What's new with Amazon FSx for NetApp ONTAP
Learn what's new with Amazon FSx for NetApp ONTAP.
09 September 2025
Storage inventory report enhancements
Workload factory has enhanced the data reported for your FSx for ONTAP file systems. The downloadable report from the FSx for ONTAP inventory page includes the following new columns:
-
SSD used: shows the value of SSD capacity used
-
SSD utilization: shows the percentage of SSD capacity in use
-
Throughput utilization: shows average and peak utilization for the last 30 days
-
IO utilization: shows average and peak IO utilization for the last 30 days
-
CPU utilization: shows average and peak CPU utilization for the last 30 days
Snapshot management enhancements
Workload factory has made several enhancements to view volume snapshot details and manage volume snapshots. These enhancements make it easier for you to understand the status of your snapshots and protect your data.
Additional items appear in Volume details under the Protection tab:
-
Snapshot policy name
-
Snapshot space reservation
-
Snapshot space reservation capacity
The new snapshot management screen is accessible from a volume; it provides information about the snapshot policy for the volume and includes a table with all volume snapshots. The table displays the following snapshot details: creation time, size, expiry time, immutable snapshot protection, and labels. From the management screen, you can change the snapshot policy for the volume, create a snapshot manually, and edit, access, restore, and delete snapshots.
SSD storage capacity decrease available
Workload factory supports decreasing the solid-state drive (SSD) capacity of your second-generation file systems. With elastic file system capacity, you can dynamically adjust the capacity of your file systems to match the needs of your workloads.
03 August 2025
Enhancements to Replication relationships tab
We've added several new columns to the replication relationships table to give you more information about your replication relationships in the Replication relationships tab. The table now includes the following columns:
-
SnapMirror policy
-
Source file system
-
Target file system
-
State of the relationship
-
Last transfer time
Enhancements to NetApp Autonomous Ransomware Protection with AI (ARP/AI)
This release introduces the updated term "NetApp Autonomous Ransomware Protection with AI (ARP/AI)" to better reflect the integration of artificial intelligence in our ransomware protection capabilities.
In addition, the following enhancements have been made to ARP/AI:
-
Volume-level ARP/AI: You can now enable ARP/AI at the volume level, allowing you to protect specific volumes within your FSx for ONTAP file systems.
-
Automatic snapshot creation: You can set the ARP/AI policy to take automatic snapshots and define how often snapshots are taken for volumes with ARP/AI enabled, enhancing your data protection strategy.
-
Immutable snapshots: ARP/AI now supports immutable snapshots, which cannot be deleted or modified, providing an additional layer of security against ransomware attacks.
-
Detection: includes various detection methods such as high entropy data rate at volume level, file create rate, file rename rate, file delete rate, and behavioral analysis, and never seen before file extension that help to detect anomalies and potential ransomware attacks.
Well-architected analysis updates
Workload factory now analyzes your FSx for ONTAP file systems for the following configurations:
-
Long-term retention data reliability: checks whether labels assigned to the snapshot policy of the source volume are identical to the labels assigned to the long-term retention policy. When labels are identical, data replication is reliable between source and target volumes.
-
NetApp Autonomous Ransomware Protection with AI (ARP/AI): checks whether ARP/AI is enabled on your file systems. This feature helps you detect and recover from ransomware attacks.
Dismiss a configuration from the well-architected analysis
You can now dismiss one or more configurations from the well-architected analysis. This allows you to ignore specific configurations that you don't want to address at the moment.
Terraform support for link creation
You can now use Terraform from the Codebox to create a link for association with an FSx for ONTAP file system. This functionality is for users who create links manually.
New region support for exploring savings in Storage
The following new regions are now supported for exploring savings for Amazon Elastic Block Store (EBS), FSx for Windows File Server, and Elastic File Systems (EFS):
-
Mexico
-
Thailand
Enhancements to SMB/CIFS shares creation and management
You can now create SMB/CIFS shares which point to directories within a volume. Within the volume, you'll be able to see which shares exist, where the shares are the pointing to, and the permissions granted to specific users and groups.
For data protection volumes, the flow of creating an SMB/CIFS share now includes the creation of a junction path to the volume for mounting purposes.
29 June 2025
BlueXP workload factory notification service support
The BlueXP workload factory notification service enables workload factory to send notifications to the BlueXP alerts service or to an Amazon SNS topic. Notifications sent to BlueXP alerts appear in the BlueXP alerts panel. When workload factory publishes notifications to an Amazon SNS topic, subscribers to the topic (such as people or other applications) receive the notifications at the endpoints configured for the topic (such as email or SMS messages).
