この日はArchitecture Blog、Compute Blog、Security Blogから計4件が公開されました。Architecture系では、AWS Network FirewallとAWS Transit Gatewayを用いてAmazon Elastic VMware Service (Amazon EVS)環境をクラスター・VPC・オンプレミス・インターネット間で集中検査するアーキテクチャで保護する方法が紹介されました。Compute系では、AWS Step FunctionsとAmazon Bedrockのバッチ推論を組み合わせ、大規模なドキュメント処理を自動化して静的な文書群を生成AI向けの検索可能なナレッジベースへ変換するパイプラインが解説されています。Security系では、AWS Private Certificate Authorityの分割CRL(partitioned CRLs)対応と、Amazon EKS向けのSecrets Store CSI Driverプロバイダー(Secrets Managerアドオン)が取り上げられました。
AWS Network FirewallによるAmazon EVS環境の集中検査型保護
AWS Step FunctionsとBedrockバッチ推論による大規模ドキュメント処理
AWS Private Certificate Authorityが分割CRLをサポート
Amazon EKS向けSecrets Store CSI Driverプロバイダー(Secrets Managerアドオン)
Public Key Infrastructure (PKI) is essential for securing and establishing trust in digital communications. As you scale your digital operations, you’ll issue and revoke certificates. Revoking certificates is useful especially when employees leave, migrate to a new certificate authority hierarchy, meet compliance, and respond to security incidents. Use the Certificate Revocation List (CRL) or Online […]
In this post, we introduce the AWS provider for the Secrets Store CSI Driver, a new AWS Secrets Manager add-on for Amazon Elastic Kubernetes Service (Amazon EKS) that you can use to fetch secrets from Secrets Manager and parameters from AWS Systems Manager Parameter Store and mount them as files in Kubernetes pods. The add-on […]
In this post, we demonstrate how to utilize AWS Network Firewall to secure an Amazon EVS environment, using a centralized inspection architecture across an EVS cluster, VPCs, on-premises data centers and the internet. We walk through the implementation steps to deploy this architecture using AWS Network Firewall and AWS Transit Gateway.
Organizations often have large volumes of documents containing valuable information that remains locked away and unsearchable. This solution addresses the need for a scalable, automated text extraction and knowledge base pipeline that transforms static document collections into intelligent, searchable repositories for generative AI applications.