July 2020

Amazon Personalize uses machine learning technology perfected from over 20 years of recommender systems development at Amazon.com. With Amazon Personalize you are can personalize recommendations for products, videos, music, ebooks, ads, marketing emails, and more, for your users, without any prior machine learning experience. 

Amazon GuardDuty is now available in the AWS Africa (Cape Town) and Europe (Milan) Regions. You can now continuously monitor and detect security threats in these regions to help protect your AWS accounts, workloads, and data stored in Amazon S3.

Customers can now connect their OneLogin Identity Management Platform (OneLogin) to AWS Single Sign-On (SSO) once, manage access to AWS centrally in AWS SSO, and enable end users to sign in using OneLogin to access all their assigned AWS accounts. The integration helps customers simplify AWS access management across multiple accounts while maintaining familiar OneLogin experiences for administrators who manage identities, and for end users as they sign in. AWS SSO and OneLogin use standards-based automation to provision users and groups into AWS SSO, saving administration time and increasing security.  

AWS Storage Gateway now offers Federal Information Processing Standards (FIPS) 140-2 compliant endpoints in all North America Regions to protect sensitive information for regulated workloads. These endpoints terminate Transport Layer Security (TLS) sessions using a FIPS 140-2 validated cryptographic software module, making it easier for you to use Storage Gateway for regulated workloads. Companies contracting with the US and Canadian federal governments can now meet the FIPS security requirement to encrypt sensitive data in these Regions. 

Today, we are excited to release a new learning capsule that deep dives into training an autoregressive convolutional neural network model (AR-CNN) in AWS DeepComposer. AWS DeepComposer gives developers a creative way to get started with machine learning (ML). With AWS DeepComposer, developers can get hands-on, literally, with a musical keyboard and the latest machine learning techniques to expand their ML skills. To learn the concepts of generative AI algorithms, developers can use easy-to-consume, bite-size learning capsules in the AWS DeepComposer console. In our previous learning capsule launched in June 2020, developers were introduced to an AR-CNN model and learned how it is able to add or remove one note at a time to generate music.

Amazon Relational Database Service (RDS) now supports AWS Graviton2-based database instances in preview. Graviton2 M6g and R6g database instances deliver better price performance over comparable current generation x86-based database instances. You can launch these database instances when using Amazon RDS for MySQL and Amazon RDS for PostgreSQL. Support for Amazon Aurora and Amazon RDS for MariaDB is coming soon.

Starting today, you can upgrade your Amazon Aurora with PostgreSQL compatibility database cluster from major version 10 to 11, with just a few clicks in the AWS Management Console.

You can now use a Network Load Balancer (NLB) to distribute UDP traffic to container-based applications running on AWS Fargate orchestrated by Amazon Elastic Container Service (ECS). Network Load Balancers are fully-managed load balancers that operate at the connection level (Layer-4) and are capable of handling millions of requests at ultra-low latency. Until now, you could use Network Load Balancers with AWS Fargate only with the TCP protocol. With this new integration, you get the simplicity of serverless containers to run applications on Fargate that use the UDP protocol. You can run workloads such as DNS, IoT, real-time media, and syslog while maintaining high throughput at ultra low latency through the Network Load Balancer.

Amazon GuardDuty broadens threat detection coverage to monitor for highly-suspicious data access and anomaly detection to help you better protect your data residing in Amazon Simple Storage Service (Amazon S3). This new capability adds S3 data events (LISTs/PUTs/GETs) as a new log and event source that GuardDuty continuously profiles to monitor data access behavior, combine it with GuardDuty threat intelligence, and identify suspicious activity such as data access from an unusual geo-location, API calls from a known malicious IP address, or unusual API calls consistent with malicious data discovery attempts.  

Starting today AWS Transit Gateway supports internet protocol (IP) multicast in Europe (Frankfurt), South America (São Paulo), Middle East (Bahrain), Asia Pacific (Hong Kong) and Asia Pacific (Seoul) AWS Regions.

The EC2 Hibernation feature is now available in the Africa (Cape Town) and Europe (Milan) AWS Regions. Hibernation gives you the ability to launch EC2 instances, set them up as desired, hibernate them, and then quickly bring them back to life when you need them. Applications pick up exactly where they left off instead of rebuilding their memory footprint. By using Hibernation, you can maintain a fleet of pre-warmed instances to get to a productive state faster without modifying your existing applications.  

Amazon Elasticsearch Service now facilitates connecting Amazon ES with two of the most powerful business intelligence and data visualization applications, Tableau and Microsoft Excel. To achieve this, we introduce Amazon ES- Tableau integration and the Amazon ES- Excel integration in Open Distro for Elasticsearch SQL Engine on Amazon Elasticsearch Service.  

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 12.3, 11.8, 10.13, 9.6.18, and 9.5.22 in AWS GovCloud (US) Regions. This release contains bug fixes and improvements done by the PostgreSQL community.  

Using the AWS Toolkit for VS Code, customers can now access Simple Storage Service (S3) resources in their account using the AWS Explorer view in the code editor. S3 integration makes it easy for customers to access S3 buckets and S3 objects in those buckets without leaving the VS Code interface. All CRUD (create, read, update, delete) operations for S3 can be performed: Creating objects in buckets, adding folders to buckets, deleting objects, and viewing the contents of objects.

AWS CodeBuild's support for Test Reporting now supports reporting for code coverage. Code coverage reports give you a detailed and actionable view of your test's code coverage in CodeBuild, making it easier for you to identify the proportion and lines of code being tested.

AWS Firewall Manager now allows you to configure logging on your AWS WAF web ACLs centrally using a Firewall Manager policy. When you set up a Firewall Manager policy for AWS WAF, you can now enable logging on web ACLs for all the in-scope accounts and have the logs centralized under a single account.

Starting today, AWS Transit Gateway Network Manager is now available in Africa (Cape Town) and Europe (Milan) AWS Regions.  

AWS CodeBuild now supports the execution of concurrent and coordinated builds of a project with “Batch” builds. Batch builds support the configuration and ordering of build executions with either a configuration list, configuration matrix, or a dependency-graph of build definitions. They’re intended for customers targeting different platforms or executing builds that depend on each other to produce artifacts.  

Starting today, you can target EC2 Capacity Reservations within an AWS Resource Group using the Resource Group ARN. With this feature, you can now use Capacity Reservations seamlessly for workloads that span Availability Zones and multiple instance types. This feature integrates seamlessly with EC2 Auto Scaling and EC2 Fleet.  

You can now register Amazon EC2 instances in AWS Cloud Map by providing EC2 instance identifiers instead of the IP address when using HTTP namespaces. AWS Cloud Map is a cloud resource discovery service. Using AWS Cloud Map, you can define custom names for your application resources, such as Amazon EC2 instances, Amazon ECS tasks, Amazon S3 buckets, or any other cloud resource. Your application can then discover the location and metadata of cloud resources associated with these custom names via AWS SDK or by making authenticated API calls.

Amazon Elastic Container Registry (ECR) now supports the use of AWS KMS keys managed by AWS Key Management Service (KMS) to encrypt container images stored in your ECR repositories. AWS KMS is a simple to use key management service that makes it easy for you to create, manage, and control keys to encrypt and decrypt your data. By choosing KMS-based encryption of your container images at rest, you can meet stronger security and compliance requirements around audit, access control and monitoring of encrypted ECR image access using these keys.

Amazon Kinesis Data Firehose now supports streaming data delivery to MongoDB Cloud. This feature enables you to use a fully managed service to stream data to MongoDB Cloud without building custom applications or worrying about operating and managing the data delivery infrastructure. Amazon Kinesis Data Firehose incorporates error handling, auto-scaling, transformation, conversion, aggregation, and compression to help you accelerate the deployment of data streams across your organization.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Africa (Cape Town) and AWS Europe (Milan) Regions.  

Amazon Lightsail now provides you with the ability to create instances with cPanel & WHM preinstalled. With this addition, Amazon Lightsail expands its curated selection of preconfigured application stacks and makes it easier to streamline and automate your server management tasks.

