OffNet Newsroom

Daily topic roundup

AWS

Monday, September 07, 2026 · 8 stories, curated & summarized — click any story for the source.

AWS What's New awsdatabase ↺ since 09-04

Aurora MySQL gains multi-source and delayed replication capabilities

Amazon Aurora MySQL now supports multi-source replication, allowing a single cluster to ingest data from multiple independent MySQL sources simultaneously. This feature simplifies data consolidation for use cases like merging shards or aggregating regional data into a central reporting hub. Additionally, delayed replication enables binlog replicas to intentionally lag behind the source by a configurable duration, providing a safeguard against human error and logic bugs.

  • Consolidate data from multiple MySQL shards or regional instances into one central Aurora cluster.
  • Use delayed replication as a safety net to recover from accidental drops or bad updates.
  • Configure lag duration on binlog replicas to create a time-window for error correction.
  • Leverage multi-source replication for centralized operational workflows like reporting.

Fleet impact: For Aurora MySQL fleets, multi-source replication simplifies shard unification and centralized reporting without complex ETL pipelines. Delayed replication offers a low-effort recovery mechanism against DDL/DML errors; verify binlog retention and replica lag monitoring align with your RPO/RTO requirements.

CHECKLISTNew Aurora MySQL Replication FeaturesConsolidate data from multiple MySQL shards into one central clusterUse delayed replication as a safety net for accidental dropsConfigure lag duration on binlog replicas for error correctionLeverage multi-source replication for centralized operational…
AWS Database Blog awsdatabase ↺ since 09-05

CloudWatch Database Insights now supports self-managed EC2 PostgreSQL

Amazon CloudWatch Database Insights has expanded its monitoring capabilities to include self-managed PostgreSQL instances running on Amazon EC2. This update allows engineers to view DB Load, Top SQL, and wait event analysis for self-managed databases alongside managed Aurora and RDS fleets within a single console. The feature brings the same analytical depth previously available only for managed services to infrastructure hosted on EC2.

  • Unify monitoring for EC2-hosted PostgreSQL with Aurora and RDS in one CloudWatch view.
  • Access detailed DB Load, Top SQL, and wait event metrics for self-managed engines.
  • Eliminate context switching by centralizing database observability across managed and unmanaged fleets.
  • Standardize alerting and troubleshooting workflows for heterogeneous database environments.

Amazon Bedrock Managed Knowledge Base now supports user-managed setup (3LO) for SharePoint, OneDrive, and Confluence data sources. This change eliminates the need for admin-level 2LO credentials, allowing users to authenticate with their existing accounts. The streamlined process enables faster prototyping of AI assistants grounded in enterprise documentation.

  • No more admin-level 2LO credentials required for SharePoint, OneDrive, or Confluence integration
  • Users sign in with existing third-party credentials via 3LO flow
  • Setup time reduced to minutes, lowering barriers to AI assistant prototyping
  • Bedrock Managed Knowledge Base handles authentication automatically after initial login
THE SHIFTAuth Simplified for Bedrock2LOADMIN CREDENTIALS3LOUSER CREDENTIALSFaster prototyping without admin access
AWS What's New awsdatabase ↺ since 09-05

AWS Adds Native ServiceNow Connector to Bedrock Managed Knowledge Base

Amazon Bedrock Managed Knowledge Base now includes a native connector for ServiceNow, enabling direct ingestion of knowledge articles and service catalog items. This fully managed feature eliminates the need for custom ingestion pipelines by automatically handling data crawling, metadata extraction, and incremental synchronization. Users can grant AI agents access to institutional knowledge and file attachments by simply providing instance credentials.

