OffNet Newsroom

Daily topic roundup

AWS

Monday, November 02, 2026 · 7 stories, curated & summarized — click any story for the source.

Share this roundup on LinkedIn Full edition
InfoQ generaldevops

Amazon ECS Gateway Launches with Auto-Hostnames, No Custom Domain Support

AWS has introduced Amazon ECS Gateway, an account-level ingress resource designed to centralize networking configuration for platform teams. Application teams can integrate services via a connector, which automatically assigns generated hostnames and enforces host-based routing. Currently, neither the official announcement nor the documentation indicates support for custom domains.

  • Centralize ingress config at the account level for platform teams
  • App teams integrate services using a connector model
  • Services receive auto-generated hostnames with host-based routing
  • Custom domain support is absent from current docs and announcements
Read at source →
InfoQ generaldevops

AWS Releases File Mover Express: Open-Source S3 Transfer Tool

AWS has launched File Mover Express, an Apache 2.0 licensed utility designed for moving large datasets between local environments and Amazon S3. The cross-platform application handles parallel data streams, automatically adjusts performance settings, and includes robust features for pausing, resuming, and verifying file integrity during transfers.

  • Open-source under Apache 2.0, supporting macOS, Windows, and Linux
  • Automates parallel transfers and dynamic performance tuning for large files
  • Includes native support for pause/resume operations and retry logic
  • Verifies file integrity to ensure data consistency post-transfer
Read at source →
AWS What's New awsdatabase

CloudFront adds viewer ISP and post-quantum TLS headers

Amazon CloudFront now supports two optional origin headers: CloudFront-Viewer-ISP and CloudFront-Viewer-TLS-Details. The first exposes the viewer's internet service provider name, enabling network-level traffic segmentation and anomaly detection. The second reveals specific cryptographic parameters, including key exchange and signature schemes, allowing engineers to audit post-quantum cryptography adoption rates.

  • Use CloudFront-Viewer-ISP to segment traffic analytics by network provider
  • Detect anomalous traffic patterns isolated to specific ISPs
  • Measure actual post-quantum cryptography (PQC) adoption via TLS-Details header
  • Identify legacy clients lacking PQC support for migration planning
  • Headers are optional and forwarded directly to the origin server
CHECKLISTLeverage New CloudFront HeadersSegment analytics by viewer ISPDetect anomalous traffic per providerAudit post-quantum cryptography adoptionIdentify legacy clients for migrationEnable optional headers at origin
Read at source →
AWS What's New awsdatabase

Amazon MSK Adds TLS 1.3 Support for Provisioned Clusters

Amazon MSK now enables TLS 1.3 encryption for data in transit within Provisioned clusters via configurable security policies. This update aligns with modern compliance mandates and serves as a foundational step toward post-quantum cryptography readiness. Administrators must explicitly opt in by applying a named security policy, ensuring no unintended changes to existing cluster configurations.

  • TLS 1.3 improves handshake latency and security for streaming workloads
  • Enforcement requires explicitly selecting a named security policy in cluster config
  • Existing clusters remain on previous TLS versions until a new policy is applied
  • Supports compliance with enterprise standards requiring modern encryption protocols
  • Lays groundwork for future post-quantum cryptographic implementations
CHECKLISTEnable TLS 1.3 in MSKSelect named security policy in cluster configApply policy to existing clusters manuallyVerify compliance with modern encryption standardsPrepare for future post-quantum cryptography
Read at source →
InfoQ generaldevops ↺ since 11-01

AWS committed capacity sold out through 2027; On Demand headroom reserved

Amazon CEO Andy Jassy confirmed that AWS’s large committed cloud capacity is effectively sold out through 2027, with allocations already extending into 2028. While the company maintains reserved headroom for On Demand EC2 and Bedrock services, practitioners are reporting significant difficulties in securing standard On Demand instances. These supply constraints appear to be affecting other major cloud providers as well.

  • Plan capacity needs now: committed AWS slots are sold out through 2027 and partially into 2028
  • Expect friction acquiring standard On Demand EC2 instances despite reserved headroom claims
  • Supply constraints are not unique to AWS, impacting broader cloud provider availability
  • Review current Reserved Instance coverage to mitigate future On Demand scarcity risks
Read at source →
AWS What's New awsdatabase ↺ since 10-31

Bedrock GovCloud adds OpenAI GPT-5.6 and Cross-Region Inference

Amazon Bedrock in AWS GovCloud (US) now supports OpenAI GPT-5.6 models (Terra and Luna) via the bedrock-runtime endpoint. This update enables the Responses, Converse, and Chat Completions APIs for these models. Additionally, Cross-Region Inference is introduced to automatically route requests across both GovCloud regions, enhancing throughput and redundancy while preserving US data sovereignty.

  • GPT-5.6 Terra and Luna models now available on Bedrock GovCloud runtime
  • Supports Responses, Converse, and Chat Completions APIs for OpenAI models
  • Cross-Region Inference auto-routes traffic across both GovCloud regions
  • Increases throughput and redundancy without manual multi-region capacity management
  • Maintains US data sovereignty while scaling Bedrock capacity
HOW IT WORKSCross-Region Inference Routing1Request sent to Bedrock GovCloud2System checks capacity in both regions3Traffic automatically routed to available…4Response returned preserving US data…
Read at source →
AWS What's New awsdatabase ↺ since 10-30

AWS Lambda Durable Functions Adds Telemetry Export and MCP Server

AWS has released a new plugin for Lambda Durable Functions that exports step-by-step execution history to external destinations. This feature allows teams to retain data beyond standard limits and gain deeper operational insights into long-running workflows. Additionally, a companion Model Context Protocol server enables AI agents to query this telemetry using natural language.

  • Export step-by-step execution history to 13 built-in destinations for long-term retention
  • Gain operational insights into multi-step applications and AI workflows running up to a year
  • Query exported telemetry data using natural language via the new MCP server
  • Capture execution status, timing, inputs, outputs, and errors for detailed analysis
BY THE NUMBERSTelemetry Export Destinations13Built-in export destinationsEnables long-term retention beyond standard limits
Read at source →
↑