OffNet Newsroom

Daily topic roundup

AWS

Thursday, July 30, 2026 · 8 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
AWS What's New awsdatabase

AWS Interconnect with OCI goes GA, replacing DIY multicloud networking

AWS has released AWS Interconnect - multicloud with Oracle Cloud Infrastructure as a general availability product. This service replaces the complex, manual approach of building and managing global multi-layered networks across different providers. It aims to simplify interoperability and accelerate application deployment across AWS and OCI environments.

  • Eliminates the need for DIY, complex global multi-layered network management.
  • Simplifies interoperability for teams adopting multicloud strategies.
  • Enables faster deployment of applications across AWS and OCI.
  • First purpose-built product for direct AWS-OCI cloud connectivity.
CHECKLISTAWS-OCI Interconnect BenefitsEliminates complex DIY network managementSimplifies multicloud interoperabilityEnables faster app deploymentProvides purpose-built direct connectivity
Read at source →
InfoQ generaldevops

AWS Lambda S3 Code Storage Removes Region Quotas, Raises Default to 300 GB

AWS Lambda now supports referencing deployment packages directly from customer-owned S3 buckets, which eliminates the per-Region code storage quota. The managed default storage limit has increased from 75 GB to 300 GB, though the per-function package size limit remains unchanged. Engineers must still use UpdateFunctionCode to apply changes after replacing an object in the bucket.

  • Per-Region code storage quota is removed; default managed limit rises to 300 GB.
  • Per-function package size limits remain unchanged from previous constraints.
  • UpdateFunctionCode remains required to trigger Lambda to read new S3 objects.
  • Terraform provider support for this feature is currently an open enhancement.
Read at source →
AWS What's New awsdatabase

Redshift Data API adds long polling, session management, and batch flexibility

Amazon Redshift Data API now supports long polling via a WaitTimeSeconds parameter, allowing clients to delay responses until SQL statements reach a terminal state rather than polling repeatedly. Applications can enumerate and filter active sessions by status, compute target, or database using the new ListSessions capability. Batch statements can now execute on separate transactions, providing finer control over transactional boundaries within bulk operations.

  • Use WaitTimeSeconds on ExecuteStatement or DescribeStatement to reduce API call overhead.
  • Enumerate active sessions with ListSessions to monitor compute target usage and status.
  • Execute batch statements on separate transactions for better isolation and control.
  • Filter sessions by database or status to manage long-running or stuck queries.
  • Reduces synchronous latency by waiting for statement completion before returning results.
CHECKLISTRedshift Data API UpdatesUse WaitTimeSeconds to reduce API call overheadListSessions to monitor compute target usageExecute batch statements on separate transactionsFilter sessions by database or status
Read at source →
InfoQ generaldevops

Microsoft publishes three-layer LLM routing reference architecture for AKS agents

Microsoft released a reference architecture for managing AI agent traffic on Azure Kubernetes Service. The design separates decision-making into three distinct layers: selecting the appropriate model, managing the call lifecycle, and routing to specific GPU replicas. This approach aims to streamline resource allocation and model selection for large-scale deployments.

  • Architects can decouple model selection, call management, and GPU routing for better scalability.
  • The reference design targets Azure Kubernetes Service environments running AI agents.
  • Separating concerns helps optimize GPU utilization and reduce latency in agent workflows.
  • Provides a standardized pattern for handling complex LLM inference traffic on AKS.
Read at source →
The Register general

Majority of Corporate IT Moves Off-Premises for First Time

A new survey indicates that more corporate workloads are now running off-site than within in-house facilities, marking a historic shift in infrastructure distribution. This milestone reflects the ongoing acceleration of cloud adoption and the decentralization of enterprise computing resources. Organizations are increasingly prioritizing external hosting over traditional on-premises data centers.

  • Cloud and off-premises hosting now dominate corporate workload distribution.
  • On-premises data centers are losing their historical majority status.
  • Infrastructure strategy must account for this permanent architectural shift.
  • Remote management and security controls become critical for hybrid fleets.
Read at source →
AWS What's New awsdatabase

AWS Glue REST connector adds VPC, filter pushdown, and partition support

AWS Glue's REST API connector now supports VPC connectivity, allowing secure ingestion from private subnets without public internet exposure. The update introduces filter pushdown to translate query predicates into API requests, reducing data transfer volume. Partition support is also enabled to facilitate parallelized reads for faster ingestion from REST sources.

  • Securely access REST APIs in private subnets via VPC, VPN, or PrivateLink.
  • Filter pushdown reduces payload size by translating predicates to API requests.
  • Partition support enables parallel reads for improved ingestion throughput.
  • No custom code required to operate ETL pipelines against proprietary REST sources.
CHECKLISTGlue REST Connector FeaturesConnect via VPC or PrivateLink for securityUse filter pushdown to reduce data volumeEnable partition support for parallelized readsRun ETL pipelines without custom code
Read at source →
AWS What's New awsdatabase ↺ since 07-28

RDS SQL Server now supports TDE restores on Multi-AZ and read replicas

Amazon RDS for SQL Server now allows restoring Transparent Data Encryption-enabled databases on Multi-AZ instances and local read replicas using native backup and restore. Previously, this operation was restricted to Single-AZ deployments, forcing users to disable encryption or migrate configurations. To perform these restores, you must back up the TDE certificate to Amazon S3 and restore it to the target RDS instance with the TDE option enabled.

  • Eliminates the need to disable TDE or migrate to Single-AZ for encrypted database restores.
  • Enables TDE restore directly to Multi-AZ instances for improved availability during recovery.
  • Supports TDE restore to read replicas within the same region via native backup methods.
  • Requires exporting the TDE certificate to S3 and restoring it to the target instance.
HOW IT WORKSTDE Restore Workflow1Back up TDE certificate to S32Restore certificate to target RDS instance3Enable TDE option on target4Restore encrypted database natively
Read at source →
InfoQ generaldevops ↺ since 07-28

AWS GuardDuty Investigation Agent automates threat triage via MCP

AWS has introduced a public preview for the GuardDuty Investigation Agent, designed to automate security analysis by correlating findings, 90-day logs, and resource topologies. The agent generates structured reports containing risk ratings, confidence scores, and MITRE ATT&CK classifications. This capability is exposed through the AWS MCP Server, enabling integration with agentic workflows for automated incident response.

  • Agent correlates findings, logs, and topology into structured reports with risk and confidence scores.
  • Integrates via AWS MCP Server to allow agentic tooling to trigger and manage investigations.
  • Includes MITRE ATT&CK classification for standardized threat mapping and reporting.
  • Preview quota limits users to 10 investigations per account per day for now.
Read at source →
↑