6/23/2025, 12:00:00 AM ~ 6/24/2025, 12:00:00 AM (UTC)
Recent Announcements
Announcing Amazon WorkSpaces Core Managed Instances to simplify VDI migrations
AWS today announced Amazon WorkSpaces Core Managed Instances, simplifying virtual desktop infrastructure (VDI) migrations with highly customizable instance configurations. Utilizing EC2 Managed Instances at its foundation, WorkSpaces Core can now provision resources in your AWS account, handling infrastructure lifecycle management for both persistent and non-persistent workloads. Managed Instances complement existing WorkSpaces Core pre-configured bundles by providing greater flexibility for organizations requiring specific compute, memory, or graphics configurations.\n You can now use existing discounts, Savings Plans, and other features like On-Demand Capacity Reservations (ODCRs), with the operational simplicity of WorkSpaces - all within the security and governance boundaries of your AWS account. WorkSpaces Core Managed Instances is ideal for organizations migrating from on-premises VDI environments or existing AWS customers seeking enhanced cost optimization without sacrificing control over their infrastructure configurations. You can use a broad selection of instance types, including accelerated graphics instances, while your Core partner solution handles desktop and application provisioning and session management through familiar administrative tools. Amazon WorkSpaces Core Managed Instances is available today in all AWS Regions where WorkSpaces is supported. Customers will incur standard compute costs along with an hourly fee for WorkSpaces Core. See the WorkSpaces Core pricing page for more information. To learn more about Amazon WorkSpaces Core Managed Instances, visit the product page. For technical documentation, getting started guides, and the shared responsibility model for partner VDI solutions integrating WorkSpaces Core bundles and managed instances, see the Amazon WorkSpaces Core Documentation.
Amazon OpenSearch Serverless has added support for Point in Time (PIT) search and SQL in AWS GovCloud US-East and US-West Regions, enabling you to run multiple queries against a dataset fixed at a specific moment. With PIT search you to maintain consistent search results even as your data continues to change, making it particularly useful for applications that require deep pagination or need to preserve a stable view of data across multiple queries. OpenSearch SQL API allows you to leverage your existing SQL skills and tools to analyze data stored in your collections.\n PIT supports both forward and backward navigation through search results, ensuring consistency even during ongoing data ingestion. This feature is ideal for e-commerce applications, content management systems, and analytics platforms that require reliable and consistent search capabilities across large datasets. SQL and PPL API support addresses the need for familiar query syntax and improved integration with existing analytics tools, benefiting data analysts and developers who work with OpenSearch Serverless collections. Please refer to the AWS Regional Services List for more information about Amazon OpenSearch Service availability. To learn more about OpenSearch Serverless, see the documentation.
Amazon VPC raises default Route Table capacity
AWS VPC has increased the default value for routes per route table from 50 to 500 entries.\n Before this enhancement, customers had to request a limit increase to use more than 50 routes per VPC route table. Organizations often need additional routes to maintain precise control over their VPC traffic flows to insert firewalls or network functions in the traffic path, or direct traffic to peering connections, internet gateway, virtual private gateway or transit gateway. This enhancement automatically increases the route table capacity to 500 routes, mitigating administrative overhead and enables customers to scale their network architecture seamlessly as their requirements grow. The new default limit will be automatically available for all route tables in all AWS commercial and AWS GovCloud (US) Regions. Customer accounts without route quota overrides will automatically get 500 routes per VPC route table for their existing and new VPCs. Customer accounts with route quota overrides will not see any changes to their existing or new VPC setups. To learn more about this quota increase, please refer to our documentation.
Amazon Time Sync Service now supports Nanosecond Hardware Packet Timestamps
The Amazon Time Sync Service now supports nanosecond-precision hardware packet timestamping on supported Amazon EC2 instances.\n Built on Amazon’s proven network infrastructure and the AWS Nitro System, customers can enable the Amazon Time Sync Service’s hardware packet timestamping to add a 64 bit nanosecond-precision timestamp to every inbound network packet. By timestamping at the hardware level, before the kernel, socket, or application layer, customers can now more directly leverage the reference clock running in the AWS Nitro System and bypass any delays added by timestamping in software. Customers can then use these timestamps to determine the order and resolve fairness of incoming packets to their ec2 instances, measure 1-way network latency, and further increase distributed system transaction speed with higher precision and accuracy than most on-premises solutions. Customers already using the Amazon Time Sync Service’s PTP Hardware Clocks (PHC) can install the latest ENA Linux driver and enable hardware packet timestamping, accessible through standard Linux socket API, for all incoming network packets without needing any updates to their VPC configurations. Hardware packet timestamping is available starting today in all regions and EC2 instance types where the Amazon Time Sync Service’s PHC is supported. Hardware packet timestamping can be used on virtualized or bare metal instances. There is no additional charge for using this feature. Configuration instructions, and more information on the Amazon Time Sync Service, are available in the EC2 User Guide.
