Cloud · Top stories
Architecting a Secure Landing Zone in AWS European Sovereign Cloud
This article details how to architect a secure, scalable landing zone within the new AWS European Sovereign Cloud (aws-eusc) partition. It covers account structure, identity management, logging, data protection, networking, CI/CD, and incident response, aligning with AWS Security Reference Architecture and Well-Architected Framework.
Google Cloud outlines best practices for handling cloud reliability incidents
Google Cloud published a guide detailing best practices for managing cloud reliability incidents, emphasizing preparation and a structured response workflow. The recommendations aim to help organizations minimize the impact of outages by designing for failure and practicing incident response.
Attaching Owners to Cloud Resources for Improved Governance
This article outlines a method for identifying and assigning owners to cloud resources to prevent orphaned instances and reduce unnecessary costs. It proposes using continuous inventory syncing, policies to block untagged resources, and audit trails to maintain clear ownership.
Form3 Details Multi-Cloud Strategy for Financial Services to Address Regulatory Concerns
Form3, a payment processing company, outlined its approach to running its platform on three different cloud providers simultaneously. This strategy was developed in response to UK banking regulator concerns about concentration risks associated with financial institutions relying on a limited number of cloud providers.
Migrating SQL Server Logins and Users to Google Cloud SQL After DMS Replication
Google Cloud's Database Migration Service (DMS) for SQL Server does not automatically migrate instance-level objects like server logins and permissions, which can cause application connection failures post-migration. This design choice prioritizes security, compliance, and identity modernization. Organizations must manually migrate these security objects using standard SQL Server tools to ensure proper access to Cloud SQL instances.
Automating User-Level Custom Permissions in Amazon Quick
Amazon Quick now allows automation of user-level custom permissions to enforce fine-grained access control. This enables organizations to maintain the principle of least privilege as their Quick environments scale and AI capabilities expand. The article details four architectural patterns for automating custom permission assignments across different user lifecycle stages.
Yahoo uses flexible VMs in Managed Service for Apache Spark to optimize resource allocation
Yahoo implemented flexible Virtual Machines (VMs) within Google Cloud's Managed Service for Apache Spark to automatically manage resource fluctuations. This approach allows Yahoo to maintain continuous operation of its data pipelines by dynamically selecting available VM shapes across regional zones, avoiding delays caused by fixed VM configurations.
Embed Amazon QuickSight Visuals in React Apps with Cognito User Authentication
A new tutorial details how to embed individual Amazon QuickSight visuals into React applications using Amazon Cognito for per-user authentication. This method allows for fine-grained access control and granular layout management by integrating specific charts and graphs directly into an application interface.
Developer Migrates Hosting from DigitalOcean to Hetzner Due to Geopolitical Concerns
A developer moved their PrettyGoodPing application from DigitalOcean in the U.S. to Hetzner in the E.U., citing geopolitical motivations and a desire to reduce reliance on U.S.-based services. This decision was influenced by broader concerns about the provenance of services and data.
Comparing Managed vs. Self-Hosted PostgreSQL for Production Workloads
This article outlines the benefits and trade-offs between self-managed and managed PostgreSQL services for production environments. It details how each model impacts control, engineering capacity, resilience, security, cost predictability, and access to specialist expertise, helping organizations decide which approach aligns with their operational needs.
AWS details KnowledgeForge, a solution for ITSM knowledge base management using generative AI
AWS released details on KnowledgeForge, a solution that uses generative AI to extract knowledge from resolved IT Service Management (ITSM) tickets and improve existing knowledge base articles. This solution helps organizations automate the creation of new knowledge base content and maintain the quality of their existing documentation.
Google Cloud details Apache Spark deployment models and AI troubleshooting with Gemini Cloud Assist
Google Cloud published a technical guide on deploying Apache Spark workloads, focusing on serverless and managed cluster options, resource optimization, and troubleshooting with Gemini Cloud Assist. The guide helps users choose the appropriate Spark deployment model based on workload frequency, latency requirements, and cost considerations. It also covers using Gemini Cloud Assist for resolving serverless batch pipeline failures.
