Advanced Security add-on in Limited Availability

PreviewSep 15, 2026VerifiedAdded Sep 22, 2026

Organization-level add-on bundling SCIM, self-managed encryption keys (BYOK), and higher limits for security resources such as identity pools and RBAC role bindings. Billed as a percentage uplift on eligible infrastructure charges.

Security

Read Confluent's release notes

https://docs.confluent.io/cloud/current/release-notes/index.html#september-15-2026

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Confluent Cloud releases

Confluent CloudSep 15, 2026

SCIM user provisioning generally available

SCIM user provisioning is GA with the Advanced Security add-on. Your IdP becomes the single source of truth for SSO user accounts, automating provisioning and de-provisioning.

GASecuritySource

Confluent CloudSep 15, 2026

Flink materialized tables can adopt an existing Kafka topic

A CREATE OR ALTER MATERIALIZED TABLE statement can point at an existing table, and Flink adopts it in place, keeping the topic, its data, and its consumers. Previously a materialized table always created a new topic.

UpdateStreamingSource

Confluent CloudSep 18, 2026

Audit logs record SCIM provisioning events

Confluent Cloud audit logs now record auditable events for SCIM provisioning operations, including enabling SCIM, managing SCIM tokens, and creating, updating, or deleting users through a SCIM client.

UpdateSecurityObservabilitySource

Confluent CloudSep 11, 2026

Flink Table API 2.3-6 adds AI functions, changelog functions, artifact creation

Java plugin 2.3-6 and Python package 2.3.3 on Flink 2.3.0 add AI_SENTIMENT, AI_DETECT_PII, AI_FORECAST and AI_DETECT_ANOMALIES, FROM_CHANGELOG/TO_CHANGELOG support, and ConfluentTools.createArtifact(). Python Table API remains in Open Preview.

UpdateStreamingObservabilityDeveloper toolsSource

Confluent CloudSep 21, 2026

Delete empty consumer groups from Confluent Cloud Console

You can now delete consumer groups in the empty state through Confluent Cloud Console.

UpdateSource

Confluent CloudSep 9, 2026

Oracle XStream CDC Source no longer requires SELECT_CATALOG_ROLE

The connector no longer requires granting SELECT_CATALOG_ROLE to the connect user; you can instead grant SELECT on an explicit list of catalog views.

UpdateStreamingGovernanceData integrationSource

Confluent CloudSep 9, 2026

Oracle XStream CDC Source supports Active Data Guard standby as source

For cascading downstream capture, the source connection can point at the Active Data Guard standby instead of the primary, offloading the initial snapshot and schema reads.

UpdateStreamingSource

Confluent CloudSep 9, 2026

ksqlDB v8.1.0-41 bounds pull-query concurrency per cluster

Coordinator and router thread pools each accept up to 100 pending requests; requests beyond that are rejected with HTTP 429. Queries are cancelled server-side if the client disconnects.

UpdateSQLDeveloper toolsSource

Also shipped on Sep 15, 2026

Snowflake SnowflakeSep 15, 2026

Predict dynamic table refresh behavior with EXPLAIN CHANGES (General availability)

You can now use EXPLAIN CHANGES to predict a dynamic table's refresh behavior before it happens, either for a manual refresh or as part of a DDL change, without applying the change.

GASource

Snowflake Snowflake Horizon CatalogSep 15, 2026

Horizon Catalog Explorer UI (Preview)

With this release, the Horizon Catalog Explorer is the default experience for browsing Snowflake objects in Snowsight, replacing Database Explorer. The Horizon Catalog Explorer provides consistent navigation and object detail pages while preserving the tabs and actions that you already use.

PreviewGovernanceObservabilitySource

Snowflake Snowflake Cortex AISep 15, 2026

Embedding Streamlit in Snowflake apps in external pages (General availability)

Embedding Streamlit in Snowflake apps in external pages is now generally available. You can render a container-runtime app inside a page you host, such as a customer portal or an internal dashboard, using a single tag.

GAVector searchStreamingGovernanceSource

Snowflake SnowflakeSep 15, 2026

Elastic Channels for Snowpipe Streaming (General availability)

Elastic Channels for Snowpipe Streaming are now generally available. Elastic Channels provide one implicit, server-scaled ingestion path per pipe, so concurrent producers can stream directly to Snowflake tables and supported Snowflake-managed Iceberg tables without managing channel names, lifecycle, ordering, or offset tokens.

GAStreamingData integrationApache IcebergSource

Databricks Databricks AppsSep 15, 2026

Webhook-triggered deployments for Databricks Apps will soon be generally available

Starting in October 2026, webhook-triggered deployments for Databricks Apps will be generally available. Automatically deploy your app when changes are pushed to a connected GitHub or Azure DevOps repository, so your deployed app stays in sync with your repository without manual redeployment. See Deploy a Databricks app .

GASource

Databricks Unity CatalogSep 15, 2026

Sharing foreign Delta tables with OpenSharing is now generally available

Sharing and reading foreign Delta tables with OpenSharing is now generally available. Providers can share Delta-format tables federated from OneLake, a Hive metastore, or AWS Glue, without copying data into Databricks. See Add foreign Delta tables to a share .

GASource