• Categoría: Noticias de Microsoft

marzo 19, 2026

Nuevos hallazgos muestran cómo el apoyo práctico puede mejorar la ciberseguridad del sector hídrico

Por: Amy Hogan-Burney – CVP, Seguridad y Confianza del Cliente.

Las amenazas cibernéticas a los sistemas hídricos ya no son hipotéticas. Cuando los ataques tienen éxito, las comunidades pueden enfrentarse a una pérdida de confianza, preocupaciones de seguridad o interrupciones en los servicios.

Hoy, Microsoft, en colaboración con el Cyber Readiness Institute (CRI) y el Center on Cyber Technology  and Innovation (CTI), publica un informe que examina tanto la urgencia de este desafío como lo que hará falta para cerrar la brecha de ciberpreparación en el sector del agua. El informe se basa en un programa piloto que proporcionó a las empresas de agua y aguas residuales formación práctica en ciberseguridad junto con coaching práctico, que busca comprobar si el apoyo real puede mejorar de manera significativa la preparación cibernética.

Los hallazgos apuntan a una conclusión clara: mejorar la ciberresiliencia en el sector del agua es posible cuando la formación se combina con apoyo práctico y se imparte a través de socios sectoriales de confianza. Gracias al éxito de este piloto, el programa es ahora una oferta permanente, que proporciona a las compañías de agua acceso continuo a formación práctica y apoyo para fortalecer la ciberresiliencia y proteger mejor a sus comunidades frente a amenazas en evolución.

Por qué la ciberresiliencia en el sector del agua es importante ahora

Las empresas de agua y aguas residuales sustentan la salud pública, la actividad económica y la resiliencia comunitaria en toda la infraestructura crítica. Sin embargo, evaluaciones recientes de la comunidad de inteligencia estadounidense y los reportajes públicos sobre incidentes cibernéticos subrayan lo expuestos que son muchos sistemas. Incluso las empresas eléctricas más grandes y bien dotadas de recursos han experimentado incidentes cibernéticos, lo que pone de manifiesto vulnerabilidades mucho más evidentes entre los operadores más pequeños que atienden a comunidades rurales y desatendidas.

La conciencia sobre el riesgo cibernético está en crecimiento, pero la conciencia no es preparación. El reto es cómo pasar de una creciente conciencia a una preparación operativa sostenida, en especial para las compañías eléctricas con tiempo, financiación y capacidad técnica limitados.

Qué se propuso probar el piloto y qué mostró

El piloto CRI fue diseñado para responder a una pregunta práctica que enfrenta el sector acuático: ¿puede la formación en ciberseguridad accesible y centrada en el comportamiento, combinada con el soporte práctico, mejorar de manera significativa la preparación cibernética?

Las empresas participantes utilizaron el Programa gratuito de Preparación Cibernética de CRI, que se centra en prácticas clave de ciberseguridad como una autenticación sólida, actualizaciones de software, concienciación contra phishing y manejo seguro de datos. Las empresas eléctricas también tenían acceso a Coaches Cibernéticos Certificados CRI, que trabajaban de manera directa con los «Líderes Cibernéticos» designados dentro de las empresas para ayudar a traducir la formación en políticas, manuales y planificación de respuesta a incidentes. Este modelo combinaba formación accesible con apoyo personalizado para ayudar a las empresas a avanzar de manera significativa a pesar de las limitaciones de recursos. El piloto reveló tres hallazgos claros sobre qué ayuda y qué limita la ciberpreparación en el sector del agua.

• El programa CRI mejora la preparación: Las empresas participantes informaron de fundamentos de ciberseguridad más sólidos, mayor confianza en la respuesta ante incidentes y la identificación de lagunas que antes no eran documentadas, pero críticas, como la ausencia de planes de continuidad y prácticas de contraseñas débiles.
• El apoyo práctico acelera el éxito: Las compañías de servicios públicos combinadas con un coach certificado por CRI tenían muchas más probabilidades de completar el programa que quienes participaban a su propio ritmo.
• La demanda supera la capacidad: Aunque el interés en el soporte en ciberseguridad es alto, la escasez de personal, la financiación limitada y la dependencia de proveedores externos limitan la capacidad de las compañías eléctricas para implementar mejoras completas. Los datos de participación ayudan a explicar este hallazgo: de las 113 empresas que mostraron interés inicial, 72 comenzaron el programa y 43 lo completaron.