Storage dashboard enhancements
The Storage dashboard in the workload factory console includes new cards for savings opportunities. The card at the top of the dashboard displays the number of savings opportunities for storage environments running on Amazon Elastic Block Store (EBS), Amazon FSx for Windows File Server, and Amazon Elastic File Systems (EFS). At the bottom of the dashboard, three new cards display savings opportunities by Amazon storage service - EBS, FSx for Windows File Server, and EFS. From all cards, you can explore the savings opportunities in more detail.
From the FSx for ONTAP protection coverage card and replication relationship health card, you can investigate if there are any partially protected volumes in your FSx for ONTAP file systems as well as investigate issues with replication relationships. In both cases, you can take action to resolve the issues.
Volume tab enhancements
The Volumes tab in the workload factory console has been enhanced to provide a more comprehensive view of your FSx for ONTAP file systems. The enhancements include new cards for SSD capacity, Capacity pool, and NetApp Autonomous Ransomware Protection with AI (ARP/AI). These cards summarize capacity utilization and ARP/AI protection for all volumes in the file system.
Support for second-generation Amazon FSx for NetApp ONTAP file systems
Workload factory now supports second-generation Amazon FSx for NetApp ONTAP file systems. You can create, manage, and monitor second-generation file systems in the workload factory console. All new commercial regions are supported.
FlexVol volume support for rebalancing volume capacity
FlexVol volumes are discoverable within the workload factory console. You can check the balance of your FlexVol volumes and rebalance FlexVol volumes to redistribute the capacity when imbalances develop over time due to the addition of new files and file growth.
Terminology update
The term "Autonomous Ransomware Protection" (ARP) has been updated to "NetApp Autonomous Ransomware Protection with AI" (ARP/AI) in the workload factory console.
ARP/AI enabled by default for new volumes
When you create a new volume in the workload factory console, NetApp Autonomous Ransomware Protection with AI (ARP/AI) is enabled by default if the file system has an ARP/AI policy. This means that the volume is automatically protected against ransomware attacks using AI-driven detection and response capabilities.
Replication support for immutable files
Workload factory supports replicating immutable volumes from one FSx for ONTAP system to another FSx for ONTAP file system to protect critical data from accidental deletion or malicious attacks like ransomware. The target volume and its host file system will be immutable, or locked, and any data in the target file system can't be modified or removed until the retention period ends.
Manage IAM execution role and permissions during link creation
Now you can manage the IAM execution role and its attached permission policy when you create a link in the workload factory console. A link establishes connectivity between your workload factory account and one or more FSx for ONTAP file systems. You have two options for assigning the IAM execution role and link permissions - automatically or user-provided. Managing the execution role and its attached permissions policy in workload factory means that you don't need to use third party code any longer.
08 June 2025
New well-architected analysis and support for fixing issues
Automatic capacity management for FSx for ONTAP file systems is now included as a configuration analysis in the well-architected status dashboard.
Additionally, workload factory now supports fixing the following configuration issues:
-
SSD capacity threshold
-
Data tiering
-
Scheduled local snapshots
-
FSx for ONTAP backups
-
Remote data replication
-
Storage efficiencies
-
Automatic capacity management
03 June 2025
Volume autogrow enhancement
Now you can set the autogrow size of your volumes so that volume size can grow beyond the provisioned size for business needs and application requirements.
Well-architected analysis update
Workload factory now analyzes your FSx for ONTAP file systems to check whether storage efficiencies including data compaction, compression, and deduplication are being utilized. Storage efficiencies measure how effectively the file systems use available space.
Storage dashboard enhancements
Starting today, when you open the Storage workload from the workload factory console, you'll view the Dashboard. The newly designed dashboard provides a holistic view of your FSx for ONTAP systems including the number of file systems, the total SSD capacity, the well-architected status overview, the data protection overview, and replication relationship health.
Volumes tab enhancements
The Storage workload made enhancements to the Volumes tab within an FSx for ONTAP file system in the workload factory console. The enhancements include:
-
New cards: SSD capacity, Capacity pool, and Autonomous Ransomware Protection (ARP)
-
New columns: Capacity distribution, Used SSD capacity, Used capacity pool, and SSD efficiency
Storage efficiencies update for volume creation
When creating a new volume, storage efficiencies including data compaction, compression, and deduplication are enabled by default.
04 May 2025
Autonomous Ransomware Protection for FSx for ONTAP file systems
Protect your data with Autonomous Ransomware Protection (ARP), a feature that uses workload analysis in NAS (NFS/SMB) environments to detect and warn about abnormal activity that might be a ransomware attack. When an attack is suspected, ARP also creates new, immutable snapshots from which you can restore your data.
FlexGroup volume rebalance enhancement
BlueXP workload factory introduces the FlexGroup volume rebalance wizard with several layout options for rebalancing the data in a FlexGroup volume. Rebalancing redistributes data evenly to FlexGroup member volumes.