  • Native ServiceNow connector removes need for custom data ingestion pipelines.
  • Automates crawling, metadata extraction, and incremental sync for knowledge articles.
  • Includes support for service catalog items and file attachments.
  • Simplifies RAG setup by requiring only instance credentials for access.
CHECKLISTSetup Bedrock ServiceNow IntegrationProvide ServiceNow instance credentials for accessAutomatically handle data crawling and ingestionExtract metadata from knowledge articlesSync service catalog items incrementallyGrant AI agents file attachment access
AWS What's New awsdatabase ↺ since 09-05

Amazon Linux 2027 enters public preview with kernel 7.1 and SELinux enforcement

AWS has announced the public preview of Amazon Linux 2027, the next iteration of its cloud-native OS built on the AL2023 baseline. The release upgrades to kernel 7.1+, enforces SELinux by default, and integrates AWS-LC for accelerated cryptography. It also includes updated toolchains, language runtimes, and Neuron driver support for AI/ML workloads.

  • Kernel 7.1+ and default SELinux enforcement raise the security and stability baseline.
  • AWS-LC integration accelerates cryptographic performance for high-throughput workloads.
  • Neuron drivers are included to support AWS AI/ML accelerator hardware out of the box.
  • Built on AL2023, ensuring continuity for existing Amazon Linux users migrating up.
  • Public preview stage available for testing cloud-native and containerized environments.
TRADE-OFFAmazon Linux 2027 Key UpgradesSecurity & SpeedKernel 7.1+ for stabilitySELinux enforced by defaultAWS-LC crypto accelerationAI & CompatibilityNeuron driver supportBuilt on AL2023Public preview testingvs
AWS What's New awsdatabase ↺ since 09-05

AWS GWLB adds TCP Reset support for faster failure recovery

AWS Gateway Load Balancer now sends TCP Reset (RST) packets when targets become unhealthy, are deregistered, or when idle timeouts expire. This change eliminates previous fail-open behavior that forced clients to wait minutes for TCP stack retries to detect failures. By proactively signaling connection drops, endpoints can immediately establish new flows through healthy targets.

  • Reduces traffic interruption duration from minutes to seconds during target failures.
  • Replaces fail-open forwarding with active TCP Reset signaling for unhealthy targets.
  • Prevents long delays caused by client-side TCP exponential back-off mechanisms.
  • Requires enabling the feature to allow GWLB to inject RST packets into flows.
TRADE-OFFGWLB Failure HandlingOld BehaviorForced client TCP retriesMinutes of downtimeFail-open forwardingNew BehaviorSends TCP RST packetsSeconds of downtimeProactive connection dropsvs

AWS has enabled single-node cluster creation for rg.large instances, which are powered by Graviton processors. This feature is available on P204 or later patch versions and targets smaller workloads that do not require high availability. The move provides a cost-effective path for proofs of concept and rapid testing while leveraging the performance benefits of RG instances over RA3.

  • Single-node rg.large clusters enable cheaper, faster PoCs without HA overhead.
  • Requires P204+ patch versions; ensure cluster compatibility before deployment.
  • Graviton-powered rg.large offers 2.4x speed and 30% lower cost vs RA3.
  • Unified SQL analytics now covers both warehouse and lake data via vectorized engine.
BY THE NUMBERSThe headline number2.4xAmazon Redshift rg.large now supports single-node clusters…
AWS What's New awsdatabase ↺ since 09-04

AWS Transform GA adds FSx for NetApp ONTAP as block storage target

AWS Transform now supports migrating block storage directly to Amazon FSx for NetApp ONTAP as a generally available destination. This update allows organizations to move compute, network, and storage in a single wave, removing the need for intermediate platforms or separate tools. Workloads retain existing data access patterns while benefiting from ONTAP's enterprise features on AWS infrastructure.

  • Eliminate intermediate storage platforms during block storage migrations
  • Consolidate compute, network, and storage moves into one workflow
  • Preserve existing data access patterns and operational processes
  • Leverage managed ONTAP capabilities with AWS scalability and resiliency
HOW IT WORKSSingle-Wave Migration Workflow1Initiate AWS Transform GA2Select FSx for ONTAP target3Migrate compute, network, and storage4Preserve existing data access patterns
↑