January 2023

Amazon Web Services(AWS) today announced support for Credential Guard, a Windows Virtualization Based Security (VBS) feature. Credential guard uses VBS isolation to prevent the extraction of Windows login credentials from OS memory. When Credential Guard is turned on, login credentials cannot be used from another host or after a user has logged out. With the availability of this capability, enterprises running Windows Server, especially those that operate in regulated industries, no longer have to choose between meeting compliance requirements and being able to move to the cloud to innovate faster; they can get both on EC2.

The new third-party reports tab on the AWS Artifact Reports page provides on-demand access to security compliance reports of Independent Software Vendors (ISVs) who sell their products through AWS Marketplace. AWS customers interested in buying third-party software products from AWS Marketplace can download and review the security compliance reports shared by the ISV via AWS Artifact on-demand to accelerate their procurement cycle. ISV compliance reports will only be accessible to those AWS customers who have been granted access to AWS Marketplace Vendor Insights for a specific ISV. To learn more about AWS Marketplace Vendor Insights, please visit here.

AWS CloudTrail Lake now supports ingesting activity events from non-AWS sources, making CloudTrail Lake a single location to immutably store user and API activity events for auditing and security investigations across AWS and hybrid environments. You can consolidate activity events from AWS and non-AWS sources – such as in-house applications and SaaS applications running in the cloud or on-premises – without having to maintain multiple log aggregators and analysis tools. CloudTrail Lake records all events in a prescribed CloudTrail schema, immutably stores them for up to seven years, and provides an integrated SQL experience to query your activity events. This makes it easier for you to manage and diagnose security, audit, and operational incidents in AWS and hybrid environments.

Amazon CloudWatch now supports metric extraction from structured logs using Embedded Metric Format (EMF) without requiring customers to provide special header declaration while publishing logs.

Amazon Redshift Concurrency Scaling is now available in the China (Beijing, operated by Sinnet), and China (Ningxia, operated by NWCD) Regions.

You can now hibernate Elastic Block Storage-backed Amazon EC2 I3en, M6i, M6id, C6i, and C6id instances. Hibernation provides you with the convenience of pausing your instances and resuming them later from a saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off. By using hibernation, you can maintain a fleet of pre-warmed instances that can get to a productive state faster without modifying your existing applications. 

Amazon MemoryDB for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, MemoryDB offered an SLA of 99.9% for Multi-AZ configurations. With this launch, MemoryDB has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon AppFlow announces the release of 4 new connectors that include Braintree, Microsoft Dynamics 365, Oracle HCM and Zoho CRM. Amazon AppFlow is continually expanding its catalog of connectors to popular SaaS applications and these four new data connectors make it easier for customers to access their data for use cases across marketing, eCommerce, customer service, and more. 

Amazon SageMaker Automatic Model Tuning now supports three new completion criteria to help you customize your tuning jobs based on your desired trade-off between accuracy, cost, and runtime. 

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of Ruth and Stephen, two new US English neural Text-to-speech (NTTS) voices.

Amazon Elasticache for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, ElastiCache for Redis offered an SLA of 99.9% for Multi-AZ configurations. With this launch, ElastiCache for Redis has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Today, we are excited to announce integration of Systems Manager Automation with Systems Manager Change Calendar. Customers can now reduce the risks associated with changes to their production environment by allowing Automation runbooks to run during an allowed time window. With this feature, users in your account can only run automations during the time periods allowed by your Change Calendar. For example, you can avoid the risk of application downtime due to system update during high traffic time period, by blocking the time period in Change Calendar and enforcing Automation to check Change Calendar before updating your Amazon EC2 instance types. 

Amazon OpenSearch Service adds a new connection mode for cross-cluster connection, simplifying the setup required to remote reindex between a local domain and remote VPC domains. Remote reindex enables you to migrate data from a source domain to a target domain. Remote reindex is also useful when you have to upgrade your clusters across multiple major versions. 

Starting today, you can use Amazon Athena to query data in Google Cloud Storage. With Athena’s data source connectors, you can run SQL queries on data stored in relational, non-relational, object, and custom data sources without the need to move data to S3 or learn a new query dialect. Google Cloud Storage is a managed service designed to store data in buckets, similar to Amazon S3.

Today, we are launching AWS Glue in the AWS Middle East (UAE) Region, enabling customer to discover, prepare, and integrate their data at any scale.

AWS Elemental MediaTailor Channel Assembly can now emit logs of a channel timeline to Amazon CloudWatch Logs. Starting today, you can configure a channel to emit an “As Run” timeline log. This will log important play out events such as source content, start times, ad breaks inserted, and more. Using Amazon CloudWatch Insights, you can also configure queries to build reports such as weekly As Run reports.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can index documents of additional data types in addition to the five types previously supported.

