ACUVA

Your Accurate Search for New Technology

AWS Config launches 42 new managed rules

By

AWS Config announces launch of an additional 42 managed Config rules for various use cases such as security, cost, durability, and operations. You can now search, discover, enable and manage these additional rules directly from AWS Config and govern more use cases for your AWS environment.

With this launch, you can now enable these controls across your account or across your organization. For example, you can evaluate your tagging strategies across Amazon EKS Fargate profiles, Amazon EC2 Network Insight Analyses, AWS Glue Machine learning transforms. Or you can assess your security posture across Amazon Cognito Identity pools, Amazon Lightsail buckets, AWS Amplify apps and more. Additionally, you can leverage Conformance Packs to group these new controls and deploy across an account or across organization, streamlining your multi-account governance.

For the full list of recently released rules, visit the AWS Config developer guide . For description of each rule and the AWS Regions in which it is available, please refer our Config managed rules documentation . To start using Config rules, please refer our documentation .

New Rules Launched:

  1. AMPLIFY_APP_NO_ENVIRONMENT_VARIABLES
  2. AMPLIFY_BRANCH_DESCRIPTION
  3. APIGATEWAY_STAGE_DESCRIPTION
  4. APIGATEWAYV2_STAGE_DESCRIPTION
  5. API_GWV2_STAGE_DEFAULT_ROUTE_DETAILED_METRICS_ENABLED
  6. APIGATEWAY_STAGE_ACCESS_LOGS_ENABLED
  7. APPCONFIG_DEPLOYMENT_STRATEGY_MINIMUM_FINAL_BAKE_TIME
  8. APPCONFIG_DEPLOYMENT_STRATEGY_TAGGED
  9. APPFLOW_FLOW_TRIGGER_TYPE_CHECK
  10. APPMESH_VIRTUAL_NODE_CLOUD_MAP_IP_PREF_CHECK
  11. APPMESH_VIRTUAL_NODE_DNS_IP_PREF_CHECK
  12. APPRUNNER_SERVICE_IP_ADDRESS_TYPE_CHECK
  13. APPRUNNER_SERVICE_MAX_UNHEALTHY_THRESHOLD
  14. APS_RULE_GROUPS_NAMESPACE_TAGGED
  15. AUDITMANAGER_ASSESSMENT_TAGGED
  16. BATCH_MANAGED_COMPUTE_ENV_ALLOCATION_STRATEGY_CHECK
  17. BATCH_MANAGED_SPOT_COMPUTE_ENVIRONMENT_MAX_BID
  18. COGNITO_IDENTITY_POOL_UNAUTHENTICATED_LOGINS
  19. COGNITO_USER_POOL_PASSWORD_POLICY_CHECK
  20. CUSTOMERPROFILES_DOMAIN_TAGGED
  21. DEVICEFARM_PROJECT_TAGGED
  22. DEVICEFARM_TEST_GRID_PROJECT_TAGGED
  23. DMS_REPLICATION_INSTANCE_MULTI_AZ_ENABLED
  24. EC2_LAUNCH_TEMPLATES_EBS_VOLUME_ENCRYPTED
  25. EC2_NETWORK_INSIGHTS_ANALYSIS_TAGGED
  26. EKS_FARGATE_PROFILE_TAGGED
  27. GLUE_ML_TRANSFORM_TAGGED
  28. IOT_SCHEDULED_AUDIT_TAGGED
  29. IOT_PROVISIONING_TEMPLATE_DESCRIPTION
  30. IOT_PROVISIONING_TEMPLATE_JITP
  31. IOT_PROVISIONING_TEMPLATE_TAGGED
  32. KINESIS_VIDEO_STREAM_MINIMUM_DATA_RETENTION
  33. LAMBDA_FUNCTION_DESCRIPTION
  34. LIGHTSAIL_BUCKET_ALLOW_PUBLIC_OVERRIDES_DISABLED
  35. RDS_MYSQL_CLUSTER_COPY_TAGS_TO_SNAPSHOT_CHECK
  36. RDS_PGSQL_CLUSTER_COPY_TAGS_TO_SNAPSHOT_CHECK
  37. ROUTE53_RESOLVER_FIREWALL_DOMAIN_LIST_TAGGED
  38. ROUTE53_RESOLVER_FIREWALL_RULE_GROUP_ASSOCIATION_TAGGED
  39. ROUTE53_RESOLVER_FIREWALL_RULE_GROUP_TAGGED
  40. ROUTE53_RESOLVER_RESOLVER_RULE_TAGGED
  41. RUM_APP_MONITOR_TAGGED
  42. RUM_APP_MONITOR_CLOUDWATCH_LOGS_ENABLED

