Amazon CloudWatch now offers CloudWatch Omni, an AI-powered observability experience for the applications and AI agents you run together. You reach Omni through a dedicated URL for your organization and sign in with the identities you already manage, so working in Omni does not require access to the AWS Management Console. Omni is built on OpenTelemetry: the telemetry you already send to CloudWatch appears in Omni with nothing to reconfigure, and any other workload you instrument with OpenTelemetry sends its telemetry to an OpenTelemetry Protocol (OTLP) endpoint.

CloudWatch Omni offers both agent observability and application observability in a single experience. In our companion post, we introduced the agent observability capabilities of Omni for generative AI and agentic workloads. In this post, we present the application observability experience.

Engineering teams spend a significant portion of their observability time maintaining dashboards, tuning thresholds, and switching between tools to piece together what happened during an incident. When an issue crosses team boundaries, context gets lost in Slack threads and screenshots rather than flowing naturally to the next engineer. CloudWatch Omni changes this by organizing observability around your applications rather than individual signals, and bringing your whole team into the same workspace.

What CloudWatch Omni brings
CloudWatch Omni addresses three problems that engineering teams told us they face today.

One collaborative experience for your whole team. Every engineer accesses CloudWatch Omni through a single URL with enterprise SSO (via IAM Identity Center, supporting Okta, Azure AD, and other providers). No AWS Console access is required. SREs, developers, database engineers, and managers share the same data and investigation context. When an investigation escalates, the next person joins the same session with full context already in front of them.

The system adapts as your applications evolve. CloudWatch Omni discovers your services, maps dependencies, and adjusts alarms automatically. Instead of manually curating dashboards and tuning thresholds, you declare what matters (availability targets, latency budgets, error rate thresholds) and Omni adapts as your system changes. When you deploy new services, Omni updates the application topology automatically.

AI-powered investigation with Amazon DevOps Agent. Amazon DevOps Agent participates alongside your team in investigation sessions, correlating signals and suggesting next steps. The agent works from the same telemetry your engineers see, so its suggestions are grounded in the actual state of your application. It identifies correlated events across services, traces root cause paths through your dependency graph, and maintains investigation history for post-incident review.

How an investigation works
When something breaks, CloudWatch Omni opens an investigation session pre-loaded with context. Here is a typical incident workflow:

An alarm fires on elevated error rates in your checkout service. Omni opens a session showing the service topology, correlated signals (a deployment 10 minutes earlier, increased latency from a downstream payment API), and DevOps Agent’s initial analysis.

Your on-call SRE confirms the deployment correlation, pulls in the trace view to identify failing endpoints, and checks if the payment API latency correlates with a capacity limit.

The SRE escalates to the payments team. The payments engineer joins the same session and sees everything found so far, plus DevOps Agent’s correlation with a configuration change in the payment provider’s API gateway. They identify the root cause and roll back.

The entire investigation history is captured automatically. No separate incident report needed.

Walkthrough: setting up your first Space
To set up CloudWatch Omni for your team, open the CloudWatch console and click “Try CloudWatch Omni.”

Figure 1. CloudWatch console — Omni setup page

Next, connect your identity provider through IAM Identity Center (supporting Okta, Azure AD, and other SAML 2.0 providers). Once connected, your team members access Omni directly at your dedicated URL without needing AWS Console credentials.

Create a Space for your team. A Space groups the applications your team owns and the telemetry associated with them.

Figure 2. CloudWatch Omni Home — your team’s workspace with application monitoring, analytics, and agent observability

Once created, Omni discovers your services automatically and maps the dependencies between them. You see your application topology immediately.

Figure 3. Application topology — services and dependencies mapped automatically

You can ask CloudWatch Omni any question about your applications in plain English, and Omni will analyze your telemetry data and surface insights.

Figure 4. Interact with your telemetry in natural language

You can also set up service health alerts, configure what matters to your team, and trigger an AWS DevOps agent investigation to identify the root cause and develop a mitigation plan.

Figure 5. Investigation session — DevOps Agent identifies root causes and suggests next steps

Application-centric organization
CloudWatch Omni organizes telemetry by application rather than by infrastructure component. The system automatically discovers services from the telemetry data and AWS Config resource discovery, maps dependencies, and lets you see your application as a connected system rather than a collection of isolated resources.

Each team gets a Space that contains the applications they own. A Space points at existing CloudWatch data (logs, metrics, traces, and alarms) with no additional data movement required. Dynamic views replace the maintenance burden of static dashboards, providing ongoing visibility into SLOs and application health.

Getting started
Getting started takes minutes and doesn’t require reconfiguration of your existing CloudWatch setup.

If you’re an existing CloudWatch customer: Click “Try CloudWatch Omni” in the CloudWatch console. All your existing telemetry (logs, metrics, traces, and alarms) is immediately available. Workloads are discovered automatically, and you can start an investigation or browse your application topology right away.

For organization-wide deployment: An administrator configures a domain, connects your identity provider via IAM Identity Center, defines Spaces for teams and environments, and invites users. Each Space points at existing CloudWatch data with no additional data movement required.

For applications in other environments: CloudWatch Omni provides connectors that make it easy to bring in telemetry from additional environments. All ingested telemetry appears alongside your AWS data in the same Spaces and investigation sessions.

For generative AI and agentic workloads: The same CloudWatch Omni experience delivers purpose-built observability for AI agents, including trace exploration, evaluation frameworks, and real-time monitoring. In our companion post, we introduced the agent observability capabilities of Omni; for that walkthrough, see Introducing Amazon CloudWatch Omni: AI-powered observability for generative AI and agentic workloads.

Things to know

• CloudWatch Omni extends CloudWatch. Existing alarms, dashboards, APIs, and console workflows continue unchanged.
• Access is through a dedicated web application with enterprise SSO. Engineers don’t need AWS Console access to use it.
• Once you setup, DevOps Agent is enabled by default in every Omni investigation session.

Pricing and availability
Amazon CloudWatch Omni is now available. Existing CloudWatch customers can try it directly from the CloudWatch console. For pricing details, visit the Amazon CloudWatch pricing page.

To get started, visit Amazon CloudWatch Omni or click “Try CloudWatch Omni” in the Amazon CloudWatch console.

If you want to call APIs, search documentation, find regional availability, and check troubleshooting about this feature, try using the AWS MCP Server and plugins with your preferred AI tool. Share your feedback on AWS re:Post or reach out through your usual AWS Support contacts.

— Daniel Abib

The post Introducing Amazon CloudWatch Omni: collaborative AI-powered observability for your applications appeared first on The NOKIA Blog.

Today, Amazon CloudWatch introduces CloudWatch Omni, a unified observability experience for application and AI workloads that is app-centric, AI-powered, built on open standards, and delivered off-console. CloudWatch Omni is a purpose-built observability, evaluation, and experimentation solution for AI agents. It helps teams design, evaluate, and operate AI agents across any model provider, framework, or runtime, with an eval-driven workflow, support for the tools you already use, and observability delivered where you work: directly in your IDE and through a standalone web experience, separate from the AWS Management Console.

Organizations deploying agentic AI systems face observability challenges that traditional monitoring can’t address. Agent behavior is non-deterministic: a prompt change can degrade response quality even when standard metrics show no errors. Teams spend hours manually reviewing logs across multiple systems, unable to pinpoint what changed or why. Existing tools force teams to choose between siloed generative AI monitoring or fragmented solutions requiring constant context-switching between their coding environment and browser-based dashboards.

CloudWatch Omni captures every trace and includes built-in evaluators for correctness, coherence, retrieval quality, and tool selection, among others. You can compare prompt versions side by side in the playground, build test datasets from production traffic, run experiments across different configurations, and detect regressions automatically.

Two surfaces for development and operations
CloudWatch Omni delivers observability through two complementary surfaces. Developers get a native extension inside VS Code and Kiro (the currently supported IDEs), where traces appear as you run your agent with a playground and evaluators a click away. Operators get a standalone web experience, separate from the AWS Management Console to monitor the fleet, accessible through SSO with no AWS console needed. Both share the same data: the trace a developer debugs is the trace an operator investigates.

The Cloud Login feature connects your local IDE environment to your AWS account, enabling you to send telemetry data to Amazon CloudWatch for persistent storage, share traces with your team, and access production dashboards. This connection is optional. You can use CloudWatch Omni entirely locally during development, then connect to the cloud when you are ready to monitor agents in production.

Getting started
CloudWatch Omni offers two ways to get started: through the IDE extension (for VS Code and Kiro) or directly through the cloud experience, where you can start sending telemetry data to CloudWatch without installing any IDE extension. In this walkthrough, I install the extension, create an agent, run it, and explore the traces and evaluation tools from my IDE.

After installing the CloudWatch Omni extension from the VS Code Marketplace, the CloudWatch Omni icon appears in the Activity Bar. From the welcome screen, I selected Get started with Sample Project to load a pre-configured agent with sample trace data or use shortcut to Command Palette using Command + Shift + P (on macOS) or Ctrl + Shift + P (on Windows/Linux) and select Omni: Create a new Project

Figure 1. CloudWatch Omni welcome screen & create new project in VS Code

The sample project comes with an agent implementation and example datasets. Part of the getting-started experience is adding OpenTelemetry instrumentation, and CloudWatch Omni guides you through each step. You can also create a new agent from scratch. CloudWatch Omni walks you through the process using an interactive chat where you define the agent’s purpose, select a model provider, and configure tools. All data is stored locally by default. You can optionally connect to AWS to send data to Amazon CloudWatch.

After verifying the configuration, I started the local dev server and sent a question to the agent. What makes this different from a typical chatbot interface is what happens next: selecting View Trace shows exactly how the agent processed the request.

Figure 2. CloudWatch Omni guides your AI code assistant to configure the local development environment for testing

CloudWatch Omni integrates with AI code assistants such as Kiro, Claude Code, and Codex to streamline the setup process. These assistants can configure the Dev Server, install dependencies, and set up instrumentation on your behalf, so you can go from installation to running your first traced agent session in minutes without manual configuration.

Figure 3. Interacting with the agent and viewing traces

Traces are essential for understanding AI agent behavior. Unlike traditional request-response systems, agents make multiple decisions per invocation: choosing tools, composing prompts, and chaining sub-calls. Without full trace visibility, diagnosing why an agent produced an incorrect answer or took an unexpected path becomes guesswork. CloudWatch Omni records every step in a structured timeline so you can pinpoint exactly where behavior diverged.

The Trace Explorer shows a detailed breakdown of every step the agent took (LLM calls, tool invocations, and reasoning steps) in a structured, hierarchical timeline. I could drill into any span to inspect inputs, outputs, token usage, and latency.

Figure 4. Trace Explorer showing the agent’s execution timeline

The Trace Explorer also supports Compare mode, which places two traces side by side to see how different prompts or configurations affect behavior. Compare mode is especially helpful when debugging regressions. And with Ask Assistant, an AI agent analyzes your traces to surface patterns and anomalies, answering questions like “Why did the agent call this tool twice?”

Figure 5. Comparing two traces side by side

Evaluation is what turns observability into actionable quality improvement for generative AI. Traditional metrics like latency and error rate cannot tell you whether an agent’s response was helpful, coherent, or factually correct. Evaluators score each response against quality dimensions, letting you measure what users actually experience and catch regressions that standard monitoring misses entirely.