AWS Glue Studio now offers 5 new visual transforms: Flatten, Format timestamp, To timestamp, Add identifier, and Add UUID. AWS Glue Studio offers a visual extract-transform-and-load (ETL) interface that helps ETL developers to author, run, and monitor AWS Glue ETL jobs quickly. With this new feature ETL developers can prepare data for analysis faster without having to write any code.

Amazon Relational Database Service (Amazon RDS) now supports increasing the allocated storage size when creating a read replica, when restoring a database from a snapshot, or when restoring a database instance to a point in time. This capability is supported on Amazon RDS for MariaDB, Amazon RDS for MySQL, Amazon RDS for PostgreSQL and Amazon RDS for Oracle databases.

Today, AWS Snow Family announces a new feature that allows for easy updates to the system software of your AWS Snowcone devices. Now, you can request and download Snow system software updates from AWS. It is now possible to install software updates on your AWS Snowcone device using the AWS Snowball Edge client and without returning the device to AWS.

AWS Snow Family now supports Ubuntu 20.04 Long Term Support (LTS) and Ubuntu 22.04 LTS on AWS Snowcone, AWS Snowball Edge Compute Optimized, and AWS Snowball Edge Storage Optimized devices. Ubuntu operating systems on Snow devices enable customers to deploy their edge compute workloads such as IoT, AI/ML, and Container workloads on Ubuntu 20.04 LTS and Ubuntu 22.04 LTS versions.

AWS Snow Family now supports Instance Metadata Service Version 2 (IMDSv2) for Amazon EC2 instances on AWS Snowcone and AWS Snowball Edge devices. You can use AWS Snow Family devices to run storage, compute, and data-processing operations in locations with denied, disrupted, intermittent, and limited connectivity. IMDSv2 is an enhancement to instance metadata access that requires session-oriented requests to add defense-in-depth against unauthorized metadata access. IMDSv2 requires a PUT request to initiate a session to the instance metadata service and retrieve a token.

Amazon QuickSight now includes Radar chart as a new chart type. Radar charts (also known as spider charts, polar charts, or web charts) are a way to visualize multivariate data. They are used to plot one or more groups of values over multiple common variables. They do this by providing an axis for each variable, which are arranged radially around a central point and spaced equally. The center of the chart represents the min value and the edge represent the max value on the axis. The data from a single observation are plotted along each axis and connected to form a polygon. Multiple observations can be placed in a single chart by displaying multiple polygons. To learn more, click here.

AWS Outposts rack local gateway now supports Amazon Virtual Private Cloud (VPC) prefix lists, simplifying management of your routing policies to connect to your on-premises network.

Bottlerocket, a Linux-based operating system that is purpose built to host container workloads, now supports network bonding and VLAN tagging when used with Amazon Elastic Kubernetes Anywhere (Amazon EKS Anywhere) bare metal deployments. The added functionality allows customers using Bottlerocket on bare metal to avoid a single point of failure in the network stack and improves network performance.

Today, AWS announced the opening of new AWS Direct Connect locations in Melbourne, Australia; Buenos Aires, Argentina; and Zurich, Switzerland. By connecting your network to AWS at one of these locations, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

You can now convert previously saved Simple Monthly Calculator (SMC) estimates in AWS Pricing Calculator. 

AWS Fault Injection Simulator (FIS) now supports Pause I/O for Amazon EBS volumes as a new FIS action type. With the new fault action, customers with highly available applications can test their architecture and monitoring, such as operating system timeout configurations and CloudWatch alarms, to improve resiliency to storage faults. Customers can observe how their application stack responds, and tune their monitoring and recovery process to improve resiliency and application availability.

Amazon Relational Database Service (Amazon RDS) for Oracle and Amazon Aurora now support Database Activity Streams in AWS regions Europe (Spain), Middle East (UAE), and Asia Pacific (Hyderabad) . Database Activity Streams provides a near real-time stream of database activities to help meet your relational database for compliance and regulatory requirements. When integrated with third party database activity monitoring tools, Database Activity Streams can monitor and audit database activity to provide safeguards for your database.

AWS Managed Services (AMS) Accelerate has achieved FedRAMP High authorization in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions, which are operated by employees who are U.S. citizens on U.S. soil. You can now use AMS Accelerate with workloads that require FedRAMP High categorization level.

AWS GovCloud (US) Region customers can now use AWS Compute Optimizer to reduce costs and improve performance.

We are excited to announce that Amazon Personalize now provides analysis on your data to make onboarding easier than ever. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. Amazon Personalize trains custom models for each customer using their unique data. With this launch, Amazon Personalize now analyzes the data you provide and offers suggestions to assist you in improving your data preparation.