Implement best practices for an FSx for ONTAP file system
BlueXP workload factory provides a dashboard where you can review the well-architected status of your file system configurations. You can leverage this analysis to implement best practices for your FSx for ONTAP file systems. File system configuration analysis includes the following configurations: SSD capacity threshold, scheduled local snapshots, scheduled FSx for ONTAP backups, data tiering, and remote data replication.
Dual-protocol volume security style options
You have the option to choose either NTFS or UNIX as the security style for a volume to determine the method that users and permissions access a volume.
Replication enhancements
Reverse replication supported from FSx for ONTAP to on-premises
Reverse replication is now available from an FSx for ONTAP file system to an on-premises ONTAP cluster from within the workload factory console.
Data protection volume replication
You can now replicate data protection volumes.
Multiple volume selection
Multiple volume selection is available so you can select exactly the volumes you want to replicate.
Long-term retention policy labels
When you enable long-term retention for a replication relationship, source and target volumes labels must match exactly. Now BlueXP workload factory can automatically create missing source volume labels for you.
FSx for ONTAP file name visible in volume creation
We've improved the visibility of FSx for ONTAP file systems during volume creation. You'll see the FSx for ONTAP file system when you create a volume, so you'll know exactly where the volume is being created.
AWS account visible across the Storage workload
We've improved account visibility across the Storage workload. You'll see the AWS account when navigating to the Volumes, Storage VMs, and Replication tabs.
Link association enhancements
-
You can quickly associate a link from an FSx for ONTAP file system in the Inventory tab.
-
BlueXP workload factory now supports the use of alternative ONTAP user credentials for link association.
Link authentication support for AWS Secrets Manager
You now have the option to use secrets from AWS Secrets Manager to authenticate links so that you don't have to use credentials stored in BlueXP workload factory.
Tracker response support
Tracker now provides API responses so that you can see the REST API output related to the task.
Capacity validation when restoring a volume from a backup
When restoring a volume from a backup, BlueXP workload factory determines if you have enough capacity for the restore and can automatically add SSD storage tier capacity if you don't.
Support for alternative ONTAP user credentials
Workload factory now supports alternative sets of ONTAP credentials for creating file systems to minimize security risks. Instead of using only the fsxadmin user, you can select a different set of ONTAP credentials or choose not to provide a password for fsxadmin and vsaadmin users.
Updated permissions terminology
The workload factory user interface and documentation now use "read-only" to refer to read permissions and "read/write" to refer to automate permissions.
30 March 2025
Automatic capacity management for scale-out systems
Workload factory now scans for available inodes in volumes and increases their count according to the configured automatic capacity management thresholds. This feature supports automatic capacity management for scale-out systems. You can enable inodes management as part of automatic capacity management.
FlexGroup rebalance API
BlueXP workload factory releases the FlexGroup rebalance API that allows you to execute a plan to rebalance the data in a FlexGroup. Rebalancing redistributes data evenly to the member volumes.
Replicate data form includes use cases
The replicate data form now includes use cases to make it easier for you to complete the form. You'll select one of the following use cases for data replication: migration, hot disaster recovery, cold disaster recovery, archive, or other. After you select a use case, Workload factory recommends values in accordance with best practices. You can accept the preselected values or customize the values in the form.
Data tiering policy terminology changes
Now when you select a tiering policy during volume creation, data replication, or updates to existing tiering policies, you'll find new terms to describe the tiering policies.
-
Balanced (Auto)
-
Cost-optimized (All)
-
Performance optimized (Snapshots only)
Security group details for file system creation
A security group is created as part of the FSx for ONTAP file system creation process. Security group details including protocols, ports, and roles are now available.
02 March 2025
Automatic capacity management improvements
When automatic capacity management is enabled, BlueXP workload factory now checks if a file system reached its capacity threshold every 30 minutes instead of every 2 hours.
The provisioned IOPS setting is no longer affected when capacity threshold is reached.
Immutable snapshots
Now you can lock snapshots, making them immutable, for a specific retention period. Locking prevents the unauthorized access and malicious deletions of snapshots. You can enable immutable snapshots during snapshot policy creation, when creating manual snapshots, and after snapshot creation.
Immutable files update
You can now make the following changes to your immutable files configuration: retention policy, retention period, autocommit period, and volume append mode.
Data replication enhancements
-
Cross-account replication: Replication between two AWS accounts is supported in the BlueXP workload factory console as well as replication management.
-
Pause and resume replication: You can pause (quiesce) scheduled replication updates from the source volume to the destination volume and then resume the replication schedule when you're ready. During the pause, source and destination volumes become independent, and the destination volume transitions from read-only to read/write.
CloudShell events in Tracker
Now you can track CloudShell events in Tracker.
02 February 2025
CloudShell in BlueXP workload factory console
CloudShell is an embedded CLI capability available within BlueXP workload factory for Storage. You can use CloudShell to create, share, and execute ONTAP or AWS CLI commands from multiple sessions in a shell-like environment from within the workload factory console.
