November 2022

Trusted Language Extensions for PostgreSQL is a new open source development kit to help you build high performance extensions that run safely on PostgreSQL. With Trusted Language Extensions, developers can install extensions written in a trusted language on Amazon Aurora PostgreSQL-Compatible Edition and Amazon Relational Database Service (RDS) for PostgreSQL.

Amazon GuardDuty now offers threat detection for Amazon Aurora to identify potential threats to data stored in Aurora databases. Amazon GuardDuty RDS Protection profiles and monitors access activity to existing and new databases in your account, and uses tailored machine learning models to accurately detect suspicious logins to Aurora databases. Once a potential threat is detected, GuardDuty generates a security finding that includes database details and rich contextual information on the suspicious activity, is integrated with Aurora for direct access to database events without requiring you to modify your databases, and is designed to not affect database performance.

Today, we are excited to announce three new purpose-built tools for Amazon SageMaker to improve governance of your machine learning (ML) projects with simplified access control and enhanced transparency across your ML model’s lifecycle. With Amazon SageMaker Role Manager, you can define minimum permissions for users in minutes and onboard new users faster. SageMaker Role Manager simplifies the permission setting for ML activities and automatically generates a custom policy based on your specific needs.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning (ML) that enables ML practitioners to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. Today, we are announcing new capabilities in SageMaker Studio to accelerate real time collaboration across ML teams.

Today, AWS announces the general availability of Amazon SageMaker Data Wrangler support for over 40 third party applications as data sources for machine learning (ML) through the integration with Amazon AppFlow. Amazon SageMaker Data Wrangler reduces the time it takes to aggregate and prepare data for machine learning (ML) from weeks to minutes. Preparing high quality data for ML is often complex and time consuming as it requires aggregating data across various sources and formats using different tools. With SageMaker Data Wrangler, you can explore and import data from a variety of popular sources, such as Amazon S3, Amazon Athena, Amazon Redshift, Snowflake, Databricks and Salesforce Customer Data Platform. Starting today, we are making it easier for customers to aggregate data for ML from over 40 third-party application data sources, including Salesforce Marketing, SAP, Google Analytics, LinkedIn and more via Amazon AppFlow. 

AWS Machine Learning University is now providing a free educator enablement program that prioritizes U.S. community colleges, Minority Serving Institutions (MSIs), and Historically Black Colleges and Universities (HBCUs). Educators can leverage these tools to launch stand-alone courses, certificates, or full degrees in data management (DM), artificial intelligence (AI), and machine learning (ML). The goal is to make early-career DM/AI/ML jobs more accessible to a broader and more diverse student population. The program offers a suite of ready-to-use tools to faculty, including a library of ready-to-teach DM/AI/ML educational materials, free computing capacity, and comprehensive faculty professional development built around MLU, Amazon's own internal training program for ML practitioners.

Amazon Athena now supports Apache Spark, a popular open-source distributed processing system that is optimized for fast analytics workloads against data of any size. Athena is an interactive query service that helps you query petabytes of data wherever it lives, such as in data lakes, databases, or other data stores. With Amazon Athena for Apache Spark, you get the streamlined, interactive, serverless experience of Athena with Spark, in addition to SQL.

We are excited to announce AWS AI Service Cards, a new resource to increase transparency and help customers better understand our AWS AI services, including how to use them in a responsible way. AI service cards are a form of responsible AI documentation that provides customers with a single place to find information on the intended use cases and limitations, responsible AI design choices, and best deployment and operation practices for our AI Services. They are part of a comprehensive development process we undertake to build our services in a responsible way with fairness and bias, robustness, explainability, governance, transparency, privacy, and security in mind.

Amazon AppFlow announces the release of 22 new data connectors. With this launch, Amazon AppFlow now supports data connectivity to over 50 applications. Amazon AppFlow is a fully managed integration service that enables you to securely transfer data between Software-as-a-Service (SaaS) applications and AWS services like Amazon S3 and Amazon Redshift. As enterprises increasingly rely on SaaS services for mission-critical workflows, they face the challenge of collecting data from a growing ecosystem of services into a centralized location to derive business insights using analytics and machine learning. With Amazon AppFlow, you can easily set up data flows in minutes without writing code.

Amazon SageMaker Data Wrangler reduces the time it takes to aggregate and prepare data for ML from weeks to minutes With Data Wrangler, you can simplify the process of data preparation and feature engineering, and complete each step of the data preparation workflow, including data selection, visualization, cleansing, and preparation from a low-code visual interface. Many ML practitioners want to explore datasets directly in notebooks to spot potential data-quality issues, like missing information, extreme values, skewed datasets, or biases, so they can correct those issues to prepare data for training ML model faster. ML practitioners can spend weeks writing boilerplate code to visualize and examine different parts of their dataset to identify and fix potential issues.

Amazon SageMaker JumpStart now enables you to more easily share machine learning (ML) artifacts, including notebooks and models, across your organization to accelerate model building and deployment. Amazon SageMaker JumpStart is an ML hub that accelerates your ML journey with built-in algorithms and pretrained models from popular model hubs, such as Hugging Face, and end-to-end solutions that solve common use cases.

We are thrilled to announce the new AWS Graviton Delivery specialization for AWS partners that excel in enabling the best price performance for workloads in Amazon Elastic Compute Cloud (Amazon EC2). This specialization validates AWS Partners that help customers accelerate and scale their adoption of AWS Graviton to achieve better workload performance and cost savings.

We are excited to announce the new AWS Glue Delivery specialization, which validates AWS Partners with deep expertise and proven success delivering AWS Glue for data integration, data pipeline, and data catalogue use cases. AWS Glue is a scalable, serverless data integration service that makes it easy to discover, prepare, and combine data for analytics, machine learning, and application development. With the ability to scale on demand, AWS Glue helps customers focus on high-value activities that maximize the value of their data.

Amazon Web Services (AWS) is incredibly excited to announce the new Amazon MSK Service Delivery specialization for AWS partners that help customers migrate and build real-time streaming analytics solutions with fully managed Apache Kafka. Amazon MSK provisions your servers, configures your Apache Kafka clusters, replaces servers when they fail, orchestrates server patches and upgrades, architects clusters for high availability, ensures data is durably stored and secured, sets up monitoring and alarms, and runs scaling to support load changes. With MSK Serverless, getting started with Apache Kafka is even easier. It automatically provisions and scales compute and storage resources and offers throughput-based pricing, so you can use Apache Kafka on demand and pay for the data you stream and retain.

The new Amazon EC2 Spot Ready specialization helps customers identify validated AWS Partner software products that support Amazon EC2 Spot Instances, a compute purchase option that allows customers to utilize spare EC2 capacity at a discounted price from on demand (up to 90%). Amazon EC2 Spot Ready ensures that customers have a well-architected and cost-optimized solution to help them benefit from EC2 Spot savings for their workloads.

Amazon Redshift data sharing enables you to efficiently share live data across Amazon Redshift data warehouses. Amazon Redshift now supports simplified governance of Amazon Redshift data sharing by enabling you to use AWS Lake Formation to centrally manage permissions on data being shared across your organization. With the new Amazon Redshift data sharing managed by AWS Lake Formation, you can view, modify, and audit permissions on the tables and views in the Redshift datashares using Lake Formation APIs and the AWS Console, and allow the Redshift datashares to be discovered and consumed by other Redshift data warehouses.

We are announcing the preview of AWS Data Exchange for AWS Lake Formation, a new feature that enables data subscribers to find and subscribe to third-party data sets that are managed directly through AWS Lake Formation. This feature is intended for data subscribers who want to easily integrate third-party data directly into their data lake as well as data providers who want to use AWS Lake Formation and AWS Data Exchange to help streamline their data licensing operations. 

Amazon S3 Access Points simplify data access for any AWS service or customer application that stores data in S3 buckets. With S3 Access Points, you create unique access control policies for each access point to more easily control access to shared datasets. Now, bucket owners are able to authorize access via access points created in other accounts. In doing so, bucket owners always retain ultimate control over data access, but can delegate responsibility for more specific IAM-based access control decisions to the access point owner. This allows you to securely and easily share datasets with thousands of applications and users, and at no additional cost.

Amazon SageMaker now supports geospatial machine learning (ML), making it easier for data scientists and ML engineers to build, train, and deploy models using geospatial data. Today, the majority of all data generated contains geospatial information, but only a small fraction of it is used for ML because accessing, processing, and visualizing the data is complex, time consuming, and expensive.

AWS Marketplace Vendor Insights is now generally available, helping customers and sellers streamline the complex third-party software risk assessment process by enabling sellers to make security and compliance information available in AWS Marketplace. A unified web-based dashboard gives governance, risk, and compliance (GRC) teams access to security and compliance information, such as data privacy and residency, application security, and access control. Vendor Insights serves buyers who need help to efficiently validate that third-party software meets their business compliance needs. Vendor Insights also serves sellers who want to showcase their strong security posture, while reducing the operational burden from responding to buyer requests for risk assessment information.

Today, we are excited to announce support for deploying data preparation flows created in Data Wrangler to real-time and batch serial inference pipelines, and additional configurations for Data Wrangler processing jobs in Amazon SageMaker Data Wrangler. 

We are announcing the preview of AWS Data Exchange for Amazon S3, a new feature that enables data subscribers to access third-party data files directly from data providers’ Amazon Simple Storage Service (Amazon S3) buckets. This feature is intended for subscribers who want to easily use third-party data files for their data analysis with AWS services without needing to create or manage data copies, as well as data providers who want to offer in-place access to data hosted in their Amazon S3 buckets.

Amazon Redshift is introducing Multi-AZ deployments (Preview) that support running your data warehouse in multiple AWS Availability Zones (AZ) simultaneously and continue operating in unforeseen failure scenarios. A Multi-AZ deployment is intended for customers with business critical analytics applications that require the highest levels of availability and resiliency to AZ failures. 

Amazon Redshift launches the preview of auto-copy support to simplify data loading from Amazon S3 into Amazon Redshift. You can now setup continuous file ingestion rules to track your Amazon S3 paths and automatically load new files without the need for additional tools or custom solutions. 

Amazon DocumentDB (with MongoDB compatibility) is announcing the general availability of Amazon DocumentDB Elastic Clusters, a new type of Amazon DocumentDB cluster that let’s you elastically scale your document database to handle millions of reads and writes per second with petabytes of storage.

Amazon SageMaker Autopilot, a low-code machine learning (ML) service which automatically builds, trains, and tunes the best ML models based on your data, is now integrated with Amazon SageMaker Pipelines, the first purpose-built continuous integration and continuous delivery (CI/CD) service for ML. This enables the automation of an end-to-end flow of building ML models using SageMaker Autopilot and integrating models into subsequent CI/CD steps.

AWS Glue announces the preview of AWS Glue Data Quality, a new capability that automatically measures and monitors data lake and data pipeline quality. AWS Glue is a serverless, scalable data integration service that makes it more efficient to discover, prepare, move, and integrate data from multiple sources. Managing data quality is manual and time-consuming. You must set up data quality rules and validate your data against these rules on a recurring basis, also writing code to set up alerts when quality deteriorates. Analysts must manually analyze data, write rules, and then write code to implement these rules. 

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning (ML) that enables ML practitioners to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. Today, we're excited to announce a new capability in SageMaker Studio notebooks that enables automatic conversion of notebook code to production-ready jobs.

Amazon SageMaker supports shadow testing to help you validate performance of new machine learning (ML) models by comparing them to production models. With shadow testing, you can spot potential configuration errors and performance issues before they impact end users. SageMaker eliminates weeks of time spent building infrastructure for shadow testing, so you can release models to production faster.

Amazon SageMaker Studio is an integrated development environment (IDE) that provides a single, web-based visual interface where users can access purpose-built tools to perform all machine learning (ML) development steps, from preparing data to building, training, and deploying ML models. Today, we are excited to announce a redesign that enhances the user experience by improving navigation, discoverability, and overall look and feel for SageMaker Studio.

We are thrilled to announce the new Amazon SageMaker Ready specialization, which validates world-class AWS Partner software products that integrate with Amazon SageMaker and help customers build machine learning solutions. AWS Partners offerings in the specialization include Data Platforms, Data Pre-Processing & Feature Stores, ML Frameworks, MLOps tools, and Business Decisions & Applications. Amazon SageMaker is a fully managed machine learning (ML) service that enables data scientists and developers to quickly build, train, and deploy ML models for any use case into a production-ready hosted environment.

Amazon Aurora now supports zero-ETL integration with Amazon Redshift, to enable near real-time analytics and machine learning (ML) using Amazon Redshift on petabytes of transactional data from Aurora. Within seconds of transactional data being written into Aurora, the data is available in Amazon Redshift, so you don’t have to build and maintain complex data pipelines to perform extract, transform, and load (ETL) operations.

Amazon Redshift integration for Apache Spark helps developers seamlessly build and run Apache Spark applications on Amazon Redshift data. If you are using AWS analytics and machine learning (ML) services—such as Amazon EMR, AWS Glue, and Amazon SageMaker—you can now build Apache Spark applications that read from and write to your Amazon Redshift data warehouse without compromising on the performance of your applications or transactional consistency of your data. Amazon Redshift integration for Apache Spark builds on an existing open source connector project and enhances it for performance and security, helping customers gain up to 10x faster application performance. We thank the original contributors on the project who collaborated with us to make this happen. As we make further enhancements we will continue to contribute back into the open source project.

Amazon OpenSearch Service now offers a new serverless option, Amazon OpenSearch Serverless. This option simplifies the process of running petabyte-scale search and analytics workloads without having to configure, manage, or scale OpenSearch clusters. OpenSearch Serverless automatically provisions and scales the underlying resources to deliver fast data ingestion and query responses for even the most demanding and unpredictable workloads. With OpenSearch Serverless, you pay only for the resources consumed.

Today, AWS announces the preview of Amazon Elastic Compute Cloud (Amazon EC2) Inf2 instances, which are designed to deliver high performance at the lowest cost in Amazon EC2 for the most demanding deep learning (DL) inference applications. Inf2 instances are powered by up to 12 AWS Inferentia2, the third AWS-designed DL accelerator. Inf2 instances offer 3x higher compute performance, up to 4x higher throughput, and up to 10x lower latency compared to Inf1 instances.

Torn Write Prevention (TWP) is a feature that ensures 16KiB write operations are not torn in the event of operating system crashes or power loss during write transactions. This feature is available for AWS customers using instance store on AWS Nitro SSD based EC2 I4i storage optimized instances, Amazon Elastic Block Store (EBS), a block storage service, when attached to all EC2 Nitro-based instances, and Amazon Relational Database Services (RDS), a fully managed, open-source cloud database.

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) Hpc6id instances. These instances are optimized to efficiently run memory bandwidth-bound, data-intensive high performance computing (HPC) workloads, such as finite element analysis and seismic reservoir simulations. With EC2 Hpc6id instances, you can lower the cost of your HPC workloads while taking advantage of the elasticity and scalability of AWS.

Amazon Connect forecasting, capacity planning, and scheduling, now generally available, provides new machine learning (ML)–powered capabilities for contact centers. Forecasting, capacity planning, and scheduling help your contact center managers forecast contact demand, determine optimal staffing levels, and ensure the right agents are available at the right time to meet your operational and business goals.

Amazon EMR announces Amazon Redshift integration with Apache Spark. This integration helps data engineers build and run Spark applications that can consume and write data from an Amazon Redshift cluster. Starting with Amazon EMR 6.9, this integration is available across all three deployment models for EMR - EC2, EKS, and Serverless.

Today, AWS announces the preview of Amazon VPC Lattice, an application layer networking service that makes it simple to connect, secure, and monitor service-to-service communication. You can use VPC Lattice to enable cross-account, cross-VPC connectivity, and application layer load balancing for your workloads in a consistent way regardless of the underlying compute type – instances, containers, and serverless. 

Amazon Kinesis Data Firehose can now deliver streaming data to an Amazon OpenSearch Serverless. With few clicks, you can easily ingest, transform, and reliably deliver streaming data into an Amazon OpenSearch Serverless without building and managing your own data ingestion and delivery infrastructure. Kinesis Data Firehose is a fully managed service that automatically scales to match the throughput of your data and without ongoing administration.