CloudWatch Omni includes 17 built-in evaluators for metrics like coherence, helpfulness, faithfulness, and routing correctness. I selected traces from the Trace Explorer, chose evaluators, and ran an evaluation, getting per-example scores and aggregate metrics without building any custom evaluation framework.

Figure 6. Running evaluations on traces

From there, I used the Playground to test different system prompts side by side, comparing multiple model and prompt configurations in real time to see how each variation affects output quality before committing changes. With the Experiments view, I could run the same dataset against two agent variants and compare their evaluation scores, latency, and token usage side by side to pick the best-performing configuration.

Figure 7. Comparing evaluations across agent variants in the Omni Experiments console

With Prompt Management, you can version and track prompt configurations over time, making it easy to roll back when a new version underperforms.

CloudWatch Omni also provides a Session Explorer to review full conversation histories and understand how agents handle multi-turn interactions, along with an Agent Topology view that visualizes the architecture of your agent system, including sub-agents, tools, and their interconnections. You can drill into any node to inspect performance and identify bottlenecks.

CloudWatch Omni also offers a dedicated web experience accessible from any browser without an IDE. Teams can access all capabilities collaboratively, including application monitoring, analytics, agent observability, and AI-powered investigations.

Figure 8. CloudWatch Omni web experience with application monitoring, analytics, and agent observability

I curated traces into golden datasets for structured experimentation. The Experiment function runs the agent against a dataset and automatically scores results, creating benchmarks for regression testing whenever prompts or agent logic change.

If you already have an agent built with a supported framework, CloudWatch Omni provides two paths to add instrumentation: Auto-instrument with Kiro, which detects your framework and configures tracing automatically, or manual instrumentation with ready-to-use code snippets for Python and TypeScript. For detailed instrumentation guides, see the CloudWatch Omni documentation.

Supported frameworks and open standards
The walkthrough above uses the sample project, but CloudWatch Omni works with the agent frameworks teams are already using: LangChain, LangGraph, CrewAI, OpenAI SDK, Strands, Vercel AI SDK, and more, in both Python and TypeScript. It also provides native observability for agents built with Amazon Bedrock AgentCore, and uses AgentCore’s evaluation capabilities to assess agent quality directly within the Omni workflow.

Instrumentation uses open standards (OpenInference and ADOT), whether your agents run on Lambda, ECS, EKS, or other clouds. For evaluation, Omni integrates with third-party evaluators including AutoEval and DeepEval alongside built-in datasets, a playground, and batch experiments. No re-platforming required.

CloudWatch Omni brings agent observability and application observability together in a single experience. For the application observability experience, read the companion post Introducing Amazon CloudWatch Omni: collaborative AI-powered observability for your applications.

Pricing and availability
Amazon CloudWatch Omni is now generally available. The IDE extension is free to use. You don’t need an AWS account to get started. You only need AWS credentials for Amazon Bedrock models, or API keys for other providers like OpenAI or Anthropic. Get started today by installing the extension from the VS Code Marketplace.

To explore all capabilities and get started quickly, visit CloudWatch on AWS Builder Center.

If you want to call APIs, search documentation, find regional availability, and check troubleshooting about this feature, try using the AWS MCP Server and plugins with your preferred AI tool. Share your feedback on AWS re:Post or reach out through your usual AWS Support contacts.

Happy building!

— Daniel Abib

The post Introducing Amazon CloudWatch Omni: AI-powered observability for generative AI and agentic workloads appeared first on The NOKIA Blog.

There are also big differences between hosting providers. Some focus on low-cost shared hosting, while others offer managed WordPress hosting, cloud hosting, or plans built for businesses and agencies. The tools included with each plan can vary just as much. Backups, staging sites, caching, security, migrations, CDN access, and developer tools may be included, limited, or cost extra.

This comparison looks at six popular WordPress hosts: WordPress.com, Bluehost, Pressable, Cloudways, Kinsta, and SiteGround. Each provider has been tested and compared across the areas that matter when running a WordPress website.

The goal isn’t to name one host that works for everyone. A personal blog, WooCommerce store, client website, and busy online publication have very different hosting needs. Instead, the results should make it easier to see where each provider works well, where it falls short, and which type of WordPress website it suits best.

Best WordPress Hosting: Quick Recommendations

Not everyone needs to compare every plan and technical detail. These recommendations offer a quick starting point based on common WordPress projects. Each host has been selected for a different type of user, with performance, management tools, support, pricing, and the overall hosting experience taken into account.

Best Overall WordPress Host: WordPress.com

WordPress.com is our best overall host because it combines managed WordPress hosting with the flexibility and ease of use many websites need. It works well for blogs and business sites, with plans suitable for larger publications and WooCommerce stores.

Much of the technical work is handled for you, including caching, security, updates, SSL, and CDN access. All paid plans now support third-party plugins and custom theme uploads. Business adds daily backups, staging, SFTP, SSH, database access, WP-CLI, and other developer tools.

WordPress.com is run by Automattic, a company with deep ties to the WordPress open-source project and WordPress.org. That experience carries through to its managed hosting and support, which is useful when a problem involves both WordPress and the hosting platform.

There is less server maintenance to handle, while developers can choose Business when they need more advanced access. Those needing full server control may prefer cloud or VPS hosting.

Pricing varies between plans, so always compare promotional rates with the normal renewal price.

Further Information:

WordPress.com Plans & Pricing

• Personal: Supports third-party plugins and themes, custom CSS and code, along with security, support, and migration tools.
• Premium: Includes everything in Personal, with additional design, analytics, SEO, advertising, and monetization tools.
• Business: Adds daily backups, staging, SFTP, SSH, WP-CLI, database access, GitHub deployments, and other developer tools.
• Commerce: Includes the tools available with Business and adds WooCommerce and online selling tools.

All data correct as of August, 2026.

Best WordPress Managed Host: Kinsta

Kinsta is our choice for the best managed WordPress host. It is built for WordPress sites that need strong performance, reliable hosting, and useful management tools without the site owner having to manage the server.

Every WordPress site runs in its own isolated container, with access to Kinsta’s cloud infrastructure and a choice of 30 data center locations. Server caching, edge caching, a Cloudflare-powered CDN, security, daily backups, and performance monitoring are included.

Kinsta also provides a strong set of developer tools, including DevKinsta. SSH and SFTP are included with all WordPress hosting plans, WP-CLI is installed by default, and staging gives developers a separate platform to test changes. MyKinsta also offers database management, logs, analytics, and Kinsta’s APM performance tool.

The main drawback is price. Kinsta costs more than budget WordPress hosting, so it is harder to justify for a small personal site. But for businesses, busy publications, stores, and other sites where performance and support matter, the extra cost makes sense.

Further Information:

Kinsta Plans & Pricing

• Single Site Plans: Built for one WordPress website, with several levels based on traffic or bandwidth. All include CDN, edge caching, daily backups, staging, security, migrations, SSH, SFTP, and WP-CLI.
• Multiple Site Plans: Designed for users who manage several WordPress installations. These plans increase the number of sites and available resources while keeping them under one Kinsta account.
• Agency Plans: Made for agencies that manage larger collections of client sites. They provide higher limits and more capacity while retaining the same managed WordPress platform and development tools.
• Custom Plans: Available for WordPress projects that need more resources than the standard plans provide. These are better suited to very busy sites and projects with unusual hosting requirements.

All data correct as of August, 2026.

Best WordPress Blogger Host: Cloudways

Cloudways is our choice for the best WordPress blogger host, particularly for established blogs and publications that have grown beyond basic shared hosting. It provides managed cloud hosting while still giving site owners more control over server resources than most managed WordPress platforms.

With Cloudways Flexible, WordPress can run on cloud infrastructure from DigitalOcean, Vultr, Linode, AWS, or Google Cloud. You choose the provider, server size, and location, while Cloudways handles much of the server setup and management. Resources can also be increased as traffic grows.

WordPress tools include server caching, staging, cloning, automated backups, SSL, migrations, security tools, SSH, SFTP, Git, and WP-CLI. Multiple WordPress sites can also run on the same server, provided it has enough resources.

This flexibility is why Cloudways works well for established bloggers. A growing publication can increase its hosting resources without moving to another platform. The tradeoff is complexity. There are more server settings to understand than with WordPress.com or Kinsta. But for bloggers comfortable managing WordPress, that extra control can be useful.

Further Information:

Cloudways Plans & Pricing

• DigitalOcean: The most practical starting point for many WordPress blogs. Plans provide dedicated cloud resources, SSD or NVMe storage, vertical scaling, and a choice of server locations.
• Vultr: Offers a broad choice of data center locations and server configurations. It is useful when the main audience is closer to a Vultr location or a different server setup is required.
• Linode: Another option for blogs that want predictable cloud resources and a choice of server locations while keeping Cloudways responsible for much of the server management.
• AWS: Uses Amazon Web Services infrastructure and provides more server configuration choices. It is generally more expensive and is better suited to sites with requirements that justify the added cost.
• Google Cloud: Runs WordPress on Google Compute Engine through the Cloudways dashboard. Like AWS, it provides flexible server resources but usually costs more than the simpler cloud options.

All data correct as of August, 2026.

Best WordPress Developer Host: Pressable

Pressable is our choice for the best WordPress developer host. It is a fully managed WordPress platform from Automattic, the company behind WordPress.com and WooCommerce, and runs on its WP Cloud infrastructure. That WordPress focus is one of the main reasons it works so well for development work.

Developers get staging and sandbox environments for every site, along with SSH, SFTP, WP-CLI, Git, database access, and other tools needed for building and maintaining WordPress sites. DupliKits can also be used to create reusable site templates, which can save time when several projects start with a similar setup.

Pressable handles much of the hosting work in the background. Hourly and daily backups, caching, security monitoring, automatic scaling, a global CDN, and site migrations are included. There is also 24/7 support from a team that works with WordPress every day.

Pricing is higher than budget hosting, but that is not really what Pressable is competing with. The value comes from reducing server maintenance while keeping the development tools needed for regular WordPress work. For freelance developers and teams managing several sites, that balance makes Pressable a strong choice.

Further Information:

Pressable Plans & Pricing

• Signature 1: Supports one WordPress site, 30,000 monthly visits, and 20GB of storage. Suitable for developers managing a single business or client site.
• Signature 2: Supports three WordPress sites, 50,000 monthly visits, and 30GB of storage. Useful for developers who manage a small collection of client sites.
• Signature 3: Supports five WordPress sites, 75,000 monthly visits, and 35GB of storage. Offers more room for freelancers maintaining several active WordPress projects.
• Signature 4: Supports ten WordPress sites, 150,000 monthly visits, and 50GB of storage. Excellent for developers and small teams that manage a larger group of websites.
• Signature 5 and Above: Plans increase from 20 to 100 WordPress installations, with higher traffic and storage limits. They are aimed at larger development teams and agencies with many sites.

All data correct as of August, 2026.