Amazon Kinesis Data Firehose now supports streaming data delivery to a generic HTTP endpoint. This feature enables you to use a fully managed service to stream data to an HTTP endpoint without building custom applications or worrying about operating and managing the data delivery infrastructure. Amazon Kinesis Data Firehose incorporates error handling, auto-scaling, transformation, conversion, aggregation, and compression to help you accelerate the deployment of data streams across your organization.

Amazon Elasticsearch Service now supports cosine similarity distance metric with k-Nearest Neighbor (k-NN) to power your similarity search engine. Cosine similarity is used to measure similarities between two vectors, irrespective of their sizes and is most commonly used in information retrieval, image recognition, text similarity, bioinformatics and recommendation systems.

You can now use Service Quotas in EU (Stockholm), Asia Pacific (Hong Kong) and Middle East (Bahrain) regions to view and manage your quotas easily and at scale as your AWS workloads grow.  

Amazon Translate – a fully managed neural machine translation service that delivers high-quality, and affordable language translation in fifty-five languages – is now supporting translation of Office open XML documents in docx, pptx, and xlsx format. Amazon Translate also increased the file size limit for each document in Batch Translation from 1 MB to 20 MB. Starting today, customers have the option to translate a large collection of docx, pptx, xlsx, HTML and plain text documents stored in a folder in Amazon Simple Storage Service (S3) bucket using the new asynchronous Batch Translation service. This is in addition to the real-time (synchronous) translation service that is already available, giving you options that best fit your needs. 

You can now tag your AWS Site-to-Site VPN connections, Virtual Private Gateways, and Customer Gateways upon creation. You can do this when creating these resources through the AWS Cloud Development Kit (CDK) or AWS Command Line Interface (CLI). By tagging resources at the time of creation, you can eliminate the need to run custom tagging scripts after resource creation. In addition, you can now set resource-level permissions when using Site-to-Site VPN APIs. This allows you to implement stronger security policies by giving you more granular control over who has access to these APIs. You can also enforce the use of tagging and control which tag keys and values are set on your resources.  

Amazon RDS for Oracle now supports 20.1 version of Oracle Application Express (APEX) for 11.2, 12.1, 12.2, 18c and 19c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser.

EC2 Image Builder, a service that makes it easier and faster to build and maintain secure Virtual Machine images, is now available in the Europe (Milan) and Africa (Cape Town) AWS Regions.

Starting today, you can use enhanced premigration assessments to identify potential database migration problems before initiating your migration. Once the migration task is set up, a premigration assessment scans both the source and target database schemas and the migration task settings to identify a list of potential issues ranging from a data type mismatch to possible performance issues. You can select one or more premigration assessments to run on your database migration tasks and review the results on the console or in an AWS S3 bucket.  

AWS AppSync, a fully managed GraphQL service that simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources, is now available in the EU (Milan) region. With AppSync, you can build scalable applications, including those requiring real-time updates, on a range of data sources such as NoSQL data stores, relational databases, HTTP APIs, and your custom data sources with AWS Lambda. For mobile and web apps, AppSync additionally provides local data access when devices go offline, and data synchronization with customizable conflict resolution, when they are back online.

AWS Security Hub has released 7 new automated security controls for the AWS Foundational Security Best Practices standard and 12 new controls to our Payment Card Industry Data Security Standard (PCI DSS).  

Amazon Kinesis Data Firehose now supports streaming data delivery to a Datadog. This feature enables you to use a fully managed service to stream data to Datadog without building custom applications or worrying about operating and managing the data delivery infrastructure. Amazon Kinesis Data Firehose incorporates error handling, auto-scaling, transformation, conversion, aggregation, and compression to help you accelerate the deployment of data streams across your organization.

Amazon Kinesis Data Firehose now supports streaming data to New Relic, the industry's leading observability platform for all telemetry data. This Amazon Kinesis Data Firehose feature enables you to use a fully managed service to stream data to New Relic without building custom applications or worrying about operating and managing the data delivery infrastructure. Amazon Kinesis Data Firehose incorporates error handling, auto-scaling, transformation, conversion, aggregation, and compression to help you accelerate the deployment of data streams across your organization.

You can now pause the entitlement on an output of AWS Elemental MediaConnect when sharing live video between AWS accounts. This feature makes it easier to manage content sharing by allowing you to suspend and restart distribution of live video to your subscribers without having to delete and then reconfigure entitlement settings. To learn more about entitlements in MediaConnect, please read the user guide.

AWS Marketplace, AWS Data Exchange, AWS IQ, and EC2 Reserved Instances Marketplace now support invoice payments in 13 additional currencies, in addition to our existing support for US Dollars (USD). This will help relieve your accounting department of the burden of paying and tracking conversion fees and other costs associated with the use of foreign currencies.

Starting today, customers can manage their AWS Purchase Orders ("POs") within their AWS Billing Console, creating and defining invoices association rules, managing their PO status, and setting up PO balance notifications.

Amazon Elasticsearch Service now supports gzip compression for HTTP payloads. With HTTP compression, you can reduce the size of your documents by to up to 80%, lowering bandwidth utilization and latency, leading to improved transfer speeds.  

AWS Elemental MediaTailor customers can now configure a video bumper at the beginning and/or the end of an ad break. Bumpers are commonly used to indicate a change from regular programming or ad breaks to viewers. Bumpers can also be used to meet requirements such as station identification announcements or viewer age recommendations.

We are happy to announce that we are lowering the price of Amazon RDS for SQL Server Enterprise Edition database instances in the Multi-AZ configuration, for both On-Demand and Reserved purchase types on the latest generation hardware. 

Amazon Fraud Detector is now generally available to all AWS customers. Amazon Fraud Detector is a fully managed service that makes it easy to identify potentially fraudulent online activities, such as the creation of fake accounts or online payment fraud. Amazon Fraud Detector uses machine learning (ML) and 20 years of fraud detection expertise from AWS and Amazon.com to automatically identify potentially fraudulent activity so you can catch more online fraud faster. Amazon Fraud Detector handles the heavy lifting of ML for you - in just a few clicks you can create a fraud detection model, with no prior machine learning experience required. 

Starting today, new general purpose Amazon EC2 M6gd, compute-optimized Amazon EC2 C6gd, and memory-optimized Amazon EC2 R6gd instances with local NVMe-based SSD block-level storage are now available. These instances are powered by AWS Graviton2 processors and deliver up to 40% better price performance and 50% more NVMe storage GB/vCPU over comparable x86-based instances for a wide variety of workloads, including application servers, micro-services, high-performance computing, CPU-based machine learning inference, electronic design automation, gaming, open-source databases, and in-memory caches. The local SSD storage provided on these instances is ideal for applications that need access to high-speed, low latency storage, as well as for temporary storage of data such as batch and log processing, and for high-speed caches and scratch files.

AWS ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the AWS cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads. 

AWS CloudHSM is now available in the Africa (Cape Town) and Europe (Milan) regions. 

Amazon FSx, a fully managed service that makes it easy to launch and run feature-rich and highly-performant file systems, is now available in the AWS Europe (Paris) Region. With Amazon FSx, customers can leverage the rich feature sets and fast performance of widely-used open source and commercially-licensed file systems, while avoiding time-consuming administrative tasks like hardware provisioning, software configuration, patching, and backups. 

AWS DataSync now enables you to automate and accelerate online data transfers between on-premises object storage and Amazon S3, Amazon Elastic File System (EFS), or Amazon FSx for Windows File Server over the internet or AWS Direct Connect. With DataSync you can now easily and securely migrate, archive, or replicate on-premises datasets containing petabytes of data and billions of objects from on-premises to AWS.  

Amazon SageMaker Ground Truth is a fully managed data labeling service that makes it easy to build highly accurate training datasets for machine learning. Amazon Augmented AI (Amazon A2I) makes it easy to build the workflows required for human review of ML predictions. Amazon A2I brings human review to all developers, removing the undifferentiated heavy lifting associated with building human review systems or managing large numbers of human reviewers. 

