AWS Transit Gateway and AWS Cloud WAN now provide managed one-to-one NAT via Regional Private NAT Gateway, enabling customers to connect private networks with overlapping IP ranges without renumbering or deploying NAT appliances.
AWS Transform for migrations now offers three ways to bring networks to AWS: migrating and modernizing existing networks, building a new network from scratch, or converting on-premises access rules into optimized security groups deployed into existing VPCs
AWS DataSync now supports shared Virtual Private Clouds (VPCs), allowing you to create agents and run transfer tasks using subnets shared across AWS accounts with AWS Resource Access Manager (RAM).
Amazon VPC IPAM adds BGP route protection monitoring and delegated RPKI for BYOIP prefixes, enabling network administrators to centrally manage and automate route security across their organization
AWS Network Firewall now includes explicit forward proxy functionality, maintaining all existing filtering capabilities and using a single security policy for both explicit proxy and transparent firewall.
AWS Transit Gateway now offers Policy-Based Routing, enabling granular traffic control based on packet attributes without complex multi-VPC architectures
AWS now offers declarative policies for VPC Encryption Controls, enabling centralized management and consistent application across all VPCs in monitoring or enforcement mode.