Best WordPress Agency Host: SiteGround

SiteGround is our choice for the best WordPress agency host. It combines managed WordPress hosting with tools for building, testing, managing, and handing client websites once a project is complete and launched. GrowBig and GoGeek also allow multiple websites under one account, which makes them better suited to agency work than the single site StartUp plan.

SiteGround handles many routine hosting jobs, including WordPress updates, daily backups, caching, CDN access, SSL, security, and server maintenance. GrowBig and GoGeek also include WordPress staging, while developers have access to SSH, SFTP, WP-CLI, databases, and other common development tools.

The agency tools are the main reason for choosing SiteGround here. Team members can be added as collaborators without sharing the main account login. Finished websites can also be transferred to clients while the agency remains attached as a collaborator. GoGeek adds white label client access, so clients using Site Tools do not see SiteGround branding.

The main drawback is renewal pricing. SiteGround offers large discounts for the first year, but regular rates are much higher. Agencies should use those renewal prices when calculating the long-term cost of hosting client websites.

Further Information:

SiteGround Plans & Pricing

• StartUp: Supports one website, around 10,000 monthly visits, and 10GB of storage. It includes managed WordPress tools, daily backups, caching, CDN access, SSL, and email. The single site limit makes it less useful for agency hosting.
• GrowBig: Supports unlimited websites within its resource limits, around 100,000 monthly visits, and 50GB of storage. It adds more server resources, WordPress staging, on-demand backups, and collaboration tools. This is a good starting point for smaller agencies.
• GoGeek: Supports unlimited websites within its resource limits, around 400,000 monthly visits, and 100GB of storage. It provides more server resources and adds white-label client access, making it the strongest shared hosting plan for agencies managing client websites.

All data correct as of August, 2026.

WordPress.com is our choice for the best WooCommerce host. WooCommerce can now be installed on any paid WordPress.com plan, giving store owners more choice over how much hosting and how many store tools they actually need.

The close connection with WooCommerce is a major advantage. WordPress.com and WooCommerce are both part of Automattic, so the hosting platform is built and supported by people with a deep understanding of WordPress and WooCommerce. This becomes useful when a problem involves the store, WordPress, and the hosting environment.

For larger stores, the Commerce plan includes everything in Business, along with WooCommerce and additional selling tools. This includes real-time backups, staging, SFTP, SSH, database access, payment tools, shipping integrations, automated taxes, product recommendations, and other WooCommerce extensions.

WordPress.com also handles much of the hosting work, including caching, security, updates, SSL, and server management. Store owners can concentrate on products, orders, customers, and sales rather than maintaining the server. It may cost more than basic WooCommerce hosting, but the managed setup makes more sense as a store becomes busier.

Further Information:

WordPress.com Commerce Plans & Pricing

• Personal: WooCommerce can be installed alongside third-party plugins and themes. It provides a low-cost starting point for a very small store, but it does not include the advanced backups, staging, and developer tools available on higher plans.
• Premium: Includes everything in Personal, along with additional design, analytics, SEO, advertising, and monetization tools. WooCommerce can be installed, although growing stores may benefit from the stronger hosting tools available with Business.
• Business: Adds real-time backups, staging, SFTP, SSH, database access, WP-CLI, and other developer tools. WooCommerce can be installed normally, making Business a good choice for store owners who want to build their own WooCommerce setup.
• Commerce: Includes everything in Business and adds WooCommerce with a collection of store tools and extensions. It supports unlimited products and orders, payments, shipping integrations, automated taxes, product recommendations, abandoned cart emails, and other selling tools.

All data correct as of August, 2026.

Best Budget WordPress Host: Bluehost

Bluehost is our choice for the best budget WordPress host. Its lower-priced plans provide the tools needed to run a blog, portfolio, small business site, or other WordPress project without paying the higher monthly cost of premium managed hosting.

WordPress hosting includes managed updates, SSL, CDN access, malware scanning, backups, migration tools, and a domain for the first year. Bluehost also provides a 99.99% uptime SLA and several server locations. WordPress setup and site management are handled through a dashboard aimed at users who may not have much hosting experience.

Starter is the obvious choice for smaller sites, while Business provides more storage, supports more websites, and adds further security and backup tools. Higher performance plans are available when a site needs more resources, so there is room to move beyond the entry-level packages.

The main issue is renewal pricing. Bluehost offers large discounts for the initial term, but the regular price is considerably higher. That needs to be included when comparing it with other budget hosts. For a smaller WordPress site where keeping the initial cost low matters, Bluehost still provides a strong set of hosting tools for the money.

Further Information:

Bluehost Plans & Pricing

• Starter: Supports up to ten websites with 10GB of NVMe storage. It includes managed WordPress updates, CDN access, SSL, malware scanning, weekly backups, migration tools, and a domain for the first year. It is the best fit for blogs and smaller WordPress sites.
• Business: Supports up to 50 websites with 50GB of NVMe storage. It provides more room for growing sites and is better suited to users managing several WordPress installations or a busier business website.

All data correct as of August, 2026.

Most WordPress hosts include more than just server space. Backups, staging sites, caching, CDN access, SSL, security, and migration tools reduce the amount of work needed to maintain a site. A host may advertise backups but run them only weekly, or offer staging only on its more expensive plans.

There is also a difference between a tool being included and it being well connected to the hosting platform. The right setup depends on whether the project needs simple management or greater control.

Developer requirements can be very different from those of someone running a single blog. Staging sites, SSH, SFTP, WP-CLI, Git, database access, logs, and local development tools will save a lot of time. They are also useful when testing updates or tracking down a problem without making changes directly on a live site.

Cloudways provides the greatest server control of the hosts compared here, while Kinsta and Pressable combine strong development tools with a more managed setup. WordPress.com also provides many common development tools on suitable plans. SiteGround covers most everyday development needs, while Bluehost provides enough access for many smaller projects.

The main question is how much control is actually required. More server access is useful for some developers, but it also means taking responsibility for more of the hosting setup.

AI tools are starting to appear in WordPress hosting platforms. Many providers now use it to help monitor websites, detect security threats, improve performance, and simplify routine management tasks. Some platforms also include AI assistants that can answer questions, troubleshoot common issues, or help configure hosting settings.

While these tools can save time, they shouldn’t be the main reason for choosing a host. Performance, reliability, support, and security still matter more. AI is best viewed as a useful addition rather than a replacement for a well-managed hosting platform.

The table below shows how the six hosts in this comparison currently approach AI.

All data correct as of August, 2026.

WordPress.com currently has the most complete AI setup of the hosts compared here. Its AI website builder can create a new WordPress site, while WordPress Agent continues working inside the site after it has been built. It can help with content, layouts, images, pages, and other editing jobs.

The more interesting addition for developers is MCP support. WordPress.com can connect with outside AI agents such as ChatGPT, Claude, Cursor, and other compatible tools. These agents can read site information and, with permission, carry out tasks such as creating posts, managing content, working with media, and changing site settings. MCP is available across paid WordPress.com plans.

Other hosts are using AI in narrower ways, often concentrating on initial site creation, content generation, or hosting support. Those tools can still be useful, but they should not be a major reason to choose a host on their own. Hosting performance, support, backups, security, development tools, and long-term cost still matter much more.

How to Choose a WordPress Host

Choosing a WordPress host is one of the biggest decisions you’ll make for your website. Your hosting provider affects performance, reliability, security, and how easy your site is to manage. The right host will keep your website running smoothly and give you access to support when you need it.

No hosting plan suits every website. A personal blog has different needs than an online store or an agency managing client sites. Knowing what your website requires before comparing providers will help you narrow your options and avoid paying for services you won’t use.

When comparing hosts, look at uptime, page speed, server locations, backups, staging sites, security, support, and renewal pricing. These factors often matter just as much as the monthly cost.

The articles below cover the main topics involved in choosing a WordPress host. Whether you’re building your first website or moving to a new provider, they’ll help you compare your options and make a confident choice.

WordPress Hosting for Different Needs

Choosing a hosting plan that matches your needs can improve performance, make your website easier to manage, and help you avoid paying for resources you won’t use. As your website grows, you can move to a plan with more storage, power, and management tools.

Whether you’re building your first WordPress website, running an online store, or managing client sites, understanding the strengths of each hosting option will make it easier to choose the right provider.

WordPress Performance & Security

A good hosting provider gives your WordPress website a solid foundation, but hosting is only part of the picture. Your website’s setup, the tools you use, and your security practices all affect performance, reliability, and keeping your visitors safe.

Many WordPress hosts include caching, content delivery networks (CDNs), backups, malware scanning, and SSL certificates. Knowing how these features work will help you get more from your hosting plan. Regular maintenance also helps keep your website running well. Updating WordPress, plugins, and themes, monitoring performance, and following good security practices can prevent many common problems.

The articles below cover the tools and techniques that can improve website speed, strengthen security, and simplify day-to-day management.

Managing Your WordPress Hosting

Launching a WordPress website is only the start. Regular maintenance helps keep your website secure, reliable, and running smoothly. Many hosting providers include tools that simplify routine tasks, but it still helps to understand how they work.

Common tasks include migrating websites, installing SSL certificates, updating PHP, managing domains, restoring backups, and monitoring uptime. Learning these skills will help you solve problems more quickly and get more from your hosting provider.

Whether you’re looking after one website or several client projects, a regular maintenance routine can reduce downtime and keep your websites in good shape.

The articles below cover the most common hosting management tasks and show you how to handle them with confidence.

• When Your WordPress Website Has Outgrown its Hosting

  How do you know when a hosting change is needed? Here are a few things to consider.

• Hosting Your Client’s WordPress Website

  Learn how to avoid common hosting mistakes when hosting WordPress sites for clients.

• Understanding Your Web Host

  Your host may not cover all your needs. Take these steps to ensure your website runs smoothly.

• Building a Performant WordPress Website

  Learn how to boost performance with better hosting, lighter themes, and smart optimzation strategies.

• What To Know About Your Client’s WordPress Website

  We cover what to check first, including themes, plugins, custom code, hosting, and unused tools.

• Add an SSL Certificate to Your WordPress Website

  A quick SSL certificate setup can mean big benefits for your site and visitors.

• WordPress Website Email Issues

  Learn how to test sending, check logs, change the from address, set up SMTP, or use a mail delivery service.

Final Verdict: Which WordPress Host Should You Choose?

WordPress.com is our best overall choice because it works for a broad range of WordPress projects while handling much of the hosting management. It is suitable for blogs, business websites, larger publications, and WooCommerce stores, with access to plugins, themes, staging, backups, security, caching, and development tools on suitable plans.

Kinsta is the better choice for users who want premium managed WordPress hosting and are willing to pay more for it. Cloudways suits established bloggers and publications that want greater control over server resources. Pressable is our choice for developers because its managed platform includes a strong set of WordPress development tools.

SiteGround makes sense for agencies managing several client websites, particularly when collaboration and site management tools are needed. And Bluehost remains the budget choice for smaller WordPress sites where keeping the hosting bill low matters more than having advanced management tools.

No host wins every category because WordPress websites have different requirements. The best option is the provider that has enough performance and resources for the site, includes the tools that will actually be used, and remains affordable after introductory pricing ends. For most WordPress users looking for a balance across those areas, WordPress.com gets our overall recommendation.