Implicaciones para los responsables políticos y el ecosistema

Los hallazgos señalan una conclusión central para los responsables políticos y el ecosistema: mejorar los resultados en ciberseguridad requiere ir más allá de compartir información para ofrecer apoyo práctico que ayude a las compañías eléctricas a implementar y mantener el cambio.

• Los recursos gratuitos son necesarios pero no suficientes: la orientación gratuita por sí sola no puede superar las limitaciones de personal y financiación. Los programas efectivos deben incluir apoyo en la implementación, como los coaches cibernéticos, para lograr resultados reales.
• Los incentivos aumentan la participación: vincular la formación en ciberseguridad con los requisitos de licencias de operador o educación continua ayuda a integrar la preparación cibernética en el desarrollo profesional rutinario.
• Los mensajeros de confianza impulsan la participación: la participación y la finalización fueron mayores cuando los programas se facilitaron a través de asociaciones sectoriales y redes establecidas en las que las compañías eléctricas ya confían en ellas.

Un camino por seguir a través de la colaboración

La lección de este piloto es clara: la preparación cibernética mejora cuando la formación se combina con el apoyo manual y se facilita a través de socios de confianza. Pero los hallazgos también subrayan una realidad más amplia: el progreso duradero requerirá ir más allá del intercambio de información hacia enfoques que construyan un fortalecimiento real y sostenido de capacidades sobre el terreno.

En Microsoft, este trabajo refleja un compromiso práctico con el apoyo a la ciberresiliencia en infraestructuras críticas, que ayuda a pasar de la conciencia a la acción. Abordar los desafíos identificados en este informe requerirá una colaboración continua entre responsables políticos, asociaciones del sector, organizaciones sin ánimo de lucro y el sector privado.

Este trabajo también complementa el compromiso más amplio de Microsoft de ser positiva en el consumo, incluida la minimización del consumo de agua y la reposición de más agua de la que consumimos^1,2 para ayudar a fortalecer la resiliencia de los sistemas y servicios hídricos que sirven a las comunidades. Apoyar la ciberpreparación práctica es una forma en la que podemos contribuir a sistemas de agua más resilientes para el futuro.

¹Sostenibilidad | Microsoft

²Construir una infraestructura de IA con enfoque comunitario – Microsoft on the Issues

Etiquetas:

• Seguridad

The post Nuevos hallazgos muestran cómo el apoyo práctico puede mejorar la ciberseguridad del sector hídrico appeared first on Source LATAM.

​The post Nuevos hallazgos muestran cómo el apoyo práctico puede mejorar la ciberseguridad del sector hídrico appeared first on Source LATAM.  

Amazon Bedrock expands model selection for customers by adding support for GLM 5 and Minimax M2.5. GLM 5 is a frontier‑class, general‑purpose large language model optimized for complex systems engineering and long‑horizon agentic tasks. It builds on the GLM 4.5 agent‑centric lineage and is designed to support multi‑step reasoning, math (including AIME‑style benchmarks), advanced coding, and tool‑augmented workflows, with long context support suitable for sophisticated agents and enterprise applications. MiniMax M2.5 is an agent‑native frontier model trained explicitly to reason efficiently, decompose tasks optimally, and complete complex workflows under real‑world time and cost constraints. It achieves task completion speeds comparable to or faster than leading proprietary frontier models by combining high inference throughput with reinforcement learning focused on token‑efficient reasoning and better decision‑making in agentic scaffolds.

MiniMax M2.5 and GLM 5 are now available in Amazon Bedrock across select AWS Regions. For the full list of available AWS Regions, refer to the documentation.

​Amazon Bedrock expands model selection for customers by adding support for GLM 5 and Minimax M2.5. GLM 5 is a frontier‑class, general‑purpose large language model optimized for complex systems engineering and long‑horizon agentic tasks. It builds on the GLM 4.5 agent‑centric lineage and is designed to support multi‑step reasoning, math (including AIME‑style benchmarks), advanced coding, and tool‑augmented workflows, with long context support suitable for sophisticated agents and enterprise applications. MiniMax M2.5 is an agent‑native frontier model trained explicitly to reason efficiently, decompose tasks optimally, and complete complex workflows under real‑world time and cost constraints. It achieves task completion speeds comparable to or faster than leading proprietary frontier models by combining high inference throughput with reinforcement learning focused on token‑efficient reasoning and better decision‑making in agentic scaffolds.
MiniMax M2.5 and GLM 5 are now available in Amazon Bedrock across select AWS Regions. For the full list of available AWS Regions, refer to the documentation.  