Contact Lens for Amazon Connect now provides conversational analytics capabilities for Amazon Connect Chat, extending the machine learning powered analytics to better assess chat contacts. These capabilities enable businesses to understand customer sentiment in both agent and chatbot conversations, redact sensitive customer information, and monitor agent compliance with company guidelines to help improve agent performance and customer experience. 

Amazon QuickSight Q now includes artificial intelligence (AI)-enhanced automated data preparation, making it fast and straightforward to augment existing dashboards for natural language questions. Preparing data for natural language query takes time and effort. Authors must imagine terms their users will input and manually replicate field names and data type information from their dashboards.

Today, AWS announces AWS SimSpace Weaver, a new fully managed compute service that helps you deploy large-scale spatial simulations in the cloud. With SimSpace Weaver, you can create seamless virtual worlds with millions of objects that can interact with one another in real time without managing the backend infrastructure.

Contact Lens for Amazon Connect now provides a set of agent performance evaluation capabilities (preview) that enable contact center managers to create evaluation forms with criteria (e.g, adherence to talk scripts or compliance with sensitive data collection practices) that can be scored using Contact Lens’ machine learning powered conversational analytics. Managers can assess agent performance alongside contact details, recordings, transcripts, and summaries, without the need to switch applications. These capabilities enable managers to assess more agent/customer interactions while reducing the amount of time they spend identifying performance issues and coaching agents to perform their best. 

Amazon Omics is a new purpose-built service that helps healthcare and life science organizations store, query, and analyze genomic, transcriptomic, and other omics data and then generate insights from that data to improve health and advance scientific discoveries. Omics is designed to support large scale analysis and collaborative research so you can store and, together with other AWS services, analyze genome data for entire populations. Amazon Omics also automates provisioning and scaling of bioinformatics workflows, so you can run analysis pipelines at production scale and spend more time on research and innovation.

Today, AWS Key Management Service (AWS KMS) introduces the External Key Store (XKS), a new feature for customers who want to protect their data with encryption keys stored in an external key management system under their control. This capability brings new flexibility for customers to encrypt or decrypt data with cryptographic keys, independent authorization, and audit in an external key management system outside of AWS.

Amazon Redshift already supports role-based access control, row-level security, and column-level security to enable organizations to enforce fine-grained security on Redshift data. Amazon Redshift now extends these security features by supporting Dynamic Data Masking (DDM) that allows you to simplify the process of protecting sensitive data in your Amazon Redshift data warehouse. With Dynamic data masking, you control access to your data through simple SQL based masking policies that determine how Redshift returns sensitive data to the user at query time. Dynamic data masking makes it simple for you to adapt to changing privacy requirements without altering underlying data or updating SQL queries.

Today AWS announces the preview release of AWS Verified Access, a new service that allows you to deliver secure access to corporate applications without a VPN. Built using AWS Zero Trust guiding principles, Verified Access helps you implement a work-from-anywhere model in a secure and scalable manner.

Amazon Connect agent workspace now provides a step-by-step experience (preview) that guides agents by identifying customer issues and recommending subsequent actions. With Amazon Connect, you can create workflows that walk agents through custom UI pages that suggest what to do at a given moment during a customer interaction. Detailed step-by-step guides increase agent productivity and decrease training time.

AWS Supply Chain is a cloud-based application that helps supply chain leaders mitigate risks and lower costs to increase supply chain resilience. AWS Supply Chain unifies supply chain data, provides machine learning (ML)–powered actionable insights, and offers built-in contextual collaboration, all of which help you increase customer service levels by reducing stock outs and help you lower costs from overstock.

Amazon Security Lake automatically centralizes security data from cloud, on-premises, and custom sources into a purpose-built data lake stored in your account. Security Lake makes it easier to analyze security data so that you can get a more complete understanding of your security across the entire organization. You can also improve the protection of your workloads, applications, and data. Security Lake automatically gathers and manages all your security data across accounts and Regions. You can use your preferred analytics tools while retaining control and ownership of your security data. Security Lake has adopted the Open Cybersecurity Schema Framework (OCSF), an open standard. It helps normalize and combine security data from AWS and a broad range of enterprise security data sources. Now, your analysts and engineers can get broad visibility to investigate and respond to security events and improve your security across the cloud and on premises.

AWS Outposts can now be shipped and installed at your data center and on-premises locations in Qatar, Guatemala, and Trinidad & Tobago.

Today, Amazon QuickSight announces support for two new question types that simplify and scale complex analytical tasks using natural language. Business users type “forecast” to see future trajectories for up to 3 measures simultaneously. “Why” performs contribution analysis to automatically identify key drivers.

Amazon Redshift now supports real-time streaming ingestion for Amazon Kinesis Data Streams (KDS) and Amazon Managed Streaming for Apache Kafka (MSK). Amazon Redshift streaming ingestion eliminates the need to stage streaming data in Amazon S3 before ingesting it into Amazon Redshift, enabling customers to achieve low latency, measured in seconds, while ingesting hundreds of megabytes of streaming data per second into their data warehouse. 

Amazon FSx for NetApp ONTAP is doubling the maximum throughput capacity per file system from 2 GB/s to 4 GB/s and the maximum SSD IOPS from 80,000 to 160,000, enabling you to accelerate your performance-intensive workloads such as video rendering and database applications.

Amazon FSx for NetApp ONTAP is announcing a new capability that makes it even easier to access Multi-AZ file systems from other networks (on-premises networks and peered networks in AWS). Starting today, you can create Multi-AZ file systems that you can access from other networks over AWS Transit Gateway without needing to perform any additional routing configuration—making it even quicker and easier to get started.

AWS announces the general availability of Amazon EC2 M6in and M6idn instances and Amazon EC2 R6in and R6idn instances. These sixth-generation network optimized instances are powered by 3^rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of up to 3.5 GHz. They are the first x86-based general purpose and memory-optimized instances offering up to 200 Gbps of network bandwidth. These instances deliver up to 2x more network bandwidth and up to 2x higher packet-processing performance over comparable fifth-generation instances. The instances are built on AWS Nitro System, a combination of dedicated hardware and lightweight hypervisor that delivers practically all of the compute and memory resources of the host hardware to your instances for better overall performance and security. You can scale the performance of applications such as SQL and NoSQL databases, in-memory databases (SAP HANA), Telco applications (5G User Plane Function (UPF)), high performance file systems, distributed web scale in-memory caches, caching fleets, and real-time big data analytics.

AWS Glue for Apache Spark now supports three open source data lake storage frameworks: Apache Hudi, Apache Iceberg, and Linux Foundation Delta Lake. These frameworks allow you to read and write data in Amazon Simple Storage Service (Amazon S3) in a transactionally consistent manner. AWS Glue is a serverless, scalable data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources. This feature removes the need to install a separate connector and reduces the configuration steps required to use these frameworks in AWS Glue for Apache Spark jobs.

Amazon FSx for OpenZFS now offers a new generation of file systems that doubles the maximum throughput and IOPS performance of the existing generation and includes a high-speed NVMe cache.

Amazon Elastic File System (Amazon EFS) now delivers lower latencies enabling you to power an even broader set of applications with simple, scalable storage on AWS.

AWS announces the general availability of Elastic Network Adapter (ENA) Express for Amazon Elastic Compute Cloud (EC2) instances. All current generation EC2 instances use ENA, a purpose-built network interface, to deliver an enhanced networking experience. ENA Express is a new ENA feature that uses the AWS Scalable Reliable Datagram (SRD) protocol to improve network performance in two key ways: higher single flow bandwidth and lower tail latency for network traffic between EC2 instances.

AWS CloudTrail Lake now integrates with AWS Config to support ingestion and query of configuration items. Now you can query and analyze both configuration items and CloudTrail activity logs in CloudTrail Lake, thereby simplifying and streamlining your security and compliance investigations. CloudTrail Lake enables security teams to perform retrospective investigations by helping answer who made what configuration changes to resources associated with security incidents such as data exfiltration or unauthorized access. CloudTrail Lake helps compliance engineers investigate noncompliant changes to their production environments by relating AWS Config rules with noncompliant status to who and what resource changes triggered them. IT teams can perform historical asset inventory analysis on configuration items using CloudTrail Lake’s default seven-year data retention period.

Starting today, memory-optimized, high-frequency Amazon EC2 R7iz instances are available in preview. R7iz instances are the first EC2 instances powered by 4th generation Intel Xeon Scalable processors (code named Sapphire Rapids) with an all core turbo frequency up to 3.9 GHz. These instances have the highest performance per vCPU among x86-based EC2 instances, and they deliver up to 20% higher performance than z1d instances. The instances are built on the AWS Nitro System, a combination of dedicated hardware and lightweight hypervisor that delivers practically all of the compute and memory resources of the host hardware to your instances for better overall performance and security. R7iz instances are ideal for front-end Electronic Design Automation (EDA), relational database with high per-core licensing fees, financial, actuarial, data analytics simulations, and other workloads requiring a combination of high compute performance and high memory footprint.

Using AWS Network Manager, you can now monitor the real-time and historical performance of the AWS Global Network for operational and planning purposes. AWS Network Manager provides aggregate network latency between AWS Regions, Availability Zones and within each Availability Zone, allowing you to better understand how your application performance relates to the performance of the underlying AWS network. You can monitor the network latency for the AWS Global Network in up to 5-minute intervals, as well as view the 45-day historical trend from AWS Network Manager. In addition, you can also publish these latency metrics to Amazon CloudWatch, to further monitor, analyze, and alert on them.

We’re pleased to announce the launch of AWS Glue version 4.0, a new version of AWS Glue that accelerates data integration workloads in AWS. AWS Glue 4.0 upgrades the Spark engines to Apache Spark 3.3.0 and Python 3.10. Glue 4.0 gives customers the latest Spark and Python releases so they can develop, run, and scale their data integration workloads and get insights faster.

AWS Wickr is an end-to-end encrypted, enterprise communications service that offers advanced security features and facilitates one-to-one chats, group messaging, calling, file sharing, screen sharing, and more. The service is now generally available. With AWS Wickr, organizations can collaborate more safely than with consumer-grade messaging applications. Advanced security and administrative controls help organizations meet data retention requirements and build custom solutions for data security challenges.

AWS Nitro Enclaves now supports Amazon EKS and Kubernetes for orchestrating Nitro enclaves. You can now use familiar Kubernetes tools to orchestrate, scale, and deploy enclaves from a Kubernetes pod. 

Amazon QuickSight now supports Paginated Reports, which allows the capture of detailed operational data in custom formats to facilitate critical and day-to-day business processes. For example, you can get a weekly snapshot of operational metrics in a tabular format for critical review by business teams.

AWS Config announces the ability to proactively check for compliance with AWS Config rules prior to resource provisioning. Customers use AWS Config to track the configuration changes made to their cloud resources and check if those resources match their desired configurations through a feature known as AWS Config rules. Proactive compliance allows customers to evaluate the configurations of their cloud resources before they are created or updated.

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) C6in instances. C6in instances are powered by 3^rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of up to 3.5 GHz. They are the first x86-based Amazon EC2 compute-optimized instances offering up to 200 Gbps network bandwidth. C6in instances deliver up 2x more network bandwidth, and 2x higher packet performance than comparable C5n instances. C6in instances are built on the AWS Nitro System, a combination of dedicated hardware and lightweight hypervisor, which delivers practically all of the compute and memory resources of the host hardware to your instances for better overall performance and security. You can take advantage of the higher network bandwidth to scale the performance of applications, such as network virtual appliances (firewalls, virtual routers, load balancers), Telco 5G User Plane Function (UPF), data analytics, high performance computing (HPC), and CPU based AI/ML workloads.

Starting today, the new Amazon Elastic Compute Cloud (Amazon EC2) C7gn instances, powered by the latest generation AWS Graviton processors, are available in preview. Featuring the new AWS Nitro Cards, Amazon EC2 C7gn instances deliver the highest network bandwidth, and the best packet-processing performance for Graviton-based Amazon EC2 instances. C7gn instances offer up to 200 Gbps network bandwidth and up to 50% higher packet-processing performance compared to previous generation C6gn instances. Amazon EC2 C7gn instances are built on the AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. Take advantage of the enhanced networking capabilities to scale performance and throughput while optimizing the cost of running network-intensive workloads. Workload examples include network virtual appliances, data analytics, and CPU based artificial intelligence and machine learning (AI/ML) inference.

Amazon EKS customers can now find and deploy third-party operational software to their EKS clusters through the EKS console or using CLI, eksctl, AWS APIs, or infrastructure as code tools such as AWS CloudFormation and Terraform. Customers can choose between commercial, free, or packaged open source software that address use cases like monitoring, security, storage, and use the same simple commands they use today to deploy EKS add-ons to deploy these third party software. This helps EKS customers reduce time required to find, subscribe to, and deploy third party software, helping customers set up production-ready EKS clusters in minutes.

Amazon QuickSight now offers expanded API capabilities, allowing programmatic access to the underlying structure of QuickSight dashboards and analyses with the AWS Software Development Kit. The new and expanded APIs let customers and developers treat QuickSight assets like software code and integrate with DevOps processes, such as code reviews, audits, and promotion across development and production environments. 

We are excited to announce four new Elastic Load Balancing capabilities to further improve the availability of your applications. AWS provides multiple building blocks, like Regions and Availability Zones, so that you can design your applications to isolate your applications from different types of failures. Starting today, we are providing additional features that allow you to define how you want your applications to behave when failures occur as well as a feature to help you recover faster. These new capabilities include:

AWS Glue for Ray is a new engine option on AWS Glue. Data engineers can use AWS Glue for Ray to process large datasets with Python and popular Python libraries. AWS Glue is a serverless, scalable data integration service used to discover, prepare, move, and integrate data from multiple sources. AWS Glue for Ray combines that serverless option for data integration with Ray (ray.io), a popular new open-source compute framework that helps you scale Python workloads.

AWS Lambda SnapStart for Java delivers up to 10x faster function startup performance at no extra cost. Lambda SnapStart is a performance optimization that makes it easier for you to build highly responsive and scalable Java applications using AWS Lambda, without having to provision resources or spend time and effort implementing complex performance optimizations. 

AWS now offers fully-compliant, Amazon-provided licenses for Microsoft Office LTSC Professional Plus 2021 Amazon Machine Images (AMIs) on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to launch instances on-demand without any long-term licensing commitments. With this offering, customers have the flexibility to run Microsoft Office on EC2. Amazon EC2 provides a broad choice of instances with the flexibility of paying only for the optimal capacity and hardware configuration Microsoft Office users need.

Amazon Route 53 Application Recovery Controller now supports zonal shift to help you quickly recover from application failures in an AWS Availability Zone (AZ). Starting today, you can shift application traffic away from using an AZ with a single action for multi-AZ resources with support of Application Load Balancer and Network Load Balancer. This will help you quickly recover an unhealthy application in an AZ, and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures.

AWS Compute Optimizer now supports external performance metrics from four observability partners: Datadog, Dynatrace, Instana, and New Relic. By using externally provided utilization metrics for Amazon EC2 memory, Compute Optimizer can now identify additional savings opportunity, and more performance-aware recommendations for customers that use these products.

Amazon S3 Multi-Region Access Points failover controls let you shift S3 data access request traffic routed through an Amazon S3 Multi-Region Access Point to an alternate AWS Region within minutes to test and build highly available applications. S3 Multi-Region Access Points provide a single global endpoint to access a data set that spans multiple S3 buckets in different AWS Regions. With S3 Multi-Region Access Points failover controls, you can operate S3 Multi-Region Access Points in an active-passive configuration where you can designate an active AWS Region to service all S3 requests and a passive AWS Region that will only be routed to when it is made active during a planned or unplanned failover. You easily shift S3 data access request traffic from an active AWS Region to a passive AWS Region typically within 2 minutes to test application resiliency and perform disaster recovery simulations.

Amazon Redshift now supports new SQL functionalities namely, MERGE, ROLLUP, CUBE, and GROUPING SETS, to simplify building multi-dimensional analytics applications and incorporating fast changing data in Redshift. In addition, Amazon Redshift now extends support for a larger, semi-structured data size (up to 16 MB) when ingesting nested data from JSON and PARQUET source files. Together, these enhancements reduce the code conversion effort if you are migrating to Amazon Redshift from other data warehouse systems and help improve performance.