WordPress Hosting FAQs

WordPress hosting can look more complicated than it needs to be. Hosting companies use different plan names, prices, limits, and technical terms, even when the services are similar. These answers cover some of the most common questions about choosing and using WordPress hosting.

• What is the best hosting for WordPress?
  WordPress.com is our best overall WordPress host because it combines managed hosting with good performance, security, backups, CDN access, and WordPress support. Kinsta is our choice for managed hosting, Cloudways for bloggers, Pressable for developers, SiteGround for agencies, and Bluehost for smaller budgets.
• How much should WordPress hosting cost?
  Basic WordPress hosting can cost only a few dollars per month, while managed hosting may cost $20 to $50 per month or more. Larger sites and stores can cost considerably more. Always check the regular renewal price because introductory rates can make the first term look much cheaper.
• Do I need managed WordPress hosting?
  No. Smaller blogs, portfolios, and business sites can run well on lower-cost hosting. Managed WordPress hosting becomes more useful for busy sites, stores, and businesses that benefit from automatic backups, security, caching, staging, and WordPress-focused support.
• Can I change WordPress hosts later?
  Yes. WordPress sites can be moved between hosting providers. Many hosts provide migration tools or will move the site for you. Keep the old hosting active until the new site has been checked and the domain is pointing to the new server.
• Does better hosting make WordPress faster?
  Better hosting can improve WordPress performance by providing faster servers, more resources, caching, and CDN access. But hosting cannot fix every problem. Large images, heavy themes, slow plugins, external scripts, and database problems can still make a site slow.
• Is WordPress hosting different from regular web hosting?
  WordPress hosting is web hosting set up with WordPress in mind. It may include WordPress updates, caching, backups, security, staging, WP-CLI, and specialist support. WordPress can also run on regular hosting as long as the server meets its requirements.
• Do I need separate hosting for WooCommerce?
  No. WooCommerce runs on WordPress and does not require a separate type of hosting. But stores can need more server resources because carts, checkout pages, customer accounts, orders, and stock changes create more database activity than a typical WordPress site.
• How much traffic can WordPress hosting handle?
  There is no single number. A cached blog and a busy WooCommerce store can use very different resources even with the same number of visitors. Check the host’s traffic, bandwidth, storage, CPU, memory, and other resource limits before choosing a plan.

Read more articles by Paul Andrew

The post The Best WordPress Hosting in 2026 appeared first on The NOKIA Blog.

Designers, photographers, illustrators, and other creative professionals also have practical requirements. Staging makes it possible to test layout changes privately. Automatic backups protect client work, while collaboration tools can help freelancers and agencies manage several websites. Good support is also valuable when a technical problem interrupts a project or affects a live site.

This collection compares WordPress hosts based on the features that matter most to creatives. These include performance, media handling, storage, theme and plugin support, staging, backups, client management, and long term cost.

Some options are suited to a single portfolio, while others provide the tools needed to manage client websites or run a creative agency. The best choice depends on the type of work being presented and how much control the website owner needs.

Quick Recommendations

Each of these hosts suits a different type of creative website. WordPress.com offers the simplest overall package, while Kinsta and Pressable provide stronger tools for studios and client work. Cloudways gives experienced users more control, and Rocket.net is a good match for image heavy portfolios.

WordPress.com is the best choice for creatives who want managed hosting with little technical maintenance. Kinsta is better suited to established studios that place greater value on performance, staging, and developer tools. Pressable is worth considering when several client websites need to be built, tested, and managed from one account.

Cloudways offers more flexibility but requires greater technical confidence. Rocket.net offers managed performance and a built in CDN for visual websites with an international audience. SiteGround and Hostinger cost less at the start, although their renewal prices are considerably higher.

Prices shown are monthly equivalents based on the billing terms displayed by each provider.

What Creatives Should Look for in WordPress Hosting

Creative websites often contain large images, complex layouts, video, animation, and interactive features. These elements can place more pressure on hosting than a basic blog or small business website.

• Image and media performance: Look for server caching, CDN access, and enough storage for a growing media library. Image compression and support for WebP or AVIF can also help portfolio pages load faster.
• Theme and design tool support: The host should support custom themes and third party plugins. Designers using page builders, animation plugins, or Advanced Custom Fields may also benefit from higher PHP memory and stronger server resources.
• Staging and development tools: Staging allows design changes, theme updates, and new layouts to be tested privately. SFTP, SSH, WP CLI, Git, database access, and PHP controls are also useful for custom and client websites.
• Client and team management: Freelancers and agencies may need collaborator accounts, separate permissions, site cloning, and a central dashboard for managing several projects. Site transfer and billing handover tools can also simplify client delivery.
• Backups and site recovery: Automatic backups provide protection when an update, code change, or plugin conflict causes a problem. Check how often backups are created, how long they are stored, and whether the website can be restored with a single click.
• Pricing and renewal costs: Check the regular renewal rate rather than relying on the introductory price. Storage, traffic, staging, backups, email, and additional websites may depend on the plan, so the cheapest option is not always the best value.

Top WordPress Hosts for Designers & Creatives

1. Best Overall for Creatives: WordPress.com

WordPress.com is a good choice for creatives who want managed hosting without spending much time on server maintenance. Updates, security, backups, caching, and performance tools are handled for you, leaving designers to manage their website through a familiar WordPress dashboard.

The Business plan is the best fit for a professional portfolio or creative business. It includes 50GB of storage, a global CDN, staging, real time backups, and 250GB of separate VideoPress storage. Custom themes and third party plugins are supported, so designers are not limited to the themes and tools supplied. SFTP, SSH, WP CLI, Git commands, and GitHub deployments are also available for more advanced projects.

The main drawback is cost. Each website requires its own plan, which may not suit freelancers or agencies managing a large number of client sites. However, it remains a practical option for individual designers, photographers, illustrators, and creative businesses that want strong performance without dealing with the technical side of hosting.

• Recommended plan: Business.
• Best for: Professional portfolios and creative business websites.
• Key strength: Managed hosting with strong media and development tools.
• Main drawback: A separate plan is required for each website.

Read moreThe joy of art

Further Information:

2. Best for Creative Studios: Kinsta

Kinsta is well suited to established designers and creative studios that need dependable managed hosting for a professional portfolio, company website, or online store. Its platform handles caching, security, backups, and server maintenance, while the MyKinsta dashboard provides access to staging, analytics, redirects, and other WordPress tools.

Every plan includes a global CDN, automatic daily backups, free migrations, application performance monitoring, and malware removal. Designers can create a staging copy before changing a layout, installing a new plugin, or updating a custom theme. Site transfer and user access controls are also useful when a studio works with outside developers or needs to hand a project over to a client.

The main limitation for visual websites is storage. The entry plan includes 10GB, which may be restrictive for a large photography or video portfolio. Visitor, bandwidth, storage, and CDN limits can also lead to additional charges. Kinsta costs more than shared hosting, but its performance and management tools make it a strong option when the website supports an established creative business.

• Recommended plan: Single 20GB
• Best for: Established creative studios and professional portfolios
• Key strength: Managed performance and development tools
• Main drawback: Limited storage on the entry plan

Further Information:

3. Best for Freelance Designers: Cloudways

Cloudways is a good option for freelance designers who want more control than a typical managed WordPress plan provides. Websites run on cloud servers, with Cloudways supplying the dashboard, security tools, caching, backups, staging, and technical support.

The Flexible Micro plan includes 2GB of RAM, one virtual CPU, 50GB of storage, and 2TB of transfer bandwidth. It can host multiple WordPress installations, although every site shares the same server resources. Designers can create staging sites, clone existing projects, change the PHP version, and access files through SFTP or SSH. Monthly and hourly billing also make it possible to increase server resources as client work grows.

Cloudways requires more technical knowledge than WordPress.com or Kinsta. The dashboard includes server settings that may be unfamiliar to less experienced users. Cloudflare Enterprise is a paid addition on Flexible plans, while offsite backup storage is charged separately. Business email is not included. These extra costs need to be considered, but the flexible setup remains useful for freelancers managing several client websites.

• Recommended plan: Flexible Micro
• Best for: Freelance designers managing several websites
• Key strength: Flexible cloud resources and server controls
• Main drawback: More technical than fully managed alternatives

Further Information:

4. Best for Managing Client Websites: Pressable

Pressable is designed for WordPress professionals who build and maintain websites for clients. Its dashboard provides access to production, staging, and sandbox environments, giving designers separate spaces for development, testing, and client review.

The Signature plans include automatic backups, a global CDN, edge caching, free migrations, malware monitoring, and WordPress support. Granular collaborator permissions allow developers, designers, and clients to receive different levels of access. Pressable also provides site templates through DupliKits, which can save time when several projects use the same plugins, theme, or starting configuration.

The Signature 1 plan is suitable for a single client website, while higher plans support several installations. Storage and monthly visits are limited, and additional usage can result in extra charges. Pressable is also more expensive than placing several sites on one shared hosting account. However, its staging, sandbox, cloning, and collaboration tools make it a practical choice for designers who include hosting and maintenance in their client services.

• Recommended plan: Signature 1
• Best for: Designers building and maintaining client websites
• Key strength: Staging, sandbox, and collaboration tools
• Main drawback: Additional charges for storage and visitor overages

Further Information:

5. Best for Small Creative Studios: SiteGround

SiteGround is a practical choice for designers and small creative studios that need to host several websites without paying for each installation separately. Its custom Site Tools dashboard provides access to domains, email, backups, caching, security, and development tools.

The GrowBig plan supports unlimited websites and includes 50GB of storage, a CDN, daily backups, on demand backups, collaborators, and WordPress staging. Designers can test theme and layout changes before publishing them, while collaborator accounts allow clients or team members to access individual websites. Email hosting is included, which can reduce the need for another paid service.

The introductory price is low, but the renewal rate is much higher. SiteGround also uses shared hosting, so demanding WooCommerce sites or portfolios with heavy media libraries may require a more powerful plan. Even so, GrowBig offers a useful balance of storage, development tools, and multiple site support for small studios. Agencies needing Git, white label access, and priority support should consider the GoGeek plan.

• Recommended plan: GrowBig
• Best for: Small creative studios hosting several websites
• Key strength: Multiple websites with staging and collaboration tools
• Main drawback: A large price increase at renewal

Further Information:

6. Best for Portfolio Performance: Rocket.net

Rocket.net is a managed WordPress host built around Cloudflare Enterprise. Its global CDN caches website content closer to visitors, which can improve the delivery of portfolio images, fonts, scripts, and other visual assets to an international audience.

The Starter plan includes one WordPress website, unmetered visitors, 10GB of storage, 50GB of bandwidth, unlimited PHP workers, and a 99.99% uptime guarantee. Security features include a web application firewall, malware protection, and automatic updates. Daily backups are retained for 30 days, while free migrations are available for existing websites.

The 10GB storage allowance is the main concern for photographers and other creatives with large media libraries. Storage overages cost $2 per GB, so images should be resized and compressed before being uploaded. Video should usually be hosted through a separate video platform. Rocket.net is not the cheapest option for a single website, but its CDN, managed security, and straightforward pricing make it a strong choice when portfolio performance matters more than storage capacity.