Amazon SageMaker is now available in AWS GovCloud (US-East) Region. Starting today, you can build, train, and deploy machine learning (ML) models in the region.

We are excited to highlight AWS Conversational AI Competency Partners, who enable enterprises to implement high-quality, highly effective chatbot, virtual assistant, and Interactive Voice Response (IVR) solutions.

AWS Storage Gateway expands availability to the AWS Europe (Spain) and AWS Europe (Zurich) Regions enabling customers to deploy and manage hybrid cloud storage for their on-premises workloads.

Amazon VPC IP address manager (IPAM) now lets you manage IP addresses in accounts outside of your AWS Organization using AWS Resource Access Manager (RAM). This simplifies your IP management workflows (e.g., plan, track, and monitor) by enabling you to use a single IPAM across all your AWS accounts.

Now generally available, Amazon OpenSearch Serverless is a new serverless option for Amazon OpenSearch Service. OpenSearch Serverless streamlines the process of running petabyte-scale search and analytics workloads without having to configure, manage, or scale OpenSearch clusters. OpenSearch Serverless automatically provisions and scales the underlying resources to deliver fast data ingestion and query responses for even the most demanding and unpredictable workloads. With OpenSearch Serverless, you pay only for the resources consumed.

AWS Local Zones are now available in three new metro areas—Lagos, Lima, and Querétaro. You can now use these AWS Local Zones to deliver applications that require single-digit millisecond latency or local data processing.

Customers can now create Amazon FSx for NetApp ONTAP file systems in the AWS Middle East (UAE) Region.

AWS announces the general availability of Porting Advisor for Graviton. The Porting Advisor for Graviton is an open-source command line tool that analyzes source code and generates a report highlighting missing and outdated libraries and code constructs that may require modification along with recommendations for alternatives. It accelerates your transition to AWS Graviton-based instances by reducing the iterative process of identifying and resolving source code and library dependencies.

AWS announces the general availability of Amazon provided IPv6 contiguous Classless Inter-Domain Routing (CIDR) blocks with Amazon VPC IP Address Manager (IPAM). Within IPAM, customers can create IPv6 publicly scoped pools and provision with BYOIP CIDR blocks. Now, customers can provision Amazon provided IPv6 CIDR blocks from /52 up to /40 in size into separate pools for association to Virtual Private Clouds (VPCs). Contiguous CIDR blocks can be used for sequential VPC creation. CIDRs can then be aggregated in a single entry across networking and security constructs like access control lists, route tables, security groups, and firewalls.  

We’re excited to announce the ability to change the default AMS response for Config Rules in Accelerate operations plan. With this release, customers can now choose whether they want AMS to remediate, ask for customer approval, or just add to a monthly report on the alerts from AMS supported security Config Rules. By adjusting the default response, you can increase conformance by setting more Config Rules for remediation. When you select remediation of a finding, AMS response is quick and consistent. Findings can also create a case asking for your approval or just be reported during your next Monthly Business Review (MBR). You can set up multiple responses for a Config Rule that are matched to the account and resources based on tags.  

Windows Server and SQL Server on Amazon EC2 calculator now supports Dedicated Hosts price estimation. With this feature, you can now generate optimized price estimate for bring-your-own-license (BYOL) scenarios on Dedicated Hosts. 

Amazon QuickSight now supports data bars for tables. Data bars are essentially bar charts displayed for a given column, where the bar length specifies the magnitude of the cell value relative to the range of values in the same column. Data bars make it easier to read and compare values and quickly spot outliers. You can set data bars for only numeric fields and set color for both positive and negatives values separately. More details can be found here.

Amazon QuickSight pivot tables now support more data than ever before with new the field limits, unlocking advance use cases. The value field well limits have been increased from 20 to 40, and Rows and Columns have been increased from 20 each to a combined limit of 40. For example, if the user has 34 fields in rows then they can add 40-34 = max 6 fields to the column field well. Refer here for more information.

Today we are excited to announce the launch of comprehensive controls management in AWS Control Tower, a set of new features that enhances AWS Control Tower’s governance capabilities. You can now programmatically implement controls at scale across your multi-account AWS environments within minutes, so you can more quickly vet, allow-list, and begin using AWS services. With comprehensive controls management in AWS Control Tower, you can reduce the time it takes to define, map, and manage the controls required to meet your most common control objectives such as enforcing least privilege, restricting network access, and enforcing data encryption.

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of five new male neural Text-to-speech (NTTS) voices: Sergio for Castilian Spanish, Andrés for Mexican Spanish, Rémi for French, Adriano for Italian, and Thiago for Brazilian Portuguese.