Amazon VPC Reachability Analyzer now supports network reachability analysis between AWS resources across different AWS accounts in your AWS Organization, allowing you to trace and troubleshoot the network reachability across your AWS Organization.

AWS Local Zones are now available in four new metro areas—Buenos Aires, Copenhagen, Helsinki, and Muscat. You can now use these Local Zones to deliver applications that require single-digit millisecond latency or local data processing. 

AWS Glue now offers custom visual transforms which let customers define, reuse, and share business-specific ETL logic among their teams. AWS Glue is a serverless, scalable data integration service that makes it easier to discover, prepare, move, and integrate data from multiple sources. With this new feature, data engineers can write reusable transforms for the AWS Glue visual job editor. Reusable transforms increase consistency between teams and help keep jobs up to date by minimizing duplicate effort and code.

Amazon Inspector now supports AWS Lambda functions, adding continual, automated vulnerability assessments for Serverless compute workloads. With this expanded capability, Amazon Inspector now automatically discovers all eligible Lambda functions and identifies software vulnerabilities in application package dependencies used in the Lambda function code. All functions are initially assessed upon deployment to Lambda service and continually monitored and reassessed, informed by updates to the function and newly published vulnerabilities. When vulnerabilities are identified in the Lambda function or layer, actionable security findings are generated, aggregated in the Amazon Inspector console, and pushed to AWS Security Hub and Amazon EventBridge to automate workflows.

We are pleased to announce automated sensitive data discovery, a new capability in Amazon Macie that provides continual, cost efficient, organization-wide visibility into where sensitive data resides across your Amazon Simple Storage Service (Amazon S3) estate. With this new capability, Macie automatically and intelligently samples and analyzes objects across your S3 buckets, inspecting them for sensitive data such as personally identifiable information (PII), financial data, and AWS credentials. Macie then builds and continuously maintains an interactive data map of where your sensitive data in S3 resides across all accounts and Regions where you’ve enabled Macie, and provides a sensitivity score for each bucket. Amazon Macie uses multiple automated techniques including resource clustering by attributes such as bucket name, file types, and prefixes to minimize the data scanning needed to uncover sensitive data in your S3 buckets. This helps you continuously identify and remediate data security risks without manual configuration and lowers the cost to monitor for and respond to data security risks. 

AWS announces Informatica Data Loader for Amazon Redshift, allowing you to run high-speed and high-volume data loading to Amazon Redshift for free. This integration allows you to launch and operate Informatica Data Loader within your Amazon Redshift console and easily copy data without having to install additional components or write code. You can upload large volumes of data, across many data formats.

Today we are excited to announce the preview launch of comprehensive controls management in AWS Control Tower, a set of new features that enhances AWS Control Tower’s governance capabilities. You can now programmatically implement controls at scale across your multi-account AWS environments within minutes, so you can more quickly vet, allow-list, and begin using AWS services. With comprehensive controls management in AWS Control Tower, you can reduce the time it takes to define, map, and manage the controls required to meet your most common control objectives such as enforcing least privilege, restricting network access, and enforcing data encryption.

Today, AWS is announcing the preview of Amazon Verified Permissions, a scalable, fine-grained permissions management and authorization service for custom applications. With Amazon Verified Permissions, application developers can let their end users manage permissions and share access to data. For example, application developers can use Amazon Verified Permissions to define and manage fine grained permissions to determine which Amazon Cognito users have access to which application resources. 

Today we are announcing the Braket Algorithm Library, an open-source, GitHub repository that provides researchers ready-to-use Python implementations for a set of popular quantum algorithms, reducing the time it takes to get started on Amazon Braket. Amazon Braket, the quantum computing service from AWS, provides customers access to quantum computers and managed simulators. Researchers interested in contributing to the effort can start by viewing our open-source contribution guidelines.

AWS Control Tower now offers support for account factory customization, enabling you to customize your new and existing AWS accounts prior to provisioning them from within the AWS Control Tower console. With this release, you can now use AWS Control Tower to define account blueprints that scale your multi-account provisioning without starting from scratch with every account. An account blueprint describes the specific resources and configurations that are used when an account is provisioned. You may also use pre-defined blueprints, built and managed by AWS partners, to customize accounts for specific use cases.  

AWS IoT Core, a managed cloud service that lets customers connect billions of IoT devices and routes trillions of messages to AWS services, and AWS IoT Core Device Advisor, a cloud-based fully-managed test capability to help developers validate their IoT devices for reliable and secure connectivity with AWS IoT Core, announces the General Availability of an upgraded message broker service that includes support for the MQTT version 5 protocol. MQTT5 is an updated device-to-device messaging communication standard that includes significant feature improvements over the previous MQTT version 3.1.1.

AWS Backup now supports organization-wide delegation of backup administration to member accounts within AWS Organizations. This enables delegated backup administrators to create and manage backup policies and monitor backup activity across accounts within the organization.

Amazon Relational Database Service (Amazon RDS) now supports Amazon RDS Blue/Green Deployments to help you with safer, simpler, and faster updates to your Amazon Aurora and Amazon RDS databases. Blue/Green Deployments create a fully managed staging environment that allows you to deploy and test production changes, keeping your current production database safe. With a single click, you can promote the staging environment to be the new production system in as fast as a minute, with no changes to your application and no data loss. 

AWS announces support for Amazon Redshift in AWS Backup, making it easier for you to centrally manage data protection of your Amazon Redshift data warehouse. You can now use AWS Backup to schedule and restore Redshift manual snapshots. Further, your backups can provide enhanced data protection with immutability, improved security with separate backup access policies, and better governance by centralizing backup and recovery.

Today, AWS Backup is announcing application-aware data protection that enables you to add AWS CloudFormation stacks to backup policies, making it easier for you to back up and restore your entire applications. AWS Backup automates the data protection of applications that are defined using AWS CloudFormation stacks to create immutable application-level backups using AWS Backup Vault Lock.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Reads for up to 50% faster query processing compared to previous generation instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by MySQL on the local NVMe-based SSD block-level storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 50% faster with Optimized Reads on RDS for MySQL. 

Amazon Elastic File System (Amazon EFS) now supports a 1-day Lifecycle Management Policy that allows you to automatically move files that haven’t been accessed in 1 day to the Amazon EFS Infrequent Access (EFS IA) storage class. You can configure this new policy option for your file system, or you can use one of the existing policy options: 7, 14, 30, 60, or 90 days.

AWS Elastic Disaster Recovery (AWS DRS) now allows you to initiate a scalable failback process for your applications running on AWS. This process helps simplify failing back recovered Amazon Elastic Compute Cloud (Amazon EC2) instances to your primary AWS Region or Availability Zone. It also allows you to perform frequent, non-disruptive recovery and failback drills for the AWS-based applications that you replicate using Elastic Disaster Recovery.

Today, we are pleased to announce AWS IoT Device Management Jobs has added a new configuration option for scheduling, which gives customers the flexibility to deploy remote operations during pre-defined time windows so regular usage of their IoT devices is not disrupted. Using the scheduling feature, customers can define the start and end time of a job rollout, and also configure the end behavior to specify what happens to job executions at the end of the job schedule. This new scheduling feature helps customers to set up a rollout schedule in accordance with their standard operating procedures, or a deployment cadence for different types of updates based on their device software development CI/CD cycles. 

Amazon CloudWatch Internet Monitor is a new preview feature of Amazon CloudWatch that helps you, as application developers and network engineers, continually monitor internet availability and performance metrics between your AWS-hosted applications and application end users. InternetMonitor monitors your application through Amazon Virtual Private Clouds (VPCs), Amazon CloudFront distributions, and Amazon WorkSpaces directories.

We are excited to announce the general availability of real-time capabilities in Amazon Transcribe Call Analytics, a machine learning (ML) powered conversation insights API that enables developers to transcribe and analyze contact center audio calls for improving customer experience. Transcribe Call Analytics provides real-time insights into conversations to identify critical scenarios like a customer expressing dissatisfaction. Using these insights, developers can build a proactive system that assists agents with relevant information to solve customer issues, or alerts supervisors about emerging issues.

We are excited to announce data protection in Amazon CloudWatch Logs, a new set of capabilities that leverage pattern matching and machine learning capabilities to detect and protect sensitive log data-in-transit. Amazon CloudWatch Logs enables you to centralize the logs from all of your systems, applications, and AWS services, in a single, highly scalable service. With log data protection in Amazon CloudWatch Logs, you can now detect and protect sensitive log data-in-transit logged by your systems, and applications.

Amazon Web Services launches cross-account observability across Amazon CloudWatch to help you monitor and troubleshoot applications that span multiple AWS accounts within an AWS Region. With cross-account observability in CloudWatch, you can seamlessly search, visualize, and analyze your metrics, logs, and traces without any account boundaries. Centralized security, operations, platform teams, and service owners deploying applications across multiple accounts can aggregate and correlate cross-account telemetry data in Amazon CloudWatch. They can use resulting trends and insights to efficiently monitor and troubleshoot issues affecting the health of their applications. Cross-account observability is an addition to CloudWatch’s unified observability capability.

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from any document or image. Today, we’re excited to announce the availability of Textract’s Analyze Lending feature, an API that helps customers automate mortgage document processing to drive business efficiency, reduce costs, and scale quickly. 

Amazon Kendra is an intelligent search service powered by machine learning, that enables organizations to provide more relevant information to customers and employees, when they need it.

Elastic Throughput is a new throughput mode for Amazon Elastic File System (Amazon EFS) that is designed to provide your applications with as much throughput as they need with pay-as-you-use pricing. Elastic Throughput is designed to further simplify running workloads and applications on AWS by providing file storage that doesn’t require any performance provisioning.

Amazon Kendra is an intelligent search service powered by machine learning, that enables organizations to provide more relevant information to customers and employees, when they need it.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Writes. With Optimized Writes you can improve write throughput by up to 2x at no additional cost. This is especially useful for RDS for MySQL customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

AWS Application Migration Service (AWS MGN) is announcing support for several new migration and modernization features, including application and wave management, custom modernization actions, and launch template configuration. Application Migration Service helps minimize time-intensive manual processes by automating the conversion of your source servers to run natively on AWS with optional modernization features. 

AWS Database Migration Service (AWS DMS), which helps enterprise customers migrate their databases quickly and securely to AWS, just launched a new feature called Schema Conversion. DMS Schema Conversion is a fully managed feature of AWS DMS that automatically assesses and converts the database schema to a format compatible with the target database service in AWS, enabling you to modernize your database and analytics workloads. DMS Schema Conversion is intended for customers who plan to migrate their database and analytics workloads to AWS to help reduce licensing costs and improve performance, agility, and resilience by embracing cloud and database modernization. 

Amazon Elastic Container Services (Amazon ECS) launches new networking capability called Service Connect that simplifies service discovery, connectivity and traffic observability for Amazon ECS. Service Connect helps you build applications faster by letting you focus on the application code and not on your networking infrastructure. Amazon ECS is a fully managed container orchestration service that makes it easier for you to deploy, manage, and scale containerized applications.

We are excited to launch delegated administrator for AWS Organizations to help you delegate the management of your Organizations policies, enabling you to govern your AWS organization and member accounts with increased agility and decentralization. You can now allow individual lines of business, operating in member accounts, to manage policies specific to their needs. By specifying fine-grained permissions, you can balance flexibility with limiting access to your highly privileged management accounts.

Today, AWS Backup adds centralized, multi-account reporting for AWS Organizations, making it easier for you to demonstrate compliance and meet regulatory auditing needs across your accounts and Regions. Now, you can use your organization’s management account to generate aggregated reports on your data protection policies and retrieve operational data about your backup and recovery activities from multiple accounts and AWS Regions using AWS Backup Audit Manager. AWS Backup enables you to centralize and automate data protection across AWS services based on organizational best practices and regulatory standards. With AWS Backup Audit Manager, you can generate auditor-ready reports to help prove compliance of your backup policies with your defined industry-specific regulatory requirements. 

Amazon CodeWhisperer now provides AWS administrators the ability to enable CodeWhisperer for their organization with Single Sign-On authentication. Administrators can easily integrate CodeWhisperer with their existing workforce identity solutions, provide access to users and groups, and configure organization-wide settings. Additionally, individual users who do not have AWS accounts can now use CodeWhisperer with their personal email using AWS Builder ID. The sign-up process takes only a few minutes and enables developers to start using CodeWhisperer immediately without any wait-list. 

AWS IoT Core, a managed cloud service that lets customers connect billions of IoT devices and routes trillions of messages to AWS services, announces AWS IoT Core Device Location, a new feature that makes it possible for customers to track and manage IoT devices using their location data, such as latitude and longitude coordinates. Using AWS IoT Core Device Location, customers can optimize business processes, simplify and automate maintenance efforts, and unlock new business use cases. For example, customers’ field service team can stay informed and quickly identify the location of devices that require maintenance action. In an IoT application, Global Positioning Service (GPS) is a commonly applied standard to locate an IoT device. But, not all IoT things, especially battery powered IoT devices, can be equipped with GPS hardware because of its high-power consumption. Therefore, new technologies such as cloud-assisted Global Navigation Satellite System (GNSS), WiFi, and cellular network have become popular alternatives to obtain location data for IoT devices. 

AWS Backup now offers you the ability to create legal holds on your protected data beyond your defined retention policies, for legal and auditing purposes. Legal holds prevent your backups from being deleted after the expiration of their retention period, until your backups are explicitly released from legal hold. With this feature, AWS Backup allows you to manage legal hold requests at scale and help prove compliance to outside counsel, auditors, and related third-parties. Together with AWS Backup Vault Lock, this new capability has been assessed by Cohasset Associates for use in environments that are subject to SEC Rule 17a-4(f), FINRA Rule 4511, and CFTC Regulation 1.31. A copy of the Cohasset Associates Assessment report can be downloaded from the Backup Vault Lock technical documentation. 

AWS IoT RoboRunner is an AWS for Robotics service that unlocks new use cases for robotics automation by helping fleets of robots seamlessly work together. AWS IoT RoboRunner reduces the complex development work required to build the applications you need to provide multivendor interoperability.

Amazon Managed Grafana now supports direct connectivity to data sources hosted in your Amazon Virtual Private Cloud (VPC). Amazon Managed Grafana is a fully managed service for open-source Grafana that simplifies connecting to open-source, third-party ISV, and AWS services for visualizing and analyzing your data sources at scale. Amazon VPC is a virtual network dedicated to your AWS account where you have complete control over the virtual networking environment, including creating public-facing and private-facing subnets for your applications to connect. 

Amazon Managed Grafana now supports visualizing Prometheus Alertmanager rules, new configuration APIs and additional visualization plugins. AWS customers using Amazon Managed Service for Prometheus, or running self-managed Prometheus environments can visualize and analyze their Alertmanager rules, alert states, silences and contact points directly in an Amazon Managed Grafana workspace. Customers can opt-in to viewing their Prometheus Alertmanager rules by turning on Grafana alerting from the Amazon Managed Grafana console or programmatically using the new configuration APIs, designed to manage workspace settings. Current workspace configuration details can be retrieved using the DescribeWorkspaceConfiguration API and settings can be updated via the UpdateWorkspaceConfiguration API. The CreateWorkspace API, used to programmatically create, delete and manage Grafana workspaces, has been updated to allow customers to enable Grafana alerting during workspace creation. Amazon Managed Grafana also adds support for Sankey, Plotly and Scatter visualization plugins, providing customers more visualization options for their dashboards.

Authors of Amazon QuickSight can now improve readability of points on maps visual by changing the points style to cluster points. When hundreds of data points are clumped together with many of them so close in proximity that they overlap and are not visible, cluster points makes is it easy for readers to find patterns or identify locations with greater of fewer number of data-points.

Today, Amazon Elastic Block Store (EBS) announced the availability of Rule Lock for Recycle Bin so customers can lock their Region-level retention rules to prevent them from being unintentionally modified or deleted. This new setting adds an additional layer of protection for customers to recover their EBS Snapshots and EC2 AMIs in case of inadvertent or malicious deletions. 

Amazon Rekognition Labels is a machine learning-based image and video analysis service that can detect objects, people, text, scenes, and activities. Starting today, customers get multiple improvements and enhancements in Amazon Rekognition Labels for images. In the new update, we have added 600 new labels and improved the accuracy of over 2,000 existing labels. We also introduced Image Properties, for image quality and color detection. Lastly, we have added an ability to filter API results by labels and label categories. 

