Automation / DevOps / IaC

AWS ElastiCache for Valkey now publishes OpenTelemetry metrics to CloudWatch, enabling filtering and aggregation via PromQL. Standard monitoring retains 60-second intervals and includes a core metric set at no extra cost. A new detailed mode exposes the full metric suite at 15-second intervals for higher granularity.

• Standard monitoring remains at 60s with core OpenTelemetry metrics at no additional charge.
• New detailed mode publishes the full metric set every 15 seconds for closer inspection.
• Metrics support PromQL expressions for advanced filtering and aggregation in CloudWatch.
• Use detailed monitoring to detect connection limits and forecast node capacity issues.

Amazon GuardDuty now allows centralized threat detection configuration using AWS Organizations declarative policies. This update enables administrators to enforce enablement across all accounts and regions automatically, eliminating the manual per-region setup that previously led to configuration drift. New accounts joining the organization inherit these settings without additional intervention.

• Centralized policy management removes manual per-region GuardDuty enablement tasks.
• Automatic inheritance ensures new accounts are covered by threat detection immediately.
• Delegated administrators can enforce consistent security posture across the entire organization.
• Eliminates configuration drift common in large multi-account AWS environments.

Amazon Managed Grafana now allows creation of workspaces running Grafana version 13.2, incorporating features from open-source versions 13.0 through 13.2. Key additions include Git Sync for treating dashboards as code with version control, and dynamic dashboards that adjust layouts based on variables and conditions. The CloudWatch data source plugin also gains PromQL query support, enabling Prometheus-style querying for ingested CloudWatch metrics.

• Enable Git Sync to version control dashboards and track modifications via linked repositories.
• Use dynamic dashboards to build responsive views driven by data conditions and variables.
• Leverage PromQL in the CloudWatch plugin to query ingested metrics using Prometheus syntax.
• Create new workspaces on 13.2 to access these features immediately.

AWS has launched CloudTrail Event Coverage, a console feature that visualizes data plane logging status across accounts and organizations. It highlights which services and resource types have data event logging enabled, allowing teams to spot blind spots in their security posture. This tool eliminates the need to manually scan environments to identify missing logs for critical operations like S3 object access.

• View data plane logging coverage at account and organization levels in one dashboard.
• Identify services or resource types lacking data event logging to close security gaps.
• Detect unauthorized access or exfiltration risks by ensuring comprehensive event capture.
• Avoid manual scanning of accounts to validate logging posture across the fleet.

The yum.postgresql.org and zypp.postgresql.org front pages have been redesigned to eliminate manual navigation through complex web pages. Users can now select their OS, version, architecture, and PostgreSQL release to instantly generate copy-pasteable installation commands. A new copy-link feature allows for easy sharing or integration into automation scripts, alongside simplified instructions for extra and non-free repositories.

• Automate repo setup using the new copy-link feature for consistent infrastructure provisioning.
• Eliminate manual package manager config by using the generated copy-paste commands.
• Easily access extra and non-free repository instructions without digging through subpages.