Amazon Bedrock now supports NVIDIA Nemotron 3 Super, an open hybrid Mixture-of-Experts (MoE) model designed for complex multi-agent applications. Built for agentic workloads, Nemotron 3 Super delivers fast, and cost-efficient inference enabling AI agents to maintain focus and accuracy across long, multi-step tasks without losing context. Fully open with weights, datasets, and recipes, the model supports easy customization and secure deployment, making it well-suited for enterprises, startups, and individual developers building multi-agent workflows, and advanced reasoning applications.

Amazon Bedrock gives customers access to Nemotron 3 Super through a single, fully managed API — with no infrastructure to provision or models to host. Bedrock’s serverless inference, built-in security controls, and compatibility with OpenAI API specifications make it easy to integrate Nemotron 3 Super into existing workflows and deploy at production scale with confidence.

NVIDIA Nemotron 3 Super is now available in Amazon Bedrock across select AWS Regions. For the full list of available AWS Regions, refer to the documentation. To learn more and get started, visit the Amazon Bedrock console or the service documentation here. To get started with Amazon Bedrock OpenAI API-compatible service endpoints, visit documentation here.

​Amazon Bedrock now supports NVIDIA Nemotron 3 Super, an open hybrid Mixture-of-Experts (MoE) model designed for complex multi-agent applications. Built for agentic workloads, Nemotron 3 Super delivers fast, and cost-efficient inference enabling AI agents to maintain focus and accuracy across long, multi-step tasks without losing context. Fully open with weights, datasets, and recipes, the model supports easy customization and secure deployment, making it well-suited for enterprises, startups, and individual developers building multi-agent workflows, and advanced reasoning applications.
Amazon Bedrock gives customers access to Nemotron 3 Super through a single, fully managed API — with no infrastructure to provision or models to host. Bedrock’s serverless inference, built-in security controls, and compatibility with OpenAI API specifications make it easy to integrate Nemotron 3 Super into existing workflows and deploy at production scale with confidence.
NVIDIA Nemotron 3 Super is now available in Amazon Bedrock across select AWS Regions. For the full list of available AWS Regions, refer to the documentation. To learn more and get started, visit the Amazon Bedrock console or the service documentation here. To get started with Amazon Bedrock OpenAI API-compatible service endpoints, visit documentation here.  

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6in and M6idn instances are available in AWS London Region. These sixth-generation network optimized instances, powered by 3^rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, for 2x more network bandwidth over comparable fifth-generation instances. Customers can use M6in and M6idn instances to scale their performance and throughput of network-intensive workloads such as high-performance file systems, distributed web scale in-memory caches, caching fleets, real-time big data analytics, and Telco applications such as 5G User Plane Function.

M6in and M6idn instances are available in 10 different instance sizes including metal, offering up to 128 vCPUs and 512 GiB of memory. They deliver up to 100Gbps of Amazon Elastic Block Store (EBS) bandwidth, and up to 400K IOPS. M6in and M6idn instances offer Elastic Fabric Adapter (EFA) networking support on 32xlarge and metal sizes. M6idn instances offer up to 7.6 TB of high-speed, low-latency instance storage.

With this regional expansion, M6in and M6idn instances are available in the following AWS Regions: US East (Ohio, N. Virginia), US West (N. California, Oregon), Europe (Ireland, Frankfurt, Spain, Stockholm, Zurich, London), Asia Pacific (Mumbai, Singapore, Tokyo, Sydney, Seoul), Canada (Central), and AWS GovCloud (US-West). Customers can purchase the new instances through Savings Plans, On-Demand, and Spot instances. To learn more, see M6in and M6idn instances page. 

​Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6in and M6idn instances are available in AWS London Region. These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, for 2x more network bandwidth over comparable fifth-generation instances. Customers can use M6in and M6idn instances to scale their performance and throughput of network-intensive workloads such as high-performance file systems, distributed web scale in-memory caches, caching fleets, real-time big data analytics, and Telco applications such as 5G User Plane Function.
M6in and M6idn instances are available in 10 different instance sizes including metal, offering up to 128 vCPUs and 512 GiB of memory. They deliver up to 100Gbps of Amazon Elastic Block Store (EBS) bandwidth, and up to 400K IOPS. M6in and M6idn instances offer Elastic Fabric Adapter (EFA) networking support on 32xlarge and metal sizes. M6idn instances offer up to 7.6 TB of high-speed, low-latency instance storage.
With this regional expansion, M6in and M6idn instances are available in the following AWS Regions: US East (Ohio, N. Virginia), US West (N. California, Oregon), Europe (Ireland, Frankfurt, Spain, Stockholm, Zurich, London), Asia Pacific (Mumbai, Singapore, Tokyo, Sydney, Seoul), Canada (Central), and AWS GovCloud (US-West). Customers can purchase the new instances through Savings Plans, On-Demand, and Spot instances. To learn more, see M6in and M6idn instances page.   