Amazon SageMaker Autopilot now provides insights into the underlying workflow for each trial within a SageMaker Autopilot experiment launched with ensemble training mode. SageMaker Autopilot ranks a list of machine learning (ML) models by inference latency i.e. the time one has to wait to get prediction result from a real time endpoint to which the model is deployed, and objective metrics such as accuracy, precision, recall, and area under the curve (AUC) in the model leaderboard. SageMaker Autopilot automatically builds, trains and tunes the best ML models based on your data, while allowing you to maintain full control and visibility. 

We are excited to announce support for configuring Spark properties within EMR Studio Jupyter Notebook sessions for interactive Spark workloads. Amazon EMR on EKS enables customers to efficiently run open-source big data frameworks such as Apache Spark on Amazon EKS. Amazon EMR on EKS customers setup and use a managed endpoint (available in preview) to run interactive workloads using integrated development environments (IDEs) such as EMR Studio.

AWS Control Tower now displays the compliance status of AWS Config rules deployed outside of AWS Control Tower. This view provides you with visibility into the compliance status of externally applied AWS Config rules in addition to AWS Config rules set up by AWS Control Tower.

Amazon EC2 adds support for managed Amazon Machine Images (AMIs) with SQL Server 2022. With these AMIs, you can easily launch SQL Server 2022 on EC2 and take advantage of the fully compliant SQL Server licenses with per-second billing model. The new AMIs are available for both Windows Server and Linux operating systems. In addition, you can use related AWS services such as AWS Launch Wizard and CloudWatch Application Insights to further simplify your SQL Server deployment and management experience on EC2.

Amazon Simple Notification Service (Amazon SNS) now supports payload-based message filtering, expanding the feature set that already supported attribute-based message filtering. With this release, you can apply subscription filter policies to filter out messages based on their contents, unlocking a variety of workloads. You may use this new capability to filter events from 60+ AWS services that publish events to Amazon SNS, including Amazon S3, Amazon EC2, Amazon CloudFront, and Amazon CloudWatch. You may also use payload-based message filtering for your cross-account workloads, where subscribers may not be able to influence a given publisher to have its messages published with attributes to Amazon SNS.

Amazon Kinesis Data Analytics for Apache Flink now supports Apache Flink version 1.15. This new version includes improvements to Flink's exactly-once processing semantics, Kinesis Data Streams and Kinesis Data Firehose connectors, Python User Defined Functions, Flink SQL, and more. The release also includes an AWS-contributed capability, a new Async-Sink framework which simplifies the creation of custom sinks to deliver processed data. For a complete list of features, improvements, and bug fixes please see the Apache Flink release notes for 1.15.  

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple to run applications using open-source analytics frameworks such as Apache Spark and Hive without configuring, managing, or scaling clusters. 

Amazon EMR Serverless announces support for reading and writing data in Amazon DynamoDB with your Spark and Hive workflows. You can now export, import, query and, join tables in Amazon DynamoDB directly from your EMR Serverless Spark and/or Hive applications. Amazon DynamoDB is a fully managed NoSQL database that meets the latency and throughput requirements of highly demanding applications by providing single-digit millisecond latency and predictable performance with seamless throughput and storage scalability. 

Amazon EMR customers can now use AWS Glue Data Catalog from their streaming and batch SQL workflows on Flink. The AWS Glue Data Catalog is an Apache Hive metastore-compatible catalog. You can configure your Flink jobs on Amazon EMR to use the Data Catalog as an external Apache Hive metastore. With this release, You can then directly run Flink SQL queries against the tables stored in the Data Catalog.

AWS Service Catalog customers can now create AWS Service Catalog products that are synced to Infrastructure as Code (IaC) templates that are managed in external repositories such as GitHub, GitHub Enterprise, or Bitbucket.

AWS Secrets Manager now supports the ability to rotate secrets as often as every four hours, while providing the same managed rotation experience. With this launch, you can now use Secrets Manager to automate the rotation of credentials and access tokens that need to be refreshed more than once per day. This enables greater flexibility for common developer workflows through a single managed service. Additionally, you can continue to utilize integrations with AWS Config and AWS CloudTrail to manage and monitor your secret rotation configurations in accordance with your organization’s security and compliance requirements. Support for secrets rotation as often as every four hours is provided at no additional cost

AWS Glue crawlers now support Snowflake, making it easier for you to understand updates to Snowflake schema and extract meaningful insights.

AWS X-ray adds support for trace linking, enabling customers to visualize, and debug requests as they travel through event-driven applications built using Amazon Simple Queue Service (SQS) and AWS Lambda. Using trace linking, customers can now see the relationships between services and resources in their event-driven applications leveraging Amazon SQS and AWS Lambda, quickly identify performance bottlenecks, and explore individual requests to find the root cause of application health problems with just a few clicks. 

Amazon S3 improves performance of queries running on Trino by up to 9x when using Amazon S3 Select. Trino is an open source SQL query engine used to run interactive analytics on data stored in Amazon S3. With S3 Select, you “push down” the computational work to filter your S3 data instead of returning the entire object. By using Trino with S3 Select, you retrieve only a subset of data from an object, reducing the amount of data returned and accelerating query performance.

Amazon Connect Chat now allows you to configure timeouts for chat conversations between a customer and an Amazon Lex chatbot. This enables you to define how long to wait for a response from the customer (e.g. 5 minutes) before the session expires.

Amazon QuickSight now fully support NULL in parameter use. Parameter, as a place holder for single value or multi-value variables, is a powerful and widely used entity in QuickSight. Previously, NULL is not supported as a valid value for parameter, which created some discrepancies when user data has NULL value in it. With the full enablement for NULL, all functionalities consuming parameters are now supporting NULL value. Enablement of NULL in parameter provides a comprehensive experience when parameter is used in various cases. For further details, visit here.

Today, Amazon QuickSight is announcing the general availability of a new connector for QuickSight that will enable customers to natively connect to Databricks. This launch allows you to connect to and visualize data from the Databricks SQL version of the platform.

Today, AWS Marketplace announced the Preview of two Amazon QuickSight dashboards for AWS Marketplace sellers. Sellers can now access the billed revenue dashboard and collections & disbursements dashboard from the Insights tab of AWS Marketplace Management Portal (AMMP). Previously, sellers could access their business data via downloadable CSV reports on AMMP. Now, the sellers can view, analyze and track key trends and metrics in a visualized manner on QuickSight dashboards on AMMP.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle now supports customization of the Oracle Database installation, including the file system paths for Oracle Base and Oracle Home, and identities of the operating system user and group associated with the database. With today’s release, you can further customize your Oracle Database installation on RDS Custom for Oracle to suit the needs of your applications and conform to your organization’s standardized deployment practices. 

AWS Backup now offers a simple, cost-effective, and SAP-certified application-consistent backup and restore solution for SAP HANA databases running on Amazon EC2. With this launch, you can centrally automate backup and restore of your SAP HANA application data in addition to the currently supported AWS services. Using AWS Backup’s seamless integration with AWS Organizations, you can centrally create and manage immutable backups of SAP HANA databases across all your accounts, help protect your data from inadvertent or malicious actions, and restore the data.

Amazon EventBridge introduces new capabilities that make it simpler to build rules. Amazon EventBridge now supports generating CloudFormation templates from the rules and buses console pages. CloudFormation templates help provision and manage the configuration of event buses and rules, and you can now export your existing configurations in the console directly to a CloudFormation template. Simply select an existing rule in the console, pick JSON or YAML, and click the download button to export the configuration to a CloudFormation template. The CloudFormation template will contain the rule and target(s) of the rule. You can also select an event bus, choose whether or not to include existing rules on that bus, and download a CloudFormation template containing information for the bus, rules (if included), and targets. This makes it easier to generate CloudFormation templates for more complex rules and targets, and simplifies configuring rules and buses in different environments. 

Amazon QuickSight launches an asset management console for administrators. With an interactive UI, administrators can now list and search all account assets regardless of who the owner of these assets are. They can list all the assets a user or group has access to including in a multi-tenant environment. They can perform asset level or bulk actions like transferring assets from one person to another when someone leaves the organization, share assets with other users or revoke asset access. Current supported assets are dashboards, analyses, datasets, datasources and shared folders. Asset management console is available to administrators with access to the QuickSight admin console pages via IAM credentials. For more information, visit here.

Amazon CloudFront now supports continuous deployment, a new feature to test and validate the configuration changes with a portion of live traffic before deploying changes to all viewers.

Today, Amazon EMR has announced support for long running fault-tolerant SQL queries on Trino engine (Project Tardigrade) with checkpointing in Amazon S3 or HDFS for fault-tolerance. Project Tardigrade aims to improve the user experience of long running, resource intensive queries on Trino, when used for ETL style workloads. Project Tardigrade uses Amazon S3 for checkpointing buffered intermediate data. With Amazon EMR 6.9 release, we are also adding checkpointing on HDFS for performance sensitive and long running SQL workloads.

ABAC is an authorization strategy that defines access permissions based on tags which can be attached to IAM resources such as IAM users and roles, and to Amazon Web Services resources, like Lambda functions, to simplify permission management. ABAC support for Lambda functions allows you to scale your permissions as your organization innovates and give granular access to developers without requiring a policy update when a user or project is added, removed or updated. With ABAC support for Amazon Lambda, IAM policies can be used to allow or deny specific Lambda API actions when the IAM principal's tags match the tags on a Lambda function.

Starting today, AWS IAM Identity Center (successor to AWS Single Sign-On) customers can manage the session duration (between 15 mins and 7 days) for AWS Command Line Interface (AWS CLI) and SDKs sessions. With this release, when you set access portal session duration for your organization in IAM Identity Center, it also applies to AWS CLI and SDKs sessions in addition to application and console sessions.

Amazon Textract is a machine learning service that automatically extracts printed text, handwriting, and data from any document or image. Textract now provides you the capability to detect handwritten signatures, e-signatures, and initials on documents such as loan application forms, checks, claim forms and more. AnalyzeDocument Signatures reduces the need for human reviewers and helps customers reduce costs, save time, and build scalable solutions for document processing.

Cross-account sharing version 3 in AWS Lake Formation is now generally available. Version 3 includes features to improve ease of use in granting cross-account permissions using Lake Formation. You can now share AWS Glue Data Catalog resources such as, databases and tables from one account directly to another account’s IAM principals, namely, IAM roles and IAM users. Version 3 eliminates the additional manual step of writing Data Catalog resource policies while using LF-tags based cross-account sharing. Finally, you can share Data Catalog resources with an AWS Organization/Org unit using LF-tags based sharing.

Amazon MemoryDB for Redis is now a System and Organization Controls (SOC) compliant service. You can now use MemoryDB for workloads that are subject to SOC compliance, allowing you to get deep insight into the security processes and controls that protect customer data. AWS SOC reports are independent third-party examination reports that demonstrate how AWS achieves key compliance controls and objectives. The purpose of these reports is to help you and your auditors understand the AWS controls established to support operations and compliance.

Starting today, Amazon EC2 enables customer created tags to be included during Amazon Machine Image (AMI) CopyImage operations. This feature aims to reduce customer burden if you want to employ the same tags across all your copied AMIs. Previously, when you created a copy of an AMI, any tags you created for that AMI did not get copied over to the new AMI. You had to apply the tags to the new AMI manually after it was created if you wanted to replicate the same tags from the original AMI.

Amazon Athena data connector for AWS IoT TwinMaker is now available to all customers. Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon Simple Storage Service using standard SQL. The Amazon Athena data connector enables you to connect your tabular data from the Amazon Athena data store to AWS IoT TwinMaker, adding context and discrete information to your digital twins.

With Amazon Forecast you can now generate forecasts that are more accurate than before for new products with no history. Forecast is a fully managed service that uses machine learning (ML) algorithms to deliver highly accurate time series forecasts for inventory planning, supply-chain management, and workforce planning - without requiring any machine learning experience. 

AWS Service Catalog now supports the sharing of principal names when sharing a portfolio, which simplifies the workflow for granting access to portfolios shared across multiple accounts in an AWS Organization. Administrators often use portfolios in a central account to regroup and organize their AWS Service Catalog products and then share those portfolios with different accounts in their AWS Organization. Previously, to grant end users access to a shared portfolio, administrators had to associate IAM principals (groups, roles or users) with the portfolio in each recipient account.

Today, AWS Service Catalog announces support for automatic association of application resources in AppRegistry based on AWS tags. With this release, customers can build applications using their preferred tools, and the associated resources are automatically added to the application based on their tags. Once registered, AppRegistry applications and their resources can be managed and assessed in tools like AWS Systems Manager Application Manager, AWS CloudWatch Application Insights, AWS Well-Architected, and AWS Resilience Hub.

Amazon Relational Database Service (RDS) for Oracle now supports version 22.1 of Oracle Application Express (APEX) for 19c & 21c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser. To learn more about the latest features of APEX 22.1, please refer to Oracle’s documentation.

Amazon Lex is a service for building conversational interfaces into any application using voice and text. With Amazon Lex, you can quickly and easily build conversational bots (“chatbots”), virtual agents, and interactive voice response (IVR) systems. Amazon Lex is excited to launch DTMF-only slot settings and configurable session attributes within the Lex console.

Contact Lens for Amazon Connect now supports email notifications that enable supervisors to receive email alerts when predefined rule conditions (e.g. customer sentiment is negative) get triggered. This enables supervisors to identify, help, and intervene on contacts where agents may need additional support and provide guidance to deliver better end customer experience.

Today, we announce the public availability of Amazon’s state-of-the-art Alexa Teacher Model 20 Billion parameter model (AlexaTM 20B) in SageMaker JumpStart. Customers can access the AlexaTM 20B model programmatically to run inference using APIs available in SageMaker Python SDK.

Amazon Translate is a neural machine translation service that delivers fast, high-quality, affordable, and customizable language translation. Today, we are launching support of tagging for custom terminology and parallel data resources and then allow/restrict access on them based on the tags.

Amazon Web Services (AWS) announces that AWS Proton is now available in 6 new AWS regions:  Europe (Frankfurt), Europe (London), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), and Canada (Central).

The Amazon Chime SDK enables developers to add intelligent real-time audio, video, and screen share to their web and mobile applications. Today, the Amazon Chime SDK announces the launch of Alexa skill calling, a new feature that enables placing calls from custom Alexa skills to destinations including existing contact centers, CRMs, or telephone systems. Skill users place calls using simple voice commands. For example, a skill user can open a skill and use a command like “Call customer support” and be connected to an existing support process. 

AWS Organizations tag policies are now available in the AWS GovCloud (US) Regions. The tag policies feature is available to customers through the AWS Console, AWS Command Line Interface (CLI), or AWS SDKs.

AI-powered automated refactoring recommendations are now available in AWS Microservice Extractor for .NET, an assistive tool that simplifies the process of refactoring monolithic .NET applications into independent microservices. With automated recommendations, developers can start refactoring an older monolithic application even if they are not intimately familiar with the application's original architecture or features retrofitted over the years. The prescriptive guidance provided by automated recommendations in Microservice Extractor enables developers to cut down the time in half to identify and extract microservices from legacy applications, and speed up the overall transformation of enterprise applications for running in the cloud.

Amazon Web Services announces AWS Nitro System support for EC2’s previous generation of instances to extend the length of service beyond the typical lifetime of the underlying hardware. The AWS Nitro System provides modern hardware and software components for EC2 instances, allowing customers to continue running their workloads and applications on the instance families they were built on without any service life concerns. 

The Amazon Chime SDK now supports voice features in eight additional regions, including Canada (Central), Europe (Ireland), Europe (Frankfurt), Europe (London), Asia Pacific (Singapore), Asia Pacific (Tokyo), Asia Pacific (Sydney), and Asia Pacific (Seoul).

Amazon CloudWatch Application Insights now offers support for observability of SAP NetWeaver applications. AWS customers running SAP workloads such as SAP S/4HANA, SAP ERP and SAP Business Warehouse on AWS can now observe the entire SAP stack, from AWS infrastructure all the way to the SAP applications. This launch builds on our previous announcement of observability for SAP HANA databases, delivering full stack monitoring of SAP on AWS workloads. With this launch, you can also monitor high availability systems leveraging SAP NetWeaver and Amazon Elastic File System.

