OffNet Newsroom

Daily topic roundup

AWS

Thursday, October 01, 2026 · 8 stories, curated & summarized — click any story for the source.

Amazon S3 Vectors now evaluates metadata filters before executing similarity search, which can increase recall by up to 5x for selective queries. The update introduces a prefix match operator for filtering paths and URLs, enhancing precision for RAG and semantic search workloads. New vector buckets enable this pre-filtering by default without requiring code changes to existing vector writes.

  • Pre-filtering runs before similarity search to boost recall for selective metadata filters.
  • New $startsWith operator enables efficient prefix matching on paths and URLs.
  • Improves RAG and agentic app relevance by returning more complete filtered results.
  • Enabled by default on new vector buckets with no code changes required.
BY THE NUMBERSUp to 5x Recall Improvement5xRecall boost for selective queriesPre-filtering metadata before similarity search

AWS has made R8a and M8a instance families generally available for Amazon Aurora and RDS, powered by 5th generation AMD EPYC processors. The memory-optimized R8a family supports both Aurora and RDS workloads, while the general-purpose M8a family is available exclusively for RDS. These instances leverage the latest AMD silicon to deliver enhanced performance for database operations within the AWS cloud environment.

  • R8a instances offer memory optimization for both Aurora and RDS workloads.
  • M8a instances provide general-purpose computing power specifically for RDS.
  • Both families utilize 5th generation AMD EPYC processors for performance gains.
  • General availability allows immediate provisioning of these newer instance types.

A routine TLS 1.3 update caused Route 53 health checks to fail, leading to a CDN stopping traffic routing to a healthy region while internal dashboards remained green. This incident highlights the critical distinction between high availability and true resilience, revealing how control-plane dependencies can create invisible failure modes. The article argues that recovery capability often erodes without explicit ownership and dedicated resilience engineering.

  • HA ensures uptime; resilience ensures recovery when assumptions fail.
  • Control-plane dependencies like DNS health checks can mask outages.
  • Internal dashboards may not reflect external routing failures.
  • Explicit ownership is required to maintain recovery capabilities.
  • TLS upgrades can silently break legacy health check integrations.

Amazon Aurora Serverless now increases capacity in 16 ACU increments within a single second, supporting up to 256 ACUs. This acceleration is optimized for agentic AI applications characterized by unpredictable traffic and long idle periods. The feature is active by default on Platform Versions 3 and 4, requiring no configuration changes.

  • Supports 16 ACU scaling steps per second for faster response to traffic bursts.
  • Ideal for agentic AI workloads with high variability and idle windows.
  • Enabled by default on Aurora Serverless Platform Versions 3 and 4.
  • Existing workloads must upgrade to Platform Version 4 to utilize this feature.
BY THE NUMBERSScaling Speed for AI Workloads16ACUs scaled per secondOptimized for bursty agentic AI traffic

Microsoft's cloud infrastructure suffered a significant disruption caused by a maintenance operation that went wrong. The incident impacted hybrid cloud connectivity, virtual private networks, and cloud-hosted VMware services. Interestingly, the company has not yet determined the root cause of the failure.

  • Hybrid cloud connectivity was severely impacted during the maintenance window
  • VPNs experienced widespread disruption alongside other core services
  • Cloudy VMware services were among the affected workloads
  • Microsoft acknowledges the outage but lacks a confirmed root cause

Amazon Aurora and RDS now support R8a instances powered by 5th generation AMD EPYC processors, offering one physical core per vCPU for consistent per-core performance. These instances leverage sixth-generation Nitro Cards and provide up to 75 Gbps network bandwidth and 60 Gbps EBS bandwidth. Support extends to Aurora PostgreSQL, Aurora MySQL, RDS PostgreSQL, MySQL, and MariaDB across multiple regions.

  • R8a instances map vCPUs to physical cores, ensuring predictable per-core latency for CPU-bound workloads.
  • High I/O workloads benefit from 75 Gbps network and 60 Gbps EBS bandwidth on Nitro-based hardware.
  • Broad compatibility covers Aurora PostgreSQL, Aurora MySQL, and RDS for PostgreSQL, MySQL, and MariaDB.
  • Available in US East, US West, Canada, and Asia Pacific regions for immediate deployment.

Fleet impact: For Oracle ExaCC/RAC fleets, this is an AWS-native alternative for horizontal scaling; monitor licensing costs if migrating from Oracle. For Aurora PostgreSQL/MySQL on RDS, R8a instances offer consistent per-core performance ideal for latency-sensitive OLTP; verify AMI compatibility and test IOPS scaling with the new Nitro bandwidth limits.

COMPARISONR8a Instance Bandwidth SpecsNetwork BW75 GbpsEBS BW60 Gbps

Amazon CloudWatch Logs now automatically identifies and indexes fields used in filtering operations like equals and IN, eliminating the need for manual configuration. This dynamic indexing adapts to changing query patterns over a 30-day window, allowing queries to run faster by scanning less data. These auto-created indexes are temporary and do not consume the 20-field-per-log-group limit.

  • Auto-indexing targets fields used in = and IN filters for faster Insights queries.
  • Temporary indexes last 30 days and do not count against the 20-field limit.
  • Promote persistent fields to a field index policy for permanent indexing.
  • Reduces manual ops overhead as query patterns evolve over time.
TRADE-OFFManual vs Auto IndexingManual IndexingRequires manual configurationCounts toward 20-field limitStatic over timeAuto IndexingAutomatic field identificationTemporary 30-day indexesDoes not count limitvs

AWS Systems Manager now allows sharing SSM Documents with entire AWS Organizations or specific Organizational Units through AWS Resource Access Manager. This replaces the previous limitation of sharing only publicly or with individual account IDs. The integration ensures automatic updates as accounts are added or removed from the target scope, eliminating manual tracking. Access control is handled via standard AWS RAM resource-based policies.

  • Share SSM Documents org-wide or by OU, removing per-account manual management.
  • RAM integration automates propagation when accounts join or leave target scopes.
  • Use standard resource-based policies for consistent access control.
  • Replaces legacy public or individual account ID sharing methods.
TRADE-OFFSSM Document Sharing EvolutionLegacy MethodsManual per-account ID managementPublic sharing risksNo automatic updatesNew RAM IntegrationShare by OU or OrgAutomatic scope propagationStandard resource policiesvs
↑