AWS Transfer Family announces Internet Protocol version 6 (IPv6) support for server endpoints and service APIs. This enhancement enables both IPv6 and IPv4 clients to communicate with Transfer Family SFTP, FTPS, FTP, and AS2 server endpoints. You can also use IPv6 while accessing the Transfer Family service APIs.

AWS Transfer Family offers fully managed support for file transfers over SFTP, AS2, FTPS, FTP, and web browser-based transfers. The addition of IPv6 support provides you with a vastly expanded address space, eliminating concerns about address exhaustion and simplifying network architecture for IPv6-native applications. With dual-stack support for both IPv4 and IPv6 clients on AWS Transfer Family endpoints, you can transition from IPv4 to IPv6, without needing to switch all systems at once.

AWS Transfer Family support for IPv6 is available in all AWS Regions where the service is available. To learn more, visit the Transfer Family User Guide.

 

​AWS Transfer Family announces Internet Protocol version 6 (IPv6) support for server endpoints and service APIs. This enhancement enables both IPv6 and IPv4 clients to communicate with Transfer Family SFTP, FTPS, FTP, and AS2 server endpoints. You can also use IPv6 while accessing the Transfer Family service APIs. AWS Transfer Family offers fully managed support for file transfers over SFTP, AS2, FTPS, FTP, and web browser-based transfers. The addition of IPv6 support provides you with a vastly expanded address space, eliminating concerns about address exhaustion and simplifying network architecture for IPv6-native applications. With dual-stack support for both IPv4 and IPv6 clients on AWS Transfer Family endpoints, you can transition from IPv4 to IPv6, without needing to switch all systems at once. AWS Transfer Family support for IPv6 is available in all AWS Regions where the service is available. To learn more, visit the Transfer Family User Guide.  

Amazon Bedrock introduces Citations API and PDF support for Anthropic’s Claude Models that empower developers to build more trustworthy AI applications and expand document processing capabilities. The Citations API allows Claude to ground its answers in source documents, providing detailed references to the exact sentences and passages used to generate responses. This leads to more verifiable and trustworthy outputs, crucial for applications requiring high accuracy and transparency.

With the new Citations API, developers can enhance the reliability of their AI-powered applications. This feature is particularly valuable in fields such as legal research, academic writing, and fact-checking, where the ability to trace information back to its source is critical. PDF support for Claude further extends Amazon Bedrock’s capabilities, allowing users to extract text, analyze charts, and understand visual content from PDF documents. This comprehensive document analysis enables more efficient processing of complex documents, making it easier for businesses to derive insights from their existing PDF libraries.

The Citations API and PDF support for Claude are available for Claude Opus 4, Claude Sonnet 4, Claude Sonnet 3.7, Claude Sonnet 3.5v2. The functionality will be available in all regions where these models are supported. These features can be accessed through Amazon Bedrock’s Invoke Model and Converse APIs, allowing for seamless integration into existing workflows and applications.

To learn more about these new features and how they can benefit your AI applications, visit the API Documentation for detailed information on implementation.

 

​Amazon Bedrock introduces Citations API and PDF support for Anthropic’s Claude Models that empower developers to build more trustworthy AI applications and expand document processing capabilities. The Citations API allows Claude to ground its answers in source documents, providing detailed references to the exact sentences and passages used to generate responses. This leads to more verifiable and trustworthy outputs, crucial for applications requiring high accuracy and transparency. With the new Citations API, developers can enhance the reliability of their AI-powered applications. This feature is particularly valuable in fields such as legal research, academic writing, and fact-checking, where the ability to trace information back to its source is critical. PDF support for Claude further extends Amazon Bedrock’s capabilities, allowing users to extract text, analyze charts, and understand visual content from PDF documents. This comprehensive document analysis enables more efficient processing of complex documents, making it easier for businesses to derive insights from their existing PDF libraries. The Citations API and PDF support for Claude are available for Claude Opus 4, Claude Sonnet 4, Claude Sonnet 3.7, Claude Sonnet 3.5v2. The functionality will be available in all regions where these models are supported. These features can be accessed through Amazon Bedrock’s Invoke Model and Converse APIs, allowing for seamless integration into existing workflows and applications.
To learn more about these new features and how they can benefit your AI applications, visit the API Documentation for detailed information on implementation.  