We are announcing the general availability of the AWS Modernization Calculator for Microsoft Workloads.

AWS Organizations now supports AWS CloudFormation, allowing customers to manage accounts, organizational units (OUs), and policies within their organization using CloudFormation templates. With this latest integration, customers can efficiently deploy multiple organizational elements in a stack, allowing them to more easily scale across accounts with organization policies in place.

Starting today, AWS IoT TwinMaker Scene Composer will support two new features, Camera View and Sub-model Selection, which make it easier for customers to navigate complex 3D models in digital twins.

AWS Step Functions now supports cross-account access for more than 220 AWS services so it’s easier to process data, automate IT and business processes, and build applications across accounts.

Starting today, you can use certificate-based authentication with Amazon WorkSpaces SAML 2.0 integration to remove the logon prompt for the Active Directory domain password.

We are happy to announce general availability of Amazon WorkSpaces integration with SAML 2.0. As an administrator, you can now enable SAML 2.0 authentication on your WorkSpaces directory to control end user access to desktops by using your SAML 2.0 identity provider (IdP).

Amazon AppFlow, a fully managed integration service that helps customers to securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks, now supports monitoring of flow runs using Amazon Cloudwatch metrics. With this launch AppFlow customers can now use CloudWatch metrics to observe and respond to their Amazon AppFlow flow runs and associated performance and throughput in near real time. Amazon AppFlow flow run metrics available in CloudWatch metrics include number of flow runs started, succeeded and failed, as well as the time taken and the records processed by each run.

Today, we are announcing three new features for AWS Launch Wizard; including the ability to add subordinate/ standby HANA and application server nodes after deployments, support for Red Hat Enterprise Linux 8.6, and support for 18/24 TB Amazon EC2 High Memory Instances with hourly pricing and EC2 Savings Plans.

AWS Audit Manager automatically collects evidence data, via snapshots of user activity or resource configurations, against controls that customers want to evaluate. Now, Audit Manager more easily allows you to sift through thousands of pieces of this collected evidence from multiple disparate sources, using search filters and groupings to identify trends and cross-reference issues. This will help you deep dive into issues identified via flagged compliance checks in the service, either in assessments - an automated data collection process against a specific set of controls - or on the Audit Manager dashboard. With this feature, you can filter and group evidence data using parameters like controls, resource types or resource IDs, service, event names, account IDs, etc. to understand the drivers of the issue. These results can then be exported as audit-ready PDF reports.

AWS Transfer Family has successfully completed the Drummond Group pre-certification testing for its Applicability Statement 2 (AS2) managed file transfer capabilities. The pre-certification issued by Drummond Group verifies that the AWS Transfer Family AS2 capabilities have been thoroughly vetted for security and file exchange compatibility with two third-party AS2 solutions. Customers across verticals such as healthcare, retail, financial services, and others that use AWS Transfer Family AS2 endpoints can now have confidence in their ability to successfully exchange AS2 messages with other third-party solutions.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.5, 13.8, 12.12, 11.17, and 10.22. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Today, Amazon Personalize launches the ability for customers to measure the business impact of their Personalize recommendations. Amazon Personalize is a fully managed machine learning service that allows customers to deliver personalized experiences to their users, no ML experience required. Customers can now evaluate the sum or count of any user interaction with a Personalize recommendation such as click, view, purchase, video start, add to cart, or download. Prior to this launch, customers could not evaluate the results of Personalize recommendations unless they built their own pipelines or workflows. Personalize has removed the need for this operational overhead by allowing customers to define the metrics they want to track, and automatically sending event data to the customer’s Amazon CloudWatch account for visualization and monitoring. The data can also be sent to an S3 bucket for download and integration into another business intelligence tool.

AWS Fargate adds the ability to monitor the utilization of the ephemeral storage attached to a Amazon Elastic Container Service (ECS) task. Customers can track the storage utilization with Amazon CloudWatch Container Insights and ECS Task Metadata endpoint.

AWS Database Migration Service (AWS DMS) now offers customers the option to use Internet Protocol version 6 (IPv6) addresses in their Amazon Virtual Private Cloud (VPC) on new and existing DMS Replication Instances. Customers moving to IPv6 can simplify their network stack by running their DMS Replication Instances on a network that supports both IPv4 and IPv6.

AWS Amplify is announcing a developer preview to expand Flutter support to Web and Desktop for the API, Analytics, and Storage use cases. Developers can now build cross-platform Flutter apps with Amplify that target iOS, Android, Web, and Desktop (macOS, Windows, Linux) using a single codebase. Combined with the Authentication preview that was previously released, developers can now build cross-platform Flutter applications that include REST API or GraphQL API to interact with backend data, analytics to understand user behavior, and storage for saving and retrieving files and media.

Amazon Managed Workflows for Apache Airflow (MWAA) now provides Amazon CloudWatch metrics for container, database, and queue utilization.

The ACK controller for Amazon EMR on Elastic Kubernetes Service (EKS) has graduated to generally available status. Using the ACK controller for EMR on EKS, you can declaratively define and manage EMR on EKS resources such as virtual clusters and job runs as Kubernetes custom resources. This lets you manage these resources directly using Kubernetes-native tools such as ‘kubectl’. 

Today, AWS announces the general availability of the command aliases feature in AWS Chatbot, which allows you to use shortcuts to reference AWS Command Line Interface (CLI) commands in Slack. Command aliases allows you run frequently used commands quickly and reduces typing errors. With this feature you can now create aliases for your routine AWS CLI commands and run these alias commands directly from your Slack channels. The aliases can be configured to include one or more custom parameters. To use a command alias, you just type “@aws run <alias_name>” in the chat channel. Command aliases run under the configured channel permissions and no additional permissions management is required.

Amazon FinSpace’s new ability to connect to a customer VPC enables customers to access data on their network. Amazon FinSpace is an analytic data hub for capital markets customers that enables analysts and data engineers to access data from multiple sources and transform it using Amazon FinSpace’s managed Apache Spark Engine with Capital Markets Time Series Analytics Library. Often, to perform a particular analysis, customers need to access resources that reside on their network, such as databases, API endpoints, and code and artifact repositories. These resources are hosted either in a customer’s VPC or in an on-premise data center.

Amazon Athena has added SQL commands and file formats that simplify the storage, transformation, and maintenance of data stored in Apache Iceberg tables. These new capabilities enable data engineers and analysts to combine more of the familiar conveniences of SQL with the transactional properties of Iceberg to enable efficient and robust analytics use cases.

Amazon QuickSight announced the availability of Small Multiples, a powerful data visualization feature when it comes to comparative analysis. Small Multiples creates multiple versions of the base visual, presented side-by-side, with its data partitioned across these versions by a dimension. It provides an easier way to get a holistic view of your business instead of looking at data in silos.

Today, we are releasing an IBM Db2 data source connector for Amazon Athena. With Athena, you can run SQL queries on data stored in relational, non-relational, object, and custom data sources without the need to pre-process or copy data to another storage solution. IBM Db2 is a Relational Database Management System (RDBMS) designed for efficient storage and analytics on relational, object, and non-relational data. Starting today, you can use Athena to run SQL queries on IBM Db2.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle, a managed database service for legacy, custom, and packaged applications that require access to the underlying operating system and database environment, now supports the Oracle Multitenant option on Oracle Database (DB) version 19c using Enterprise Edition. With this release, the Amazon RDS Custom for Oracle DB instance can operate as a multitenant container database (CDB) hosting one or more pluggable databases (PDBs). A PDB is a set of schemas, schema objects, and non-schema objects that logically appears to a client as a non-CDB.  

AWS Lambda now supports Node.js 18 as both a managed runtime and a container base image. Developers creating serverless applications in Lambda with Node.js 18 can take advantage of new features such as an upgrade of the bundled AWS SDK for JavaScript to v3 and improved support for deploying ES Modules using Lambda layers. This release also provides access to Node.js 18 language enhancements, including the experimental ‘fetch’ API. For more information on Lambda’s support for Node.js 18, see our blog post at Node.js 18.x runtime now available in AWS Lambda.

The Amazon Chime SDK now offers a new console that provides a more intuitive way to manage resources with rich contextual information. The Amazon Chime SDK lets developers embed intelligent real-time communication capabilities into their applications. The new console provides a consistent look and feel with other AWS service consoles.

Amazon QuickSight now supports adding Textbox objects to your Analysis. You can use text boxes for common use cases but not limited to title, subtitles, annotations, adding additional information or description for KPIs etc. You can reposition, resize and make your text stand out with various rich text formatting options like font styling, text alignment and text box styling options. Dynamic text values can be added with the help of user defined parameters and system defined parameters like date and page number. See here for more details. 

Starting today, customers can use Migration Hub Refactor Spaces with CloudHedge OmniDeq to replatform applications into containers and deploy them directly into refactoring environments. Customers can now get started modernizing in minutes without building or managing additional AWS infrastructure.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.11, 10.5.18, 10.4.27 and 10.3.37. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon QuickSight launches a new capability for authors to style their line charts using the new line and marker customization options. With the new styling options you can make line charts more readable and drive readers’ attention towards the line series you want to emphasize. 

We are excited to announce the new AWS IoT ExpressLink Technical Specification v1.1 for hardware connectivity modules, and expand our qualified module list with Realtek’s Ameba Z2 AWS IoT ExpressLink - the first Wi-Fi connectivity module to qualify with the new specification. AWS IoT ExpressLink modules enable easy AWS cloud-connectivity and implement AWS-mandated security requirements for device to cloud connections. Integrating these wireless modules into their hardware design, customers can accelerate the development of their Internet of Things (IoT) products, including consumer products, industrial and agricultural sensors and controllers.

Amazon GameSparks, a managed AWS service introduced in preview in March 2022 provides game developers with features for building, running, and scaling the backend for their games and is now available in preview in AWS Asia Pacific (Tokyo) Region. Amazon GameSparks makes building a game backend easy for game developers who have little to no cloud experience. Amazon GameSparks comes with Unity game engine support and out-of-the-box backend features that require minimal setup for game developers.

Amazon WorkSpaces Multi-Region Resilience offers cost-effective, easy-to-manage business continuity solutions that keep your users online and productive with less than 30-minute recovery time objective (RTO) using standby WorkSpaces in another AWS Region during disruptive events. 

Today, AWS CloudFormation StackSets launches event notifications via Amazon EventBridge. You can trigger event-driven actions after creating, updating, or deleting your CloudFormation stack sets. You can achieve this without developing or maintaining custom solutions that periodically poll for changes in your CloudFormation stack sets deployments via CloudFormation APIs. With this launch, you can build your event-driven applications across multiple AWS accounts, Organizational Units (OUs), and Regions with AWS CloudFormation StackSets and Amazon EventBridge.

Details: Amazon CloudFront now supports Cloudfront-viewer-ja3-fingerprint headers, enabling customers to access incoming viewer requests’ JA3 fingerprints. Customers can use the JA3 fingerprints to implement custom logic to block malicious clients or allow requests from expected clients only.

Amazon Connect now provides the ability for contact center administrators to view and delete all saved reports in an instance, including reports created by users who may have left the organization. Saved reports are custom real-time, historical, and login/logout reports that users can create to monitor contact center performance, as well as share and publish to other users in the organization. Using these capabilities, administrators can identify and delete unused reports to help manage against their saved report limit.

AWS Resilience Hub has added Amazon Simple Notification Service (Amazon SNS) and AWS Trusted Advisor to its set of supported services. AWS Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions. 

Amazon AppFlow is a fully-managed integration service that enables you to securely transfer data between Software-as-a-Service (SaaS) applications like Salesforce, SAP, Google Analytics, Facebook Ads, and ServiceNow, and AWS services like Amazon Simple Storage Service (S3) and Amazon Redshift. With today’s launch, Amazon AppFlow now automates the preparation and registration of your SaaS data into the AWS Glue Data Catalog, with just a few clicks. You can now easily share, govern, analyze, and visualize your SaaS data from AWS analytics, machine learning, and business intelligence services such as Amazon Athena, AWS Glue, Amazon SageMaker Data Wrangler, and Amazon QuickSight.

AWS Trusted Advisor adds two new checks from AWS Resilience Hub that enable customers to view their latest application resilience score and resilience policy status. You can find more information about the checks here. AWS Resilience Hub provides customers with a place to define, track, and manage the resiliency and availability of all their applications. AWS Trusted Advisor evaluates your AWS account with automated best practice checks and provides recommendations to reduce costs, monitor service quotas, and improve resilience, performance and security.

Application Load Balancers now support the ability to route traffic only to targets in the same zone as load balancer nodes. This allows you to maintain zonal isolation of your software stacks, while using Application Load Balancers across multiple zones, providing increased availability during zonal failures.

Amazon Connect Voice ID can now be used by Amazon Connect customers in the Canada (Central) Region. Voice ID uses machine learning to offer both real-time caller authentication and fraud risk detection, to help make contact center voice interactions more secure. In addition to the Canada (Central) region, Voice ID is available in US East (N. Virginia), US West (Oregon), Asia Pacific (Tokyo), Europe (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Sydney), and Europe (London) AWS regions.

Amazon FinSpace is an analytic data hub for capital markets customers that enables analysts and data engineers to access data from multiple sources and transform it using Amazon FinSpace’s managed Apache Spark Engine with Capital Markets Time Series Analytics Library. Starting today, datasets developed in FinSpace can also be used by AWS Analytics and Machine Learning services, such as Amazon Redshift, Amazon Athena, Amazon QuickSight, Amazon EMR, and Amazon SageMaker. This allows customers to integrate data from FinSpace into their analytics and ML workflows.

Today, Amazon Simple Queue Service (SQS) announces support for attribute-based access control (ABAC) using queue tags, enabling customers to bolster their overall security postures with a flexible and scalable access control solution. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS significantly reduces the complexity and overhead associated with managing and operating message-oriented middleware, and empowers developers to focus on differentiating work.

Amazon Simple Notification Service (Amazon SNS) has enhanced its integration with AWS Service Quotas. Previously, you could use AWS Service Quotas to view the default quotas of Amazon SNS. Now, with the enhanced integration, you can view your account-specific quota overrides as well as submit your quota increase requests for Amazon SNS. The quota increase requests for 'Messages Published per Second', 'Number of Topics per Account', 'Filter Policies per Account', and 'Filter Policies per Topic' are processed automatically, speeding up approval times.

AWS IoT TwinMaker makes it easier to create digital twins of real-world systems such as buildings, factories, industrial equipment, and production lines. Now with the feature launch of TwinMaker Knowledge Graph, customers can query their digital twins, contextualize data from disparate data sources, and gain deeper insights into their real-world systems. As a result, customers can save time performing functions like root cause analysis and drive more informed business decisions. 

Starting today, you can choose the private IP address that your NAT Gateway uses for network address translation.

We are excited to announce that AWS IoT Device Management Fleet Indexing now supports up to twelve query terms. AWS IoT Device Management is a fully managed service that helps you search, organize, monitor, and remotely manage IoT devices at scale. 

Today, we are excited to announce the launch of the new Applications widget on Console Home, providing one-click access to applications in AWS Systems Manager Application Manager and their associated collections of AWS resources, code, and related data.

Today, AWS Amplify Hosting announces Next.js 12 and 13 support, including middleware, incremental static regeneration (ISR), and image optimization. With this release, AWS Amplify Hosting offers fully managed CI/CD deployments and hosting for server-side rendered (SSR) apps built using Next.js and static web apps.

Amazon Connect now provides an API to programmatically initiate supervisor monitoring on an ongoing contact. Today, contact center supervisors can monitor live conversations between agents and customers by selecting which conversations to monitor via the real-time metrics page in Amazon Connect. Using the new MonitorContact API, businesses can now build custom supervisor dashboards that include the ability to initiate monitoring on a specific contact.

Zoom Meeting Media plugin allows audio/video optimization for smooth video conferencing on Amazon WorkSpaces. This feature greatly enhances Zoom Meetings audio and video (webcam) performance on WorkSpaces by offloading the audio/video traffic to local device for processing. The plugin is intended for users who want native AV performance when using Zoom on their PCoIP WorkSpaces. 