Amazon EC2 High Memory U7i instances with 6TB of memory (u7i-6tb.112xlarge) are now available in AWS Asia Pacific (Malaysia). U7i instances are part of AWS 7th generation and are powered by custom fourth generation Intel Xeon Scalable Processors (Sapphire Rapids). U7i-6tb instances offer 6TiB of DDR5 memory, enabling customers to scale transaction processing throughput in a fast-growing data environment.

U7i-6tb instances deliver 448 vCPUs with up to 100 Gbps of Amazon EBS bandwidth for faster data loading and backups, 100 Gbps of network bandwidth, and ENA Express. U7i instances are ideal for customers using mission-critical in-memory databases like SAP HANA, Oracle, and SQL Server.

To learn more about U7i instances, visit the High Memory instances page.

​Amazon EC2 High Memory U7i instances with 6TB of memory (u7i-6tb.112xlarge) are now available in AWS Asia Pacific (Malaysia). U7i instances are part of AWS 7th generation and are powered by custom fourth generation Intel Xeon Scalable Processors (Sapphire Rapids). U7i-6tb instances offer 6TiB of DDR5 memory, enabling customers to scale transaction processing throughput in a fast-growing data environment.
U7i-6tb instances deliver 448 vCPUs with up to 100 Gbps of Amazon EBS bandwidth for faster data loading and backups, 100 Gbps of network bandwidth, and ENA Express. U7i instances are ideal for customers using mission-critical in-memory databases like SAP HANA, Oracle, and SQL Server.
To learn more about U7i instances, visit the High Memory instances page.  

Amazon Elastic Container Registry (Amazon ECR) pull through cache now supports Chainguard’s registry as an upstream source. With today’s release, customers now benefit from the security and availability of Amazon ECR for private Chainguard images.

As customers continue to scale their use of Chainguard images, keeping them synchronized with Chainguard’s registry becomes increasingly important. With ECR’s pull through cache feature, customers can keep Chainguard images in sync without additional workflows or tools to manage. Amazon ECR’s pull through cache supports frequent registry syncs, helping to keep container images sourced from Chainguard up to date. Later, customers can apply ECR features such as image scanning and lifecycle policies to their cached Chainguard images.

The pull through cache for Chainguard is available in all AWS Regions where Amazon ECR pull through cache is supported. To get started, review our documentation.

​Amazon Elastic Container Registry (Amazon ECR) pull through cache now supports Chainguard’s registry as an upstream source. With today’s release, customers now benefit from the security and availability of Amazon ECR for private Chainguard images. As customers continue to scale their use of Chainguard images, keeping them synchronized with Chainguard’s registry becomes increasingly important. With ECR’s pull through cache feature, customers can keep Chainguard images in sync without additional workflows or tools to manage. Amazon ECR’s pull through cache supports frequent registry syncs, helping to keep container images sourced from Chainguard up to date. Later, customers can apply ECR features such as image scanning and lifecycle policies to their cached Chainguard images. The pull through cache for Chainguard is available in all AWS Regions where Amazon ECR pull through cache is supported. To get started, review our documentation.  

You can now create Amazon S3 Access Grants in the AWS Asia Pacific (New Zealand) Region.

Amazon S3 Access Grants map identities in directories such as Microsoft Entra ID, or AWS Identity and Access Management (IAM) principals, to datasets in S3. This helps you manage data permissions at scale by automatically granting S3 access to end users based on their corporate identity.

Visit the AWS Region Table for complete regional availability information. To learn more about Amazon S3 Access Grants, visit our product page.

​You can now create Amazon S3 Access Grants in the AWS Asia Pacific (New Zealand) Region.
Amazon S3 Access Grants map identities in directories such as Microsoft Entra ID, or AWS Identity and Access Management (IAM) principals, to datasets in S3. This helps you manage data permissions at scale by automatically granting S3 access to end users based on their corporate identity.
Visit the AWS Region Table for complete regional availability information. To learn more about Amazon S3 Access Grants, visit our product page.  

AWS Config announces the launch of an additional 75 managed Config rules for various use cases such as security, durability, and operations. You can now search, discover, enable and manage these additional rules directly from AWS Config and govern more use cases for your AWS environment.

