Product updates
Get the latest updates on features, fixes and improvements.
969 results
Sep 9, 2026
NewAiven ConsoleAiven APIAiven Terraform providerNew project-level roles
Aiven has added three project-level roles so you can grant access with least privilege: project admin, project manager, and project read access.
Project manager
The project manager (
role:project:manager) is for day-to-day project operations. This role can view and manage services, their configuration, and key project configuration like permissions and integrations. It replaces the operator role and has fewer permissions, making it a more secure choice for granting least privilege access.Project admin
The project admin (
role:project:admin) role replaces the legacy admin role. Users with this role can manage project permissions, tags, settings, integrations, networking, and all services in the project.Project read access
The project read access role (
role:project:read) is for users who need visibility, but don’t need to make changes. It replaces the read_only role, and can view project permissions, tags, event logs, integrations, and networking. It also has read access to services, including logs, metrics, and service users. Service configuration secrets and service user passwords are redacted.Use these new permissions for new assignments. The legacy
operator,admin, andread_onlyroles will be deprecated and removed. A separate announcement will be made for the deprecation of those roles.For more information, see Aiven’s documentation on roles and permissions.
Sep 9, 2026
NewAiven ConsoleCentralized platform event logs for organizations
Aiven’s new platform event logs consolidates all logs for an organization, its units, and projects. You can now view all events across your organization in one place, with events including information on the action, user, date and time, and target resource. Filter by user, organizational unit, project, service, billing group, and time range to keep track of changes, investigate incidents, and support compliance requirements.
For more information, read the event logs documentation.
Sep 4, 2026
ImprovedAiven for Apache Kafka® ConnectBigQuery sink connector updated to version 2.15.0
Aiven for Apache Kafka® Connect now supports version 2.15.0 of the BigQuery sink connector. This version improves connector reliability:
- Automatically retries
404 Not found: Dataseterrors during streaming inserts. - Automatically retries
400 jobBackendErrorerrors during merge queries.
For configuration instructions, see Create a sink connector from Apache Kafka® to Google BigQuery. For the complete release history, see BigQuery connector releases.
- Automatically retries
Sep 4, 2026
NewOracle CloudOCI region ap-singapore-2 now on Aiven
Oracle Cloud Infrastructure (OCI) region
ap-singapore-2(Singapore West) is now supported on the Aiven Platform.See all the supported OCI regions in the documentation.
The OCI regions support is a limited availability feature. For more information or access, contact your account team.
See the documentation for all cloud providers and regions supported on the Aiven Platform.
Sep 3, 2026
NewAiven for Apache Kafka®OAuth 2.0/OIDC authentication for Karapace Schema Registry
You can now use OAuth 2.0/OpenID Connect (OIDC) bearer tokens to authenticate requests to Karapace Schema Registry on Aiven for Apache Kafka®. Schema Registry validates JSON Web Tokens (JWTs) using the same OIDC provider settings as Apache Kafka.
You can also enable role-based authorization to control Schema Registry operations based on roles in the JWT. Enabling JWT authentication does not disable basic authentication, so you can migrate clients gradually and disable basic authentication after the migration is complete.
Requires Karapace 6.2.1 or later. Configure authentication and authorization in the Aiven Console or with the Aiven CLI.
For more information, see Enable OAuth 2.0/OIDC authentication for Aiven for Apache Kafka® Schema Registry.
Sep 3, 2026
NewAiven for ClickHouse®Aiven for ClickHouse® 26.3 is generally available
Aiven for ClickHouse® 26.3, a long-term support (LTS) release, is now generally available. You can select version 26.3 when you create a service or upgrade an existing service from version 25.8.
Version 25.8 remains the default for new services, and existing services are not upgraded automatically. If your service runs version 25.3, upgrade to version 25.8 before upgrading to version 26.3. Direct upgrades from version 25.3 to 26.3 and downgrades are not supported.
Before upgrading, review the compatibility changes, removed features, and changed defaults. Test the upgrade on a fork of your service.
For more information, see Upgrade to Aiven for ClickHouse 26.3 and Manage versions in Aiven for ClickHouse.
Sep 2, 2026
NewAiven Terraform providerAiven Provider for Terraform version 4.62.0 now available
This release adds new configuration options across several services and promotes beta VPC peering resources to general availability.
Highlights for this release:- Aiven for Kafka, MySQL, OpenSearch, PostgreSQL, and Valkey user resources now expose a
password_encryption_typefield showing the hashing algorithm used for the stored password. - Aiven for Kafka Schema Registry supports OAuth2/OIDC authentication and role-based authorization.
- Organization VPC peering connection resources and data sources for AWS, Azure, and Google Cloud are now in general availability.
- AWS PrivateLink now allows cross-region connections from selected AWS regions.
- Aiven for Valkey adds an active memory defragmentation option to reduce fragmentation and return memory to the operating system.
For more details on fixes and updates, view the complete Aiven Provider for Terraform changelog.
- Aiven for Kafka, MySQL, OpenSearch, PostgreSQL, and Valkey user resources now expose a
Sep 2, 2026
NewMicrosoft AzureBYOCBring your own cloud (BYOC) for Microsoft Azure
Aiven now supports Microsoft Azure as a self-service cloud provider for bring your own cloud (BYOC). You can create custom clouds on AWS, Google Cloud, and Microsoft Azure through the Aiven Console or with the Aiven CLI. Azure supports two deployment models: private, with a bastion host proxying traffic to privately addressed workload nodes, and public, with service VMs directly accessible from the internet.
To get started, you need an Azure subscription and a user or service principal with the required subscription permissions. As a one-time step per tenant, you install Aiven's pre-registered enterprise application on your Microsoft Entra tenant. The setup generates a Terraform template that you deploy to your Azure subscription. The template creates role assignments granting the Aiven enterprise application access to your subscription, a resource group, custom role definitions, and storage accounts. For the private model, it also creates two virtual networks (bastion and workload VNets), VNet peering, network security groups, and NAT gateways. For the public model, it creates a single workload VNet with a network security group.
For more information, see Create a Microsoft Azure-integrated custom cloud.
Sep 1, 2026
NewAiven for DataHubAiven for DataHub upgraded to version 1.7
This version includes improvements to the DataHub UI, new connectors, updates to search, and connector improvements.
There are 7 new ingestion sources, including Cube, AWS Kinesis, Open Data Contract Standard, SAP Datasphere and Document DB platform. The UI has a new metrics home and sidebar experience, and first-class
metricandsemanticModelentities with dedicated pages. It’s also now possible to create, link, unlink, delete, and edit the columns of logical models in the UI.You can upgrade your DataHub services any time in the Aiven Console.
Full details on the improvements and breaking changes are available in the DataHub release notes.