OffNet Newsroom

Daily topic roundup

AWS

Wednesday, September 23, 2026 · 7 stories, curated & summarized — click any story for the source.

AWS has generally available Amazon CloudWatch Omni, an AI-driven evolution of CloudWatch designed to unify observability for applications and agents. The service integrates OpenTelemetry interoperability with CloudWatch’s scale, offering a centralized view across AWS, Azure, and multi-account environments. Users can access telemetry via a standalone web portal with SSO or a local IDE extension for direct agent interaction.

  • Unified AI-first interface for observing both traditional apps and autonomous agents in one place.
  • Leverages OpenTelemetry for broad interoperability while maintaining CloudWatch’s reliability and scale.
  • Multi-cloud support extends visibility to Azure workloads alongside AWS accounts and Regions.
  • IDE extension enables hands-on agent troubleshooting directly within your local development environment.
HOW IT WORKSCloudWatch Omni Integration1Collect telemetry via OpenTelemetry2Route to unified AI engine3Analyze apps and agents4Troubleshoot via IDE extension

AWS Security Hub AI Inventory now discovers and catalogs AI assets on self-hosted Microsoft Azure instances. The update leverages enhanced Amazon Inspector SBOM analysis to identify inference endpoints, models, and agents like Ollama and vLLM on Azure VMs. This allows central security teams to maintain a unified, continuously updated view of multi-cloud AI security posture.

  • Security Hub now covers Azure self-hosted AI workloads, not just AWS.
  • Uses Amazon Inspector SBOM analysis to detect frameworks like Ollama and vLLM.
  • Maps discovered AI assets to underlying infrastructure for better visibility.
  • Correlates AI assets with security findings for centralized risk management.
  • Enables filtering of multi-cloud AI security posture in one dashboard.
TRADE-OFFAWS vs Azure AI CoveragePrevious AWS ScopeLimited to AWS onlyNo self-hosted visibilityExpanded Azure ScopeCovers Azure self-hosted VMsDetects Ollama and vLLMvs

AWS Glue Data Quality now leverages generative AI to automatically suggest data quality rules in seconds. The new Advanced mode analyzes table intent to propose business-relevant checks across every column in the Data Catalog. This eliminates manual setup, allowing engineers to quickly bootstrap checks for new datasets or large data lakes.

  • Generative AI detects data intent and proposes relevant quality rules automatically.
  • Full column coverage is achieved instantly without manual rule authoring.
  • Ideal for bootstrapping checks on new datasets or large-scale data lakes.
  • Users retain control to review, adjust, and save recommended rules.
HOW IT WORKSInstant Rule Generation1Analyze table intent2Scan Data Catalog3Propose business checks4Engineer reviews rules
AWS What's New awsdatabase

AWS expands X8i memory-optimized instances to Sao Paulo

Amazon EC2 X8i instances are now available in the South America (Sao Paulo) region. Powered by custom Intel Xeon 6 processors, these instances deliver up to 43% higher performance and 3.3x more memory bandwidth than the previous generation X2i instances. They are designed for memory-intensive workloads such as SAP HANA, large databases, and data analytics.

  • X8i instances are now available in the South America (Sao Paulo) region.
  • Powered by custom Intel Xeon 6 processors exclusive to AWS.
  • Delivers up to 43% higher performance and 3.3x more memory bandwidth than X2i.
  • Supports memory-intensive workloads like SAP HANA and large databases.
  • Offers up to 1.5x more memory capacity, reaching up to 6TB per instance.
TRADE-OFFX8i vs X2i PerformancePrevious Gen X2iStandard performance baselineLower memory bandwidthLess memory capacityNew X8i Instances43% higher performance3.3x memory bandwidth1.5x more memoryvs
InfoQ generaldevops ↺ since 09-22

AWS Confirms Data Loss in Damaged Middle East AZs After Iran Conflict

AWS informs customers that resources stored exclusively in the damaged mec1-az2 UAE zone or Bahrain region cannot be restored. The company attributes this to physical damage from conflict with Iran, noting that the Bahrain incident exceeded the resilience thresholds of its regional and multi-AZ service designs. This confirms permanent data loss for any workloads lacking cross-region redundancy in these specific areas.

  • Multi-AZ protection within a region does not guarantee survival against catastrophic regional events like conflict.
  • Data stored solely in mec1-az2 (UAE) or Bahrain is unrecoverable; assume total loss for these zones.
  • Cross-region replication is essential for critical data in geopolitically unstable areas.
  • AWS acknowledges design limits where regional damage exceeds standard resilience models.

AWS has extended Amazon ECS Express Mode to support ARM64 CPU architectures, allowing users to deploy container images optimized for AWS Graviton processors. This update enables faster launch of containerized applications like web apps and APIs while leveraging Graviton's hardware advantages. The service continues to automate infrastructure setup, including networking, load balancing, and auto-scaling, but now with the option to choose ARM-based compute.

  • ECS Express Mode now accepts ARM64 architecture specifications for container services.
  • Deployments can target AWS Graviton instances for up to 40% better price-performance.
  • Automation features like load balancing and auto-scaling remain fully supported for ARM workloads.
  • Developers can now select compute architecture based on workload efficiency needs.
BY THE NUMBERSGraviton Price Performance Boost40%Better price-performance with GravitonUp to 40% efficiency gain on ARM64
AWS What's New awsdatabase ↺ since 09-19

AWS Resilience Hub adds EKS label scoping, dependency insights, and policy sharing

AWS Resilience Hub has updated its capabilities to better support platform engineering and SRE teams. The new features include using EKS namespace labels as service input sources, automated dependency insights, and the ability to share resilience policies across organizations via AWS Organizations. These additions aim to streamline workload resilience assessment and strengthening.

  • Use EKS labels in namespaces to precisely scope service inputs for resilience assessments.
  • Leverage new dependency insights to understand workload relationships and failure points.
  • Share standardized resilience policies across the organization using AWS Organizations.
  • Centralize resilience posture reporting for better visibility into workload health.
CHECKLISTResilience Hub UpdatesScope inputs using EKS namespace labelsIdentify failure points via dependency insightsShare policies across organizationsCentralize resilience posture reporting
↑