Amazon MQ now supports LDAP (Lightweight Directory Access Protocol), enabling you to authenticate and authorize Amazon MQ users using directory services like Microsoft Active Directory. LDAP support simplifies authentication and access control for Amazon MQ brokers. You can now authenticate your Amazon MQ users through the credentials stored in your LDAP server. You can also add, delete, and modify Amazon MQ users and assign permissions to topics and queues.  

Amazon Elasticsearch Service now supports the open source Learning to Rank plugin that lets you use machine learning technologies to improve the ranking of the top results returned from a baseline relevance query. With Learning to Rank (LTR) support, you can tune the search relevancy and re-rank your Elasticsearch query search results in information retrieval, personalization, sentiment analysis and recommendation systems.  

Distributor, a capability of AWS Systems Manager, now allows you to install and update software agents on instances running Oracle Linux 7.5, 7.6, 7.7, and 7.8. This support simplifies agent management for environments that include Oracle Linux instances.

AWS Systems Manager Quick Setup now integrates with AWS Organizations to allow you to easily enable visibility and control of your instances across AWS accounts and Regions. Now, with just a few clicks, you can enable operations best practices across your organization, such as patch compliance scanning and instance inventory collection.

Additional geolocation headers are now available in Amazon CloudFront for use in new cache and origin request policies.

You can now configure CloudFront to add additional geolocation headers that provide more granularity in your caching and origin request policies. Previously, you could configure Amazon CloudFront to provide the viewer’s country code in a request header that CloudFront sends to your origin. The new headers give you more granular control of cache behavior and your origin access to the viewer’s country name, region, city, postal code, latitude, and longitude, all based on the viewer’s IP address.

Amazon RDS for MySQL has been updated to support release 8.0.20 of the MySQL database. This release includes a number of bug fixes as well as functionality improvements. 

Amazon QuickSight now allows customers to embed dashboard authoring capability within third party applications and portals. Customers (e.g., Independent Software Vendors or ISVs, enterprises) can now provide self-service data exploration, ad-hoc data analysis, and dashboard authoring capabilities directly to their end-users. Customers benefit from not having to repeatedly create custom dashboards based on ad-hoc requests from their end-users, while also creating strong product differentiation and up-sell opportunities within their applications.  

Amazon Detective now enables you to interactively examine your Amazon Virtual Private Cloud (VPC) network flows. This new capability enables you to answer questions such as "what port or network service was in use at that time?", "were any large data transfers involved?", "was the traffic allowed by my Security Groups?". These details help security analysts investigate Amazon GuardDuty findings, examine unexpected network behavior, and identify other AWS resources that might be affected by a potential security issue.

You can now adapt Amazon Polly’s Text-to-Speech (TTS) voices to the context of your customer conversation. For example, the TTS voice Matthew can be adapted to be more relatable for a welcome prompt and take on a formal persona when informing customers of their bank balance. These speaking styles allow businesses to design more engaging and relatable interactions. The Conversational and Newscaster speaking styles are currently available with the Joanna and Matthew voices.  

You can now add tags to your Amazon Virtual Private Cloud (VPC) resources while creating the resource. These resources are VPCs, Subnets, Network Interfaces, Security Groups, Network ACLs, Route Tables, Internet Gateways, Egress-only Internet Gateways, DHCP Option Sets and VPC Peering Connections.  

The Amazon Elastic File System (EFS) CSI driver is now generally available. The EFS CSI driver makes it simple to configure elastic file storage for both EKS and self-managed Kubernetes clusters running on AWS using standard Kubernetes interfaces. Applications running in Kubernetes can use EFS file systems to share data between pods in a scale-out group, or with other applications running within or outside of Kubernetes. EFS can also help Kubernetes applications be highly available because all data written to EFS is written to multiple AWS Availability zones. If a Kubernetes pod is terminated and relaunched, the CSI driver will reconnect the EFS file system, even if the pod is relaunched in a different AWS Availability Zone. 

Now, AWS Identity and Access Management (IAM) allows IAM users to have longer access to their AWS resources when they Switch Roles in the AWS Management Console. 

Scale-Out Computing on AWS is an AWS Solutions Implementation that provides customers with a production-ready reference implementation for deploying an AWS environment to start and manage scale-out workloads. This implementation features a large selection of compute resources, budget and cost management integration within AWS, automation tools, and an example user interface.

Amazon RDS for SQL Server now retains the same Service Master Key (SMK) throughout the lifespan of the RDS SQL Server DB instance. By retaining the same SMK, your DB instance will be able to seamlessly use objects that are encrypted with the SMK.

Amazon Elasticsearch Service now supports open source Elasticsearch 7.7 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements. 

Starting today, Amazon RDS for MySQL and Amazon RDS for MariaDB support 8xlarge and 16xlarge sizes for db.m5 and db.r5 instance classes. With support for these new instance sizes, customers who are currently using m4.10xlarge, m4.16xlarge, r4.8xlarge, or r4.16xlarge now have an easy upgrade path to the latest generation of instances.

Amazon Elastic File System (Amazon EFS) now supports up to 500 MB/s of per-client throughput, a 100% increase from the previous limit of 250 MB/s. Total throughput for an EFS file system remains at 10+ GB/s across all NFS clients. 

Amazon FSx for Lustre, which makes it easy and cost effective to launch and run the world’s most popular high-performance file system in AWS, is making it even easier to process data residing in Amazon S3 by enabling your file system’s contents to be updated automatically as data is added to or changed in an S3 bucket.

Contact Lens for Amazon Connect is a set of machine learning-based analytics capabilities for Amazon Connect. With Contact Lens, contact centers now have the ability to easily access call transcripts, understand customer sentiment and conversation characteristics (such as non-talk time and interruptions), identify customer issues/call drivers, and monitor compliance with company guidelines. Getting started with Contact Lens requires no technical expertise. In just a few clicks, Contact Lens can automatically begin analyzing your calls and help you get insights into the brand perception and customer satisfaction of your organization. 

Amazon Lightsail now provides you with the ability to create and manage content delivery network (CDN) distributions, making it quick and easy to accelerate the delivery of your website’s content to your global audience. This native service, called Lightsail CDN, is backed by Amazon CloudFront, Amazon Web Services’ CDN platform that uses a global network of servers in over 200 locations across 42 countries to store and deliver your content throughout the world. Lightsail CDN distributions can be created and configured with just a few clicks for a low, predictable monthly price, and you can get started for free. 

Starting today, users can experience a new, optimized user interface when they access Amazon WorkDocs from the WorkDocs Android mobile application. This new user interface enhances accessibility, supports easier collaboration, and improves file and folder discoverability.  

Amazon CloudFront now provides enhanced granular control to configure headers, query strings, and cookies that can be used to compute the cache key or forwarded to your origin from your CloudFront distributions. Further, you can configure the cache key and origin request settings independently as account-level policies that can be easily applied across multiple distributions.

AWS App Mesh is now a U.S. Health Insurance Portability and Accountability Act of 1996 (HIPAA) eligible service. Customers can now use AWS App Mesh to manage communication between services that contains protected health information (PHI). To learn more, visit our site on services compliance or see our compliance resources.  

Amazon CloudWatch Synthetics is now available in AWS GovCloud (US) Regions.  

The new CIS Benchmark for Amazon EKS helps you accurately assess the secure configuration of nodes running as part of your Amazon EKS clusters. 

AWS Secrets Manager has been Information Security Registered Assessors Program (IRAP) assessed and accepted at the PROTECTED level. Now, you can use AWS Secrets Manager to store secrets that are required to meet the Information Security Manual (ISM) control objectives. This support for IRAP is in addition to compliance with U.S. Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Data Security Standard (PCI DSS), System and Organizational Controls (SOC), Federal Risk and Authorization Management Program (FedRAMP), and International Organization for Standardization (ISO) announced by AWS Secrets Manager previously.  