Amazon WorkSpaces announces general availability of version 2.0 of the WorkSpaces Streaming Protocol (WSP) host agent. WSP is a high performance cloud-native streaming protocol designed to enable your users to access a highly responsive remote desktop experience and features such as 2-way audio video and smart card support.

With the general availability of Amazon Elastic Block Store (EBS) Snapshots Archive in AWS Asia Pacific (Jakarta) Region, customers in that region can save up to 75% on storage costs for Amazon EBS Snapshots that they rarely access and intend to retain for more than 90 days.

The AWS SDK for SAP ABAP is now available in preview. 

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of two voices: Ola, a new female Polish neural Text-to-speech (NTTS) voice and Hala, a new female NTTS voice in Arabic (Gulf).

You can now efficiently manage and rotate passwords for Amazon ElastiCache for Redis clusters using AWS Secrets Manager.

Now you can send a copy of your chat messages to Amazon Simple Storage Service (Amazon S3), Amazon CloudWatch Logs, or Amazon Kinesis Firehose for real-time chat log streaming. You can use chat logging to play back chat messages from previously recorded live streams, or to audit past conversations as part of moderation workflows. To get started, visit the documentation Getting Started with Amazon IVS Chat.

Amazon Redshift, a fully-managed cloud data warehouse, now supports the CONNECT BY SQL construct enabling users to author queries to process hierarchical data in their warehouse. Starting today, you can recursively query the hierarchical data based on parent-child relationship within that data set using the CONNECT BY construct.

We are excited to announce that AWS IoT Device Defender is now integrated with AWS Security Hub. This integration allows customers to ingest alarms and their attributes from AWS IoT Device Defender Audit and Detect features in one central location, without custom coding. This update can also help offload or reduce the complexity of managing disparate workflows from multiple security consoles when they review devices monitored by AWS IoT Device Defender.

Amazon S3 Storage Lens is a cloud storage analytics feature that delivers organization-wide visibility into object storage usage and activity. Today, 34 additional metrics have been added to uncover deeper cost optimization opportunities, identify data protection best practices, and improve the performance of application workflows.

Starting today, customers can search, request and provision products from AWS Service Catalog via AWS Service Management Connector. This integration is built using Atlassian Forge for Atlassian's Jira Service Management (JSM) Cloud. With this connector, administrators can use existing AWS Service Catalog configurations, including curated products, portfolios, constraints, and tagging, and expose them to JSM Cloud administrators and users. Administrators can view AWS Service Catalog portfolios and products, align them to organizational structures, grant access to JSM Cloud users, and connect JSM workflows to provisioning requests. JSM Cloud end users can browse and request provisioning of AWS Service Catalog products, including AWS Marketplace software products that have been copied to AWS Service Catalog. 

AWS AppSync is a managed service that makes it easier to build scalable APIs that connect applications to data. API developers can now use JavaScript to define the business logic that connects their AppSync GraphQL and Pub/Sub APIs to data, and leverage two new libraries and a new service API command to simplify local development and testing.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Middle East (UAE) Region.

Starting today, customers can respond, investigate and resolve incidents affecting their AWS-hosted applications via AWS Systems Manager Incident Manager with the AWS Service Management Connector. This integration is built using Atlassian Forge for Atlassian's Jira Service Management (JSM) Cloud. AWS Systems Manager is the operations hub for AWS applications and resources, that helps to automate reactive processes to quickly diagnose and remediate operational issues. With the Incident Manager integration with JSM Cloud, customers can now automate their incident response plans in Incident Manager and automatically synchronize their incidents into JSM Cloud. This feature enables faster resolution of critical application availability and performance issues without disrupting existing workflows in Jira Service Management Cloud.

Amazon SageMaker Autopilot now supports batch/offline inference within Amazon SageMaker Studio so you can run batch predictions on machine learning (ML) models. SageMaker Autopilot automatically builds, trains and tunes the best ML models based on your data, while allowing you to maintain full control and visibility.

Staring today, customers can detect and resolve AWS security findings from AWS Security Hub via AWS Service Management Connector. This integration is built using Atlassian Forge for Atlassian's Jira Service Management (JSM) Cloud. AWS Security Hub helps customers to perform security best practice checks, aggregate alerts and enables automated remediation. It enables users to view security findings from AWS services, such as Amazon Guard Duty, Amazon Inspector, as well as AWS Partner solutions. This bidirectional integration between AWS Security Hub and Jira Service Management incidents enables JSM users/developers to manage AWS Security findings while leveraging their existing workflows in Jira Service Management (incidents). 

 Amazon CloudWatch RUM (Real User Monitoring) adds the ability for customers to send customer-defined events to RUM (in addition to predefined events) by instrumenting their web applications. The customer-defined events gives customers flexibility to monitor specific functions of their application and troubleshoot end user impacting issues unique to the application components. Customers can view, and slice and dice these events using filters in the RUM console.

Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capabilities to your applications. Today, we are excited to announce Thai and Hindi language support for streaming audio transcriptions. These new languages expand the coverage of Amazon Transcribe streaming and enable customers to reach a broader global audience.

AWS DataSync is now available in the AWS Middle East (UAE) Region. You can now use DataSync to copy data between on-premises, edge, or other cloud storage and AWS Storage services, as well as between AWS Storage services in the AWS Middle East (UAE) Region.

We are excited to announce that Incident Manager, a capability of AWS Systems Manager, now integrates with PagerDuty, a popular tool for operational incident response. This extends AWS capabilities for operational incident response, helping operations teams more quickly engage, respond, and resolve critical application availability and performance issues when they occur.

Amazon ElastiCache now supports AWS Identity and Access Management (IAM) authentication access to Redis clusters. By using IAM, you can associate IAM users and roles with ElastiCache for Redis users and manage their cluster access.

Starting today, Amazon EC2 C5n instances are available in AWS Asia Pacific (Jakarta) Region.

You can now use AWS Systems Manager OpsCenter to diagnose and remediate operational issues across AWS accounts. You can use a central account to view operational issues in another account (e.g. impaired instances, degraded storage volumes, or non-compliant resources), view pertinent diagnostic information for each issue, and use pre-defined automation runbooks to remediate the issues.

Amazon Timestream is now available in the AWS GovCloud (US-West) Region. Support in the GovCloud Region allows U.S. government agencies and contractors to run sensitive time-series analysis in Amazon Timestream by addressing their specific regulatory and compliance requirements. 

Amazon OpenSearch Service now supports OpenSearch and OpenSearch Dashboards version 2.3. With this version, Amazon OpenSearch Service adds several features such as new algorithms to the machine learning (ML) commons library, improvements to aggregations, improvements to map visualizations, alerting, anomaly detection, and more.

AWS Amplify allows developers to set up In-app messaging notification campaigns that are triggered and shown to their users when specific events occur. This feature empowers developers to provide contextual messages to users on web apps on React and cross platform mobile apps with React Native.

AWS Proton now allows customers to specify custom commands used to provision infrastructure from their templates, enabling them to manage templates defined using the AWS Cloud Development Kit (CDK) and other templating and provisioning tools through Proton. Platform engineers use Proton to define and keep infrastructure updated that developers can provision using a self-service interface. Now, platform engineers can define standardized infrastructure using CDK, in addition to the already supported AWS CloudFormation and Terraform.

AWS Identity and Access Management (IAM) now supports multiple multi-factor authentication (MFA) devices for root account users and IAM users in your AWS accounts. This provides additional flexibility and resiliency in your security strategy by enabling more than one authentication device per user. You can choose from one or more types of hardware and virtual devices supported by IAM.

AWS Microservice Extractor for .NET is an assistive tool that simplifies refactoring monolithic .NET applications into independent microservices. With this new feature, Microservice Extractor helps extract source code segments as microservices or shared libraries from legacy ASP.NET Web Forms and Windows Communication Foundation (WCF)-based applications, and ports those directly to modern cross-platform .NET. The new capability enables developers to refactor older, Windows OS-dependent applications with minimal rewrite to newer .NET running on Linux containers, thereby reducing costs and improving performance.

Today, AWS launched automatic handling of IP address changes for Refactor Spaces Services. Customers use automatic DNS updates to avoid building infrastructure to manage service IP address changes and gain improved operational safety. This new feature lets customers create services using DNS names in the URL and Refactor Spaces automatically re-resolves the DNS name when the DNS time-to-live (TTL) expires (or every 60 seconds for TTLs less than 60 seconds).

Starting today, customers can create billing entity pricing rules in AWS Billing Conductor (ABC). Billing entity pricing rules allow customers to control pricing parameters between AWS Marketplace and AWS Services charges. For example, an AWS partner can use a billing entity pricing rule to set all AWS marketplace charges to be at the public on demand rate (no discount), while providing a mix of global and service-specific pricing rules for their AWS service charges in a way that matches their agreed upon rates with their end customers.

We are excited to announce that Incident Manager, a capability of AWS Systems Manager, now simplifies the way you coordinate response when an incident is detected by an Amazon CloudWatch alarm or Amazon EventBridge event. The new coordination capabilities allow you to centrally provide updates, monitor actions, and view status from within the Incident Manager console.

AWS App2Container (A2C) now supports EKS Blueprints for setting up a managed Kubernetes cluster on AWS. With this release, we are making it easier and faster to use A2C to deploy to clusters created using EKS Blueprints. Customers can leverage App2Container provided Kubernetes manifests with existing EKS infrastructure. With this feature, customers can configure CPU and Memory limits for A2C created application pods. Customers can also create ingress configurations using AWS Application Load Balancer (ALB) or NGINX with AWS Network Load Balancer (NLB). 

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports Cross Region Read Replica. Cross Region Read Replica enables managed disaster recovery capability for mission critical databases by allowing a read replica in another region be "promoted" as a new standalone production database. This feature also supports data proximity by enabling replicas be placed closer to the application users of a given region to reduce read latencies. Additionally, this feature allows Amazon RDS for SQL Server customers to offload their read workload from the primary DB Instance, and also scale out read workloads over a farm of up to five read replicas that can reside in any region. To get started, visit the Amazon RDS SQL Server User Guide.

AWS Proton introduces the Proton dashboard, a centralized view of all Proton resources deployed and managed by AWS Proton. Platform engineers use Proton to define their environment and service infrastructure in AWS - now through the Proton dashboard they can monitor which of their templates are in use and the up-to-date status of their environments and services.

Starting today, you can now store and restore up to 5TB Amazon Machine Images (AMIs) to and from an Amazon S3 bucket. This enables storing and transferring of larger AMIs between partitions. The old limit was 1TB.

Amazon MQ now provides support for RabbitMQ version 3.10, a new release which includes several fixes and improvements to the previous versions of RabbitMQ supported by Amazon MQ, 3.8 and 3.9. 

Amazon Managed Service for Prometheus now supports 200M active metrics per workspace. Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor and alarm on operational metrics at scale. Prometheus is a Cloud Native Computing Foundation open source project for monitoring and alerting that is optimized for container environments such as Amazon EKS and Amazon ECS. With this release, customers can send up to 200M active metrics to a single workspace after filing a limit increase, and can create many workspaces per account, enabling the storage and analysis of billions of Prometheus metrics. To get started, customers can create an Amazon Managed Service for Prometheus workspace and increase their workspace active series limits by filing a limit increase in AWS Support Center or AWS Service Quotas.

The AWS Serverless Application Model (SAM) Command Line Interface (CLI) announces the preview of AWS Lambda local testing and debugging on Terraform. The AWS SAM CLI is a developer tool that makes it easier to build, test, package, and deploy serverless applications. Terraform is an infrastructure as code tool that lets you build, change, and version cloud and on-premises resources safely and efficiently.

AWS announces the availability of AWS Fluent Bit container images for Windows Server on Amazon ECS and Amazon EKS, to help customers easily process and forward their container logs to various AWS and third-party destinations, such as Amazon CloudWatch, Amazon S3, Amazon Kineses Data Firehose, Datadog, and Splunk. This capability helps customers to centrally view, query, and manage their logs without needing to implement or manage a custom logging solution or agents to extract logs from their Windows containers. With this launch, customers have a common mechanism to process and route their logs across ECS and EKS for both Linux and Windows workloads. For more details about the supported Windows versions and the image tags for Fluent Bit, visit the public github repository here.

AWS Elemental MediaConnect now supports RGB 10- and 12-bit 4:4:4 color spaces via AWS Cloud Digital Interface (AWS CDI) enabling workloads such as color grading, that require high-fidelity color at low latencies. The RGB 10- and 12-bit 4:4:4 color spaces are in addition to the currently supported option of YCbCr 10-bit 4:2:2.

Kubernetes is rapidly evolving, with frequent feature releases and bug fixes. You can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.24.

Amazon Relational Database Service (Amazon RDS) now supports the delivery of message attributes, which provide structured metadata about a message. RDS event attributes are separate from the message, but are sent with the message body. The message receiver can use this information to decide how to handle the message, enabling routing and filtering without having to process the message body first.

Today, we are excited to announce general availability of tooling support to build and deploy native AOT compiled .NET 7 applications to AWS Lambda. .NET 7 is the latest version of .NET and brings several performance improvements and optimizations, including support for the native AOT deployment model. Native AOT compiles .NET applications to native code. By using native AOT with AWS Lambda, you can enable faster application starts, resulting in improved end-user experience. You can also benefit from reduced costs through faster initialization times and lower memory consumption of native AOT applications on AWS Lambda. 

Starting today, you can use AWS Nitro Enclaves in Asia Pacific (Osaka) and Asia Pacific (Jakarta) regions. 

Amazon HealthLake Imaging is a new HIPAA-eligible capability now in preview that enables healthcare providers and their software partners to easily store, access, and analyze medical images at petabyte scale. With HealthLake Imaging, healthcare providers and their software partners can run their medical imaging applications in the cloud to increase scale while also reducing infrastructure costs. 

Amazon RDS for SQL Server now supports a linked server to Oracle database. From your RDS for SQL Server instance, you can use linked servers to access external Oracle databases to read data and execute SQL commands. If you have existing solutions that use linked servers to integrate Oracle databases, you can now migrate your SQL Server workloads directly to Amazon RDS.

Companies using the Amazon Connect Customer Profiles APIs for custom agent applications and automated interactions (e.g., IVR) can now search for profiles using multiple search terms, making it easier to find the right profile. Using the enhanced SearchProfiles API, customers can search for profiles using up to 5 terms to narrow down or expand search results. For example, when dealing with common names, you can narrow your search results to one profile by searching for profiles that match more than one term such as phone number, and name. As another example, when uncertain on the search term that matches a specific profile, you can expand search results to all the profiles matching any of the terms provided such as phone number, name, or social security number.

Amazon HealthLake announces new analytics capabilities, making it easier for customers to query, visualize, and build machine learning models on their HealthLake data. With this launch, HealthLake transforms customer data into an analytics-ready format in AWS Lake Formation in near real-time. This removes the need for customers to execute complex data exports and data transformations. Now customers can simply focus on querying the data with SQL using Amazon Athena, building visualizations using Amazon QuickSight or other third party tools, and using this data to build ML models with Amazon SageMaker.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports integration with Amazon Elastic File System (EFS). You can now transfer files between the RDS for Oracle DB instance and Amazon EFS file system. Amazon EFS is designed for 99.999999999% (11 9s) of durability and up to 99.99% (4 9s) of availability. You can scale to petabytes on a single NFS file system.

Today, we are announcing the availability of EBS direct APIs in the AWS Middle East (UAE) region.

AWS re:Post is a cloud knowledge service designed to help AWS customers remove technical roadblocks, accelerate innovation, and operate efficiently. re:Post has only supported English since the launch at re:Invent 2021. Today, re:Post has expanded the user experience to support five additional languages. Customers can now learn, design, build, and troubleshoot AWS technology by posting questions and consuming content in the following languages: Traditional Chinese, Simplified Chinese, French, Japanese, and Korean. Multi-lingual support makes the re:Post community more accessible to AWS enthusiasts globally, allowing them to collaborate and build connections with community members in their preferred or chosen language(s) and to locate the content they need faster.

