AWS Highlights: re:Inforce Wrap, GLIDE 2.0, Avro, More

AWS re:Inforce 2025: New Security Innovations and More

Last week marked a significant event in the technology sector with the AWS re:Inforce conference, focusing on security advancements. This annual gathering has become a cornerstone for unveiling the latest in security technology and practices. This year, several key innovations were introduced, setting new standards for cloud security.

The AWS re:Inforce conference provided a platform for numerous announcements, which have been concisely summarized in a re:Cap post by the AWS blog team. This post connects readers to detailed blog entries about the major updates and innovations revealed during the event.

Key Security Announcements

1. IAM Access Analyzer Enhancements:
   AWS introduced advanced capabilities for the IAM Access Analyzer, a tool designed to help users verify internal access to critical AWS resources. This enhancement aims to bolster security by providing deeper insights into access permissions and reducing potential vulnerabilities.

2. Mandatory MFA for Root Users:
   Recognizing the critical need for robust security measures, AWS is now enforcing multi-factor authentication (MFA) for root users across all account types. This move is expected to significantly mitigate unauthorized access risks.

3. AWS Network Firewall with Threat Intelligence:
   A new integration of threat intelligence with AWS Network Firewall was announced, which enhances the firewall’s ability to detect and respond to cyber threats. This feature leverages real-time threat data to protect network infrastructures more effectively.

4. Exportable Public SSL/TLS Certificates:
   AWS Certificate Manager has introduced the ability to export public SSL/TLS certificates, allowing users to utilize them beyond AWS environments. This capability simplifies the management of secure communications for applications hosted on different platforms.

5. Improved AWS WAF Experience:
   The AWS Web Application Firewall (WAF) console has been updated to offer a more streamlined user experience. This improvement is intended to make configuring web application security simpler and more efficient.

6. Proactive AWS Shield Feature:
   A new feature in AWS Shield, currently in preview, proactively identifies network security issues before they can be exploited. This proactive approach aims to prevent potential threats from affecting cloud environments.

7. AWS Security Hub Enhancements:
   AWS Security Hub has been upgraded to better prioritize risks and streamline response actions. This enhancement is currently in preview and promises to facilitate more effective security management at scale.

8. Amazon GuardDuty for EKS Clusters:
   Amazon GuardDuty, a threat detection service, now extends its coverage to Amazon EKS clusters. This expansion helps secure container workloads by identifying and alerting on suspicious activity.

   Highlight: Amazon Verified Permissions for Express.js
   

   Among the various announcements, the release of an open-source package by the Amazon Verified Permissions team for Express.js stands out. This package enables developers to implement fine-grained authorization for web application APIs, simplifying the process of integrating authorization mechanisms. By reducing code complexity, this innovation enhances both application security and developer productivity.

   The Amazon Verified Permissions team has also published a comprehensive guide on how to secure Express.js application APIs using this new package. The guide covers the creation of a Verified Permissions policy store, the integration of Cedar and Verified Permissions authorization middleware, and the deployment of Cedar schemas and policies. These schemas, generated from OpenAPI specifications, are formatted for use with the AWS Command Line Interface (CLI).

   Additional Announcements from AWS
   

   Beyond security, AWS announced several other developments that caught the attention of the tech community:

   • Enhanced Lambda Support for Avro and Protobuf:
     AWS Lambda now natively supports Avro and Protobuf data formats, along with integration with schema registries like GSR, CCSR, and SCSR. This update allows users to process Kafka events using these formats without custom code, optimizing costs through event filtering.

   • Atomic Renaming in Amazon S3 Express One Zone:
     The new RenameObject API for Amazon S3 Express One Zone simplifies object renaming into a single API call, reducing operational complexity and cost. This feature accelerates applications by enabling rapid renaming of large files, such as log files, in milliseconds.

   • Valkey GLIDE 2.0 Release:
     In partnership with Google and the Valkey community, AWS announced the availability of GLIDE 2.0, a multi-language client library for Valkey, an open-source alternative to Redis. GLIDE 2.0 introduces support for Go, OpenTelemetry, and pipeline batching, enhancing observability and performance for high-throughput workloads.

     Learning and Networking Opportunities
     

     AWS continues to foster learning and development within the tech community through various events:

   • AWS GenAI Lofts:
     These collaborative spaces offer immersive experiences in cloud computing and AI, providing startups and developers with hands-on access to AI products and services, along with networking opportunities.

   • AWS Summits:
     AWS Summits are free events that bring together the cloud computing community to learn and collaborate. Upcoming summits are scheduled in Japan, India, New York City, and more, offering opportunities to engage with AWS experts and peers.

     For a comprehensive list of AWS announcements and events, visit the What’s New at AWS page.

     AWS continues to push the boundaries of cloud technology, offering innovative solutions that enhance security, efficiency, and performance. These advancements not only strengthen AWS’s position as a leader in cloud services but also empower users to build and manage secure, scalable, and efficient applications. For more detailed insights into AWS’s latest developments, keep an eye on their official blog and announcements.

For more Information, Refer to this article.