Amazon AppFlow, a fully managed integration service that enables customers securely transfer data between AWS services and cloud applications, now supports private data transfers between AWS and Salesforce leveraging AWS PrivateLink. Customers can use AppFlow’s private data transfer option to ensure that data does not get exposed to the public internet during transfers between AWS and Salesforce, improving security and minimizing risks of Internet based attack vectors. AppFlow makes it easy for customers to configure private data transfers with Salesforce in just a few clicks. It automatically sets up PrivateLink endpoints and manages the lifecycle of these endpoints without requiring customers to set up or monitor any network infrastructure.

You can now search, sort, and filter across all tables and view more detail on your AWS accounts and organizational units (OUs) within the AWS Control Tower console.

AWS X-Ray .NET auto-instrumentation agent is now available in beta, enabling customers to collect trace data without having to modify existing applications written in .NET and .NET Core.

The Cypress PSoC 64 Standard Secure microcontroller is now qualified for FreeRTOS. You can take advantage of FreeRTOS features and benefits using the Cypress PSoC 64 Standard Secure AWS Wi-Fi Bluetooth Pioneer Kit available from Cypress.

FreeRTOS now supports the ability to suspend and resume an over-the-air update (OTA) operation. With this feature, a FreeRTOS device can suspend an in-progress OTA if it disconnects from the network, and then resume the OTA when it reconnects. This helps OTA downloads to complete quickly when there is intermittent network connectivity. For additional details, see the 202007.00 release Changelog.

AWS Snowball Edge Compute Optimized is now available in US East (Ohio), Canada (Central), South America (Sao Paulo), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Osaka), Asia Pacific (Seoul), EU (Stockholm), EU (Paris), EU (Frankfurt), and EU (London).  

The AWS SDK for Java v2 helps take the complexity out of coding by providing Java APIs for AWS services including Amazon S3, Amazon ECS, DynamoDB, AWS Lambda, and more. Today, we are pleased to announce the Metrics Module in AWS SDK for Java v2 as in Developer Preview.  

Starting today, you can enable Fast Snapshot Restore (FSR) on shared snapshots.

Amazon Kinesis Data Firehose is now available in the Europe (Milan) and Africa (Cape Town) AWS Regions. Amazon Kinesis Data Firehose is the easiest way to load streaming data into data stores and analytics tools. You can capture, transform, and load streaming data into Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk, enabling near real-time analytics with existing business intelligence tools you are already using.

We’re excited to announce the launch of AWS Cloud Financial Management for Builders, a new three-day, intermediate-level, instructor-led training course. Built by AWS experts, it’s designed for all builders and technologists interested in learning to design cost-optimized architectures, particularly developers, solutions architects, DevOps, and systems administrators.

The AWS Serverless Application Model Command Line Interface (SAM CLI) is now generally available. SAM CLI is a deployment toolkit that also allows you to locally build, test, and debug serverless applications. SAM CLI v.1.0.0 is a stable version recommended for building production serverless applications.  

Today we are excited to announce the general availability of Salesforce Service Cloud Voice with Amazon Connect. Service Cloud Voice brings together phone, digital channels, and CRM data into one unified contact center experience. Amazon Connect offers pre-integrated cloud telephony and automatic speech recognition for both agents and supervisors in Service Cloud, the leading customer service platform.

AWS Backint Agent is now available in the AWS GovCloud (US) Regions, in addition to all commercial regions.

Alexa for Business is now available to run directly on Logitech Zoom Rooms, enabling customers with voice-activated control without deploying additional hardware. Users get a touch-free way to interact with Zoom Rooms and keep meetings on track by leveraging Alexa to join meetings and be reminded to wrap up when a meeting is about to end. They can optimize meeting room reservations by saying, “Alexa, find me an available room” or “Alexa, extend my meeting.” Further, the intelligent room release feature leverages Logitech Tap’s motion sensor to free up reserved, but unoccupied rooms for other employees to book them. Additionally, private skills enable customers to create custom experiences like “Alexa, what’s the guest wifi password?”  

AWS CodeBuild now supports accessing your build environments with AWS Session Manager so you can investigate and diagnose build issues. With support for AWS Session Manager, you can access your Linux build environments through an interactive one-click browser-based shell or through the AWS CLI.

Starting today, Amazon RDS for SQL Server supports enabling or disabling certain security protocols and ciphers. By creating a custom DB parameter group and associating it with your DB instance, you can disable or enable older versions of Transport Layer Security (TLS) such as TLS 1.0 and 1.1. You can also disable or enable ciphers such as the RC4 stream cipher.

Amazon EMR cluster running G4dn instances is 5.4X cheaper and 4.5X faster compared to an Amazon EMR cluster running Amazon EC2 R5 Memory-optimized instances. To learn more, please see Nvidia Blog Post.  

Amazon AppFlow is a fully managed integration service that enables customers to securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks. Amazon AppFlow now supports automatic import of newly created Salesforce fields into Amazon S3 without requiring the user to update their flow configurations. Also, Amazon AppFlow now allows users to import deleted records from Salesforce to any supported destination.

Starting today, you can now monitor Capacity Reservations usage metrics via Amazon CloudWatch metrics. With these new metrics, you can efficiently monitor your Capacity Reservations and identify unused capacity by setting CloudWatch alarms to notify you when usage thresholds are met. You no longer need to manually monitor your Capacity Reservation usage.  

AWS Systems Manager Automation now supports higher concurrency limits when running automation executions, helping IT operators automate operational tasks at a larger scale. You can now run up to 100 concurrent automations per account – including child automations (automations that are started by another automation execution). If you attempt to run more automations, the additional automations are added to a queue of up to 1,000 executions. In addition, you can also run 25 rate control automations (automations with concurrency value and error threshold), with an additional queue of 1,000.

AWS Managed Services (AMS) is pleased to announce a new context-based proactive incident notification service. Now incident notifications for critical CloudWatch alarms based on incident context are proactively delivered to you faster.

Today, AWS Global Accelerator announces the ability to easily obtain a fixed entry point for an Application Load Balancer and improve the performance for your user traffic by as much as 60%, with just a single click in the AWS Management Console. When you create a load balancer in the console, you can select a check box to enable Global Accelerator as an add-on service. Behind the scenes, Elastic Load Balancing and Global Accelerator work together to set up an accelerator in your account and put it in front of your load balancer. After you create your load balancer, choose the Integrated Services tab to see the static IP addresses and DNS name that you can use to start routing user traffic to the load balancer over the AWS global network.

Amazon SQS makes it easier to manage lists of queues by allowing callers to iterate through the results of ListQueues and ListDeadLetterSourceQueues APIs using a multi-page format. You can check the status of your request and receive the results in multiple pages by setting the MaxResults parameter to a value between 1 and 1000. You can receive up to a maximum of 1000 results in a single page. If there are more than 1000 results to display, you will receive a Next Token. Use the Next Token to receive the next set of results until the Next Token is null. This enables you to get all the results from your list request in multiple pages. We recommend you to use paginated lists instead of getting all the results in a single request. Furthermore, you can continue filtering your results of list requests using QueueNamePrefix.

Amazon Elasticsearch Service now enables you to deploy your instances across three Availability Zones (AZs) providing better availability for your domains. If you enable replicas for your Elasticsearch indices, Amazon Elasticsearch Service distributes the primary and replica shards across nodes in different AZs to maximize availability. 

Amazon Connect now provides four new APIs that enable you to start, stop, pause, and resume call recording. Using the new APIs, you can control recording with a button from your custom agent user interface, build integrations to set recording behavior based on telephony attributes (e.g., area code), or pause and resume recording based on programmatic triggers. For example, when interacting with a CRM application, you can automatically pause call recording when an agent tabs into a field that accepts sensitive customer information, such as a credit card number. You can also provide agents the ability to manually turn on or off call recording to comply with regulations that require customer consent.

AWS Content Analysis is an AWS Solutions Implementation that customers can use to obtain a broader understanding of their media content through machine learning. The solution brings together the capabilities of different AWS machine learning tools to generate meaningful insights from metadata gleaned through video analysis. Customers can use the solutions implementation, modify it to fit their own workflows and build their own analytical solutions for media in the AWS Cloud.