• Recommended plan: Starter
• Best for: Portfolios serving visitors in several countries
• Key strength: Cloudflare Enterprise CDN included with every plan
• Main drawback: Only 10GB of storage on the Starter plan

Further Information:

7. Best Budget Option: Hostinger

Hostinger offers low cost managed WordPress hosting for designers creating a first portfolio, personal website, or small creative business site. Its custom dashboard handles WordPress installation, updates, backups, domains, email, and other common hosting tasks.

The Unlimited plan is the better choice for creative work. It includes 50GB of NVMe storage, daily backups, a CDN, and support for unlimited websites. One click staging allows designers to test theme updates and layout changes before publishing them. Email accounts, ecommerce support, and AI tools are also included, although some features are only available during the initial contract period.

The advertised monthly price requires payment for 48 months in advance. The plan renews at a much higher rate, so the full contract cost should be considered before signing up. Unlimited website claims are also governed by a fair usage policy, which means the account still has resource limits. Hostinger does not provide the same level of server control or advanced management tools found as other hosts, but it offers useful features for creatives working with a smaller budget.

• Recommended plan: Unlimited
• Best for: New portfolios and budget conscious creative businesses
• Key strength: Generous storage and multiple website support
• Main drawback: The lowest price requires a four year commitment

Further Information:

Performance Tips for Creative WordPress Websites

Good hosting can only do so much if images, video, fonts, and animation are not properly managed. The following steps can help keep a visual WordPress website responsive.

• Resize images to match the largest dimensions at which they will be displayed.
• Use WebP or AVIF files where browser support and image quality allow.
• Compress portfolio images before uploading them to WordPress.
• Use lazy loading so images outside the visible area are not loaded immediately.
• Serve images, scripts, and stylesheets through a CDN.
• Host long or high resolution videos through a dedicated video platform.
• Limit unnecessary font files, background videos, and complex animations.
• Test important portfolio pages on mobile devices and slower connections.
• Monitor storage and bandwidth use as the media library grows.

How the Hosts Were Assessed

Each host was assessed using its published plan details, feature documentation, pricing, and suitability for creative WordPress websites. The recommendations place particular weight on the following factors:

• Performance when serving images and other visual content.
• Storage, bandwidth, and visitor limits.
• Support for custom themes, plugins, and design tools.
• Staging, backups, site cloning, and recovery options.
• Developer access through SFTP, SSH, WP CLI, or Git.
• Tools for managing team members and client websites.
• Introductory pricing, renewal rates, and additional charges.

The final rankings reflect how useful each hosting service is for designers, photographers, freelancers, and creative studios. Pricing and plan limits were checked against the information published by each provider while this article was being prepared.

Final Verdict

WordPress.com is the best overall choice for designers and creatives who want managed hosting with strong media support. The Business plan includes 50GB of storage, separate VideoPress storage, staging, backups, a CDN, and developer tools. It is particularly well suited to professional portfolios and creative business websites.

Kinsta is a stronger option for established studios that value managed performance and detailed site controls. Pressable provides useful staging, sandbox, cloning, and collaboration features for designers maintaining client websites. Cloudways offers more server control and flexible resources, although it requires greater technical confidence.

SiteGround works well for small studios that want to host several websites from one account. Rocket.net is suited to portfolios with an international audience, but its storage limits need careful management. Hostinger is the most affordable option at the start and provides enough storage for a new portfolio, though its long contract and higher renewal rate should be considered.

Read more articles by Paul Andrew

The post Best WordPress Hosts for Designers & Creatives in 2026 appeared first on The NOKIA Blog.

Today, we’re announcing AWS CloudFormation Express mode, a new deployment mode that accelerates deployments for developers and AI tools iterating on infrastructure. Express mode accelerates deployments by completing when CloudFormation confirms resource configuration is applied, rather than waiting for extended stabilization checks. This reduces deployment time by up to 4 times for iterative development workflows and production scenarios.

How it works

Every CloudFormation deployment performs stabilization checks after resource configuration is applied. These checks serve an important purpose when you need to confirm resources can serve traffic before shifting load.

However, many workflows do not require full stabilization to proceed. Express mode benefits two primary use cases: iterative development workflows and production scenarios where you are comfortable with eventual stabilization. These use cases include iterating on infrastructure configurations during development, testing individual components of your application, and AI-assisted infrastructure development that benefits from sub-minute feedback loops.

With Express mode, CloudFormation completes deployments when resource configuration is applied, without waiting for stabilization checks. Resources continue becoming operational in the background. CloudFormation automatically retries dependent resources that encounter transient failures during provisioning within the same stack, without requiring any customer intervention. This built-in resilience handles timing issues between resources as they stabilize. Express mode changes when the deployment completes, not how resources are provisioned.

For example, when I create an Amazon Simple Queue Service (SQS) queue with a dead letter queue (DLQ), Standard mode takes 64 seconds, but Express mode completes in up to 10 seconds. In the case of deleting an AWS Lambda function with network interface attachment, Standard mode takes 20–30 minutes, but Express mode completes in up to 10 seconds based on my benchmarking test.

Get started with CloudFormation Express mode

When you create a CloudFormation stack in the AWS Management Console, choose Enable in the Express mode under Stack deployment options.

You can also use AWS Command Line Interface (AWS CLI), AWS SDKs, or IaC tools like AWS Cloud Development Kit (CDK), and AI tools such as Kiro.

Activate Express mode by setting the --deployment-config parameter to EXPRESS when creating, updating, or deleting stacks. No template changes are required. Express mode disables rollback by default for the fastest iteration experience. To re-enable rollback, set disableRollback to false in the deployment-config for production environments, or implement monitoring/cleanup mechanisms for failed deployments.

aws cloudformation create-stack  
   --stack-name my-app  
   --template-body file://template.yaml  
   --deployment-config '{"mode": "EXPRESS", "disableRollback": true}' 

For example, use the Express mode when you build infrastructure incrementally, adding resources one at a time. Ensure your IAM role templates follow the principle of least privilege.

# Iteration 1: Deploy IAM role
aws cloudformation create-stack 
--stack-name my-microservice 
--template-body file://iteration1-iam.yaml 
--deployment-config '{"mode": "EXPRESS"}' 
--capabilities CAPABILITY_IAM
--role-arn arn:aws:iam::123456789012:role/CloudFormationDeployRole

# Iteration 2: Add Lambda function
aws cloudformation update-stack 
--stack-name my-microservice 
--template-body file://iteration2-lambda.yaml 
--deployment-config '{"mode": "EXPRESS"}' 
--capabilities CAPABILITY_IAM
--role-arn arn:aws:iam::123456789012:role/CloudFormationDeployRole

# Iteration 3: Add SQS queue and event source mapping
aws cloudformation update-stack 
--stack-name my-microservice 
--template-body file://iteration3-sqs.yaml 
--deployment-config '{"mode": "EXPRESS"}' 
--capabilities CAPABILITY_IAM
--role-arn arn:aws:iam::123456789012:role/CloudFormationDeployRole

For AWS CDK, activate Express mode with the cdk deploy --express command when you deploy your CDK stack. This command retrieves your generated CloudFormation template and deploys it through the CloudFormation Express mode, which provisions your resources as part of a CloudFormation stack.

Express mode works with all existing CloudFormation templates and supports all CloudFormation features including change sets and nested stacks. When you enable Express mode on a parent stack, all nested stacks also use Express mode. If you need resources to be fully operational before proceeding with traffic or testing, continue using the default deployment behavior, which performs stabilization checks before completing.

Now available

AWS CloudFormation Express mode is available today in all AWS commercial Regions at no additional cost. For Regional availability and a future roadmap, visit the AWS Capabilities by Region. If you want to call APIs, search documentation, find regional availability, and check troubleshooting about this new feature, try using the AWS MCP Server and plugins with your preferred AI tool. To learn more, visit the CloudFormation documentation.

Start accelerating your deployments today, and send feedback to AWS re:Post for AWS CloudFormation or through your usual AWS Support contacts.

— Channy

The post Accelerate your infrastructure deployments by up to 4x with AWS CloudFormation Express mode appeared first on The NOKIA Blog.

In August 2025, we introduced AWS User Experience Customization (UXC) capability to tailor user interfaces (UIs) to meet your specific needs and complete your tasks efficiently. With this capability, your account administrator can customize some UI component of AWS Management Console, such as assigning a color to an AWS account for easier identification.

Today, we’re announcing additional customization capability in UXC that enables selective display of relevant AWS Regions and services for your team members. By hiding unused Regions and services, you can reduce cognitive load and eliminate unnecessary clicks and scrolling, helping you focus better and work faster. With this launch, we offer the ability to customize account color, Region, and service visibility together.

Categorize account by color

You can set a color for your accounts to visually distinguish between them. To get started, sign in to the AWS Management Console and choose your account name on the navigation bar. Your account color isn’t set yet. To set the color, choose Account.

In the Account display settings, select your preferred account color and choose Update. You can see the chosen color in the navigation bar.

By changing the account color, you can clearly distinguish the account’s purpose. For example, you can use orange for development accounts, light blue for test accounts, and red for production accounts.

Customize Regions and services visibility

You can control which AWS Regions appear in the Region selector or which AWS services appear in the console navigation. In other words, you can set to show only the Regions and services that are relevant to your account.

To get started, choose the gear icon on the navigation bar and choose See all user settings. If you are in an administrator role, you can see a new Account settings tab in the unified settings. If you have not configured a setting, all Regions and services are visible.

To set visible Regions, choose Edit in the Visible Regions section. Select your visible Regions to All available Regions or Select Regions and configure your list. Choose Save changes.

After configuring visible Region setting, you will find only selected Regions in the Regions selector on the navigation bar in the console.

You can also set visible services in the same way. Search or select services from the category. I used the Popular services category to select my favorites. When you finish selection, choose Save changes.

After configuring visible services setting, you will find only selected services in the All services menu on the navigation bar.

When you search the service name in the search bar, you can only choose selected services.

The Regions and services visibility settings control only the appearance of services and Regions in the console. They don’t restrict access through the AWS Command Line Interface (AWS CLI), AWS SDKs, AWS APIs, or Amazon Q Developer.

You can also manage these account customization settings programmatically with new visibleServices and visibleRegions parameters. For example, you can use AWS CloudFormation sample template:

AWSTemplateFormatVersion: "2010-09-09"
Description: Customize AWS Console appearance for this account

Resources:
  AccountCustomization:
    Type: AWS::UXC::AccountCustomization
    Properties:
      AccountColor: red
      VisibleServices:
        - s3
        - ec2
        - lambda
      VisibleRegions:
        - us-east-1
        - us-west-2

And you can deploy your Cloudformation template.

$ aws cloudformation deploy 
  --template-file account-customization.yaml 
  --stack-name my-account-customization

To learn more, visit the AWS User Experience Customization API Reference and AWS CloudFormation template reference.

Give it a try in the AWS Management Console today and provide feedback by selecting the Feedback link at the bottom of the console, posting to the AWS re:Post forum for the AWS Management Console, or reaching out to your AWS Support contacts.

— Channy

The post Customize your AWS Management Console experience with visual settings including account color, region and service visibility appeared first on The NOKIA Blog.

