Amazon CloudWatch now supports tags on dashboards

Mastering Secure CI/CD for ECS with GitHub Actions

Bài viết hướng dẫn xây dựng quy trình CI/CD an toàn cho ECS trên Fargate bằng GitHub Actions, cải tiến vận hành như hợp nhất workflow, dùng commit hash làm tag ảnh container, quản lý định nghĩa task và service với ecspresso. Ngoài ra, bài cũng đề cập đến biện pháp bảo mật như AssumeRole không dùng key với OpenID Connect, quét lỗ hổng bằng Trivy và Dockle, cùng multi-stage build để giảm bề mặt tấn công.

Lập trình viên cần đọc bài này để tìm hiểu cách xây dựng và tối ưu hóa một chu trình CI/CD an toàn trên AWS ECS Fargate bằng GitHub Actions, từ việc quản lý mã nguồn đến bảo mật container và giảm diện tích tấn công.

Amazon to invest an extra $13bn in Indian cloud and AI by 2030

Amazon announced an additional $13bn investment in India by 2030, bringing its total commitment to $48bn for 2026–2030. The new funds will expand AWS data centre capacity in Mumbai and Hyderabad, providing access to custom AI chips, managed AI services, and developer tools. CEO Andy Jassy made the announcement in New Delhi during a meeting with Prime Minister Modi. The shift marks a strategic pivot from Amazon's earlier India focus on retail toward cloud and AI infrastructure, mirroring similar large-scale commitments from Microsoft and Google Cloud in the country. Amazon also cited broader economic targets including support for 3.8 million jobs and AI education for four million students.

Running pgvector in production on Amazon Aurora PostgreSQL

A comprehensive operational guide for running pgvector on Amazon Aurora PostgreSQL in production. Covers choosing between HNSW and IVFFlat indexes (or no index at all for small/partitioned datasets), configuring distance operators (cosine vs inner product), scaling to millions of vectors with quantization and partitioning, managing HNSW index churn via REINDEX CONCURRENTLY or partition-based rebuilds, capacity planning for memory-resident HNSW graphs, and observability using pg_stat_statements, CloudWatch metrics, and custom recall tracking. Includes concrete SQL examples, recommended parameter values (m=16, ef_construction=128), and a two-stage binary quantization retrieval pattern for large datasets.

Template-based data extraction is dead. Here’s what comes next.

Amazon Bedrock Data Automation (BDA) is a fully managed AWS service that uses foundation models to extract, classify, and transform unstructured content from documents, images, audio, and video into structured data. Unlike brittle template-based systems, BDA supports standard outputs for common use cases and custom blueprints for schema-defined extraction. A walkthrough covers creating projects via the console, configuring standard and custom outputs, and using the Python boto3 SDK to create blueprints, invoke async jobs, and poll for results. BDA supports five core automation types: classification, extraction, transformation, normalization, and validation, with use cases spanning financial services, insurance, HR/legal, customer support, and compliance.

Brussels moves to put AWS and Azure under its toughest tech rules

The European Commission has issued preliminary findings that AWS and Azure should be designated as gatekeepers under the Digital Markets Act, despite neither service meeting the regulation's standard quantitative thresholds. Brussels is invoking the DMA's qualitative route, arguing both platforms serve as critical gateways for EU businesses. If designated, the two cloud giants would face obligations including no self-preferencing, mandated interoperability, and data portability rules aimed at reducing vendor lock-in. The move is partly motivated by cloud infrastructure's growing role as the foundation for AI adoption across Europe. Both Amazon and Microsoft have objected, and a defence phase is now underway before any final decision.

Amazon ups India bet with fresh $13B AI infrastructure investment

Amazon announced a $13 billion investment to expand AWS data center capacity in India through 2030, bringing its total India investment commitments to $48 billion. The announcement followed a meeting between CEO Andy Jassy and Prime Minister Modi. This is Amazon's third major India commitment in three years. The move is part of a broader wave of global tech investment in India's AI infrastructure, with Microsoft pledging $17.5 billion and Google $15 billion. Amazon is also expanding its retail and quick-commerce operations in India, planning 20+ fulfillment centers and extending its Amazon Now service to 300+ cities.

Centralized traffic inspection for Oracle Database@AWS

Two centralized network traffic inspection patterns for Oracle Database@AWS are detailed: one using AWS Transit Gateway with a dedicated inspection VPC for single-Region deployments, and another using AWS Cloud WAN with service insertion for multi-Region architectures. Both patterns route east-west (app-to-database) and north-south (internet outbound) traffic through a firewall inspection VPC because inline inspection cannot be deployed directly in the ODB transit VPC. Step-by-step packet walkthroughs cover each flow, and key considerations include peered CIDRs configuration, appliance mode for flow symmetry, DNS traffic handling, and multi-Region deployment strategies.