In Season 4, Episode 24, Karl and Jon are joined by Randall Hunt, CTO of Caylent, for a dynamic and insightful conversation that blends cutting-edge cloud developments with a dash of humor. They dive into some of the latest updates from AWS, including the launch of on-demand key rotation for imported keys via AWS Key Management Service, new application layer 7 DDoS protection for customers using AWS Web Application Firewall and AWS Shield Advanced, and enhanced CloudTrail logging for Amazon S3’s delete o...
In Season 4, Episode 24, Karl and Jon are joined by Randall Hunt, CTO of Caylent, for a dynamic and insightful conversation that blends cutting-edge cloud developments with a dash of humor. They dive into some of the latest updates from AWS, including the launch of on-demand key rotation for imported keys via AWS Key Management Service, new application layer 7 DDoS protection for customers using AWS Web Application Firewall and AWS Shield Advanced, and enhanced CloudTrail logging for Amazon S3’s delete objects API, which offers improved auditability and operational visibility. The discussion also explores Amazon’s ambitious investment plans in global data center infrastructure and the introduction of AWS’s new liquid cooling technology designed for next-generation AI data centers. As always, the episode takes an entertaining turn when the conversation veers into a lighthearted tangent about IKEA meatballs and flat-pack furniture.
04:04 - AWS Key Management Service (KMS) on-demand key rotation
This new feature allows users to rotate imported keys, which was previously not possible. It improves key management and security while maintaining backwards compatibility. The pricing model includes additional charges for the first two rotations, with a cap after that.
08:44 - New application layer 7 DOS protection
AWS introduced enhanced DDoS protection for Web Application Firewall and Shield Advanced customers. This feature uses machine learning to quickly learn normal traffic patterns and protect against complex layer 7 attacks, especially with the challenges posed by HTTP/3 and newer protocols.
14:17 - AWS CloudTrail enhanced logging for S3 delete objects API
CloudTrail now provides more detailed logging for S3 delete operations, including bulk deletes. This closes a gap in logging capabilities, making it easier to track and audit object deletions without relying on expensive bucket-level logging.
19:22 - Amazon's data center infrastructure investments
AWS announced significant investments in data center infrastructure globally, including $20 billion in Pennsylvania, $10 billion in North Carolina, and $5 billion in Taiwan. These investments demonstrate AWS's commitment to expanding its cloud infrastructure despite recent reports of AI data center project delays.
26:58 - AWS liquid cooling technology for AI data centers
AWS introduced a new liquid cooling system for its next-generation AI data centers. This closed-loop system allows for more efficient cooling of high-density racks, particularly for GPU workloads. The technology provides flexibility in deployment and doesn't significantly increase water consumption.
View more