With this launch, you can now enable these controls across your account or across your organization. For example, you can assess your security posture across AWS Amplify, Amazon SageMaker, Amazon Route 53, and more. Additionally, you can leverage Conformance Packs to group these new controls and deploy across an account or across organization, streamlining your multi-account governance.

For the full list of recently released rules, visit the AWS Config developer guide. For description of each rule and the AWS Regions in which it is available, please refer our Config managed rules documentation. To start using Config rules, please refer our documentation.

New Rules Launched:

1. ACM_CERTIFICATE_TRANSPARENT_LOGGING_ENABLED
2. AMPLIFY_APP_BUILD_SPEC_CONFIGURED
3. AMPLIFY_APP_PLATFORM_CHECK
4. AMPLIFY_BRANCH_AUTO_BUILD_ENABLED
5. AMPLIFY_BRANCH_BUILD_SPEC_CONFIGURED
6. AMPLIFY_BRANCH_FRAMEWORK_CONFIGURED
7. AMPLIFY_BRANCH_PULL_REQUEST_PREVIEW_ENABLED
8. APIGATEWAY_DOMAIN_NAME_TLS_CHECK
9. APIGATEWAYV2_INTEGRATION_PRIVATE_HTTPS_ENABLED
10. APPINTEGRATIONS_APPLICATION_APPROVED_ORIGINS_CHECK
11. APPINTEGRATIONS_APPLICATION_TAGGED
12. APPMESH_MESH_IP_PREF_CHECK
13. APPMESH_VIRTUAL_GATEWAY_LISTENERS_HEALTH_CHECK_ENABLED
14. APPMESH_VIRTUAL_NODE_LISTENERS_HEALTH_CHECK_ENABLED
15. APPMESH_VIRTUAL_NODE_LISTENERS_OUTLIER_DETECT_ENABLED
16. APPMESH_VIRTUAL_NODE_SERVICE_BACKENDS_TLS_ENFORCED
17. CLOUDTRAIL_EVENT_DATA_STORE_MULTI_REGION
18. CLOUDWATCH_ALARM_DESCRIPTION
19. CODEARTIFACT_REPOSITORY_TAGGED
20. CODEBUILD_PROJECT_TAGGED
21. EC2_IPAMSCOPE_TAGGED
22. EC2_LAUNCHTEMPLATE_EBS_ENCRYPTED
23. ECS_SERVICE_PROPAGATE_TAGS_ENABLED
24. ELBV2_TARGETGROUP_HEALTHCHECK_PROTOCOL_ENCRYPTED
25. ELBV2_TARGETGROUP_PROTOCOL_ENCRYPTED
26. EVENTSCHEMAS_DISCOVERER_TAGGED
27. EVENTSCHEMAS_REGISTRY_TAGGED
28. GROUNDSTATION_CONFIG_TAGGED
29. GROUNDSTATION_DATAFLOWENDPOINTGROUP_TAGGED
30. GROUNDSTATION_MISSIONPROFILE_TAGGED
31. HEALTHLAKE_FHIRDATASTORE_TAGGED
32. IAM_OIDC_PROVIDER_CLIENT_ID_LIST_CHECK
33. IAM_POLICY_DESCRIPTION
34. IMAGEBUILDER_DISTRIBUTIONCONFIGURATION_TAGGED
35. IMAGEBUILDER_IMAGEPIPELINE_TAGGED
36. IMAGEBUILDER_IMAGERECIPE_EBS_VOLUMES_ENCRYPTED
37. IMAGEBUILDER_IMAGERECIPE_TAGGED
38. IMAGEBUILDER_INFRASTRUCTURECONFIGURATION_TAGGED
39. KINESISVIDEO_SIGNALINGCHANNEL_TAGGED
40. KINESISVIDEO_STREAM_TAGGED
41. LAMBDA_FUNCTION_APPLICATION_LOG_LEVEL_CHECK
42. LAMBDA_FUNCTION_LOG_FORMAT_JSON
43. LAMBDA_FUNCTION_SYSTEM_LOG_LEVEL_CHECK
44. LIGHTSAIL_BUCKET_OBJECT_VERSIONING_ENABLED
45. MEDIAPACKAGE_PACKAGINGCONFIGURATION_TAGGED
46. MEDIATAILOR_PLAYBACKCONFIGURATION_TAGGED
47. MEMORYDB_SUBNETGROUP_TAGGED
48. NEPTUNE_CLUSTER_SNAPSHOT_IAM_DATABASE_AUTH_ENABLED
49. OPENSEARCHSERVERLESS_COLLECTION_DESCRIPTION
50. OPENSEARCHSERVERLESS_COLLECTION_STANDBYREPLICAS_ENABLED
51. PANORAMA_PACKAGE_TAGGED
52. RDS_CLUSTER_BACKUP_RETENTION_CHECK
53. RDS_GLOBAL_CLUSTER_AURORA_MYSQL_SUPPORTED_VERSION
54. RESILIENCEHUB_APP_TAGGED
55. RESILIENCEHUB_RESILIENCYPOLICY_TAGGED
56. ROUTE53_RECOVERY_CONTROL_CLUSTER_TAGGED
57. ROUTE53_RECOVERY_READINESS_CELL_TAGGED
58. ROUTE53_RECOVERY_READINESS_READINESS_CHECK_TAGGED
59. ROUTE53_RECOVERY_READINESS_RECOVERY_GROUP_TAGGED
60. ROUTE53_RECOVERY_READINESS_RESOURCE_SET_TAGGED
61. ROUTE53_RESOLVER_RESOLVER_ENDPOINT_TAGGED
62. S3_DIRECTORY_BUCKET_LIFECYCLE_POLICY_RULE_CHECK
63. SAGEMAKER_DATA_QUALITY_JOB_ENCRYPT_IN_TRANSIT
64. SAGEMAKER_DATA_QUALITY_JOB_ISOLATION
65. SAGEMAKER_FEATUREGROUP_DESCRIPTION
66. SAGEMAKER_INFERENCEEXPERIMENT_TAGGED
67. SAGEMAKER_MODEL_BIAS_JOB_ENCRYPT_IN_TRANSIT
68. SAGEMAKER_MODEL_BIAS_JOB_ISOLATION
69. SAGEMAKER_MODEL_EXPLAINABILITY_JOB_ENCRYPT_IN_TRANSIT
70. SAGEMAKER_MODEL_QUALITY_JOB_ENCRYPT_TRANSIT
71. SAGEMAKER_MONITORING_SCHEDULE_ISOLATION
72. SIGNER_SIGNINGPROFILE_TAGGED
73. TRANSFER_CONNECTOR_AS2_ENCRYPTION_ALGORITHM_CHECK
74. TRANSFER_CONNECTOR_AS2_MDN_SIGNING_ALGORITHM_CHECK
75. TRANSFER_CONNECTOR_AS2_SIGNING_ALGORITHM_CHECK