Amazon Bedrock AgentCore Runtime now supports direct code deployment

By

Amazon Bedrock AgentCore Runtime now supports two deployment methods for AI agents: container-based deployment and direct code upload. Developers can now choose between direct code-zip file upload for rapid prototyping and iteration, or leverage advanced container-based options for complex use cases requiring custom configurations.

AgentCore Runtime provides a serverless, framework and model agnostic runtime for running agents and tools at scale. This deployment option streamlines the prototyping workflow while maintaining enterprise security and scaling capabilities for production deployments. Developers can now deploy agents using direct code-zip upload with easy drag-and-drop functionality. This enables faster iteration cycles, empowering developers to prototype quickly and focus on building innovative agent capabilities.

This feature is available in all nine AWS Regions where Amazon Bedrock AgentCore Runtime is available: US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Frankfurt), and Europe (Ireland).

To learn more about AgentCore Runtime deployment options, see the AgentCore documentation and get started with the AgentCore Starter Toolkit . AgentCore offers consumption-based pricing with no upfront costs.

AWS Config conformance packs now available in additional AWS Regions

By

AWS Config conformance packs and organization-level management capabilities for conformance packs are now available in additional AWS Regions. Conformance packs allow you to bundle AWS Config rules into a single package, simplifying deployment at scale. You can deploy and manage these conformance packs throughout your AWS environment.

Conformance packs provide a general-purpose compliance framework designed to enable you to create security, operational, or cost-optimization governance checks using managed or custom AWS Config rules. This allows you to monitor compliance scores based on your own groupings. With this launch, you can also manage the AWS Config conformance packs and individual AWS Config rules at the organization level which simplifies the compliance management across your AWS Organization.

With this expansion, AWS Config Conformance Packs are now also available in the following AWS Regions: Asia Pacific (Malaysia), Asia Pacific (New Zealand), Asia Pacific (Thailand), Asia Pacific (Taipei) and Mexico (Central).

To get started, you can either use the provided sample conformance pack templates or craft a custom YAML file from scratch based on a custom conformance pack . Conformance pack deployment can be done through the AWS Config console, AWS CLI, or via AWS CloudFormation. You will be charged per conformance pack evaluation in your AWS account per AWS Region. Visit the AWS Config pricing page for more details. To learn more about AWS Config conformance packs, see our documentation .

EC2 Auto Scaling announces warm pool support for Auto Scaling groups that have mixed instances policies

By

Starting today, you can add warm pools to Auto Scaling groups (ASGs) that have mixed instances policies . With warm pools, customers can improve the elasticity of their applications by creating a pool of pre-initialized EC2 instances that are ready to quickly serve application traffic. By combining warm pools with instance type flexibility, an ASG can rapidly scale out to its maximum size at any time, deploying applications across multiple instance types to enhance availability.

Warm pools are particularly beneficial for applications with lengthy initialization processes, such as writing large amounts of data to disk, running complex custom scripts, or other time-consuming setup procedures that can take several minutes or longer to serve traffic. With this new release, the warm pool feature now works seamlessly with ASGs configured for multiple On-Demand instance types, whether specified through manual instance type lists or attribute-based instance type selection. The combination of instance type flexibility and warm pools provides a powerful solution that helps customers scale out efficiently while maximizing availability.

The warm pool feature is available through the AWS Management Console , the AWS SDKs , and the AWS Command Line Interface (CLI) . It is available in all public AWS Regions and AWS GovCloud (US) Regions. To learn more about warm pools, visit this AWS documentation .

Scroll Up