Modernizing Apache Hive with Google Cloud's Lakehouse Runtime Catalog
Google Cloud introduced its Lakehouse runtime catalog as a solution to modernize Apache Hive Metastore (HMS) deployments. This catalog addresses scaling bottlenecks, siloed identity governance, and operational overhead associated with traditional HMS in cloud environments.
Customizing Amazon Quick Embedded Chat for Application Integration
Amazon Quick embedded chat now offers customization options for visual theming and communication tone, allowing developers to integrate the conversational AI interface more seamlessly into their web applications. This update addresses the need for a consistent brand experience when embedding AI chat functionalities, preventing a disjointed user interface.
Jumio Implements Real-Time Feature Store on AWS for Fraud Detection
Jumio, an identity verification provider, built a real-time feature store on AWS to address challenges like data duplication, inconsistent feature definitions, and latency in its fraud detection machine learning models. This implementation uses Amazon SageMaker Feature Store, Amazon Managed Service for Apache Flink, and Amazon Kinesis Data Streams to provide sub-100ms latency for real-time predictions.
Turbopuffer's Approach to Daily Database Upgrades Across 100+ Clusters
Turbopuffer details its method for deploying daily database upgrades across over 100 clusters, including customer-managed BYOC environments. This approach relies on a Kubernetes-native, agent-based system to manage operations without direct access to customer cloud accounts, ensuring operational consistency across different deployment models.
Tutorial: Amazon Bedrock Cost Attribution with Athena and CUDOS
A tutorial details how to visualize and analyze Amazon Bedrock costs using Amazon Athena queries and CUDOS dashboards. This process involves setting up Cost and Usage Report (CUR) 2.0 with IAM principal data and then querying this data for granular cost attribution. This enables per-user and per-application visibility of Bedrock spend.
Sharded Hub-and-Spoke Architecture Mitigates 'Noisy Neighbor' Issues in Multi-Tenant Platforms
Google Cloud engineers describe how a sharded hub-and-spoke architecture can prevent performance degradation in multi-tenant environments caused by a single tenant's high resource usage. This approach decouples processing to ensure platform resilience and maintain Service Level Agreements.
Google Voice Paid Subscriptions Offer Advanced Features Beyond Basic Phone Number Service
Google Voice offers paid subscription tiers that provide additional features beyond the free basic service, including AI-powered spam blocking and voicemail transcription. These paid plans cater to individuals and businesses needing more robust communication tools, integrating with Google Meet and Calendar.
AWS KMS vs. AWS CloudHSM: Choosing the Right Key Management Solution
AWS published a guide differentiating between AWS Key Management Service (KMS) and AWS CloudHSM for cryptographic key management. The guide clarifies that AWS KMS is suitable for most use cases due to its full management and integration, while AWS CloudHSM is for specific needs like dedicated HSM instances or legacy application support.
AWS DevOps Agent aids Network Firewall troubleshooting by correlating logs and configurations
AWS DevOps Agent can now accelerate troubleshooting for AWS Network Firewall disruptions by automatically correlating firewall configurations, logs, and recent API calls. This capability helps identify root causes of network connectivity issues more quickly, reducing resolution times from hours to minutes.
Building Multi-Region Visualizations with Highcharts in Amazon Quick Sight
This article details how to integrate Highcharts as a custom visual within Amazon Quick Sight to create multi-region data visualizations. This integration addresses limitations in native Quick Sight visualizations when analyzing complex, geographically diverse carrier performance data.
Google Public Sector Summit 2026 to Showcase AI and Cloud Solutions for Government
Google will host its Public Sector Summit on October 20th in Washington, D.C., bringing together public sector leaders to discuss how Google's AI stack and cloud infrastructure can drive mission impact. The event will feature keynotes, product demonstrations, and discussions on infrastructure, AI, and security for government organizations.
Cloudflare highlights civil society organizations using its developer services and AI automation
Cloudflare announced that civil society organizations are using its developer services and AI automation tools, supported by over $7.5 million in Cloudflare credits. This initiative aims to help non-profits build new applications and automate workflows, addressing financial constraints and security concerns in the sector.