​AWS Config announces the launch of an additional 75 managed Config rules for various use cases such as security, durability, and operations. You can now search, discover, enable and manage these additional rules directly from AWS Config and govern more use cases for your AWS environment. With this launch, you can now enable these controls across your account or across your organization. For example, you can assess your security posture across AWS Amplify, Amazon SageMaker, Amazon Route 53, and more. Additionally, you can leverage Conformance Packs to group these new controls and deploy across an account or across organization, streamlining your multi-account governance. For the full list of recently released rules, visit the AWS Config developer guide. For description of each rule and the AWS Regions in which it is available, please refer our Config managed rules documentation. To start using Config rules, please refer our documentation. New Rules Launched:

ACM_CERTIFICATE_TRANSPARENT_LOGGING_ENABLED
AMPLIFY_APP_BUILD_SPEC_CONFIGURED
AMPLIFY_APP_PLATFORM_CHECK
AMPLIFY_BRANCH_AUTO_BUILD_ENABLED
AMPLIFY_BRANCH_BUILD_SPEC_CONFIGURED
AMPLIFY_BRANCH_FRAMEWORK_CONFIGURED
AMPLIFY_BRANCH_PULL_REQUEST_PREVIEW_ENABLED
APIGATEWAY_DOMAIN_NAME_TLS_CHECK
APIGATEWAYV2_INTEGRATION_PRIVATE_HTTPS_ENABLED
APPINTEGRATIONS_APPLICATION_APPROVED_ORIGINS_CHECK
APPINTEGRATIONS_APPLICATION_TAGGED
APPMESH_MESH_IP_PREF_CHECK
APPMESH_VIRTUAL_GATEWAY_LISTENERS_HEALTH_CHECK_ENABLED
APPMESH_VIRTUAL_NODE_LISTENERS_HEALTH_CHECK_ENABLED
APPMESH_VIRTUAL_NODE_LISTENERS_OUTLIER_DETECT_ENABLED
APPMESH_VIRTUAL_NODE_SERVICE_BACKENDS_TLS_ENFORCED
CLOUDTRAIL_EVENT_DATA_STORE_MULTI_REGION
CLOUDWATCH_ALARM_DESCRIPTION
CODEARTIFACT_REPOSITORY_TAGGED
CODEBUILD_PROJECT_TAGGED
EC2_IPAMSCOPE_TAGGED
EC2_LAUNCHTEMPLATE_EBS_ENCRYPTED
ECS_SERVICE_PROPAGATE_TAGS_ENABLED
ELBV2_TARGETGROUP_HEALTHCHECK_PROTOCOL_ENCRYPTED
ELBV2_TARGETGROUP_PROTOCOL_ENCRYPTED
EVENTSCHEMAS_DISCOVERER_TAGGED
EVENTSCHEMAS_REGISTRY_TAGGED
GROUNDSTATION_CONFIG_TAGGED
GROUNDSTATION_DATAFLOWENDPOINTGROUP_TAGGED
GROUNDSTATION_MISSIONPROFILE_TAGGED
HEALTHLAKE_FHIRDATASTORE_TAGGED