Starting today, customers considering AWS for running on-premises workloads can request a business case from Migration Evaluator (Formerly TSO Logic) at no cost. Creating business cases on your own can be a time-consuming process and does not always identify the least expensive deployment and purchasing options. With Migration Evaluator, you get access to AWS expertise, visibility into the costs associated with multiple migration strategies, and insights on how reusing your existing software licensing further reduces costs.

Amazon SQS now supports a new console which simplifies development and production workflows by creating a new user experience.

AWS IoT Device Tester for FreeRTOS now supports FreeRTOS 202007.00. AWS IoT Device Tester v3.1.0 for FreeRTOS includes new qualification tests for the over-the-air update (OTA) test group.

Details: Amazon CloudFront now supports a new security policy, TLSv1.2_2019, which includes only the following ciphers:

• TLS_AES_128_GCM_SHA256

• TLS_AES_256_GCM_SHA384

• TLS_CHACHA20_POLY1305_SHA256

• ECDHE-RSA-AES128-GCM-SHA256

• ECDHE-RSA-AES128-SHA256

• ECDHE-RSA-AES256-GCM-SHA384

• ECDHE-RSA-CHACHA20-POLY1305

• ECDHE-RSA-AES256-SHA384
  

AWS IoT Analytics is now available in the Sydney AWS Region, extending the footprint to 7 AWS Regions.

Amazon MQ now supports mq.t3.micro, the next generation of micro instance, priced at 8% to 13% less than the previous generation mq.t2.micro.  

EC2 VM Import / Export (VMIE) now allows you to import virtual machine images with Red Hat Linux (RHEL) 8/8.1/8.2 and CentOS 8/8.1/8.2 for creating Amazon Machine Images (AMI). You can use the AMI to create Amazon EC2 instances.  

Amazon RDS for SQL Server expands support for Windows authentication using the AWS Managed Microsoft AD service in the AWS GovCloud (US) Regions.

We’ve updated the Amazon Elastic File system (Amazon EFS) console to make it even easier for you to create and manage your file system resources. In addition to a refreshed look and feel, you can now create a file system using the recommended settings in just a few clicks, you can customize your view to quickly find information you’re looking for, and you can monitor your file system’s behavior using Amazon CloudWatch metrics and alarms natively in the EFS console.

Lumberyard 1.25 is available now, bringing you an updated UI, an updated Starter Game project to help you get set up with best practices, and the brand new White Box Tool!  

Starting today, all new file systems created using the Amazon Elastic File System (Amazon EFS) console are automatically backed up with AWS Backup using the recommended settings (daily backups with a retention of 35 days). Automatic backups for Amazon EFS further simplifies backup management of your file systems by easily enabling you to meet your business and regulatory backup compliance requirements. It is now as easy as checking a check box in the Amazon EFS console, or making a single API call, to enable backups for your existing file systems. You can also disable automatic backups for your file systems at any time. 

Today, AWS added a fourth Availability Zone (AZ) to the Asia Pacific (Seoul) Region to support the high demand of our growing Korean customer base. 

AWS Systems Manager now supports scheduling of maintenance tasks, such as applying patches, offset from a specific day in a specific week of the month. This enables IT operators to specify the number of days to wait before executing a maintenance window. 

Today we’re excited to announce two new courses and two refreshed courses created specifically for our Amazon Partner Network (APN) Partner community. First, AWS Solutions Training for Partners: Amazon Connect (Business) is a new digital course designed to help partners understand how to discuss the business advantages of creating a cloud-based contact center with Amazon Connect. Enroll in this 90-minute digital course and start learning today!

Amazon Interactive Video Service (Amazon IVS) is a managed live streaming solution that is quick and easy to set up, and ideal for creating interactive video experiences. Send your live streams to Amazon IVS using standard streaming software like Open Broadcaster Software (OBS) and the service does everything you need to make low-latency live video available to any viewer around the world, letting you focus on building interactive experiences alongside the live video.

CDK Pipelines is a construct library for the AWS Cloud Development Kit (AWS CDK) that makes it easy to set up simple or complex continuous delivery pipelines with AWS CodePipeline. With CDK Pipelines, development teams can define and share “pipelines-as-code” patterns for deploying their applications. Teams can easily add stages to their pipeline to deploy their applications across multiple AWS accounts or additional AWS Regions. 

We're excited to announce two digital courses, CloudEndure Disaster Recovery Technical Training and CloudEndure Migration Training - Technical. These courses will teach you technology features, best practices, and implementation steps to build disaster recovery and migration services with confidence. These courses, 90 minutes and  two hours in length respectively, are designed for solution architects and engineers managing disaster recovery and migration projects.

Today Amazon Corretto is releasing its July quarterly critical updates. This release also includes Corretto 8 & 11 support for Alpine Linux, Corretto 8 with JFR (JDK Flight Recorder) which can be used with JMC (JDK Mission Control) built for (to support) Corretto, Corretto 11 32bit x86 for Linux and ARM64 optimizations for both Corretto 8 & 11.

Twenty-three new or updated Amazon Web Services (AWS) public datasets from the National Center for Bioinformatics, Johns Hopkins University, University of Texas at Southwestern, National Oceanic and Atmospheric Administration (NOAA), the National Cancer Institute, National Herbarium of New South Wales, and others are now available in the following categories:

Amazon SageMaker Debugger is a new capability of Amazon SageMaker that provides complete insights into the training process of machine learning (ML) models by automating the capture and analysis of data from training runs at real time, with no code changes.

Customers using container services including Amazon Elastic Container Service (ECS), Amazon Elastic Kubernetes Services (EKS), or self-managed Kubernetes can now send their container logs to Amazon Elasticsearch Service using the Fluent Bit log router. Fluent Bit allows customers to route container logs to various AWS and partner monitoring solutions including CloudWatch, Amazon Kinesis, Datadog, Splunk, and now Amazon Elasticsearch Service.

AWS Service Catalog is now available in two new AWS Regions. With this release, AWS Service Catalog is now available in 21 regions including US East (N. Virginia, Ohio), US West (N. California, Oregon), Canada (Central), South America (São Paulo), Europe (Ireland, Frankfurt, London, Paris, Stockholm and Milan), South America (Sao Paulo), Middle East (Bahrain) and Asia Pacific (Mumbai, Seoul, Singapore, Sydney, Hong Kong, and Tokyo) and Africa (Cape Town). AWS Service Catalog is also available in GovCloud (US-West) and GovCloud (US-East) Regions, AWS Regions designed to host sensitive data and regulated workloads in the cloud for customers who have U.S. federal, state, and local government compliance requirements.

Amazon Athena now supports querying the read-optimized view of an Apache Hudi dataset in your Amazon S3-based data lake.  

AWS Key Management Service now allows you to define VPC Endpoint policies, enabling you to increase the granularity of your security controls by specifying which principals can access your endpoint, which API calls they can make, and which resources they can access. 

We’re excited to announce Amazon FSx for Windows File Server Primer. This digital, hour-long intermediate course teaches you how to support your Windows-based applications and workloads with Amazon FSx for Windows File Server. Featuring self-paced modules and video demonstrations, the course is ideal for storage engineers, file server administrators, and cloud architects.

Amazon Elastic Kubernetes Service (EKS) now supports Kubernetes version 1.17.

AWS Service Catalog is now available for use in AWS Managed Services (AMS) accounts. You can now leverage Service Catalog as an alternative to the AWS change management system to provision and manage resources in your AMS accounts. Service Catalog helps you achieve consistent governance by systematically applying your organization’s security and operational policies, while enabling your end users to quickly deploy only the approved IT resources they need. With Service Catalog, you can control which IT services and versions are available, the configuration of the available services, and permission access by individual, group, department, or cost center. Once provisioned, AMS manages all of the operational tasks needed to run AWS at scale for all infrastructure resources provisioned through Service Catalog. 