LightCloud offers a cloud console organized like a file system for deploying web projects
LightCloud is a new platform that integrates frontend, backend, and database deployment into a single console, allowing users to deploy static sites, containers, and Postgres databases. It simplifies the deployment pipeline from commit to running service, aiming to reduce operational overhead for developers.
Google Cloud reports over $1 billion in revenue for 17 product lines and strong AI adoption
Google Cloud CEO Thomas Kurian presented updates at the Goldman Sachs Tech Conference, highlighting the company's full-stack AI approach and financial growth. Google Cloud reported 17 product lines each generating over $1 billion in revenue and significant growth in large deals, indicating expansion in its cloud and AI services.
Airtel used Google Cloud's Media CDN for IPL 2026 cricket broadcasts
Airtel partnered with Google Cloud to deliver its Indian Premiere League (IPL) 2026 cricket broadcasts, handling hundreds of petabytes of egress data and peak traffic of several Tbps. This collaboration enabled Airtel to manage massive concurrent viewership spikes and maintain a high-quality streaming experience for millions of fans.
AWS Named a Leader in Forrester Wave for AI Infrastructure Solutions Q4 2025
AWS has been recognized as a Leader in The Forrester Wave: AI Infrastructure Solutions, Q4 2025, receiving the highest score in the Strategy category. This evaluation assessed 13 providers on current offering, strategy, and customer feedback for AI infrastructure capabilities.
Uber uses Google Cloud's Application Awareness on Cloud Interconnect for network reliability
Uber adopted Google Cloud's Application Awareness on Cloud Interconnect to prioritize critical traffic and improve network reliability during its cloud migration. This tool helped Uber manage network congestion and ensure business continuity, facilitating its move to Google Cloud.
TelevisaUnivision used Google Cloud's Media CDN for FIFA World Cup streaming
TelevisaUnivision utilized Google Cloud's Media CDN to stream the FIFA World Cup to millions of viewers, particularly in Latin America. This partnership addressed the challenges of high demand and fragmented network infrastructure in the region, ensuring uninterrupted live sports broadcasting.
Google Distributed Cloud Offers On-Premises AI Solutions for Data Sovereignty
Google Cloud is promoting its Google Distributed Cloud (GDC) as a solution for organizations with strict data sovereignty requirements to access advanced AI capabilities. GDC allows enterprises to deploy Google Cloud services, including AI models like Gemini, within their own data centers, addressing concerns about jurisdictional, economic, and geopolitical risks associated with cloud adoption.
Target reduces database maintenance by 50% using Spanner Graph for retail discovery
Target migrated its product discovery data ecosystem to Spanner Graph, integrating search, vector, and transactional databases into a unified platform. This change reduced database maintenance by 50% and improved real-time personalization for shoppers.
Agent4Lease Launches Marketplace for Infrastructure and Platform Agents
Agent4Lease introduced a marketplace connecting agent authors with users who run agents on their own infrastructure. This platform allows authors to monetize their agents while users maintain control over their workload data within their existing Kubernetes, OpenStack, or bare metal environments.
Kedge Launches Cloud Platform with Forkable VM Snapshots and Global SQLite
Kedge introduced a new cloud platform offering globally distributed, hardware-isolated VMs with features like instant sandboxes, a global SQLite database, and autoscaling. This platform aims to provide a full-stack cloud environment for static sites, serverless functions, and applications, billing users per-second on actual resource consumption.
Microsoft Databases Receive Multiple 2026 PeerSpot Customer Choice / Tech Leader Recognitions
Microsoft Databases, including SQL Server, Azure SQL Database, Azure Database for PostgreSQL, and Azure Cosmos DB, received multiple 2026 PeerSpot Customer Choice / Tech Leader recognitions based on user feedback. These recognitions highlight customer valuation of reliability, scalability, operational simplicity, developer productivity, and AI readiness in Microsoft's database offerings.
Infrawrench Launches Cloud and Desktop Tool for Multi-Provider Infrastructure Management
Infrawrench introduced a new tool for managing cloud resources and services across over 25 providers from a single interface, available as a desktop application or a web platform. This tool aims to simplify infrastructure operations by integrating various functionalities like SSH access, Kubernetes management, SQL editing, and object storage browsing into one application.