IAM_OIDC_PROVIDER_CLIENT_ID_LIST_CHECK
IAM_POLICY_DESCRIPTION
IMAGEBUILDER_DISTRIBUTIONCONFIGURATION_TAGGED
IMAGEBUILDER_IMAGEPIPELINE_TAGGED
IMAGEBUILDER_IMAGERECIPE_EBS_VOLUMES_ENCRYPTED
IMAGEBUILDER_IMAGERECIPE_TAGGED
IMAGEBUILDER_INFRASTRUCTURECONFIGURATION_TAGGED
KINESISVIDEO_SIGNALINGCHANNEL_TAGGED
KINESISVIDEO_STREAM_TAGGED
LAMBDA_FUNCTION_APPLICATION_LOG_LEVEL_CHECK
LAMBDA_FUNCTION_LOG_FORMAT_JSON
LAMBDA_FUNCTION_SYSTEM_LOG_LEVEL_CHECK
LIGHTSAIL_BUCKET_OBJECT_VERSIONING_ENABLED
MEDIAPACKAGE_PACKAGINGCONFIGURATION_TAGGED
MEDIATAILOR_PLAYBACKCONFIGURATION_TAGGED
MEMORYDB_SUBNETGROUP_TAGGED
NEPTUNE_CLUSTER_SNAPSHOT_IAM_DATABASE_AUTH_ENABLED
OPENSEARCHSERVERLESS_COLLECTION_DESCRIPTION
OPENSEARCHSERVERLESS_COLLECTION_STANDBYREPLICAS_ENABLED
PANORAMA_PACKAGE_TAGGED
RDS_CLUSTER_BACKUP_RETENTION_CHECK
RDS_GLOBAL_CLUSTER_AURORA_MYSQL_SUPPORTED_VERSION
RESILIENCEHUB_APP_TAGGED
RESILIENCEHUB_RESILIENCYPOLICY_TAGGED
ROUTE53_RECOVERY_CONTROL_CLUSTER_TAGGED
ROUTE53_RECOVERY_READINESS_CELL_TAGGED
ROUTE53_RECOVERY_READINESS_READINESS_CHECK_TAGGED
ROUTE53_RECOVERY_READINESS_RECOVERY_GROUP_TAGGED
ROUTE53_RECOVERY_READINESS_RESOURCE_SET_TAGGED
ROUTE53_RESOLVER_RESOLVER_ENDPOINT_TAGGED
S3_DIRECTORY_BUCKET_LIFECYCLE_POLICY_RULE_CHECK
SAGEMAKER_DATA_QUALITY_JOB_ENCRYPT_IN_TRANSIT
SAGEMAKER_DATA_QUALITY_JOB_ISOLATION
SAGEMAKER_FEATUREGROUP_DESCRIPTION
SAGEMAKER_INFERENCEEXPERIMENT_TAGGED
SAGEMAKER_MODEL_BIAS_JOB_ENCRYPT_IN_TRANSIT
SAGEMAKER_MODEL_BIAS_JOB_ISOLATION
SAGEMAKER_MODEL_EXPLAINABILITY_JOB_ENCRYPT_IN_TRANSIT
SAGEMAKER_MODEL_QUALITY_JOB_ENCRYPT_TRANSIT
SAGEMAKER_MONITORING_SCHEDULE_ISOLATION
SIGNER_SIGNINGPROFILE_TAGGED
TRANSFER_CONNECTOR_AS2_ENCRYPTION_ALGORITHM_CHECK
TRANSFER_CONNECTOR_AS2_MDN_SIGNING_ALGORITHM_CHECK
TRANSFER_CONNECTOR_AS2_SIGNING_ALGORITHM_CHECK  

Starting today, the compute-optimized Amazon EC2 C8a instances are available in the Asia Pacific (Tokyo) region. C8a instances are powered by 5th Gen AMD EPYC processors (formerly code named Turin) with a maximum frequency of 4.5 GHz, delivering up to 30% higher performance and up to 19% better price-performance compared to C7a instances.

