ACUVA

Your Accurate Search for New Technology

Announcing AWS DMS Serverless improved Oracle to S3 full load throughput

By

AWS Database Migration Service Serverless (AWS DMSS) now offers improved throughput for Oracle to Amazon S3 full load migrations. With this enhancement, you can now migrate data from Oracle databases to S3 up to two times faster than previously possible with AWS DMSS.

AWS DMSS Oracle to Amazon S3 Full Load performance enhancements will be applied automatically whenever AWS DMSS detects a full load migration between an Oracle database and Amazon S3. For detailed information on these improvements, refer to the AWS DMSS enhanced throughput documentation.

To learn more, see the AWS DMS Full Load for Oracle databases documentation. For AWS DMS regional availability, please refer to the AWS Region Table .

AWS CloudTrail Lake announces enhanced event filtering

By

AWS enhances event filtering in AWS CloudTrail Lake, a managed data lake that helps you capture, immutably store, access, and analyze your activity logs, as well as AWS Config configuration items. Enhanced event filtering expands upon existing filtering capabilities, giving you even greater control over which CloudTrail events are ingested into your event data stores. This enhancement increases the efficiency and precision of your security, compliance, and operational investigations while helping reduce costs.

You can now filter both management and data events by the following new attributes:

  • eventSource: The service that the request was made to
  • eventType: Type of event that generated the event record (e.g., AwsApiCall, AwsServiceEvent, etc)
  • userIdentity.arn: IAM entity that made the request
  • sessionCredentialFromConsole: Whether the event originated from an AWS Management Console session or not

For management events, you can additionally filter by eventName which identifies the requested API action.

For each of these attributes, you can specify values to include or exclude. For example, you can now filter CloudTrail events based on the userIdentity.arn attribute to exclude events generated by specific IAM roles or users. You can exclude a dedicated IAM role used by a service that performs frequent API calls for monitoring purposes. This allows you to significantly reduce the volume of CloudTrail events ingested into CloudTrail Lake, lowering costs while maintaining visibility into relevant user and system activities.

Enhanced event filtering is available in all AWS Regions where AWS CloudTrail Lake is supported, at no additional charge. To learn more, visit the AWS CloudTrail documentation .

Amazon Bedrock now available in the AWS GovCloud (US-East) Region

By

Beginning today, customers can use Amazon Bedrock in the AWS GovCloud (US-East) region to easily build and scale generative AI applications using a variety of foundation models (FMs) as well as powerful tools to build generative AI applications. Visit the Amazon Bedrock documentation pages for information about model availability and cross-region inferencing .

Amazon Bedrock is a fully managed service that offers a choice of high-performing large language models (LLMs) and other FMs from leading AI companies like AI21 Labs, Anthropic, Cohere, Meta, Mistral AI, Stability AI, as well as Amazon via a single API. Amazon Bedrock also provides a broad set of capabilities customers need to build generative AI applications with security, privacy, and responsible AI built in. These capabilities help you build tailored applications for multiple use cases across different industries, helping organizations unlock sustained growth from generative AI while ensuring customer trust and data governance.

To get started, visit the Amazon Bedrock page and see the Amazon Bedrock documentation for more details.

AWS Lambda supports Customer Managed Key (CMK) encryption for Zip function code artifacts

By

AWS Lambda now supports encryption of Lambda function Zip code artifacts using customer managed keys instead of default AWS owned keys. Using keys that they create, own, and manage can satisfy customer’s organizational security and governance requirements.

AWS Lambda is widely adopted for its simple programming model, built-in event triggers, automatic scaling, and fault tolerance. Previously, Lambda supported customer-managed AWS Key Management Service (AWS KMS) key-based encryption for the configuration data stored inside Lambda, such as function environment variables and SnapStart-enabled function snapshots. With today’s launch, customers can provide their own key to encrypt function code in Zip artifacts, making it easy to audit or control access to the code deployed in the Lambda function.

Customers can encrypt new or existing function Zip code artifacts by supplying a KMS key when creating or updating a function using AWS Lambda API, AWS Management Console, AWS Command Line Interface (AWS CLI), AWS SDK, AWS CloudFormation, or AWS Serverless Application Model (AWS SAM). When the KMS key is disabled, Lambda service and any users using GetFunction API to fetch deployment package will no longer have access to the Zip artifacts deployed with the Lambda function, thus, providing a convenient revocation control to the customers. If no key is provided, Lambda still secures the Zip code artifacts with AWS-managed encryption.

This feature is available in all AWS Regions where Lambda is available, except the China Regions. To learn more, visit documentation .

AWS IAM Identity Center now supports search by permission set name

By

Today, AWS IAM Identity Center announced support for permission set search, enabling you to filter existing permission sets based on their names. This simplifies managing access to AWS accounts via IAM Identity Center, allowing you to use any substring in the permission set name to quickly lookup a permission set.

IAM Identity Center is where you create, or connect, your workforce users once and centrally manage their access to multiple AWS accounts and applications. Now, you can filter and find a permission set using any part of the name that you gave to the permission set, in addition to using the Amazon Resource Name (ARN).

IAM Identity Center enables you to connect your existing source of workforce identities to AWS once and manage access to multiple AWS accounts from a central place, as well as access the personalized experiences offered by AWS applications, such as Amazon Q; and define and audit user-aware access to data in AWS services, such as Amazon Redshift. IAM Identity Center is available at no additional cost in all AWS Regions where it is supported. To learn more, see the AWS IAM Identity Center User Guide .

Scroll Up