Starting today, Amazon EC2 High Memory instances with 3TiB (u-3tb1.56xlarge) of memory are now available in US East (Ohio). Instances with 6TiB of memory (u-6tb1.56xlarge, u-6tb1.112xlarge) are now available in Europe (Milan), instances with 18TiB of memory (u-18tb1.112xlarge) are now available in Europe (Ireland), and instances with 24TiB of memory (u-24tb1.112xlarge) are now available in US East (N. Virginia) and AWS GovCloud (US-West). This launch also includes support for On Demand, Savings Plan, Reserved Instance, and 1-year Dedicated Host Reservation purchase options for instances with 18TiB and 24TiB of memory which were previously only available with 3-year Dedicated Host Reservations.

Amazon Redshift concurrency scaling is leveraged by thousands of customers to support virtually unlimited concurrent users and queries, and meet their SLAs for BI reports, dashboards and other analytics workloads. In addition to the read queries, Amazon Redshift concurrency scaling is now extended to support scaling of most common write operations performed as part of workloads such as data ingestion and processing. The write workloads support with concurrency scaling is available on Amazon Redshift RA3 instance types.

Amazon EventBridge now supports additional filtering capabilities including the ability to match against characters at the end of a value (suffix filtering), to ignore case sensitivity (equals-ignore-case), and to have a single EventBridge rule match if any conditions across multiple separate fields are true (OR matching). We’re also increasing the bounds supported for numeric values to -5e9 to 5e9 from -1e9 to 1e9. With these new enhanced capabilities, you can now write complex rules that provide additional filtering options when building event-driven applications.

The next generation of Amazon FSx for Lustre file systems is now available in four additional AWS regions: Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Hong Kong), and Europe (Stockholm).

Today, we are pleased to announce the general availability of an IoT Device Management feature, browser-based SSH (secure shell) using Secure Tunneling. Secure Tunneling provides customers a secure connection between source and destination devices that are brokered through a cloud proxy service on AWS. To provide secure bi-directional communication between devices, tunnels are authenticated with the cloud proxy service and data transmitted through the tunnel is encrypted using Transport Layer Security (TLS). With browser-based SSH, customers can open a SSH tunnel to a targeted device directly from the AWS console and use an embedded terminal without the need for a local proxy. This feature simplifies the onboarding experience significantly because customers no longer need to compile and install a local proxy on the operators' device. This streamlined experience allows customers to easily scale their use of Secure Tunneling for remote tasks such as troubleshooting or conducting routine operational maintenance.

Amazon S3 server access logs and AWS CloudTrail logs will soon contain information to identify S3 requests that rely upon an access control list (ACL) for authorization to succeed. This feature, which will be activated over the next few weeks, will provide you with information that will simplify the process of adopting the S3 security best practice of disabling ACLs.

Today, Amazon Web Services (AWS) announced that Amazon Managed Workflows for Apache Airflow (MWAA) is now HIPAA (Health Insurance Portability and Accountability Act) eligible.

Amazon S3 Object Lambda is now available in the Asia Pacific (Osaka) AWS Region. With S3 Object Lambda, you can add your own code to S3 GET, HEAD, and LIST requests to modify and process data as it is returned to an application. You can use custom code to modify the data returned by S3 GET requests to filter rows, dynamically resize images, redact confidential data, and much more. You can also use S3 Object Lambda to modify the output of S3 LIST requests to create a custom view of objects in a bucket and S3 HEAD requests to modify object metadata like object name and size.

AWS re:Post is a cloud knowledge service designed to help AWS customers remove technical roadblocks, accelerate innovation, and operate efficiently. re:Post introduces a community leaderboard to recognize top contributors and give re:Post users visibility into the points they have earned and how their contributions rank within and across the community. The leaderboard cultivates a knowledge-sharing community as members unlock new statuses and achieve new rankings. Additionally, the leaderboard showcases top contributors to recognize community members for the time spent answering questions and sharing technical guidance and refreshes their ranking among other members every time they visit the re:Post website. Members can progress in their ranking on the leaderboard by demonstrating and sharing their AWS knowledge. Members can earn points and achieve new statuses when their answers are accepted by a question author, received and endorsed by an expert, or when their questions or answers are upvoted.

You can now apply AWS Lake Formation fine-grained access control policies with all table and file format supported by Amazon Athena. Lake Formation allows for centrally managing permissions and access control for data catalog resources in your S3 data lake. You can use fine-grained access control in Lake Formation to restrict access to data in query results using data filters to achieve column-level, row-level and cell-level security.

Amazon File Cache is now available in four additional AWS regions: Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Hong Kong), and Europe (Stockholm).

Catalog API now supports tag-based authorization of resources. As a seller or a private marketplace administrator, you can now exercise IAM policy-based control over resources such as Entities and ChangeSets by tagging them and allowing/disallowing actions based on those tags. You can either add tags on resources when you create them using the StartChangeSet API action or add tags on existing resources using the new TagResource API action. You can also list all the tags on a resource using ListTagsForResource API and remove tags from resources using the UntagResourceAPI.

The AWS Controllers for Kubernetes (ACK) for the Amazon EC2 service controller is now generally available. ACK lets you provision and manage EC2 networking resources, such as VPCs, SecurityGroups and Internet Gateways using the Kubernetes API.

Amazon WorkDocs now offers Delete Previous Versions feature in WorkDocs web client and APIs. This new Amazon WorkDocs web client feature enables end users to delete a previous version(s) of a file that they own, thereby providing greater user controls. The new WorkDocs APIs and SDK also enable site administrators to support the deletion and restoration of deleted versions programmatically. Both end users and site administrators can now manage document versions and individual user data limits proactively and effectively.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 5.7.40. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous fixes, performance improvements, and new functionality added by the MySQL community.

AWS Secrets Manager now supports higher request rates for the core set of API operations - GetSecretValue, DescribeSecret and ListSecrets. The request rate limits for GetSecretValue and DescribeSecret have been increased to 10,000 requests per second. The request rate of ListSecrets API operation has been increased to 100 requests per second. No action is required on your part, these increased API limits are available at no additional cost and will automatically be applied to your AWS accounts. These limit increases makes it easier for you to scale your Secrets Manager operations.

Today, we are introducing a new price and capacity optimized allocation strategy for Amazon EC2 Spot Instances to help you optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. The price and capacity optimized allocation strategy makes Spot allocation decisions based on both spare capacity availability and Spot Instance price. The price and capacity optimized allocation strategy is the best choice for most Spot applications such as big data, containerized workloads, CI/CD, web servers, image and media rendering, machine learning, and high performance computing (HPC). 

AWS CloudTrail announces the ability to use your own Customer Managed KMS Keys (CMK) to encrypt the activity logs stored in CloudTrail Lake. CloudTrail has always provided encryption by default using AWS owned KMS keys for all data stored in CloudTrail Lake. This feature provides you the option of adding a self-managed security layer to your activity logs to help you meet the compliance and regulatory requirements of your organization.

NICE DCV version 2022.2 introduces multiple new features, such as support for Mac computer Retina displays and time zone redirection. NICE DCV is a high-performance remote display protocol that is designed to help customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon SageMaker training jobs now support ml.trn1 instances, powered by AWS Trainium chips, which are purpose built for high-performance ML training applications in the cloud. You can use ml.trn1 instances on SageMaker to train natural language processing (NLP), computer vision, and recommender models across a broad set of applications, such as speech recognition, recommendation, fraud detection, image and video classification, and forecasting.

AWS Backup now supports restoring VMware backups to Amazon EC2. This allows you to restore your VMware backups directly in EC2, as EC2 native instances. AWS Backup can restore to on-premises VMware, VMware CloudTM on AWS Outposts, VMware Cloud^TM on AWS, and Amazon Elastic Block Store (EBS). AWS Backup also supports restoring virtual machines (VMs) at the VM-level or disk-level.

Amazon Virtual Private Cloud (VPC) now supports two new addresses for the default gateway router for IPv6. With this launch, we now support the following addresses: $SUBNET::1 and FE80:EC2::1. These addresses can be used for static router configuration and within applications that are restricted to communicate with only global unicast addresses (GUA).

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the October 2022 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c.

Amazon Simple Email Service (Amazon SES) is now available in the Asia Pacific (Jakarta) AWS Region. Amazon SES is a scalable, cost-effective, and flexible cloud-based email service that allows digital marketers and application developers to send marketing, notification, and transactional emails from within any application. To learn more about Amazon SES, visit this page.

Starting today, Amazon SageMaker JumpStart provides a new built-in algorithm for text classification: Text Classification - TensorFlow. It takes text as input and outputs probability for each of the class labels. It is a supervised learning algorithm that supports transfer learning for many pre-trained models available in TensorFlow Hub. These pre-trained models can be fine-tuned using transfer learning even when large amount of text are not available. It is available through the SageMaker built-in algorithms as well as through SageMaker JumpStart UI inside SageMaker Studio.

AWS AppConfig, a feature of AWS Systems Manager, has achieved FedRAMP High authority to operate in AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions. You can now use AWS AppConfig to more quickly and safely update software, and build applications for workloads that require FedRAMP High authorization. 

Amazon Kendra  is now authorized as FedRAMP High in AWS GovCloud (US-West) Region. Amazon Kendra is a highly accurate intelligent search service powered by machine learning. Kendra reimagines enterprise search for your websites and applications so your employees and customers can easily find the content they are looking for, even when it’s scattered across multiple locations and content repositories within your organization.

AWS Storage Gateway expands availability to the AWS Middle East (UAE) Region enabling customers to deploy and manage hybrid cloud storage for their on-premises workloads.

Today, we are excited to launch Amazon EventBridge Scheduler, expanding its current scheduling capabilities by making it simple for developers to create, execute, and manage scheduled tasks at scale.

Starting today, Amazon SageMaker JumpStart provides two additional state-of-the-art foundational models, Bloom for text generation and Stable Diffusion for image generation. Customers can access newly added models through the SageMaker Python SDK APIs and SageMaker JumpStart UI inside SageMaker Studio.

Amazon WorkSpaces now offers an API to quickly modify the streaming protocol on your existing WorkSpaces without requiring you to go through migrate WorkSpace process. This feature will allow you to retain the root volumes after you switch your WorkSpaces streaming protocol from PC-over-IP (PCoIP) to WorkSpaces Streaming Protocol (WSP) or vice-versa. End users of WorkSpaces can now easily take advantage of WSP features like Webcam and Smart Card support. WorkSpaces administrators will benefit from this feature because they will not have to manage custom images and bundles configured solely for the purpose of utilizing multiple streaming protocols supported by WorkSpaces.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.5, 13.8, 12.12, and 11.17. These releases contain bug fixes and improvements by the PostgreSQL community. This release includes new features for Babelfish for Aurora PostgreSQL version 2.2. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 10, you must upgrade to a newer major version by January 31, 2023.

AWS Lambda now enables Lambda Extensions to collect enhanced monitoring and observability data about your function execution through the new AWS Lambda Telemetry API. The Telemetry API provides a simple interface for extensions to receive logs, platform traces, and function invocation-level metrics directly from Lambda. Today, you can benefit from these enhanced capabilities by utilizing Telemetry API enabled extensions from these AWS Partner Network (APN) partners: Coralogix, Datadog, Dynatrace, Lumigo, New Relic, Sedai, Serverless.com, Site24x7, Sumo Logic, Sysdig, and Thundra.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.31. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous fixes, performance improvements, and new functionality added by the MySQL community.

Starting today, customers can run Apple macOS Ventura (13.0) as Amazon Machine Images (AMIs) on Amazon EC2 Mac instances. Apple macOS Ventura is the current major macOS release from Apple, and introduces multiple new capabilities and performance improvements over prior macOS versions. Apple macOS Ventura supports running Xcode versions 14.0 and later, which include the latest SDKs for iOS, iPadOS, macOS, tvOS, and watchOS.

AWS IoT Device Defender, a fully managed service for auditing and monitoring devices connected to AWS IoT, now supports a new audit check for revoked intermediate Certificate Authority (CA). If a CA revokes an intermediate CA because it is potentially compromised, then all certificates issued by that intermediate CA are also potentially compromised and invalid. This new audit check identifies active device certificates issued by a revoked intermediate CA, and helps customers review and replace these active device certificates.

The Amazon Time Sync Service is now available over the Internet. Built on Amazon's network infrastructure, the Amazon Time Sync Service utilizes a global fleet of redundant satellite-connected and atomic reference clocks in AWS regions to deliver current time readings of the Coordinated Universal Time (UTC) global standard. Previously, Amazon Time Sync was available through EC2 instances.

Amazon Simple Notification Service (Amazon SNS) now supports a higher default quota for subscription filter policies. With the increased quota, you can now have up to 10,000 subscription filter policies per account, and can apply up to 200 subscription filter policies per topic. By default, topic subscribers receive every message published to a topic. With subscription filter policies, subscribers can filter out unwanted messages, simplifying their architecture and optimizing the utilization of their resources.

Today, Amazon Elastic Container Service (Amazon ECS) has announced the availability of ECS task scale-in protection, a new feature that enables customers to protect long-running tasks from being terminated by scale-in events and deployments. This feature helps simplify orchestration of queue-processing asynchronous applications such as a video transcoding jobs wherein some tasks may be running for hours even when cumulative service utilization is low or when a new code version is being deployed while some tasks have not yet finished completing ongoing work that would be expensive to reprocess.

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in Asia Pacific (Osaka), Asia Pacific (Jakarta) and Middle East (Bahrain).

Customers in the AWS Asia Pacific (Jakarta) Region can now use AWS Transfer Family.

Today, AWS announced the availability of next-generation General Purpose gp3 storage volumes for Amazon Relational Database Service (Amazon RDS). Amazon RDS gp3 volumes give you the flexibility to provision storage performance independently of storage capacity, paying only for the resources you need. Every gp3 volume provides you the ability to select from 20 GiB to 64 TiB of storage capacity, with a baseline storage performance of 3,000 IOPS included with the price of storage. For workloads that need even more performance, you can scale up to 64,000 IOPS for an additional cost.

Amazon QuickSight now supports monitoring of SPICE consumption by sending metrics to Amazon CloudWatch. QuickSight developers and administrators can use these metrics to observe and monitor SPICE consumption and proactively monitor if a QuickSight account is reaching its SPICE capacity limit which might result in failed dataset ingestions. This allows them to provide their readers with a consistent and uninterrupted experience on QuickSight. For more information, visit here.

Today, we are announcing the general availability of AWS Wavelength on the Vodafone 4G/5G network in Manchester, United Kingdom. Wavelength Zones are now available in 2 locations in the U.K, including the previously announced Wavelength Zone in London.

AWS Security Hub now supports automated security checks aligned to the Center for Internet Security’s (CIS) AWS Foundations Benchmark version 1.4.0 requirements, Level 1 and 2 (CIS v1.4.0). Security Hub’s CIS v1.4.0 standard includes up to 39 automated rules that conduct continuous checks against 38 CIS v1.4.0 requirements across 8 AWS services. The CIS v1.4.0 standard is supported in addition to the CIS v1.2.0 standard which was previously available in Security Hub.

Starting today, you can configure the set of instance types used when requesting EC2 capacity with attribute-based instance type selection.

AWS Config now supports 14 more resource types for services including AWS IoT Events, AWS Cloud Map, Amazon EventBridge, EC2 Image Builder, AWS DataSync, AWS Glue, Amazon Route 53, and Amazon Elastic Container Registry. For the full list of newly supported resource types see [1].

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Starting today, you can now use Amazon Polly inside an Amazon Virtual Private Cloud (VPC), instead of connecting over the internet, which allows you to have better control over your network environment.

Starting today, Amazon EC2 C6id, M6id and R6id instances are available in AWS Region Asia Pacific (Sydney). These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. Compared to previous generation instances: all three instances deliver up to 15% better price performance; C6id offers up to 138% higher TB storage per vCPU and 56% lower cost per TB; M6id and R6id offer up to 58% higher TB storage per vCPU, and 34% lower cost per TB.

Amazon Web Services (AWS) announces the preview of Customer Provided Ephemeris support for AWS Ground Station, empowering space vehicle owners to provide their own position and trajectory information for a satellite as it orbits the Earth. Over the next year, satellite ride share providers are planning on launching more than 100 satellites from around the world. With Customer Provided Ephemeris, flight operations crews can conduct tracking and telemetry operations for space vehicles until entry into final orbit. Customers can also use this feature to improve the quality of tracking of satellites already in orbit and to modify antenna pointing based on orbital maneuvers.