The Amazon Virtual Andon solution provides a scalable Andon system to help optimize factory floor processes, reduce issue resolution time, support the transition to predictive maintenance, and prevent issues. The solution provides a workflow to help users monitor manufacturing workstations for an event, log the event, and then route the event to the correct engineer for resolution in real-time. The solution is fully customizable and allows users to update available issue types and root causes as processes evolve and change.

AWS DeepRacer is a fully autonomous 1/18th scale race car powered by reinforcement learning that gives machine learning developers of all skill levels the opportunity to learn and build their ML skills in a fun and competitive way. AWS DeepRacer Evo includes new features and capabilities that help developers to learn more about ML through the addition of sensors that enable object avoidance and head-to-head racing. Starting today, while supplies last, developers can purchase AWS DeepRacer Evo for a limited-time, discounted price of $399, a saving of $199 off the regular bundle price of $598 and the AWS DeepRacer Sensor Kit for $149, a saving of $100 off the regular price of $249. Both are available on Amazon.com for shipping in the USA only.

Cloud Foundation is an AWS Solutions Consulting Offer, delivered via a consulting engagement from Itoc, an AWS DevOps, Financial Services, SaaS and Security Competency Partner. Cloud Foundation delivers a best practice, secure, and flexible foundation AWS environment for customers that don’t have the depth of skills yet or the capacity internally to build their own. Whether you need to improve the implementation of your current AWS solution or build a new greenfield environment, Itoc will provide a complete walkthrough; no prior experience required.

Now you can configure ingress for your applications running within App Mesh with virtual gateways that allow services outside of your mesh to communicate with services inside the mesh. AWS App Mesh is a service mesh that provides application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure. App Mesh standardizes how your services communicate, giving you end-to-end visibility and ensuring high-availability for your applications. 

Starting today, Amazon EC2 C5n and I3en instances are available in the AWS Europe (Stockholm) and Asia Pacific (Hong Kong) regions.  

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. Amazon DocumentDB makes it easy and intuitive to store, query, and index JSON data. 

AWS Secrets Manager now enables you to search secrets based on attributes such as secret name, description, tag keys, and tag values. With this launch, you can easily identify, arrange, and manage your secrets in to logical groups that are used by specific applications, departments, or employees. You can use this functionality through the Secrets Manager console or the List Secrets API to quickly find a subset of all your secrets managed in AWS Secrets Manager. 

AWS Service Catalog now supports obtaining outputs from a Service Catalog provisioned product in an AWS CloudFormation template. Product outputs provide the interface from one product to another. With this new feature, administrators and developers can easily refer to those outputs in order to combine the products needed for their applications, which saves time building applications that use more than one product, such as a three-tier web application. 

AWS Systems Manager now integrates with AWS Config to track configuration changes to inventory files on managed instances collected by AWS Systems Manager Inventory. A managed instance is a virtual machine that is configured for use with AWS Systems Manager. You can now track changes to file type inventory data from managed instances with the file attributes, such as name, version, installation directory, description, and so on. For example, you can now track changes to a license version file for an installed application on a managed instance. 

Amazon QuickSight's SPICE engine now supports data sets up to 250M rows and 500GB. Customers love using SPICE to accelerate their dashboards, and this increase—from 100M rows and 200GB—is the most frequent request we get. Today we're happy to announce support for larger data sets, letting you accelerate dashboards with more data.

AWS Managed Services (AMS) now supports launching Amazon EC2 instances of Oracle Linux 7.5 and later minor versions. Enterprises can now migrate their workloads using Oracle Linux 7.5 into AMS using workload ingest process or by creating new EC2 instances. AMS performs patching, monitoring, back-up management, log aggregation, security management, incident management, and problem management for these EC2 instances.  

Amazon Athena customers can now register and manage their data catalogs in Athena using the AWS CloudFormation AWS::Athena::DataCatalog resource.

EC2 Image Builder now allows customers to stream logs to AWS CloudWatch, which can help examine and troubleshoot issues with building, customizing, securing, patching, testing, and distribution of Amazon Machine Images (AMIs). It also allows customers to maintain continuous visibility into the activity of Image Builder pipelines. 

Genomics Tertiary Analysis and Data Lakes Using AWS Glue and Amazon Athena is a new AWS Solutions Implementation that creates a scalable environment in AWS to prepare genomic data for large-scale analysis and perform interactive queries against a genomics data lake. The solution demonstrates how to 1) build, package, and deploy libraries used for genomics data conversion, 2) provision data ingestion pipelines for genomics data preparation and cataloging, and 3) run interactive queries against a genomics data lake. The solution uses AWS CloudFormation to automate its deployment in the AWS Cloud, and it includes continuous integration and continuous delivery (CI/CD) using AWS CodeCommit source code repositories and AWS CodePipeline  for building and deploying updates to the data preparation jobs, crawlers, data analysis notebooks, and the data lake infrastructure. It fully leverages infrastructure as code principles and best practices that enable you to rapidly evolve the solution.

AWS Launch Wizard for SAP is now integrated with Amazon Route53 as the Domain name system. Starting today, you can choose a Route53 hosted zone as the domain name system for SAP systems deployed with AWS Launch Wizard. Launch Wizard creates DNS records in the chosen Route53 hosted zone eliminating the need to maintain /etc/hosts file entries for each of the EC2 instances being deployed as part of the deployment. Since it’s not possible for two instances in the same domain to have same hostname, Launch Wizard validates the user input to ensure that the record does not exist already, thereby avoiding deployment failures. 

Amazon AppFlow is a fully managed integration service that enables customers securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks. Amazon AppFlow now integrates with Amazon CloudWatch Events to publish events related to the status of a flow including start of a flow run, completion of a flow run with status (success or failure) and error messages, AppFlow initiated deactivation of a scheduled or event triggered flow, and the number of third-party events that triggered flow runs in a 5 minute interval. 

The AWS Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across AWS accounts securely and easily. The Secrets Manager console also uses Zelkova, an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across AWS accounts. This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access.

Starting today you can enable the SPATIAL option for your Amazon RDS instances for Oracle running Standard Edition 2 (SE2). 

You can now use AWS Organizations to manage the use of your content by some AWS machine learning services. Certain services (Amazon CodeGuru Profiler, Amazon Comprehend, Amazon Lex, Amazon Polly, Amazon Rekognition, Amazon Textract, Amazon Transcribe, and Amazon Translate) may use content to improve the service. Previously, you could opt out of this use by contacting AWS Support. This new feature allows you to configure an organizational policy to opt out, without the need to contact AWS Support, and to have your configuration applied to all accounts within an organization. 

Amazon Neptune is now available in the AWS US West (N. California) Region. You can now create Neptune clusters using R5 and T3 instance types in this region for your graph applications.  

You can now deploy Amazon AppStream 2.0 in the AWS Asia Pacific (Mumbai) Region. Deploying AppStream 2.0 in your local region provides users with a more responsive experience and may help support your local data compliance obligations. With this launch, you can deploy General Purpose, Compute Optimized, Memory Optimized, Graphics Pro and Graphics G4 instances to meet the needs of your users. 

The latest update to the AWS Well-Architected Framework is now available and reflects the latest best practice guidance for designing and deploying cloud workloads. An integral part of the AWS Well-Architected Tool (AWS WA Tool), the AWS Well-Architected Framework has been a guide for building secure, efficient, reliable, cost-effective, and high-performance workloads on AWS since 2015. It continues to evolve and improve as new cloud services and capabilities are introduced. 

Amazon Forecast is a fully managed service that uses machine learning (ML) to generate accurate forecasts without requiring any prior ML experience. Amazon Forecast can be used in a wide variety of use cases, including product demand forecasting, inventory planning, workforce planning and cloud infrastructure usage forecasting.  

Today, we are announcing that customers can create snapshots of their block storage data, including on-premises data using Amazon Elastic Block Store (EBS) direct APIs. With a set of API calls, customers can use snapshots to store data in AWS, regardless of where it resides. This enables customers to achieve business continuity in AWS at lower cost.  

