • Review DSQL-specific architectural constraints when designing auth flows.
Read at source →
The Register general ↺ since 07-03

CISA adds SharePoint RCE to KEV list despite Microsoft's low-exploitation claim

CISA has added a SharePoint Remote Code Execution vulnerability to the Known Exploited Vulnerabilities catalog, overriding Microsoft's assessment that active exploitation was unlikely. The flaw allows attackers with valid SharePoint credentials to execute arbitrary code on vulnerable on-premises servers. This move signals urgent operational risk for organizations running affected SharePoint versions.

  • CISA mandates patching regardless of vendor exploitation likelihood assessments.
  • Valid SharePoint account credentials are sufficient to trigger the RCE.
  • On-prem SharePoint servers face immediate critical exposure.
  • Prioritize patching this vulnerability over other lower-severity issues.
  • Review access controls for SharePoint accounts to limit blast radius.
Read at source →
AWS What's New awsdatabase ↺ since 07-02

AWS RDS Cross-Region Automated Backups expand to 4 new regions

Amazon RDS now supports replicating automated backups across regions in Mexico Central, Asia Pacific Taipei, New Zealand, and Thailand. This feature enables point-in-time recovery for mission-critical databases by storing backup copies in geographically distant locations. Specific replication paths are enabled, such as Mexico Central to Europe (Ireland) or US West (N. California), and Asia Pacific Taipei to Singapore or Tokyo.

  • Mexico Central RDS backups can now replicate to Europe (Ireland) or US West (N. California)
  • Asia Pacific (Taipei) backups replicate to Singapore or Tokyo for improved disaster recovery
  • New Zealand and Thailand RDS instances can replicate backups to nearby APAC regions like Singapore
  • Enhanced geographic redundancy for mission-critical databases without manual backup management
  • Simplifies compliance with data residency and disaster recovery requirements in these regions
Read at source →
AWS What's New awsdatabase ↺ since 07-03

AWS Security Hub CSPM adds AI Security Best Practices standard with 31 controls

AWS Security Hub CSPM has introduced an AI Security Best Practices standard featuring 31 automated controls. This new standard enables continuous evaluation of Amazon Bedrock, Bedrock AgentCore, and SageMaker workloads against recommended security configurations. It eliminates the need for manual assessments or custom rule authoring by checking critical domains like network isolation, encryption, and VPC placement.

  • Covers 31 automated controls for AI workloads without custom rule authoring.
  • Validates configurations for Bedrock, Bedrock AgentCore, and SageMaker.
  • Enforces controls on network isolation, encryption, and KMS key usage.
  • Requires private container registries and strict authorization controls.
  • Provides continuous compliance evaluation for deployed AI resources.
Read at source →
InfoQ generaldevops ↺ since 07-03

Apple Expands Private Cloud Compute to Google Cloud Using NVIDIA Blackwell and Intel TDX

Apple has partnered with Google Cloud to host its Private Cloud Compute service externally for the first time, leveraging NVIDIA Blackwell GPUs, Intel Trust Domain Extensions, and Google's Titan security chip. The architecture relies on an independent append-only hardware ledger and dual-vendor attestation roots to ensure integrity, while explicitly excluding AWS and Azure from this collaboration. This move marks a strategic shift in how Apple extends its confidential computing capabilities beyond its own data centers.

  • Apple utilizes NVIDIA Blackwell GPUs and Intel TDX for hardware-level security in this external deployment.
  • Dual-vendor attestation and an append-only ledger enforce integrity without relying on AWS or Azure.
  • This expands Private Cloud Compute beyond Apple's internal infrastructure to Google Cloud exclusively.
  • The solution integrates Google's Titan chip to bolster the trusted execution environment.
Read at source →
AWS What's New awsdatabase ↺ since 07-02

EC2 Auto Scaling adds reservations-then-balanced AZ strategy

Amazon EC2 Auto Scaling now supports a 'reservations-then-balanced' distribution strategy that prioritizes launching instances into capacity reservations before spreading remaining capacity across Availability Zones. This update targets On-Demand Capacity Reservations, Capacity Blocks, and Interruptible Capacity Reservations to maximize utilization of pre-purchased compute. Users configure this by setting the capacity distribution strategy in the Auto Scaling group’s AZ configuration and specifying target reservations via ARN or ID.

  • Prioritizes filling Capacity Reservations before falling back to balanced AZ distribution for better cost efficiency.
  • Supports ODCRs, Capacity Blocks, and Interruptible Capacity Reservations within the same strategy.
  • Configurable via Auto Scaling group AZ settings using Capacity Reservation Group ARNs or individual IDs.
  • Maintains operational resilience of Auto Scaling while optimizing pre-purchased capacity utilization.
Read at source →
↑