Since Amazon Web Services (AWS) introduced Savings Plans, customers have been able to lower the cost of running sustained workloads while maintaining the flexibility to manage usage across accounts, resource types, and AWS Regions. Today, we’re extending this flexible pricing model to AWS managed database services with the launch of Database Savings Plans, which help customers reduce database costs by up to 35% when they commit to a consistent amount of usage ($/hour) over a 1-year term. Savings automatically apply each hour to eligible usage across supported database services, and any additional usage beyond the commitment is billed at on-demand rates.

As organizations build and manage data-driven and AI applications, they often use different database services, engines and deployment types, including instance-based and serverless options, to meet evolving business needs. Database Savings Plans provide the flexibility to choose how workloads run while maintaining cost efficiency. If customers are in the middle of a migration or modernization effort, they can switch database engines and adjust deployment types, such as from provisioned to serverless as part of ongoing cost optimization, while continuing to receive discounted rates. If a customer’s business expands globally, they can also shift usage across AWS Regions and continue to benefit from the same commitment. By applying a consistent hourly commitment, customers can maintain predictable spend even as usage patterns evolve and analyze coverage and utilization using familiar cost management tools.

New Savings Plans

Each plan defines where pricing applies, the range of available discounts, and the level of flexibility provided across supported database engines, instance families, sizes, deployment options, or AWS Regions.

The hourly commitment automatically applies to all eligible usage regardless of Region, with support for Amazon Aurora, Amazon Relational Database Service (Amazon RDS), Amazon DynamoDB, Amazon ElastiCache, Amazon DocumentDB (with MongoDB compatibility), Amazon Neptune, Amazon Keyspaces (for Apache Cassandra), Amazon Timestream, and AWS Database Migration Service (AWS DMS). As new eligible database offerings, instance types, or Regions become available, Savings Plans will automatically apply to that usage.

Discounts vary by deployment model and service type. Serverless deployments provide up to 35% savings compared to on-demand rates. Provisioned instances across supported database services deliver up to 20% savings. For Amazon DynamoDB and Amazon Keyspaces, on-demand throughput workloads receive up to 18% savings, and provisioned capacity offers up to 12%. Together, these savings help customers optimize costs while maintaining consistent coverage for database usage. To learn more about the pricing and eligible usage, visit the Database Savings Plans pricing page.

Purchasing Database Savings Plans

AWS Billing and Cost Management Console helps you choose Savings Plans and guides you through the purchase process. You can get started from the AWS Management Console or use the AWS Command Line Interface (AWS CLI) and the API. There are two ways to evaluate Database Savings Plans purchases, in the Recommendations view and in the Purchase Analyzer.

Recommendations – are automatically generated from your recent on-demand usage. To reach the Recommendations view in the Billing and Cost Management console, choose Savings and Commitments, Savings Plans, and Recommendations in the navigation pane. In the Recommendations view, select Database Savings Plans and configure the Recommendation options. AWS Savings Plans recommendations analyze your historical on-demand usage to identify the hourly commitment that delivers the highest overall savings.

The Purchase Analyzer – is designed for modeling custom commitment levels. If you want to purchase a different amount than the recommended commitment on the Purchase Analyzer page, select Database Savings Plans and configure Lookback period and Hourly commitment to simulate alternative commitment levels and see the projected impact on Cost, Coverage, and Utilization.

This way is preferred if your purchasing strategy includes smaller, incremental commitments over time or if you expect future usage changes that could affect your ideal purchase amount.

After reviewing the recommendations or running simulations in Savings Plans Recommendations or Savings Plans Purchase Analyzer, choose Add to cart to proceed with your chosen commitment. If you prefer to purchase directly, you can also navigate to the Purchase Savings Plans page. The console updates estimated discounts and coverage in real time as you adjust each setting, so you can evaluate the impact before completing your order.

You can learn more about how to choose and purchase Database Saving Plans by visiting the Savings Plans User Guide documents.

Now available

Database Savings Plans are available in all AWS Regions outside of China. Give them a try and start shaping your database strategy with more flexibility and predictable costs.

– Betty

The post Introducing Database Savings Plans for AWS Databases appeared first on The NOKIA Blog.

Today we’re expanding Amazon CloudWatch capabilities to unify and manage log data across operational, security, and compliance use cases with flexible and powerful analytics in one place and with reduced data duplication and costs.

This enhancement means that CloudWatch can automatically normalize and process data to offer consistency across sources with built-in support for Open Cybersecurity Schema Framework (OCSF) and Open Telemetry (OTel) formats, so you can focus on analytics and insights. CloudWatch also introduces Apache Iceberg compatible access to your data through Amazon Simple Storage Service (Amazon S3) Tables, so that you can run analytics, not only locally but also using Amazon Athena, Amazon SageMaker Unified Studio, or any other Iceberg-compatible tool.

You can also correlate your operational data in CloudWatch with other business data from your preferred tools to correlate with other data. This unified approach streamlines management and provides comprehensive correlation across security, operational, and business use cases.

Here are the detailed enhancements:

• Streamline data ingestion and normalization – CloudWatch automatically collects AWS vended logs across accounts and AWS Regions, integrating with AWS Organizations from AWS services including AWS CloudTrail, Amazon Virtual Private Cloud (Amazon VPC) Flow Logs, AWS WAF access logs, Amazon Route 53 resolver logs, and pre-built connectors for third-party sources such as endpoint (CrowdStrike, SentinelOne), identity (Okta, Entra ID), cloud security (Wiz), network security (Zscaler, Palo Alto Networks), productivity and collaboration (Microsoft Office 365, Windows Event Logs, and GitHub), along with IT service manager with ServiceNow CMBD. To normalize and process your data as they are being ingested, CloudWatch offers managed OCSF conversion for various AWS and third-party data sources and other processors such as Grok for custom parsing, field-level operations, and string manipulations.
• Reduce costly log data management – CloudWatch consolidates log management into a single service with built-in governance capabilities without storing and maintaining multiple copies of the same data across different tools and data stores. The unified data store of CloudWatch eliminates the need for complex ETL pipelines and reduces your operational costs and management overhead needed to maintain multiple separate data stores and tools.
• Discover business insights from log data – You can run queries in CloudWatch using natural language queries and popular query languages such as LogsQL, PPL, and SQL through a single interface, or query your data using your preferred analytics tools through Apache Iceberg-compatible tables. The new Facets interface gives you intuitive filtering by source, application, account, region, and log type, which you can use to run queries across log groups of multiple AWS accounts and Regions with intelligent parameter inference.

In the next sections we explore the new log management and analytics features of the CloudWatch Logs!

1. Data discovery and management by data sources and types

You can see a high-level overview of logs and all data sources with a new Logs Management View in the CloudWatch console. To get started, go to the CloudWatch console and choose Log Management under the Logs menu in the left navigation pane. In the Summary tab, you can observe your logs data sources and types, insights into how your log groups are doing across ingestion, and anomalies.

Choose the Data sources tab to find and manage your log data by data sources, types, and fields. CloudWatch ingests and automatically categorizes data sources by AWS services, third-party, or custom sources such as application logs.

Choose the Data source actions to integrate S3 Tables to make future logs for selected data sources. You have the flexibility to analyze the logs through Athena and Amazon Redshift and other query engines such as Spark using Iceberg compatible access patterns. With this integration, logs from CloudWatch are available in a read-only aws-cloudwatch S3 Tables bucket.

When you choose a specific data source such as CloudTrail data, you can view the details of the data source that includes information regarding data format, pipeline, facets/field indexes, S3 Tables association, and the number of logs with that data source. You can observe all log groups included in this data source and type and edit a source/type field index policy using the new schema support.

To learn more about how to manage your data sources and index policy, visit Data sources in the Amazon CloudWatch Logs User Guide.

2. Ingestion and transformation using CloudWatch pipelines

You can create pipelines to streamline collecting, transforming, and routing telemetry and security data while standardizing data formats to optimize observability and security data management. The new pipeline feature of CloudWatch connects data from a catalogue of data sources, so that you can add and configure pipeline processors from a library to parse, enrich, and standardize data.

In the Pipeline tab, choose Add pipeline. It shows you the pipeline configuration wizard. This wizard guides you through five steps where you can choose the data source and other source details such as log source types, configure destination, configure up to 19 processors to perform an action on your data (such as filtering, transforming, or enriching), and finally review and deploy the pipeline.

You also have the option to create pipelines through the new Ingestion experience in CloudWatch. To learn more about how to set up and manage the pipelines, visit Pipelines in the Amazon CloudWatch Logs User Guide.

3. Enhanced analytics and querying based on data sources

You can enhance analytics with support for Facets and querying based on data sources. Facets enable interactive exploration and drill-down into logs and their values are automatically extracted based on the selected time period.

Choose the Facets tab in the Log Insights under the Logs menu in the left navigation pane. You can view available facets and values that appear in the panel. Choose one or more facets and values to interactively explore your data. I choose Facets regarding a VPC Flow Logs group and action, query to list the five most frequent patterns in my VPC Flow Logs through the AI query generator, and get the result patterns.

You can save your query with the selected Facets and values that you have specified. When you next choose your saved query, the logs to be queried have the pre-specified facets and values. To learn more about Facet management, visit Facets in the CloudWatch Logs User Guide.

As I previously noted, you can integrate data sources into S3 Tables and query together. For example, using a Query Editor in Athena, you can query correlates network traffic with AWS API activity from a specific IP range (174.163.137.*) by joining VPC Flow Logs with CloudTrail logs based on matching source IP addresses.

This type of integrated search is particularly valuable for security monitoring, incident investigation, and suspicious behavior detection. You can view if an IP that’s making network connections is also performing sensitive AWS operations such as creating users, modifying security groups, or accessing data.

To learn more, visit S3 Tables integration with CloudWatch in the CloudWatch Logs User Guide.

Now available

New log management features of Amazon CloudWatch are available today in all AWS Regions except the AWS GovCloud (US) Regions and China Regions. For Regional availability and future roadmap, visit the AWS Capabilities by Region. There are no upfront commitments or minimum fees, and you pay for the usage of existing CloudWatch Logs for data ingestion, storage, and queries. To learn more, visit the CloudWatch pricing page.

Give it a try in the CloudWatch console. To learn more, visit the CloudWatch product page and send feedback to AWS re:Post for CloudWatch Logs or through your usual AWS Support contacts.

— Channy

The post Amazon CloudWatch introduces unified data management and analytics for operations, security, and compliance appeared first on The NOKIA Blog.

Today, we’re announcing the public preview of AWS DevOps Agent, a frontier agent that helps you respond to incidents, identify root causes, and prevent future issues through systematic analysis of past incidents and operational patterns.

Frontier agents represent a new class of AI agents that are autonomous, massively scalable, and work for hours or days without constant intervention.

When production incidents occur, on-call engineers face significant pressure to quickly identify root causes while managing stakeholder communications. They must analyze data across multiple monitoring tools, review recent deployments, and coordinate response teams. After service restoration, teams often lack bandwidth to transform incident learnings into systematic improvements.