AWS Control Tower and Control Catalog APIs now come with AWS PrivateLink support, allowing you to invoke AWS Control Tower and Control Catalog APIs from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported services and resources, and your on-premises networks, without exposing your traffic to the public internet.

AWS Control Tower simplifies managing a secure, compliant multi-account environment within an AWS Organization. Customers enable AWS services like Config, CloudTrail, and Identity Center with AWS-recommended configurations through Control Tower, ensuring that all accounts in each Organization Unit (OU) adhere to the same baseline defined by the IT administrator. Applications running inside these accounts are governed via managed controls deployed through the Control Catalog in Control Tower, ensuring compliance with business requirements and regulatory policies on an ongoing basis.

AWS PrivateLink support for AWS Control Tower is available in all AWS Regions where AWS Control Tower is available. For a full list of AWS regions where AWS Control Tower is available, see AWS Region Table. You can start deploying AWS Control Tower from the console or using AWS Control Tower APIs.
 

 

​AWS Control Tower and Control Catalog APIs now come with AWS PrivateLink support, allowing you to invoke AWS Control Tower and Control Catalog APIs from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. AWS PrivateLink provides private connectivity between virtual private clouds (VPCs), supported services and resources, and your on-premises networks, without exposing your traffic to the public internet. AWS Control Tower simplifies managing a secure, compliant multi-account environment within an AWS Organization. Customers enable AWS services like Config, CloudTrail, and Identity Center with AWS-recommended configurations through Control Tower, ensuring that all accounts in each Organization Unit (OU) adhere to the same baseline defined by the IT administrator. Applications running inside these accounts are governed via managed controls deployed through the Control Catalog in Control Tower, ensuring compliance with business requirements and regulatory policies on an ongoing basis. AWS PrivateLink support for AWS Control Tower is available in all AWS Regions where AWS Control Tower is available. For a full list of AWS regions where AWS Control Tower is available, see AWS Region Table. You can start deploying AWS Control Tower from the console or using AWS Control Tower APIs.    

Starting today, Amazon DynamoDB global tables now supports multi-Region strong consistency. DynamoDB global tables is a fully managed, serverless, multi-Region, and multi-active database used by tens of thousands of customers. With this new capability, you can now build highly available multi-Region applications with a recovery point objective (RPO) of zero, achieving the highest level of resilience.

DynamoDB global tables with multi-Region strong consistency provides the highest level of application resilience enabling applications to be always available and always read the latest data from any Region. It also removes the undifferentiated heavy lifting of managing strongly consistent replication. Multi-Region strong consistency is ideal for building global applications with strict consistency requirements like user profile management, inventory tracking, and financial transaction processing.

DynamoDB global tables with multi-Region strong consistency is available in the following AWS Regions: US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Ireland), Europe (London), Europe (Paris), Europe (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Seoul), and Asia Pacific (Osaka). Global tables with multi-Region strong consistency is billed according to current global tables pricing.

To get started with multi-Region strong consistency, see the DynamoDB Developer Guide, and visit the DynamoDB global tables page to learn more about building resilient multi-Region applications.

