AWS Lambda console code editor now includes a read file listing all the environment variables associated with the function, making it easier for developers to discover the variables and reference them in their code. Environment variables are key-value pairs that developers use to extend a function's.. read more  

Amazon Detective has expanded its capabilities by including Amazon Inspector network reachability and software vulnerability findings alongside Amazon GuardDuty findings, providing combined threats and vulnerabilities to help security analysts prioritize their focus. By automatically collecting find.. read more  

AWS has released Amazon Verified Permissions, a service that offers fine-grained authorization and permissions management for application development. The service utilizes Cedar, an open-source language for access control, allowing users to define permissions through easily comprehensible policies. .. read more  

Amazon QuickSight has launched new API capabilities that allow you to automate and accelerate your BI asset deployment and management. With these new APIs, you can get programmatic access to export and import QuickSight assets such as dashboards, analysis, datasets including ingestion schedules, dat.. read more  

Amazon EMR now supports the price-capacity-optimized allocation strategy for Amazon EC2 Spot Instances, allowing users to run Spot Instances at a lower price and with a lower interruption rate. Additionally, users can choose from four allocation strategies, including price-capacity-optimized, capaci.. read more  

Amazon Inspector now offers the ability to export a consolidated Software Bill of Materials (SBOMs) for all monitored resources, providing key information about software supply chain, including software packages and associated vulnerabilities. Users can download the SBOM artifacts and analyze softwa.. read more  

AWS WAF Fraud Control introduces Account Creation Fraud Prevention, a managed protection that prevents the creation of fake or fraudulent accounts, protecting against activities like phishing attacks and promotional abuse... read more  

AWS customers can now use Amazon Cognito and Amazon Verified Permissions together to add fine-grained authorization to their applications. Verified Permissions allows you to write policies for fine-grained access control and evaluate them based on the context of an access request, using attributes f.. read more  

Fine-tuning large language models (LLMs) using Amazon SageMaker notebooks provides improved performance on domain-specific tasks. The use of Hugging Face's parameter-efficient fine-tuning (PEFT) library and quantization techniques throughbitsandbytesallows for interactive fine-tuning of extremely la.. read more  

Omegapoint identified two potential security issues in AWS API Gateway authorizers. They reported these issues to AWS in November 2022 and January 2023, and AWS implemented mitigations for all customer accounts in May 2023... read more