AWS DevOps Agent is your always-on, autonomous on-call engineer. When issues arise, it automatically correlates data across your operational toolchain, from metrics and logs to recent code deployments in GitHub or GitLab. It identifies probable root causes and recommends targeted mitigations, helping reduce mean time to resolution. The agent also manages incident coordination, using Slack channels for stakeholder updates and maintaining detailed investigation timelines.

To get started, you connect AWS DevOps Agent to your existing tools through the AWS Management Console. The agent works with popular services such as Amazon CloudWatch, Datadog, Dynatrace, New Relic, and Splunk for observability data, while integrating with GitHub Actions and GitLab CI/CD to track deployments and their impact on your cloud resources. Through the bring your own (BYO) Model Context Protocol (MCP) server capability, you can also integrate additional tools such as your organization’s custom tools, specialized platforms or open source observability solutions, such as Grafana and Prometheus into your investigations.

The agent acts as a virtual team member and can be configured to automatically respond to incidents from your ticketing systems. It includes built-in support for ServiceNow, and through configurable webhooks, can respond to events from other incident management tools like PagerDuty. As investigations progress, the agent updates tickets and relevant Slack channels with its findings. All of this is powered by an intelligent application topology the agent builds—a comprehensive map of your system components and their interactions, including deployment history that helps identify potential deployment-related causes during investigations.

Let me show you how it works

To show you how it works, I deployed a straigthforward AWS Lambda function that intentionally generates errors when invoked. I deployed it in an AWS CloudFormation stack.

Step 1: Create an Agent Space

An Agent Space defines the scope of what AWS DevOps Agent can access as it performs tasks.

You can organize Agent Spaces based on your operational model. Some teams align an Agent Space with a single application, others create one per on-call team managing multiple services, and some organizations use a centralized approach. For this demonstration, I’ll show you how to create an Agent Space for a single application. This setup helps isolate investigations and resources for that specific application, making it easier to track and analyze incidents within its context.

In the AWS DevOps Agent section of the AWS Management Console, I select Create Agent Space, enter a name for this space and create the AWS Identity and Access Management (IAM) roles it uses to introspect AWS resources in my or others’ AWS accounts.

For this demo, I choose to enable the AWS DevOps Agent web app; more about this later. This can be done at a later stage.

When ready, I choose Create.

After it has been created, I choose the Topology tab.

This view shows the key resources, entities, and relationships AWS DevOps Agent has selected as a foundation for performing its tasks efficiently. It doesn’t represent everything AWS DevOps Agent can access or see, only what the Agent considers most relevant right now. By default, the Topology includes the AWS resources that are contained in my account. As your agent completes more tasks, it will discover and add new resources to this list.

Step 2: Configure the AWS DevOps web app for the operators

The AWS DevOps Agent web app provides a web interface for on-call engineers to manually trigger investigations, view investigation details including relevant topology elements, steer investigations, and ask questions about an investigation.

I can access the web app directly from my Agent Space in the AWS console by choosing the Operator access link. Alternatively, I can use AWS IAM Identity Center to configure user access for my team. IAM Identity Center lets me manage users and groups directly or connect to an identity provider (IdP), providing a centralized way to control who can access the AWS DevOps Agent web app.

At this stage, I have an Agent Space all set up to focus investigations and resources for this specific application, and I’ve enabled the DevOps team to initiate investigations using the web app.

Now that the one-time setup for this application is done, I start invoking the faulty Lambda function. It generates errors at each invocation. The CloudWatch alarm associated with the Lambda errors count turns on to ALARM state. In real life, you might receive an alert from external services, such as ServiceNow. You can configure AWS DevOps Agent to automatically start investigations when receiving such alerts.

For this demo, I manually start the investigation by selecting Start Investigation.

You can also choose from several preconfigured starting points to quickly begin your investigation: Latest alarm to investigate your most recent triggered alarm and analyze the underlying metrics and logs to determine the root cause, High CPU usage to investigate high CPU utilization metrics across your compute resources and identify which processes or services are consuming excessive resources, or Error rate spike to investigate the recent increase in application error rates by analyzing metrics, application logs, and identifying the source of failures.

I enter some information, such as Investigation details, Investigation starting point, the Date and time of the incident, the AWS Account ID for the incident.

In the AWS DevOps Agent web app, you can watch the investigation unfold in real time. The agent identifies the application stack. It correlates metrics from CloudWatch, examines logs from CloudWatch Logs or external sources, such as Splunk, reviews recent code changes from GitHub, and analyzes traces from AWS X-Ray.

It identifies the error patterns and provides a detailed investigation summary. In the context of this demo, the investigation reveals that these are intentional test exceptions, shows the timeline of function invocations leading to the alarm, and even suggests monitoring improvements for error handling.

The agent uses a dedicated incident channel in Slack, notifies on-call teams if needed, and provides real-time status updates to stakeholders. Through the investigation chat interface, you can interact directly with the agent by asking clarifying questions such as “which logs did you analyze?” or steering the investigation by providing additional context, such as “focus on these specific log groups and rerun your analysis.” If you need expert assistance, you can create an AWS Support case with a single click, automatically populating it with the agent’s findings, and engage with AWS Support experts directly through the investigation chat window.

For this demo, the AWS DevOps Agent correctly identified manual activities in the Lambda console to invoke a function that intentionally triggers errors 😇.

Beyond incident response, AWS DevOps Agent analyzes my recent incidents to identify high-impact improvements that prevent future issues.

During active incidents, the agent offers immediate mitigation plans through its incident mitigations tab to help restore service quickly. Mitigation plans consist of specs that provide detailed implementation guidance for developers and agentic development tools like Kiro.

For longer-term resilience, it identifies potential enhancements by examining gaps in observability, infrastructure configurations, and deployment pipeline. My straightforward demo that triggered intentional errors was not enough to generate relevant recommendations though.

For example, it might detect that a critical service lacks multi-AZ deployment and comprehensive monitoring. The agent then creates detailed recommendations with implementation guidance, considering factors like operational impact and implementation complexity. In an upcoming quick follow-up release, the agent will expand its analysis to include code bugs and testing coverage improvements.

Availability

You can try AWS DevOps Agent today in the US East (N. Virginia) Region. Although the agent itself runs in US East (N. Virginia) (us-east-1), it can monitor applications deployed in any Region, across multiple AWS accounts.

During the preview period, you can use AWS DevOps Agent at no charge, but there will be a limit on the number of agent task hours per month.

As someone who has spent countless nights debugging production issues, I’m particularly excited about how AWS DevOps Agent combines deep operational insights with practical, actionable recommendations. The service helps teams move from reactive firefighting to proactive system improvement.

To learn more and sign up for the preview, visit AWS DevOps Agent. I look forward to hearing how AWS DevOps Agent helps improve your operational efficiency.

— seb

The post AWS DevOps Agent helps you accelerate incident response and improve system reliability (preview) appeared first on The NOKIA Blog.

Today, we’re announcing a Controls Dedicated experience in AWS Control Tower. With this feature, you can use Amazon Web Services (AWS) managed controls without the need to set up resources you don’t need, which means you get started faster if you already have an established multi-account environment and want to use AWS Control Tower only for its managed controls. The Controls Dedicated experience gives you seamless access to the comprehensive collection of managed controls in the Control Catalog to incrementally enhance your governance stance.

Until now, customers were required to adopt and configure many recommended best practices which meant implementing a full AWS landing zone at the time of setting up a multi-account environment. This setup included defining the prescribed organizational structure, required services, and more, in AWS Control Tower to start using landing zone. This approach is helpful to ensure a well-architected multi-account environment, however, for customers who already have an established, well-architected multi-account environment and only want to use AWS managed controls, it was more challenging for them to adopt AWS Control Tower. The new Controls Dedicated experience provides a faster and more flexible way of using AWS Control Tower.

How it works

Here’s how I define managed controls using the Controls Dedicated experience in AWS Control Tower in one of my accounts.

I start by choosing Enable AWS Control Tower on the AWS Control Tower landing page.

I have the option to set up a full environment, or only set up controls using the Controls Dedicated experience. I opt to set up controls by choosing I have an existing environment and want to enable AWS Managed Controls. Next, I set up the rest of the information, such as choosing the Home Region from the dropdown list so that AWS Control Tower resources are provisioned in this Region during enablement. I also select Turn on automatic account enrollment for AWS Control Tower to enroll accounts automatically when I move them into a registered organization unit. The rest of the information is optional; I choose Enable AWS Control Tower to finalize the process, and the landing zone setup begins.

The dashboard gives a summary of the environment such as the organizational units that were created, the shared accounts, the selected IAM configuration, the preventive controls to enforce policies, and detective controls to detect configuration violations.

I choose View enabled controls for a list of all controls that were installed during this process.

The setup is completed, and now I have all the infrastructure required to use the controls in this account.

Good to know

Usually, an existing AWS Organizations account is required before you can use AWS Control Tower. If you’re using the console to create controls and don’t already have an Organizations account, one will be set up on your behalf.

Now available

Controls Dedicated experience in AWS Control Tower is available today in all AWS Regions where AWS Control Tower is available.

To learn more, visit our AWS Control Tower page. For more information related to pricing, refer to AWS Control Tower pricing. Send feedback to AWS re:Post for AWS Control Tower or through your usual AWS Support contacts.

– Veliswa.

The post AWS Control Tower introduces a Controls Dedicated experience appeared first on The NOKIA Blog.

Organizations are increasingly expanding their Kubernetes footprint by deploying microservices to incrementally innovate and deliver business value faster. This growth places increased reliance on the network, giving platform teams exponentially complex challenges in monitoring network performance and traffic patterns in EKS. As a result, organizations struggle to maintain operational efficiency as their container environments scale, often delaying application delivery and increasing operational costs.

Today, I’m excited to announce Container Network Observability in Amazon Elastic Kubernetes Service (Amazon EKS), a comprehensive set of network observability features in Amazon EKS that you can use to better measure your network performance in your system and dynamically visualize the landscape and behavior of network traffic in EKS.

Here’s a quick look at Container Network Observability in Amazon EKS:

Container Network Observability in EKS addresses observability challenges by providing enhanced visibility of workload traffic. It offers performance insights into network flows within the cluster and those with cluster-external destinations. This makes your EKS cluster network environment more observable while providing built-in capabilities for more precise troubleshooting and investigative efforts.

Getting started with Container Network Observability in EKS

I can enable this new feature for a new or existing EKS cluster. For a new EKS cluster, during the Configure observability setup, I navigate to the Configure network observability section. Here, I select Edit container network observability. I can see there are three included features: Service map, Flow table, and Performance metric endpoint, which are enabled by Amazon CloudWatch Network Flow Monitor.

On the next page, I need to install the AWS Network Flow Monitor Agent.

After it’s enabled, I can navigate to my EKS cluster and select Monitor cluster.

This will bring me to my cluster observability dashboard. Then, I select the Network tab.

Comprehensive observability features

Container Network Observability in EKS provides several key features, including performance metrics, service map, and flow table with three views: AWS service view, cluster view, and external view.

With Performance metrics, you can now scrape network-related system metrics for pods and worker nodes directly from the Network Flow Monitor agent and send them to your preferred monitoring destination. Available metrics include ingress/egress flow counts, packet counts, bytes transferred, and various allowance exceeded counters for bandwidth, packets per second, and connection tracking limits. The following screenshot shows an example of how you can use Amazon Managed Grafana to visualize the performance metrics scraped using Prometheus.