 

​Starting today, Amazon DynamoDB global tables now supports multi-Region strong consistency. DynamoDB global tables is a fully managed, serverless, multi-Region, and multi-active database used by tens of thousands of customers. With this new capability, you can now build highly available multi-Region applications with a recovery point objective (RPO) of zero, achieving the highest level of resilience. DynamoDB global tables with multi-Region strong consistency provides the highest level of application resilience enabling applications to be always available and always read the latest data from any Region. It also removes the undifferentiated heavy lifting of managing strongly consistent replication. Multi-Region strong consistency is ideal for building global applications with strict consistency requirements like user profile management, inventory tracking, and financial transaction processing. DynamoDB global tables with multi-Region strong consistency is available in the following AWS Regions: US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Ireland), Europe (London), Europe (Paris), Europe (Frankfurt), Asia Pacific (Tokyo), Asia Pacific (Seoul), and Asia Pacific (Osaka). Global tables with multi-Region strong consistency is billed according to current global tables pricing. To get started with multi-Region strong consistency, see the DynamoDB Developer Guide, and visit the DynamoDB global tables page to learn more about building resilient multi-Region applications.  

Starting today, AWS Global Accelerator supports application endpoints in two additional AWS Regions, AWS Mexico (Central) Region and Asia Pacific (Malaysia) Region, expanding the number of supported AWS Regions to thirty one.

AWS Global Accelerator is a service that is designed to help you improve the availability, security, and performance of your internet-facing applications. By using the congestion-free AWS network, end-user traffic to your applications benefits from increased availability, DDoS protection at the edge, and higher performance relative to the public internet. Global Accelerator provides static IP addresses that act as fixed entry endpoints for your application resources in one or more AWS Regions, such as your Application Load Balancers, Network Load Balancers, Amazon EC2 instances, or Elastic IPs. Global Accelerator continually monitors the health of your application endpoints and offers deterministic fail-over for multi-region workloads without any DNS dependencies.

To get started, visit the AWS Global Accelerator website and review its documentation.
 

 

​Starting today, AWS Global Accelerator supports application endpoints in two additional AWS Regions, AWS Mexico (Central) Region and Asia Pacific (Malaysia) Region, expanding the number of supported AWS Regions to thirty one. AWS Global Accelerator is a service that is designed to help you improve the availability, security, and performance of your internet-facing applications. By using the congestion-free AWS network, end-user traffic to your applications benefits from increased availability, DDoS protection at the edge, and higher performance relative to the public internet. Global Accelerator provides static IP addresses that act as fixed entry endpoints for your application resources in one or more AWS Regions, such as your Application Load Balancers, Network Load Balancers, Amazon EC2 instances, or Elastic IPs. Global Accelerator continually monitors the health of your application endpoints and offers deterministic fail-over for multi-region workloads without any DNS dependencies. To get started, visit the AWS Global Accelerator website and review its documentation.    

You can now use AWS PrivateLink to privately access Amazon ElastiCache from your Amazon Virtual Private Cloud (Amazon VPC) in Asia Pacific (Thailand), Asia Pacific (Melbourne), Asia Pacific (Malaysia), Middle East (UAE), Mexico (Central), Israel (Tel Aviv), Canada West (Calgary) and Europe (Zurich) Regions. AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises networks, without exposing traffic to the public internet and securing your network traffic.

To use AWS PrivateLink with Amazon ElastiCache, you create an interface VPC endpoint for Amazon ElastiCache in your VPC using the Amazon VPC console, AWS SDK, or AWS CLI. With an interface VPC endpoint, you can privately access the Amazon ElastiCache APIs from applications inside your Amazon VPC. You can also access the VPC endpoint from other VPCs using VPC Peering or your on-premises environments using AWS VPN or AWS Direct Connect. To learn more, and see a complete list of supported Regions, read the documentation or get started in the Amazon VPC Console.