Starting today, customers can create custom line items in AWS Billing Conductor (ABC) that span across multiple billing periods. For customers who want to apply consistent discounts or fees to specific billing groups, recurring custom line items remove the need to create a new custom line item each month for the same purpose. For example, customers can use a flat recurring custom line item to distribute credits or use percent-based recurring custom line items to apply a managed service fee or tax. ABC applies recurring custom line items at the beginning of each new billing period.

Starting today, you can request EC2 instances based on your workload’s network bandwidth requirements through attribute-based instance type selection.

Amazon MQ now provides support for ActiveMQ 5.17.2, which includes several fixes and enhancements to the previously supported version, ActiveMQ 5.17.1. The default connection limits for ActiveMQ brokers on Amazon MQ has been increased to 300 connections per transport protocol for mq.t2.micro and mq.t3.micro broker types and 2,000 connections per transport protocol for all other supported broker types.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the Murmur3Partitioner.

You can now accelerate repeat queries in Amazon Athena with Query Result Reuse, a new caching feature released today. Repeat queries are SQL queries submitted within a short period of time and produce the same results as one or more previously run queries. In use cases like business intelligence, where interactive analysis in a dashboard can cause multiple identical queries to be run, repeat queries can increase time to insight as each query needs time to read and process data before returning results to the user.

Amazon ElastiCache for Redis now supports Redis 7. This release brings several new features to Amazon ElastiCache for Redis:

You can now share Amazon EC2 placement groups across multiple AWS accounts using AWS Resource Access Manager (RAM). When a placement group is shared, instances launched by one AWS account can utilize a placement group created by another account. RAM helps you securely share your resources across AWS accounts, within your organization or organizational units (OUs) in AWS Organizations, and with IAM roles and IAM users for supported resource types.

Today, AWS announces AWS Resource Explorer, a managed capability that simplifies the search and discovery of resources, such as Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon Kinesis streams, and Amazon DynamoDB tables, across AWS Regions in your AWS account. AWS Resource Explorer is available at no additional charge to you.

Amazon CloudWatch Logs now supports exporting logs to Amazon Simple Storage Service (S3) buckets encrypted using Server side encryption with KMS (SSE-KMS) keys.

Starting today, AWS Firewall Manager supports Import Existing Network Firewall feature that enables customers to discover existing AWS Network Firewalls and bring them under the central management of AWS Firewall Manager. With this feature, you can see your security coverage provided by existing firewalls across AWS organizations and manage those firewalls without having to instantiate new ones.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the July 2022 Release Updates (RU) for Oracle Database 21c.

Amazon OpenSearch Service now supports managed VPC endpoints (powered by AWS PrivateLink) to connect to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). With an Amazon OpenSearch Service managed endpoint, you can now privately access your OpenSearch Service domain within your VPC from your client applications in other VPCs, within the same or across AWS accounts, without using public IPs or requiring traffic to traverse the Internet.

You can now register domain names and auto-configure domain name systems (DNS) on Amazon Lightsail. Amazon Lightsail is the easiest way to get started with AWS for users who need a secure, high-performance and reliable virtual private server (VPS) solution with a simple management interface and predictable pricing. With the addition of domain registration, Lightsail users are able to create a unique online address for their website or web application to establish their own personal or business identity on the internet. With domain registration, users also get Lightsail’s DNS management functionality.

You can now use AWS Certificate Manager (ACM) to request and use Elliptic Curve Digital Signature Algorithm (ECDSA) P-256 and P-384 Transport Layer Security (TLS) certificates to secure your network traffic. TLS certificates are used to secure network communications and to establish the identity of websites over the internet as well as resources on private networks. ACM lets you easily provision, manage, and deploy public and private TLS certificates. You can learn more about ECDSA security, performance and compatibility in this AWS Security blog post.

Today, AWS CloudTrail announces support for a delegated administrator account, which provides customers with the ability to manage organization trails and CloudTrail Lake event data stores from an account other than the management account in AWS Organizations. Delegated administrator support enables flexibility for customers by allowing the management account to delegate CloudTrail administrative actions to an organization member account, such as their security and logging member account. With this feature, the management account of an organization remains the owner of all CloudTrail organization resources, even when those organization trails or CloudTrail Lake event data store resources are created and managed through the delegated administrator account. This helps customers with maintaining continuity of organization-wide CloudTrail audit logs, avoiding any disruption when changes are made to their organization in AWS Organizations.

Today Amazon Polly, a service that turns text into lifelike speech, announced the general availability of three new neural Text-to-speech (NTTS) voices: Elin for Swedish, Ida for Norwegian and Suvi for Finnish.

Sensitive data detection and processing in AWS Glue can now detect PII and other sensitive data specific to United Kingdom (UK) and Japan.

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports access to transaction log backups. With this feature, customers can gain access to transaction log backups that are generated on the Amazon RDS SQL Server instance and copied to a customer S3 bucket. Subsequently, customers can restore single databases on that DB instance to a specific point-in-time using these transaction logs backups. Customers may also use the transaction log backups to audit, replicate, or process the log data. To get started, visit the Amazon RDS User Guide.

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available in additional AWS regions US West (Northern California) and Europe (Paris). With Amazon Redshift Serverless, all users including data analysts, developers, and data scientists, can use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity without making any changes to your existing analytics and business intelligence applications.

Amazon SageMaker Canvas announces support for encryption at rest for datasets and machine learning (ML) models for time series forecasting use cases, on both quick and standard builds. SageMaker Canvas is a visual point-and-click interface that enables business analysts to generate accurate ML predictions on their own — without requiring any machine learning experience or having to write a single line of code.

Amazon ElastiCache clusters now support the IPv6 protocol, allowing clients to connect to ElastiCache clusters using IPv6. You can now configure your cluster to accept only IPv6 connections or to accept both IPv4 and IPv6 connections. This allows you to work to meet IPv6 compliance requirements and more efficiently integrate with existing IPv6-based applications.

Amazon SageMaker Canvas announces support for correlation matrices for advanced data analysis, thereby expanding capabilities to get insights from your data prior to building ML models. SageMaker Canvas is a visual point-and-click interface that enables business analysts to generate accurate ML predictions on their own — without requiring any machine learning experience or having to write a single line of code.  

AWS is pleased to announce the availability of two new features in the AWS Well-Architected Tool (AWS WA Tool)—integrations with AWS Trusted Advisor and AWS Service Catalog AppRegistry—that will help you more easily discover the information needed to answer Well-Architected review questions and shorten your review time.

AWS Private 5G is a managed service that makes it easier to deploy, operate, and scale your own private mobile network, with all required hardware and software provided by AWS. To set up a private mobile network and connect devices, AWS delivers and maintains the following required components: small-cell radio unit, subscriber identity modules (SIM cards), and mobile network software running in the AWS cloud. Today, we are pleased to announce support for scaling your network anytime you need by ordering additional small-cell radio units to extend coverage or additional SIMs to connect more devices.

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployment option with one primary and two readable standby database (DB) instances across three Availability Zones (AZs) is now available in twelve additional regions. This deployment option gives you up to 2x faster transaction commit latency, automated failovers typically under 35 seconds, and readable standby instances.

Amazon Elastic Kubernetes Service (EKS) customers can now create and manage clusters in the Middle East (UAE) Region.

Amazon RDS Custom for SQL Server, a managed database service that allows access to the operating system and database environment, is now available in the AWS Regions of Asia Pacific (Seoul), South America (São Paulo), and Canada (Central). Amazon RDS Custom for SQL Server manages the operations and backups of databases in the cloud, while allowing administrative access to the underlying operating system to help meet the dependent application's needs.

AWS CloudFormation now supports Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with two readable standbys. AWS CloudFormation speeds up cloud provisioning with infrastructure as code. You can use AWS CloudFormation templates to deploy and modify Amazon RDS Multi-AZ deployments with two readable standbys, along with the rest of your AWS infrastructure, in a secure, efficient, and repeatable manner.

Amazon Kinesis Data Firehose makes it easier to reliably load streaming data into data lakes, data stores, and analytics services. You can use it to capture, transform, and deliver streaming data to Amazon S3, Amazon Redshift, Amazon OpenSearch, and third party providers like Splunk and Datadog, enabling near real-time analytics.

You can now connect your Apache Kafka applications to Amazon MSK Serverless in the Canada (Central) and Asia Pacific (Mumbai) AWS Regions.

Today, AWS CloudFormation StackSets improves access to detailed information on stack instances for stack set operations. You can get the count of failed stack instances for stack set operations in DescribeStackSetOperation. Additionally, you can list and filter stack instances for stack set operations in ListStackInstances.

Amazon Connect now has an updated UI for quick connects that records all changes made as events in AWS CloudTrail. This enables you to look in AWS CloudTrail to identify who took which action on a quick connect, when the event occurred, and other details to help you analyze and respond.

AWS Security Hub has added Wiz as a new integration partner to help you with your cloud security posture monitoring. Wiz sends findings about critical risks in your cloud environment to Security Hub to help you maintain your security posture and compliance events. Integration with Wiz brings Security Hub to 82 partner integrations.

We are excited to announce the general availability of job templates in Amazon EMR on EKS. Job templates allow you to create and store templates to configure Spark applications parameters. This helps you ensure consistent settings across applications by reusing and enforcing configuration overrides in data pipelines.

Starting today, you can remove your AWS account from launch permissions for an Amazon Machine Image (AMI) that was directly shared with your AWS account. You can leverage this capability, for example, to reduce the likelihood of launching an EC2 instance with an unused or deprecated AMI that was shared with you earlier.

Effective immediately, AWS Lambda customers in AWS GovCloud (US) Regions can configure up to 10,240 MB of ephemeral storage for their Lambda functions, a 20x increase compared to the previous limit of 512 MB.

Amazon Simple Notification Service (Amazon SNS) recently launched the public preview of message data protection. Amazon SNS message data protection is a new set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data. Now, with the general availability launch, you can de-identify data within a message payload in real-time via data redaction, or masking.

Today, AWS announced the general availability of AWS Copilot version 1.23 with support for AWS App Runner private services. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without having to manage infrastructure. By default, App Runner services are accessible publicly over the internet. Now, with private services you can restrict network access to your internal websites, APIs, and applications to originate from within your Amazon VPC.

You can now use data tiering for Amazon MemoryDB for Redis as a lower cost way to scale your clusters to up to hundreds of terabytes of capacity. Data tiering provides a new price-performance option for MemoryDB by utilizing lower-cost solid state drives (SSDs) in each cluster node, in addition to storing data in memory. Data tiering is ideal for workloads that access up to 20% of their overall dataset regularly, and for applications that can tolerate additional latency when accessing data on SSD.

Today, we are excited to announce operations support for SQL Server on Amazon EC2 through AWS Managed Services (AMS) Operations on Demand (OOD). This new offering reduces the undifferentiated heavy lifting by offloading database operations such as patching and backup to highly skilled AMS resources. With this launch, customers can now bring their existing SQL Server licenses (BYOL) to EC2 and take advantage of AMS to operate more efficiently.

AWS Outposts rack can now be shipped and installed at your data center and on-premises locations in Bangladesh.

Starting today, the AWS WAF geographic match statement adds labels to each request, to indicate ISO 3166 country and region codes. Customers have asked for more control of geographic regions within a country, such as a specific state in the United States. With the updated geographic match rule statements, customers can control access at the region level. The geographic match rule statement now automatically annotates a request from Texas, USA with the label awswaf:clientip:geo:region:US-TX, and a request from Queensland, Australia with the label awswaf:clientip:geo:region:AU-QLD. Customers can add label matching rules to capture region labels and block specific regions, without blocking the entire country.

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from any document or image. We continuously improve the underlying machine learning models based on customer feedback to provide even better accuracy. Today, we are pleased to announce quality enhancements to our text and forms extraction feature available via the AnalyzeDocument API.

Amazon SageMaker Autopilot now provides the ability to perform feature selection and change auto inferred data types while creating an AutoML experiment, enabling you with the flexibility to choose which features to include while training your machine learning (ML) models. SageMaker Autopilot automatically builds, trains and tunes the best ML models based on your data, while allowing you to maintain full control and visibility. 

Amazon S3 on Outposts now supports additional S3 Lifecycle rules to optimize capacity management. You can now optimize your storage capacity by expiring objects as they age or are replaced with newer versions. You can use S3 Lifecycle configurations for a whole bucket on your Outpost, or for a subset of the objects in the bucket by filtering by prefixes, object tags, or object sizes.

Amazon SageMaker Autopilot experiments using hyperparameter training are up to 2x faster to generate ML models on datasets greater than 100 MB running 100 or more trials. Amazon SageMaker Autopilot automatically builds, trains, and tunes the best ML models based on your data while allowing you to maintain full control and visibility. 

AWS Migration Hub Orchestrator adds support for Microsoft SQL Server to help you simplify and accelerate SQL Server database migration to AWS. You can now easily create a SQL Server migration workflow, automate the manual tasks involved in the migration, and track the migration progress in the same console. With this capability, you can reduce SQL Server migration time and effort to avoid schedule and cost overruns.

AWS Launch Wizard now allows you to deploy SAP HANA databases using Amazon FSx for NetApp ONTAP volumes in single node, multi-node, and high availability (HA) deployment patterns.

AWS ParallelCluster 3.3 is now generally available and introduces a new feature for compute resource optimization. With this new feature, you can map a compute resource to a list of Amazon EC2 instance types with an allocation strategy to optimize compute capacity for your HPC jobs. Other features include updates that support dynamically mounting shared storage, Slurm accounting, and Amazon EC2 on demand capacity reservations (ODCR).

Today, Amazon Simple Email Service (Amazon SES) launched Virtual Deliverability Manager, a new feature that helps customers monitor and increase their email delivery success rates. Customers can use this feature to optimize their email sending campaigns and sending configuration, to reduce the likelihood that mailbox providers (such as Gmail or Yahoo) will mark their email messages as spam.

Amazon Connect Customer Profiles now enables agents to see additional customer information stored in Customer Profiles in the Connect Agent Application, enabling them to further personalize customer interactions and resolve their problems. For example, admins at retail companies can now add reward points information to profiles, and enable agents to inform customers of points redeemable towards their orders. As another example, admins at a financial services company can add credit limit information enabling agents to quickly help customers calling regarding a declined credit card transaction.

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of Laura, a new female Dutch neural Text-to-speech (NTTS) voice.

Amazon Textract is a machine learning service that automatically extracts printed text, handwriting, and data from any document or image. AnalyzeExpense is a specialized API within Textract that understands the context of invoices and receipts and automatically extracts relevant data such as vendor name and invoice number. Today, we are pleased to announce major enhancements to AnalyzeExpense that include support for new fields and higher accuracy for existing fields.

Amazon Braket, the quantum computing service from AWS, adds support for Aquila, a new neutral atom-based quantum processor from QuEra Computing Inc. As a special purpose device designed for solving optimization problems and the study of quantum phenomena in nature, it enables researchers in industry and academia to explore a new, analog paradigm in quantum computing.

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from any document or image. Analyze ID is a specialized API within Textract that extracts data from identity documents, such U.S. Driver Licenses and U.S. Passports. Today, we are pleased to announce updates to our Analyze ID extraction API.

AWS App Runner now supports private services which enables access to App Runner services from within an Amazon Virtual Private Cloud (VPC). App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without having to manage infrastructure. By default, App Runner services are accessible publicly over the internet. Now, with private services you can restrict network access to your internal websites, APIs, and applications to originate from within your VPC.

Amazon RDS Custom for SQL Server is a managed database service that allows administrative access to the operating system. Starting today, RDS Custom for SQL Server provides a simple way to scale your database disk storage as needed. With storage scaling, RDS Custom for SQL Server simplifies the burdensome process of storage configuration as your database size grows.

Amazon Connect now provides an API to programmatically clear the notifications agents receive after they have missed or rejected a contact and make them eligible to be routed new contacts. Today, if an agent misses a contact, they won’t be routed additional contacts until they acknowledge and clear the missed contact notification. Using this API, businesses can now build custom dashboards, so contact center managers can identify when an agent has missed a contact and make that agent available for additional contacts. This API can also be used to clear similar notifications including when an agent encounters an error with accepting the contact, or is handling After Contact Work.