C8a instances deliver 33% more memory bandwidth compared to C7a instances, making these instances ideal for latency sensitive workloads. Compared to Amazon EC2 C7a instances, they are up to 57% faster for GroovyJVM allowing better response times for Java-based applications. C8a instances offer 12 sizes including 2 bare metal sizes. This range of instance sizes allows customers to precisely match their workload requirements.

C8a instances are built on AWS Nitro System and are ideal for high performance, compute-intensive workloads such as batch processing, distributed analytics, high performance computing (HPC), ad serving, highly-scalable multiplayer gaming, and video encoding.

To get started, sign in to the AWS Management Console. Customers can purchase these instances via Savings Plans, On-Demand instances, and Spot instances. For more information visit the Amazon EC2 C8a instance page.

​Starting today, the compute-optimized Amazon EC2 C8a instances are available in the Asia Pacific (Tokyo) region. C8a instances are powered by 5th Gen AMD EPYC processors (formerly code named Turin) with a maximum frequency of 4.5 GHz, delivering up to 30% higher performance and up to 19% better price-performance compared to C7a instances. C8a instances deliver 33% more memory bandwidth compared to C7a instances, making these instances ideal for latency sensitive workloads. Compared to Amazon EC2 C7a instances, they are up to 57% faster for GroovyJVM allowing better response times for Java-based applications. C8a instances offer 12 sizes including 2 bare metal sizes. This range of instance sizes allows customers to precisely match their workload requirements. C8a instances are built on AWS Nitro System and are ideal for high performance, compute-intensive workloads such as batch processing, distributed analytics, high performance computing (HPC), ad serving, highly-scalable multiplayer gaming, and video encoding. To get started, sign in to the AWS Management Console. Customers can purchase these instances via Savings Plans, On-Demand instances, and Spot instances. For more information visit the Amazon EC2 C8a instance page.  

Starting today, AWS Elemental MediaConnect supports NDI® (Network Device Interface) as a live video source, enabling broadcasters and live production teams to ingest NDI streams and convert them to transport stream outputs such as SRT for downstream distribution. NDI is a widely adopted IP video technology used in live production environments and supported by more than 500 hardware products and 400 software applications.

With this new capability, live production teams can bridge NDI-based production environments with standards-based cloud distribution workflows without requiring custom transcoding or protocol conversion infrastructure. For example, you can route an NDI feed from an EC2 instance running NDI Tools directly into a MediaConnect flow, convert it to a transport stream, and pass it downstream to AWS Elemental MediaLive for transcoding and AWS Elemental MediaPackage for origin and packaging. This eliminates the complexity of egressing NDI content from the AWS Cloud and enables seamless integration with existing IP-based broadcast workflows.

NDI support is available in most regions where MediaConnect is currently deployed. For more information and details on pricing, please refer to the NDI documentation and the MediaConnect pricing page.

​Starting today, AWS Elemental MediaConnect supports NDI® (Network Device Interface) as a live video source, enabling broadcasters and live production teams to ingest NDI streams and convert them to transport stream outputs such as SRT for downstream distribution. NDI is a widely adopted IP video technology used in live production environments and supported by more than 500 hardware products and 400 software applications. With this new capability, live production teams can bridge NDI-based production environments with standards-based cloud distribution workflows without requiring custom transcoding or protocol conversion infrastructure. For example, you can route an NDI feed from an EC2 instance running NDI Tools directly into a MediaConnect flow, convert it to a transport stream, and pass it downstream to AWS Elemental MediaLive for transcoding and AWS Elemental MediaPackage for origin and packaging. This eliminates the complexity of egressing NDI content from the AWS Cloud and enables seamless integration with existing IP-based broadcast workflows. NDI support is available in most regions where MediaConnect is currently deployed. For more information and details on pricing, please refer to the NDI documentation and the MediaConnect pricing page.