 

​You can now use AWS PrivateLink to privately access Amazon ElastiCache from your Amazon Virtual Private Cloud (Amazon VPC) in Asia Pacific (Thailand), Asia Pacific (Melbourne), Asia Pacific (Malaysia), Middle East (UAE), Mexico (Central), Israel (Tel Aviv), Canada West (Calgary) and Europe (Zurich) Regions. AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises networks, without exposing traffic to the public internet and securing your network traffic. To use AWS PrivateLink with Amazon ElastiCache, you create an interface VPC endpoint for Amazon ElastiCache in your VPC using the Amazon VPC console, AWS SDK, or AWS CLI. With an interface VPC endpoint, you can privately access the Amazon ElastiCache APIs from applications inside your Amazon VPC. You can also access the VPC endpoint from other VPCs using VPC Peering or your on-premises environments using AWS VPN or AWS Direct Connect. To learn more, and see a complete list of supported Regions, read the documentation or get started in the Amazon VPC Console.  

Today, AWS announces the general availability of the new Amazon Elastic Compute Cloud (Amazon EC2) C8gn instances, powered by the latest-generation AWS Graviton4 processors. The new instances provide up to 30% better compute performance than Graviton3-based Amazon EC2 C7gn instances. Amazon EC2 C8gn instances feature the latest 6th generation AWS Nitro Cards, and offer up to 600 Gbps network bandwidth, the highest network bandwidth among network optimized EC2 instances.

Take advantage of the enhanced networking capabilities of C8gn to scale performance and throughput, while optimizing the cost of running network-intensive workloads such as network virtual appliances, data analytics, CPU-based artificial intelligence and machine learning (AI/ML) inference.

For increased scalability, C8gn instances offer instance sizes up to 48xlarge, up to 384 GiB of memory, and up to 60 Gbps of bandwidth to Amazon Elastic Block Store (EBS). C8gn instances support Elastic Fabric Adapter (EFA) networking on the 16xlarge, 24xlarge, 48xlarge, metal-24xl, and metal-48xl sizes, which enables lower latency and improved cluster performance for workloads deployed on tightly coupled clusters.

C8gn instances are available in the following AWS Regions: US East (N. Virginia), and US West (Oregon). The metal instances are only available in US East (N. Virginia).

To learn more, see Amazon C8gn Instances. To begin your Graviton journey, visit the Level up your compute with AWS Graviton page. To get started, see AWS Management Console, AWS Command Line Interface (AWS CLI), and AWS SDKs.

 

​Today, AWS announces the general availability of the new Amazon Elastic Compute Cloud (Amazon EC2) C8gn instances, powered by the latest-generation AWS Graviton4 processors. The new instances provide up to 30% better compute performance than Graviton3-based Amazon EC2 C7gn instances. Amazon EC2 C8gn instances feature the latest 6th generation AWS Nitro Cards, and offer up to 600 Gbps network bandwidth, the highest network bandwidth among network optimized EC2 instances. Take advantage of the enhanced networking capabilities of C8gn to scale performance and throughput, while optimizing the cost of running network-intensive workloads such as network virtual appliances, data analytics, CPU-based artificial intelligence and machine learning (AI/ML) inference. For increased scalability, C8gn instances offer instance sizes up to 48xlarge, up to 384 GiB of memory, and up to 60 Gbps of bandwidth to Amazon Elastic Block Store (EBS). C8gn instances support Elastic Fabric Adapter (EFA) networking on the 16xlarge, 24xlarge, 48xlarge, metal-24xl, and metal-48xl sizes, which enables lower latency and improved cluster performance for workloads deployed on tightly coupled clusters. C8gn instances are available in the following AWS Regions: US East (N. Virginia), and US West (Oregon). The metal instances are only available in US East (N. Virginia). To learn more, see Amazon C8gn Instances. To begin your Graviton journey, visit the Level up your compute with AWS Graviton page. To get started, see AWS Management Console, AWS Command Line Interface (AWS CLI), and AWS SDKs.  

Today, AWS announced Ubuntu support for Finch, an open source command line tool that allows developers to build, run, and publish Linux containers. Finch simplifies container development by bundling a minimal native client with a curated selection of open-source components.