AWS RoboMaker, a service that makes it easy to simulate and deploy robotics applications at cloud scale, today announced the S3 rosbag cloud extension for ROS Kinetic and Melodic distributions. This new cloud extension enables customers to easily configure and record data from robots as rosbags, and upload them to Amazon S3, which they can later use to analyze events, troubleshoot existing applications, and provide as inputs to AWS RoboMaker log-based simulation for regression testing.  

You can now use AWS PrivateLink to privately access the Amazon RDS Application Programming Interface (Amazon RDS API) for Amazon RDS from your Amazon Virtual Private Cloud (Amazon VPC) without using public IPs, and without requiring the traffic to traverse across the Internet.  

Today, AWS announces Systems Manager Opscenter availability to customers in AWS GovCloud (US) Regions. OpsCenter helps you view, investigate, and resolve operational issues related to your environment from a central location. OpsCenter presents operational issues in a standardized view, along with contextually relevant data to help you with the diagnosis and remediation of them. You can associate AWS Systems Manager Automation documents for easier remediation and also specify deduplication logic to filter repetitive operational issues. 

We are excited to announce the launch of normalized model scores in Amazon Fraud Detector (Preview). Customers use scores to sideline high risk events, while allowing low risk events to pass with no friction. Prior to this launch, score distributions could shift between models, forcing customers to manually analyze the distributions and update their business logic (e.g. rules) to account for these shifts. 

You can now use opt-out policies to opt out of storage and use of your content for continuous improvement of AI services such as Amazon CodeGuru Profiler, Amazon Comprehend, Amazon Lex, Amazon Polly, Amazon Rekognition, Amazon Textract, Amazon Transcribe, and Amazon Translate. Previously you could opt-out by contacting AWS Support. This new feature enables self-service opt-out by configuring an organization policy that enforces your chosen setting on all accounts within the organization. You can choose to opt out of data use for an individual AI service, or for all of them at once. In addition, you can query the effective policy applicable to each account to see your chosen setting.  

Docker and Amazon Web Services have announced a simplified developer experience to deploy and manage containers on Amazon Elastic Container Service (ECS) directly from Docker tools. Now, customers can use Docker Desktop and Docker Compose to deploy containers on Amazon Elastic Container Service (ECS) using the AWS Fargate launch type. After customers build and test containers locally using Docker Desktop and Docker Compose, they can now deploy them to Fargate on ECS through the same CLI.  

AWS WAF now supports inspecting the X-Forwarded-For (XFF), True-Client-IP, or other custom header that includes the originating IP address of a client connecting to your application through an HTTP proxy or a third-party CDN. With this feature, you can reference these headers to write rate-based rules, geographic match rules, or IP match rules, allowing you to take action on IPs that are found within these headers. Both IPv4 and IPv6 addresses are supported. 

AWS Config launched 28 new managed rules today across multiple AWS Regions. Managed Config rules are predefined rules that can help you evaluate whether your AWS resource configurations comply with common best practices.  

Starting today, AWS Firewall Manager is available in Asia Pacific (Hong Kong) and Middle East (Bahrain), extending the total to 18 AWS Regions and all Amazon CloudFront edge locations.

Today, AWS announces Systems Manager Explorer availability to customers in AWS GovCloud (US) Regions. 

Amazon Comprehend now supports real time Custom Entity Recognition. You can use the real time Custom Entity Recognition to identify terms that are specific to your domain in real time. For example, you can instantly extract product names, financial entities or any term relevant to you from unstructured text documents. Prior to this launch, Custom Entity Recognition identified business-specific entities in text documents asynchronously. Now, customers can choose real time or asynchronous Custom Entity Recognition depending on their use case.

We’re excited to announce that we’ve updated AWS WAF Security Automations, a reference implementation that makes it easier for customers to configure WAF rules to protect web applications running in AWS. 

Today, we are announcing the general availability of AWS IoT SiteWise, a managed service that makes it easy to collect data from your industrial equipment, model your physical assets, processes and facilities, quickly compute common industrial performance metrics, and create fully managed web applications to help analyze industrial equipment data, prevent costly equipment issues, and reduce production inefficiencies.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, now enables you to back up your table data continuously by using point-in-time recovery (PITR). 

Amazon SageMaker Ground Truth is a fully managed data labeling service that makes it easy to build highly accurate training datasets for machine learning. Starting today, SageMaker Ground Truth now supports common video labeling use cases with new built-in workflows.

You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the Africa (Cape Town) and Europe (Milan) Regions.

You can now use the new Amazon Redshift console Amazon Redshift in the AWS GovCloud (US) Regions. The new user interface and new features simplify management and improve insights into the health and performance of your Amazon Redshift clusters and workloads.  

AWS IoT Core is announcing a new feature called named shadow, which allows you to create multiple shadows for a single IoT device. A device's shadow is a JSON document that is used to store and retrieve state information for a device. 

Today, Amazon Elastic Container Service (ECS) announced AWS Copilot, a command line interface tool that helps customers develop, release, and operate containerized applications on AWS. With a single command, AWS Copilot creates all infrastructure and artifacts required to run production-ready service on Amazon ECS and AWS Fargate, including task definitions, image repositories, and AWS resources like load balancers, deployment pipelines. With AWS Copilot, users can focus on developing their applications rather than setting up infrastructure.

AWS Firewall Manager has introduced new pre-configured rules to help customers audit their VPC security groups and get detailed reports of non-compliance from a central administrator account. This feature makes it easier for customers to centrally audit their security groups using pre-configured rules they can readily enable out of box across their accounts and resources, taking away the heavy-lifting of configuring custom audit checks manually.  

Amazon EC2 Spot Instances let you take advantage of unused Amazon EC2 capacity. Spot Instances are available at up to a 90% discount compared to On-Demand prices. You can use Spot Instances for various stateless, fault-tolerant, or flexible applications such as big data, containerized workloads, CI/CD, web servers, high-performance computing (HPC), and other test & development workloads. Starting today, you can assign AWS resource tags to Spot Instance requests on creation, in addition to the tags for each individual, launched Spot Instance.. Use tags in your Spot Instance requests to more easily identify their purpose. For example, you can use tags to identify all Spot Instance requests used by a particular department, project, or application. 

Amazon Kendra is a highly accurate and easy to use enterprise search service powered by machine learning. Starting today, AWS customers can use AWS PrivateLink to access Amazon Kendra from their Amazon Virtual Private Cloud (Amazon VPC) without using public IPs or requiring the traffic to traverse the Internet. AWS PrivateLink provides secure connectivity between VPCs and AWS services, without ever leaving the Amazon network. 

AWS Direct Connect is now live at MedOne in Haifa, Israel. This is the first AWS Direct Connect location in Israel. Customers in Israel can now locally establish a dedicated network connection from their on-premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections. With global access for AWS Direct Connect, you can reach AWS resources in any global AWS region from any AWS Direct Connect locations using global public virtual interface(s) and Direct Connect gateway. When connecting to any AWS region, your data will not hairpin via the associated AWS region for the location if it is not in the shortest path to your desired AWS region. 

Amazon EMR now supports Managed Scaling, a new feature that automatically resizes your EMR cluster for best performance at the lowest possible cost, without the need to specify scaling policies. You can reduce up to 60% cost compared with fixed-size clusters by setting the minimum and maximum compute resource limits for a cluster. 

AWS now offers the Migration Acceleration Program (MAP) for Storage. MAP for Storage provides services, best practices, and tools to help our customers save costs, accelerate their migrations, and modernize their storage workloads on AWS.

Amazon Neptune now provides the flexibility to specify conditions in IAM policies using tags. Tags can be added to a Neptune resource such as a DB cluster or instance. Using tags, you can restrict management operations on the cluster without using the cluster or instance resource identifiers.

Amazon FSx for Lustre now enables you to use the world’s most popular high-performance file system from Amazon EC2 instances powered by Arm-based AWS Graviton2 processors. This capability makes it easier and even more cost-effective to run workloads where speed matters, such as machine learning, gaming, electronic design automation, high-performance computing, video processing, and financial modeling. 

