AWS

AWS has launched Amazon S3 Vectors in GovCloud US-East and US-West. This service provides purpose-built vector storage for AI agents, RAG, and semantic search at billion-vector scale. It leverages S3's underlying durability and elasticity while offering dedicated APIs for vector management without infrastructure provisioning.

• GovCloud customers can now access native vector storage for AI workloads
• Supports billion-vector scale for RAG and semantic search applications
• Uses S3's durability and availability with dedicated vector APIs
• No infrastructure provisioning required for storage or querying

Amazon SageMaker Unified Studio now enables OpenLineage-compatible data lineage tracking within IAM-based domains, extending capabilities previously exclusive to Identity Center setups. The feature captures lineage events from Apache Spark jobs on EMR, AWS Glue, and SageMaker notebooks, providing interactive visual graphs with configurable depth and column-level detail. Operators can programmatically manage these events via APIs, including a new DeleteLineageEvent action for cleanup.

• IAM-based SageMaker domains now support OpenLineage-compatible data lineage tracking
• Captures lineage from EMR Spark, AWS Glue, Visual ETL, and notebooks
• Interactive graphs offer configurable depth and column-level event timestamp views
• New DeleteLineageEvent API allows programmatic removal of published lineage events
• Aligns IAM-based domains with existing Identity Center lineage capabilities

Amazon ECS Managed Instances now charges lower management fees for GPU and accelerated instance types, effective July 1, 2026. G-series instances see a 35% reduction, while P-series and AWS Trainium fees drop by 60%. These changes apply automatically to existing customers without requiring any action.

• P-series and Trainium management fees drop 60%, significantly lowering operational costs for heavy AI workloads.
• G-series management fees decrease by 35%, offering moderate savings for general GPU tasks.
• No action required: price reductions apply automatically to current ECS Managed Instances users.
• Simplifies provisioning by allowing task-level definitions rather than manual instance configuration.

pg-cdc is a single-binary tool that streams Postgres WAL data into immutable, time-travelable Iceberg Parquet tables on AWS S3. It integrates with AWS Glue for schema registration and enforces access control via Lake Formation tags, ensuring consumers authenticate through IAM rather than database credentials. The architecture is strictly one-way, preventing any write operations from reaching the production database and eliminating the need for JVM dependencies.

• Single binary deployment with no JVM required reduces operational overhead.
• Lake Formation tags gate all reads, making untagged data invisible to consumers.
• One-way WAL stream ensures agents cannot accidentally write to production.
• Iceberg tables on S3 enable time-travel queries and immutable data storage.
• Consumers authenticate via AWS IAM/Lake Formation, avoiding DB credentials.

AWS Certificate Manager now exposes a managed ACME server endpoint, enabling public TLS certificate issuance via standard ACMEv2 clients like Certbot and cert-manager. These certificates, issued by Amazon Trust Services, have a 45-day validity period to align with upcoming CA/Browser Forum mandates. The feature allows PKI administrators to enforce governance controls, including domain scoping and wildcard policies, while delegating request management to application teams.

• Use any ACMEv2 client (Certbot, cert-manager) with ACM to automate public cert lifecycle.
• Certificates are 45 days long, ensuring compliance with the 2029 CA/B 47-day mandate.
• Governance controls let admins restrict domain scopes and wildcard usage per endpoint.
• Centralized management reduces manual overhead for teams issuing public TLS certs.
• Native integration supports seamless automation without distributing private CA infrastructure.