With the addition of Ubuntu support, Finch now provides a consistent and streamlined container development experience across more Linux distributions, addressing a key pain point for developers who work across multiple environments. Previously, Ubuntu users needed to build Finch from source and handle dependency management, which required additional setup time and coordination across development teams. Now, they can easily install Finch using Ubuntu’s APT package manager. This expansion allows teams to standardize their container workflows and tooling, improving productivity and collaboration across different Linux flavors.

Finch’s Ubuntu support is available in the deb file format for Ubuntu LTS versions. Detailed installation instructions and troubleshooting guides are now available on the project’s website and GitHub repository, ensuring a smoother setup process for users across different Linux distributions. To learn more about using Finch on Linux, read the AWS News Blog.

 

​Today, AWS announced Ubuntu support for Finch, an open source command line tool that allows developers to build, run, and publish Linux containers. Finch simplifies container development by bundling a minimal native client with a curated selection of open-source components. With the addition of Ubuntu support, Finch now provides a consistent and streamlined container development experience across more Linux distributions, addressing a key pain point for developers who work across multiple environments. Previously, Ubuntu users needed to build Finch from source and handle dependency management, which required additional setup time and coordination across development teams. Now, they can easily install Finch using Ubuntu’s APT package manager. This expansion allows teams to standardize their container workflows and tooling, improving productivity and collaboration across different Linux flavors. Finch’s Ubuntu support is available in the deb file format for Ubuntu LTS versions. Detailed installation instructions and troubleshooting guides are now available on the project’s website and GitHub repository, ensuring a smoother setup process for users across different Linux distributions. To learn more about using Finch on Linux, read the AWS News Blog.  

Today, AWS Config rules adds classification information from AWS Control Tower Control Catalog to make it easier for you to identify how Config rules map to different compliance frameworks such as CIS-v8.0, FedRAMP-r4, and NIST-CSF-v1.1. AWS Config rules help you automatically evaluate your AWS resource configurations for desired settings, enabling you to assess, audit, and evaluate configurations of your AWS resources. Control Catalog is a feature of AWS Control Tower that enables you to search AWS managed controls and their associated compliance frameworks.

Control Catalog has classifications including Domain (such as «Data Protection»), Objective (such as «Data Encryption»), and common control (such as «Encrypt data at rest») to help you better understand the purpose of a control. Today’s launch maps AWS Config rules to the specific compliance frameworks available in AWS Control Tower Control Catalog (CIS-v8.0, FedRAMP-r4, ISO-IEC-27001:2013-Annex-A, NIST-CSF-v1.1, NIST-SP-800-171-r2, PCI-DSS-v4.0, SSAE-18-SOC-2-Oct-2023), adding classification information (Domain, Objective, common control) to each AWS Config rule.

If you’re using AWS Config, you’ll now see the same classification information in the AWS Config Console and in the AWS Control Tower Control Catalog, ensuring a unified experience across your AWS environment. This alignment between AWS Control Tower and AWS Config allows for seamless integration and more efficient management of your compliance and security posture.

AWS Config rules with classifications from AWS Control Tower Control Catalog are available in all AWS Commercial regions where AWS Config and AWS Control Tower are available.

To learn more about AWS Config rules and compliance frameworks, visit the AWS Config documentation.

 