Amazon Neptune Analytics now Integrates with GraphStorm for Scalable Graph Machine Learning
Today, we’re announcing the integration of Amazon Neptune Analytics with GraphStorm, a scalable, open-source graph machine learning (ML) library built for enterprise-scale applications. This integration brings together Neptune’s high-performance graph analytics engine and GraphStorm’s flexible ML pipeline, making it easier for customers to build intelligent applications powered by graph-based insights.\n With this launch, customers can train graph neural networks (GNNs) using GraphStorm and bring their learned representations—such as node embeddings, classifications, and link predictions—into Neptune Analytics. Once loaded, these enriched graphs can be queried interactively and analyzed using built-in algorithms like community detection or similarity search, enabling a powerful feedback loop between ML and human analysis. This integration supports a wide range of use cases, from detecting fraud and recommending content, to improving supply chain intelligence, understanding biological networks, or enhancing customer segmentation. GraphStorm simplifies model training with a high-level command-line interface (CLI) and supports advanced use cases via its Python API. Neptune Analytics, optimized for low-latency analysis of billion-scale graphs, allows developers and analysts to explore multi-hop relationships, analyze graph patterns, and perform real-time investigations. By combining graph ML with fast, scalable analytics, Neptune and GraphStorm help teams move from raw relationships to real insights—whether they’re uncovering hidden patterns, ranking risks, or personalizing experiences. To learn more about using GraphStorm with Neptune Analytics, visit the blog post.
AWS End User Messaging now supports Service Quotas
Today, AWS End User Messaging announces support for Service Quota. This integrations provides customers with improved visibility and control over their SMS, voice, and WhatsApp service quotas, streamlining the quota management process and reducing the need for manual intervention.\n With Service Quotas, customers can now view and manage their End User Messaging quota limits directly through the AWS Service Quotas console. This integration enables automated limit increase approvals for eligible requests, improving response times and reducing the number of support tickets. Customers will also benefit from visibility into quota usage for all on-boarded quotas via Amazon CloudWatch usage metrics, allowing for better resource planning and management. Service Quotas for End User Messaging is available in all commercial regions and the AWS GovCloud (US) Regions. To learn more about Service Quotas and how to manage your End User Messaging quotas, visit the Service Quotas User Guide or the AWS End User Messaging product page.
AWS AppSync is now available in 3 additional regions
AWS AppSync is now available in Asia Pacific (Malaysia, Thailand), and Canada West (Calgary). AWS AppSync GraphQL is a fully managed service that enables developers to create scalable APIs that simplify application development by allowing applications to securely access, manipulate, and combine data from one or multiple sources. AWS AppSync Events is a fully managed service for serverless WebSocket APIs with full connection management.\n To learn more about AWS AppSync’s regional availability, please visit the AWS Services by Region page. For more information about AWS AppSync, visit the AWS AppSync documentation.
AWS Private CA now supports Internet Protocol Version 6 (IPv6)
AWS Private Certificate Authority (AWS Private CA) now supports Internet Protocol version 6 (IPv6) through new dual-stack endpoints. Customers can connect to AWS Private CA service, download Certificate Revocation Lists (CRLs), and check revocation status via Online Certificate Status Protocol (OCSP) over the public internet using IPv6, IPv4, or dual-stack clients. AWS Private CA Connector for Active Directory (AD) and AWS Private CA Connector for Simple Certificate Enrollment Protocol (SCEP) also support IPv6. The existing AWS Private CA endpoints supporting IPv4 will remain available for backwards compatibility.\n AWS Private CA is a managed service that lets you create private certificate authorities (CAs) to issue digital certificates for authenticating users, servers, workloads, and devices within your organization, while securing the CA’s private keys using FIPS 140-3 Level 3 hardware security modules (HSMs). AWS Private CA offers connectors so you can use AWS Private CA with Kubernetes, Active Directory, and mobile device management (MDM) software. AWS Private CA support for IPv6 is available in all AWS Regions, including AWS GovCloud (US) Regions and the China Regions. To learn more on best practices for configuring IPv6 in your environment, visit the whitepaper on IPv6 in AWS.
To learn more about AWS Private CA IPv6 support, visit the AWS Private CA user guide.
AWS Blogs
AWS Japan Blog (Japanese)
- Unify security with the new AWS Security Hub to prioritize risk and respond at scale (preview)
- Stream multi-channel audio to Amazon Transcribe using the Web Audio API
- AWS Backup Adds New Multi-Party Authorization for Logical Air Gap Vaults
- Upgraded build instances of AWS Amplify Hosting
- Weekly Generative AI with AWS - Week of 2025/6/16
- New AWS Shield Features Find Network Security Issues Before They’re Exploited (Preview)
- Amazon CloudFront Simplifies Web Application Delivery and Security with a New User-Friendly Interface
- AWS Certificate Manager introduces an exportable public SSL/TLS certificate that can be used anywhere
- Simplify the integration of AWS AppSync Events with Powertools for AWS
- From build to embed: create and embed generative AI apps using AWS Amplify, AWS CDK, and Amazon Q Business
AWS News Blog
AWS Architecture Blog
AWS Cloud Financial Management
AWS Cloud Operations Blog
AWS Big Data Blog
AWS Compute Blog
- AWS named a Leader in the 2025 Forrester Wave: Serverless Development Platforms
- Introducing AWS Lambda native support for Avro and Protobuf formatted Apache Kafka events
- Running and optimizing small language models on-premises and at the edge
AWS Database Blog
- Use Graph Machine Learning to detect fraud with Amazon Neptune Analytics and GraphStorm
- Migrate a self-managed MySQL database to Amazon Aurora MySQL using AWS DMS homogeneous data migrations
- Things to consider when choosing between Oracle TDE and AWS KMS for encryption of data at rest for Amazon RDS for Oracle
AWS Developer Tools Blog
AWS for Industries
- Revolutionizing telecom revenue assurance: the AWS AI-driven framework for next-generation solutions
Artificial Intelligence
- No-code data preparation for time series forecasting using Amazon SageMaker Canvas
- Build an agentic multimodal AI assistant with Amazon Nova and Amazon Bedrock Data Automation
Networking & Content Delivery
- Securing Service Communications: Combining VPC Lattice with Network Firewall
- Introducing security group referencing and enhanced DNS support for AWS Cloud WAN