With the Service map feature, you can dynamically visualize intercommunication between workloads in your cluster, making it straightforward to understand your application topology with a quick look. The service map helps you quickly identify performance issues by highlighting key metrics such as retransmissions, retransmission timeouts, and data transferred for network flows between communicating pods.

Let me show you how this works with a sample e-commerce application. The service map provides both high-level and detailed views of your microservices architecture. In this e-commerce example, we can see three core microservices working together: the GraphQL service acts as an API gateway, orchestrating requests between the frontend and backend services.

When a customer browses products or places an order, the GraphQL service coordinates communication with both the products service (for catalog data, pricing, and inventory) and the orders service (for order processing and management). This architecture allows each service to scale independently while maintaining clear separation of concerns.

For deeper troubleshooting, you can expand the view to see individual pod instances and their communication patterns. The detailed view reveals the complexity of microservices communication. Here, you can see multiple pod instances for each service and the network of connections between them.

This granular visibility is crucial for identifying issues like uneven load distribution, pod-to-pod communication bottlenecks, or when specific pod instances are experiencing higher latency. For example, if one GraphQL pod is making disproportionately more calls to a particular products pod, you can quickly spot this pattern and investigate potential causes.

Use the Flow table to monitor the top talkers across Kubernetes workloads in your cluster from three different perspectives, each providing unique insights into your network traffic patterns.

Flow table – Monitor the top talkers across Kubernetes workloads in your cluster from three different perspectives, each providing unique insights into your network traffic patterns:

• AWS service view shows which workloads generate the most traffic to Amazon Web Services (AWS) services such as Amazon DynamoDB and Amazon Simple Storage Service (Amazon S3), so you can optimize data access patterns and identify potential cost optimization opportunities.
• The Cluster view reveals the heaviest communicators within your cluster (east-west traffic), which means you can spot chatty microservices that might benefit from optimization or colocation strategies
• External viewidentifies workloads with the highest traffic to destinations outside AWS (internet or on premises), which is useful for security monitoring and bandwidth management.

The flow table provides detailed metrics and filtering capabilities to analyze network traffic patterns. In this example, we can see the flow table displaying cluster view traffic between our e-commerce services. The table shows that the orders pod is communicating with multiple products pods, transferring amounts of data. This pattern suggests the orders service is making frequent product lookups during order processing.

The filtering capabilities are useful for troubleshooting, for example, to focus on traffic from a specific orders pod. This granular filtering helps you quickly isolate communication patterns when investigating performance issues. For instance, if customers are experiencing slow checkout times, you can filter to see if the orders service is making too many calls to the products service, or if there are network bottlenecks between specific pod instances.

Additional things to know

Here are key points to note about Container Network Observability in EKS:

• Pricing – For network monitoring, you pay standard Amazon CloudWatch Network Flow Monitor pricing.
• Availability – Container Network Observability in EKS is available in all commercial AWS regions where Amazon CloudWatch Network Flow Monitor is available.
• Export metrics to your preferred monitoring solution – Metrics are available in OpenMetrics format, compatible with Prometheus and Grafana. For configuration details, refer to Network Flow Monitor documentation.

Get started with Container Network Observability in Amazon EKS today to improve network observability in your cluster.

Happy building!

— Donnie

The post Monitor network performance and traffic across your EKS clusters with Container Network Observability appeared first on The NOKIA Blog.

Today, I’m happy to announce Amazon EC2 Capacity Manager, a centralized solution to monitor, analyze, and manage capacity usage across all accounts and AWS Regions from a single interface. This service aggregates capacity information with hourly refresh rates and provides prioritized optimization opportunities, streamlining capacity management workflows that previously required custom automation or manual data collection from multiple AWS services.

Organizations using Amazon Elastic Compute Cloud (Amazon EC2) at scale operate hundreds of instance types across multiple Availability Zones and accounts, using On-Demand Instances, Spot Instances, and Capacity Reservations. This complexity means customers currently access capacity data through various AWS services including the AWS Management Console, Cost and Usage Reports, Amazon CloudWatch, and EC2 describe APIs. This distributed approach can create operational overhead through manual data collection, context switching between tools, and the need for custom automation to aggregate information for capacity optimization analysis.

EC2 Capacity Manager helps you overcome these operational complexities by consolidating all capacity data into a unified dashboard. You can now view cross-account and cross-Region capacity metrics for On-Demand Instances, Spot Instances, and Capacity Reservations across all commercial AWS Regions from a single location, eliminating the need to build custom data collection tools or navigate between multiple AWS services.

This consolidated visibility can help you discover cost savings by highlighting underutilized Capacity Reservations, analyzing usage patterns across instance types, and providing insights into Spot Instance interruption patterns. By having access to comprehensive capacity data in one place, you can make more informed decisions about rightsizing your infrastructure and optimizing your EC2 spending.

Let me show you the capabilities of EC2 Capacity Manager in detail.

Getting started with EC2 Capacity Manager
On the AWS Management Console, I navigate to Amazon EC2 and select Capacity Manager from the navigation pane. I enable EC2 Capacity Manager through the service settings. The service aggregates historical data from the previous 14 days during initial setup.

The main Dashboard displays capacity utilization across all instance types through a comprehensive overview section that presents key metrics at a glance. The capacity overview cards for Reservations, Usage, and Spot show trend indicators and percentage changes to help you identify capacity patterns quickly. You can apply filtering through the date filter controls, which include date range selection, time zone configuration, and interval settings.

You can select different units to analyze data by vCPUs, instance counts, or estimated costs to understand resource consumption patterns. Estimated costs are based on published On-Demand rates and do not include Savings Plans or other discounts. This pricing reference helps you compare the relative impact of underutilized capacity across different instance types—for example, 100 vCPU hours of unused p5 reservations represents a larger cost impact than 100 vCPU hours of unused t3 reservations.

The dashboard includes detailed Usage metrics with both total usage visualization and usage over time charts. The total usage section shows the breakdown between reserved usage, unreserved usage, and Spot usage. The usage over time chart provides visualization that tracks capacity trends over time, helping you identify usage patterns and peak demand periods.

Under Reservation metrics, Reserved capacity trends visualizes used and unused reserved capacity across the selected period, showing the proportion of reserved vCPU hours that remain unutilized compared with those actively consumed, helping you track reservation efficiency patterns and identify periods of consistent low utilization. This visibility can help you reduce costs by identifying underutilized reservations and helping you to make informed decisions about capacity adjustments.

The Unused capacity section lists underutilized capacity reservations by instance type and Availability Zone combinations, displaying specific utilization percentages and instance types across different Availability Zones. This prioritized list helps you identify potential savings with direct visibility into unused capacity costs.

The Usage tab provides detailed historical trends and usage statistics across all AWS Regions for Spot Instances, On-Demand Instances, and Capacity Reservations. Dedicated Hosts usage is not included. The Dimension filter helps you group by and filter capacity data by Account ID, Region, Instance Family, Availability Zone, and Instance Type, creating custom views that reveal usage patterns across your accounts and AWS Organizations. This helps you analyze specific configurations and compare performance across accounts or Regions.

The Aggregations section provides a comprehensive usage table across EC2 and Spot Instances. You can select different units to analyze data by vCPUs, instance counts, or estimated costs to understand resource consumption patterns. The table shows instance family breakdowns with total usage statistics, reserved usage hours, unreserved usage hours, and Spot usage data. Each row includes a View breakdown action for a detailed analysis.

The Capacity usage or estimated cost trends section visualizes usage trends, reserved usage, unreserved usage, and Spot usage. You can filter the displayed data and adjust the unit of measurement to view historical patterns. These filtering and analysis tools help you identify usage trends, compare costs across dimensions, and make informed decisions for capacity planning and optimization.

When you choose View breakdown from the Aggregations table, you access detailed Usage breakdown based on the dimension filters you selected. This breakdown view shows usage patterns for individual instance types within the selected family and Availability Zone combinations, helping you identify specific optimization opportunities.

The Reservations tab displays capacity reservation utilization with automated analysis capabilities that generate prioritized lists of optimization opportunities. Similar to the Usage tab, you can apply dimension filters by Account ID, Region, Instance Family, Availability Zone, and Instance Type along with additional options related to the reservation details. On each of the tabs you can drill down to see data for individual line items. For reservations specifically, you can view specific reservations and access detailed information about On-Demand Capacity Reservations (ODCRs), including utilization history, configuration parameters, and current status. When the ODCR exists in the same account as Capacity Manager, you can modify reservation parameters directly from this interface, eliminating the need to navigate to separate EC2 console sections for reservation management.

The Statistics section provides summary metrics, including total reservations count, overall utilization percentage, reserved capacity totals, used and unused capacity volumes, average scheduled reservations, and counts of accounts, instance families, and Regions with reservations.

This consolidated view helps you understand reservation distribution and utilization patterns across your infrastructure. For example, you might discover that your development accounts consistently show 30% reservation utilization while production accounts exceed 95%, indicating an opportunity to redistribute or modify reservations. Similarly, you could identify that specific instance families in certain Regions have sustained low utilization rates, suggesting candidates for reservation adjustments or workload optimization. These insights help you make data-driven decisions about reservation purchases, modifications, or cancellations to better align your reserved capacity with actual usage patterns.

The Spot tab focuses on Spot Instance usage and displays the amount of time your Spot instances run before being interrupted. This analysis of Spot Instance usage patterns helps you identify optimization opportunities for Spot Instance workloads. You can use Spot placement score recommendations to improve workload flexibility.

For organizations requiring data export capabilities, Capacity Manager includes data exports to Amazon Simple Storage Service (Amazon S3) buckets for capacity analysis. You can view and manage your data exports through the Data exports tab, which helps you create new exports, monitor delivery status, and configure export schedules to analyze capacity data outside the AWS Management Console.

Data exports extend your analytical capabilities by storing capacity data beyond the 90-day retention period available through the console and APIs. This extended retention enables long-term trend analysis and historical capacity planning. You can also integrate exported data with existing analytics workflows, business intelligence tools, or custom reporting systems to incorporate EC2 capacity metrics into broader infrastructure analysis and decision-making processes.

The Settings section provides configuration options for AWS Organizations integration, enabling centralized capacity management across multiple accounts. Organization administrators can enable enterprise-wide capacity visibility or delegate access to specific accounts while maintaining appropriate permissions and access controls.

Now available
EC2 Capacity Manager eliminates the operational overhead of collecting and analyzing capacity data from multiple sources. The service provides automated optimization opportunities, centralized multi-account visibility, and direct access to capacity management tools. You can reduce manual analysis time while improving capacity utilization and cost optimization across your EC2 infrastructure.

Amazon EC2 Capacity Manager is available at no additional cost. To begin using Amazon EC2 Capacity Manager, visit the Amazon EC2 console or access the service APIs. EC2 Capacity Manager is available in all commercial AWS Regions enabled by default.

To learn more, visit the EC2 Capacity Manager documentation.

— Esra

The post Monitor, analyze, and manage capacity usage from a single interface with Amazon EC2 Capacity Manager appeared first on The NOKIA Blog.