​Today, AWS Config rules adds classification information from AWS Control Tower Control Catalog to make it easier for you to identify how Config rules map to different compliance frameworks such as CIS-v8.0, FedRAMP-r4, and NIST-CSF-v1.1. AWS Config rules help you automatically evaluate your AWS resource configurations for desired settings, enabling you to assess, audit, and evaluate configurations of your AWS resources. Control Catalog is a feature of AWS Control Tower that enables you to search AWS managed controls and their associated compliance frameworks. Control Catalog has classifications including Domain (such as «Data Protection»), Objective (such as «Data Encryption»), and common control (such as «Encrypt data at rest») to help you better understand the purpose of a control. Today’s launch maps AWS Config rules to the specific compliance frameworks available in AWS Control Tower Control Catalog (CIS-v8.0, FedRAMP-r4, ISO-IEC-27001:2013-Annex-A, NIST-CSF-v1.1, NIST-SP-800-171-r2, PCI-DSS-v4.0, SSAE-18-SOC-2-Oct-2023), adding classification information (Domain, Objective, common control) to each AWS Config rule. If you’re using AWS Config, you’ll now see the same classification information in the AWS Config Console and in the AWS Control Tower Control Catalog, ensuring a unified experience across your AWS environment. This alignment between AWS Control Tower and AWS Config allows for seamless integration and more efficient management of your compliance and security posture. AWS Config rules with classifications from AWS Control Tower Control Catalog are available in all AWS Commercial regions where AWS Config and AWS Control Tower are available. To learn more about AWS Config rules and compliance frameworks, visit the AWS Config documentation.  

You can now use Amazon EBS General Purpose SSD volumes (gp3) volumes with the second-generation AWS Outposts racks for your workloads that require local data processing and data residency. The latest generation of gp3 enables you to provision performance independently of storage capacity, delivering a baseline performance of 3,000 IOPS and 125 MB/s at any volume size. With gp3 volumes, you can scale up to 16,000 IOPS and 1,000 MB/s, delivering 4x the maximum throughput of the previously supported gp2 volumes.

EBS gp3 volumes on second-generation AWS Outposts are ideal for a wide variety of performance-intensive applications, including MySQL, Cassandra, virtual desktops, and Hadoop analytics clusters. AWS Outposts racks offer the same AWS infrastructure, AWS services, APIs, and tools to virtually any on-premises data center or colocation space for a truly consistent hybrid experience. Second-generation AWS Outposts racks support the latest generation of x86-powered Amazon Elastic Compute Cloud (Amazon EC2) instances, starting with C7i, M7i, and R7i instances. These instances deliver twice the vCPU, memory, and network bandwidth, as well as up to 40% better performance compared to C5, M5, and R5 instances on first-generation AWS Outposts racks.

You can manage gp3 volumes using the AWS Management Console, the AWS Command Line Interface (CLI), or the AWS SDKs in all Regions and countries/territories where second-generation AWS Outposts racks are supported. For more information on gp3 volumes, see the product overview page. For a current list of AWS Regions and countries/territories where second-generation AWS Outposts racks are supported, check out the AWS Outposts racks FAQs page.
 

 

​You can now use Amazon EBS General Purpose SSD volumes (gp3) volumes with the second-generation AWS Outposts racks for your workloads that require local data processing and data residency. The latest generation of gp3 enables you to provision performance independently of storage capacity, delivering a baseline performance of 3,000 IOPS and 125 MB/s at any volume size. With gp3 volumes, you can scale up to 16,000 IOPS and 1,000 MB/s, delivering 4x the maximum throughput of the previously supported gp2 volumes. EBS gp3 volumes on second-generation AWS Outposts are ideal for a wide variety of performance-intensive applications, including MySQL, Cassandra, virtual desktops, and Hadoop analytics clusters. AWS Outposts racks offer the same AWS infrastructure, AWS services, APIs, and tools to virtually any on-premises data center or colocation space for a truly consistent hybrid experience. Second-generation AWS Outposts racks support the latest generation of x86-powered Amazon Elastic Compute Cloud (Amazon EC2) instances, starting with C7i, M7i, and R7i instances. These instances deliver twice the vCPU, memory, and network bandwidth, as well as up to 40% better performance compared to C5, M5, and R5 instances on first-generation AWS Outposts racks. You can manage gp3 volumes using the AWS Management Console, the AWS Command Line Interface (CLI), or the AWS SDKs in all Regions and countries/territories where second-generation AWS Outposts racks are supported. For more information on gp3 volumes, see the product overview page. For a current list of AWS Regions and countries/territories where second-generation AWS Outposts racks are supported, check out the AWS Outposts racks FAQs page.