Inventory data download
You can now download FSx for ONTAP inventory data into an Microsoft Excel or CSV file from Storage in BlueXP workload factory.
FSx for ONTAP file system additional menu options
We've made it simpler to do the following for an FSx for ONTAP file system from the FSx for ONTAP tab in Storage.
-
Create a storage VM
-
Create a volume
-
Replicate volume data
Terraform support for creating volumes
You can now use Terraform from the Codebox to create volumes.
File locking with the immutable files feature
You can now lock files using the immutable files feature when you create a volume for an FSx for ONTAP file system. File locking helps you and others prevent accidental or intentional file deletion for a specified period.
Tracker available for monitoring and tracking operations
Tracker, a new monitoring capability is available in Storage. You can use Tracker to monitor and track the progress and status of credentials, storage, and link operations, review details for operation tasks and subtasks, diagnose any issues or failures, edit parameters for failed operations, and retry failed operations.
Support for second-generation Amazon FSx for NetApp ONTAP file systems
You can now use Amazon FSx for NetApp ONTAP second-generation file systems in BlueXP workload factory. FSx for ONTAP second-generation Single-AZ file systems are powered by up to 12 HA pairs which can deliver up to 72 GBps of throughput capacity and 2,400,000 SSD IOPS. FSx for ONTAP second-generation Multi-AZ file systems are powered by one HA pair and deliver 6 GBps of throughput capacity and 200,000 SSD IOPS.
05 January 2025
Volume CIFS share enhancements
The following enhancements are available for managing CIFS share for volumes in an Amazon FSx for ONTAP file system in BlueXP workload factory:
-
Support for multiple CIFS shares on a volume
-
The option to update users and groups at any time
-
The option to update permissions for users and groups at any time
-
CIFS share deletion
1 December 2024
Block storage for scale-out FSx for ONTAP file systems
You can now provision block storage over FSx for ONTAP when using a scale-out file system deployment with up to 6 HA pairs.
Mount command available
Mount commands are now available for NFS and CIFS access to a volume. You can get the mount point for a volume within an FSx for ONTAP file system by selecting Basic actions then View mount command.
Update storage efficiency after volume creation
You can now enable or disable storage efficiency for FlexVol volumes after volume creation. Storage efficiency includes deduplication, data compression, and data compaction. Enabling storage efficiency helps you achieve optimal space savings on a FlexVol volume.
On-premises ONTAP cluster discovery and replication
Discover and replicate on-premises ONTAP cluster data to an FSx for ONTAP file system so that it can be used to enrich AI knowledge bases. All on-premises discovery and replication workflows are possible from the new On-Premises ONTAP tab in the Storage inventory.
AWS credentials improve savings calculator analysis
You now have the option to add AWS credentials from the savings calculator. Adding credentials improves the accuracy of the savings calculator analysis of your Amazon Elastic Block Store, Elastic File Systems, and FSx for Windows File Server storage environments when compared with FSx for ONTAP.
3 November 2024
Tab views in storage inventory
Storage inventory has been updated to a two-tab view:
-
FSx for ONTAP tab: displays the FSx for ONTAP file systems you currently have.
-
Explore savings tab: displays Elastic Block Store, FSx for Windows File Server, and Elastic File Systems storage systems. From there, you can explore savings for these systems by comparing them with FSx for ONTAP.
29 September 2024
Link creation updates
-
Codebox viewer: Codebox is now integrated in the link creation process. You can view and copy the CloudFormation template from Codebox in workload factory before redirecting to AWS to execute the operation.
-
Required permissions: The permissions required to execute the link creation in AWS CloudFormation are now available to view and copy from the Create Link wizard in workload factory.
-
Support for manual link creation: This feature allows standalone creation in AWS CloudFormation with manual registration of the link ARN. It's useful when a Security or DevOps team assists in the link creation process.
1 September 2024
Read mode support for storage management
Read mode is available for storage management in workload factory. Read mode enhances the experience of basic mode by adding read-only permissions so that the Infrastructure-as-Code templates are filled with your specific variables. The Infrastructure-as-Code templates can be executed directly from your AWS account without providing any modify permissions to workload factory.
Backup before volume deletion support
You can now back up a volume before deleting it. The backup will remain in the file system until deleted.
4 August 2024
Terraform support
You can now use Terraform from the Codebox to deploy file systems and storage VMs.
Throughput and IOPS recommendations in the storage calculator
The storage calculator makes FSx for ONTAP file system configuration recommendations for throughput and IOPS based on AWS best practices, which provides you with optimal guidance for your selections.
7 July 2024
Initial release of workload factory for Amazon FSx for NetApp ONTAP
Amazon FSx for NetApp ONTAP is now generally available in BlueXP workload factory.