Starting today, AWS Marketplace offers integrated third-party software solutions for AWS Control Tower. Built by independent software vendors, these solutions help solve infrastructure and operational use cases such as security for a multi-account environment, with tools including centralized networking, operational intelligence, and Security and Information Event Management (SIEM). 

AWS Storage Gateway now supports a local cache of up to 64 TB for File Gateway, improving performance for your on-premises applications by providing you with low-latency access to larger working data sets. Now, you can easily scale your gateway’s local cache to manage more of your application data closer to your on-premises applications and users.  

AWS Storage Gateway simplifies cache management for File Gateway by enabling you to create multiple file shares for a single Amazon S3 bucket and synchronize the gateway’s local cache with an Amazon S3 bucket based on frequency of directory access. These enhancements simplify the management of your gateway by providing flexibility when configuring new file shares and streamlining the cache refresh process.  

AWS Identity and Access Management (IAM) Access Analyzer console now flags resources that allow public access to help you quickly identify and remediate unintended public access. The console now displays a warning message when you have findings for resources with public access and labels the findings “Public”. You can now also use filters to quickly identify public access findings to help you prioritize remediation of unintended public access. To review findings for public access, go to IAM Access Analyzer in IAM console.

Amazon Forecast is a fully managed service that uses machine learning (ML) to generate accurate forecasts without requiring any prior ML experience. Amazon Forecast can be used in a wide variety of use cases, including product demand forecasting, inventory planning, workforce planning and cloud infrastructure usage forecasting.

Starting today, AWS customers can enable Spot Instances for AWS Marketplace Amazon Machine Image (AMI) products while launching new instances through the EC2 console Launch Instance Wizard (LIW). With this launch, you can reduce costs on the EC2 instances you need to run your third-party software on AWS. Spot Instances enable you to request unused EC2 instances at steep discounts- up to 90% compared to On-Demand prices- so you can lower your Amazon EC2 costs. Spot Instances are a cost-effective choice if have flexibility with running your third-party applications and if your applications are fault-tolerant. Customers—including Salesforce, Lyft, Zillow, Novartis and Autodesk—use Spot Instances to reduce costs and get faster results. For example, Salesforce saved over 80% vs On-Demand Instance pricing, and doubled the speed of processing machine learning and ETL workloads with Spot Instances. 

Amazon EMR now supports encrypting log files using Customer-managed Customer master keys (CMKs) stored in AWS Key Management Service (KMS). Amazon EMR automatically upload log files to Amazon S3 when logging and debugging is enabled With this new feature, you can associate Customer managed CMKs in AWS KMS when launching a cluster. Amazon EMR will automatically encrypt logs using the Customer managed CMKs in AWS KMS. Previously you could only encrypt log files written to S3 using Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3). Click here to learn more about encrypting log files please see the documentation.

Amazon Connect enables customers to use Amazon Polly’s latest US-English neural voice, Kevin. Built on Amazon Polly’s neural text-to-speech technology, this new voice delivers groundbreaking improvements in speech quality, making automated conversations sound more lifelike by improving the pitch, inflection, intonation, and tempo.  

With this release, Amplify CLI makes it easy to use Lambda layers to share code & assets across various Lambda functions. Amplify CLI provides a guided creation, update, and deployment process for Lambda layers designed for Node.js, and Python runtimes.  

Amazon Web Services announced Amazon Relational Database Service (RDS) support for MySQL and PostgreSQL databases on AWS Outposts.  

Amazon Elastic Container Service (ECS) today increased the default service quotas for ECS tasks per service and services per cluster. You can now launch up to 2,000 tasks per service and 2,000 services per cluster, up from 1,000 each.

EC2 Image Builder is now integrated with AWS Key Management Service (KMS) and enables customers to build and distribute Amazon Machine Images (AMIs) that are encrypted with Amazon Elastic Block Store (EBS) encryption. 

Amazon RDS for MariaDB has been updated to support release 10.3.23 and release 10.4.13 of the MariaDB database. These releases include a number of bug fixes as well as functionality improvements.

Today we are announcing the availability of more granular CloudWatch metrics for improved network monitoring on the AWS Transit Gateway.

Amazon Personalize uses machine learning to personalize recommendations for products, content, and marketing communications for your users, with no machine learning experience required. This technology has been perfected from over 20 years of recommender systems development at Amazon.com.  

AWS provides a live streaming solution that combines AWS Elemental MediaLive and AWS Elemental MediaStore with Amazon CloudFront. This solution delivers the fundamentals you need to get started with live streaming and deliver your content around the world. The latest version of the solution now supports AWS Elemental Link which offers a configuration-free, cost-efficient way to securely and reliably transfer video to AWS Elemental MediaLive.  

AWS Direct Connect support for AWS Transit Gateway is now available in AWS Africa (Cape Town) and AWS Europe (Milan) Regions. With this feature, customers can connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) in multiple AWS Regions to their on-premises networks using 1/2/5/10 Gbps AWS Direct Connect connections.  

You can now use AWS Resource Access Manager (RAM) in the Europe (Milan) Region.

You can now use AWS Resource Access Manager (RAM) in the Africa (Cape Town) Region.

Amazon Comprehend Medical, is a HIPAA-eligible machine learning service that allows developers to process unstructured medical text and identify information such as patient diagnosis, treatments, dosages, symptoms and signs, and more. One of the more powerful features of Amazon Comprehend Medical is the ability to tie these entities together through a process called relationship extraction.  

Today, we are announcing AWS App2Container (A2C), a new command-line tool for modernizing .NET and Java applications into containerized applications. A2C analyzes and builds an inventory of all applications running in virtual machines on-premises or in the cloud. You simply select the application you want to containerize, and A2C packages the application artifact and run-time dependencies into container images, configures the network ports, and generates the ECS task and Kubernetes pod definitions.

We are happy to announce the availability of Porting Assistant for .NET, an analysis tool that scans .NET Framework applications and generates a .NET Core compatibility assessment, helping you port your applications to Linux faster.

AWS AppSync is a managed GraphQL service that simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources. With AppSync, you can build scalable applications on a range of data sources such as NoSQL data stores, relational databases, HTTP APIs, and any custom data sources with AWS Lambda.  

EC2Launch v2 is a redesigned, unified launch agent for EC2 Windows instances, which simplifies the configuration of Windows instances to meet the needs of your workloads. EC2Launch applies AWS-recommended configurations to your Windows instances, such as local administrator username changes, support for increased user data input length, and agent auto-updates. EC2Launch v2 provides you with a single EC2 launch experience regardless of EC2 platform and supported Windows OS.

When using AWS DataSync, you now have the option of automatically generating the CloudWatch log group and resource policy required to publish logs for your data transfer, simplifying task creation and monitoring set up.  

Amazon Simple Email Service (Amazon SES) is now available in 4 additional AWS Regions including US East (Ohio), Asia Pacific (Singapore), Asia Pacific (Tokyo), and Asia Pacific (Seoul). This regional expansion is particularly useful for organizations where data residency considerations previously made it difficult for customers to use Amazon SES.

AWS Config now supports multi-account, multi-region data aggregation in Asia Pacific (Hong Kong) and Middle East (Bahrain) Regions. This feature enables you to aggregate AWS Config configuration and compliance data into a single account and Region, which reduces the time and overhead needed to gather an enterprise-wide view of your compliance status for governance.  

Starting today, AWS AppSync is available in five new regions: EU (Paris and Stockholm), Canada (Central), South America (Sao Paulo) and US (N. California).

You can now launch Apache ActiveMQ 5.15.12 brokers on Amazon MQ. This patch update to ActiveMQ contains several fixes and improvements compared to the previously supported version, ActiveMQ 5.15.10.  

You can now deploy AWS DataSync agents on Linux Kernel-based Virtual Machine (KVM) and Microsoft Hyper-V hypervisors. This enables you to run DataSync agents on Linux hosts, and in Windows-based environments, in addition to the existing VMware and EC2 options.