Weekly digest · Week 43, Oct 19 – Oct 25, 2026
EMR on EKS 30% cheaper, Continuum code security, OpenSearch S3 ingestion
54 announcements · 10 GA · 3 previews · 1 price change · 7 Region expansions
Top highlights
- EMR on EKS price cutPrice — 30% lower per-vCPU-hour and per-GB-hour EMR charges, EKS charges unchanged (opens the AWS announcement)
- Continuum code vulnerability toolGA — Tests findings for exploitability in a sandbox and opens remediation pull requests with proof attached (opens the AWS announcement)
- OpenSearch intelligent ingestionGA — Managed S3 ingestion into NextGen Serverless collections, with parsing and embeddings, in seven Regions (opens the AWS announcement)
- SageMaker training session APIsGA — Custom post-training loops with forward_backward and optim_step calls, billed per token, in three Regions (opens the AWS announcement)
- ECS Gateway managed ingressGA — Provisions ALBs with host-based routing, up to 25 services per ALB, no extra charge (opens the AWS announcement)
AI and machine learning 12
- Bedrock AgentCore Gateway Supports InvokeModel APIs and model fallback routing with a built-in circuit breaker (opens the AWS announcement)
- Beam by Reflection GAOpen weight model available in SageMaker JumpStart, ported to AWS Trainium3 (opens the AWS announcement)
- Amazon Polly Generative engine GAUpgraded model adds 14 voices, Hindi and Finnish, and AWS GovCloud support (opens the AWS announcement)
- TorchNeuron PreviewOpen source native PyTorch backend for Trainium2 and Trainium3 instances, with eager execution and torch.compile (opens the AWS announcement)
- Web Search on Amazon Bedrock adds domain filtering with up to 100 allowed or blocked domains, and user location controls (opens the AWS announcement)
- SageMaker AI serverless customization Adds Muse Glimmer, Qwen3.8 27B and Ministral 3 models for SFT, DPO and RFT (opens the AWS announcement)
- AWS Neuron 2.33 PreviewAdds TorchNeuron native PyTorch backend and Neuron Observer in public beta (opens the AWS announcement)
- SageMaker AI serverless customization Sequence length is configurable in fine-tuning jobs, up to 16K tokens for many models (opens the AWS announcement)
- Claude structured outputs on Bedrock GASchema-compliant JSON responses for all Claude models on bedrock-runtime and bedrock-mantle endpoints (opens the AWS announcement)
- Amazon Bedrock Guardrails GAStandard tier for contextual grounding checks covers conversational and reasoning responses, at same price as Classic (opens the AWS announcement)
- Bedrock Advanced Prompt Optimization Optional prompt shortening returns shorter prompts that score at least as high on evaluation (opens the AWS announcement)
- New region: Grok 4.7 in AWS GovCloud (US) (opens the AWS announcement)
Security, identity and compliance 6
- Amazon GuardDuty Runtime Monitoring Over 50 optional detection rules, four new finding types, dry-run mode for evaluation (opens the AWS announcement)
- AWS Network Firewall Resolved IP validation extends domain filtering to protocols such as SFTP and SSH (opens the AWS announcement)
- AWS IAM Identity Center Users, groups and assignments are kept when changing identity source from Active Directory (opens the AWS announcement)
- AWS IAM Identity Center Optimistic locking for users and groups using a Revision value on updates and deletes (opens the AWS announcement)
- AWS Service Reference Information Adds global condition keys, ServiceName field and IsDataPlane property for IAM policy automation (opens the AWS announcement)
- New region: Cognito multi-Region replication in AWS GovCloud (US) (opens the AWS announcement)
Business applications and end-user computing 6
- Amazon Connect Customer Global Resiliency supports persistent chat across linked Regions, carrying over context, metadata and transcripts (opens the AWS announcement)
- Amazon Connect Customer Profiles administrators can build custom agent workspace layouts in Profile Explorer, including an AI Profile Summary (opens the AWS announcement)
- Amazon Connect Customer agent workspace Two new layouts, Modern and Classic, that administrators can assign per team (opens the AWS announcement)
- Amazon WorkSpaces for AI agents Managed MCP service handles OAuth 2.0 authentication and desktop connections, adds application catalog tool, four more R (opens the AWS announcement)
- Amazon Connect Global Resiliency Admin website page shows Region switch readiness and sync status of replicated resources (opens the AWS announcement)
- New region: Quick in Asia Pacific (Singapore) (opens the AWS announcement)
Databases 5
- Aurora and RDS capacity reservations GAOn-Demand Capacity Reservations reserve DB instance capacity in one or more Availability Zones (opens the AWS announcement)
- ElastiCache Serverless for Valkey GAOnline migration from self-managed Valkey and Redis OSS on EC2 with zero downtime (opens the AWS announcement)
- Amazon DynamoDB global tables Replicas can be disassociated while keeping their table and data as a single-Region table (opens the AWS announcement)
- Amazon RDS for SQL Server Snapshots can be created directly on read replicas without promoting them first (opens the AWS announcement)
- Amazon RDS Custom for SQL Server Supports SQL Server 2019 CU32+GDR and SQL Server 2022 CU26+GDR updates (opens the AWS announcement)
Analytics 4
- Amazon OpenSearch Serverless default refresh interval lowered from 10 to 5 seconds for search and vector collections (opens the AWS announcement)
- Amazon MSK Connect connectors can be paused and resumed in place, keeping configuration and committed offsets (opens the AWS announcement)
- AWS Clean Rooms Databricks tables shared through Delta Sharing can be queried as a data source (opens the AWS announcement)
- New region: MWAA Provisioned environments in Mexico (Central) (opens the AWS announcement)
Networking and content delivery 4
- AWS Transit Gateway and Cloud WAN support managed 1:1 NAT on attachments through Regional Private NAT Gateway for overlapping CIDRs (opens the AWS announcement)
- AWS Interconnect - last mile Previewmanaged connectivity from branch offices and data centers to AWS with Megaport, in San Jose and N. Virginia (opens the AWS announcement)
- AWS Direct Connect 100 Gbps dedicated connections at Netmagic DC2 near Bangalore, India (opens the AWS announcement)
- AWS Direct Connect 10 Gbps and 100 Gbps MACsec connections added at Equinix MA3 near Manchester (opens the AWS announcement)
Management, governance and cost 3
- AWS CloudFormation force rollback completes an update rollback in one operation when some resources cannot roll back automatically (opens the AWS announcement)
- Amazon CloudWatch Alarms Alarm tags can be included in SNS, Lambda and EventBridge action payloads (opens the AWS announcement)
- New region: CloudWatch Omni in 8 more Regions (opens the AWS announcement)
Migration and transfer 3
- AWS Transform Migration assessments now evaluate on-premises storage and map it to S3, EBS, EFS and FSx (opens the AWS announcement)
- AWS Transform for migrations Builds new networks and converts on-premises access rules into security groups (opens the AWS announcement)
- AWS Transform for migrations Supports existing Control Tower and Organizations landing zones, plus IaC-only mode via delegated administrator (opens the AWS announcement)
Compute and containers 1
Serverless 1
Storage 1
Developer tools, web and mobile 1
Media, games and IoT 1
- AWS Elemental MediaConnect Router High bitrate mode with 250 Mbps and 500 Mbps tiers (opens the AWS announcement)
Regions, marketplace and partners 1
Written by AI from 54 announcements in the AWS What’s New feed. Every link goes to the AWS announcement; check it before relying on a detail.