Amazon MQ now provides support for RabbitMQ version 3.8.34, which includes several fixes to the previously supported version, RabbitMQ 3.8.30. Amazon MQ is a managed message broker service for Apache ActiveMQ  and RabbitMQ that makes it easier to set up and operate message brokers on AWS. You can reduce your operational burden by using Amazon MQ to manage the provisioning, setup, and maintenance of message brokers. Amazon MQ connects to your current applications with industry-standard APIs and protocols to help you easily migrate to AWS without having to rewrite code.

Today, AWS announces the general availability of runtime management controls for AWS Lambda. The operational simplicity of automatic runtime updates is one of the features customers most like about Lambda. This release provides customers running critical production workloads with more visibility and control over when runtime updates are applied to their functions.

Amazon Aurora now supports Aurora MySQL 3 (with MySQL 8.0 compatibility) as a source cluster or blue environment within Amazon RDS Blue/Green Deployments. This enables you to use Blue/Green Deployments for minor version upgrades for Aurora MySQL 3 (with MySQL 8.0 compatibility).

SageMaker Automatic Model Tuning allows you to find the most accurate version of your machine learning model by searching for the optimal set of hyperparameter configurations. Previously, you could only specify environment variables for your algorithm runtime in your SageMaker Training jobs, but not in your tuning jobs. Starting today, you have the flexibility to specify runtime environment variables for your scripts in your CreateTuningJob API. 

Amazon AppFlow announces the release of 10 new data connectors for Software-as-a-Service (SaaS) applications. The new connectors enable you to transfer your data from Asana, Delighted, Google Calendar, Intercom, JDBC, PayPal, Pendo, Smartsheet, Snapchat Ads, and WooCommerce. These new connectors make it easier for customers to access their data for use cases such as data lake hydration, analytics and machine learning, and data retention.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports inbound replication from Amazon RDS Single-AZ database (DB) instances and Amazon RDS Multi-AZ DB instances with one standby to Amazon RDS Multi-AZ deployments with two readable standbys. You can use this inbound replication to help migrate your existing Amazon RDS PostgreSQL deployments to Amazon RDS Multi-AZ deployments with two readable standbys, which have one writer instance and two readable standby instances across three availability zones. By creating a Multi-AZ deployment with two readable standbys as a read replica of your existing RDS PostgreSQL database instance, you can promote the read replica to be your new primary, typically within minutes. 

Amazon Detective now adds visual summaries and analytics about your Amazon Virtual Private Cloud (VPC) flow logs from your Amazon Elastic Kubernetes Service (EKS) workloads. This new capability visualizes all network traffic from your EKS workloads and allows you to quickly answer questions like “what ports or network services were in use by my EKS workloads?”, “were there any large data transfers from my EKS workloads?”, and “what IP address were connected to my EKS workloads?” These details help security analysts investigate potential security issues, diagnose unexpected network behavior, and identify other AWS resources that might be affected.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.6, 13.9, 12.13, and 11.18. These releases contains product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 10, you must upgrade to a newer major version by January 31, 2023. 

You can now use AWS Elemental MediaLive to add timecode visually into individual video outputs from a MediaLive channel.

Amazon Web Services (AWS) today announced the availability of AWS Shield Advanced in the Middle East (UAE) region.

Amazon Connect now makes it easier to deliver long lasting, persistent chat experiences for your customers. Persistent chats enable customers to resume previous conversations with the context, metadata, and transcripts carried over, eliminating the need for customers to repeat themselves and allowing agents to provide personalized service with access to the entire conversation history. To set up persistent chat experiences, simply provide a previous contact id when calling the StartChatContact API to create a new chat contact.

Today, AWS announces the new private offers page in the AWS Marketplace Console, giving customers a consolidated view of available AWS Marketplace private offers. This launch makes it easier for customers to view their private offer information and make more informed purchasing decisions by accessing them directly in the console.

Customers can now create Amazon FSx for Windows File Server file systems in the AWS Middle East (UAE) Region.

Starting today, memory optimized Amazon EC2 X2idn and X2iedn instances are available in US West (Northern California). X2idn and X2iedn instances, powered by 3rd generation Intel Xeon Scalable Processors and built using AWS Nitro System, are designed for memory-intensive workloads and deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. X2idn has a 16:1 ratio of memory to vCPU and X2iedn has a 32:1 ratio, making these instances a great fit for workloads such as in-memory databases and analytics, big data processing engines, and Electronic Design Automation (EDA) workloads.

Customers can now create Amazon FSx for Lustre file systems in the AWS Middle East (UAE) Region.

Starting today, Amazon EC2 Launch Templates support AWS Systems Manager parameters for Amazon Machine Images (AMIs). This simplifies automation and reduces misconfiguration likelihood by eliminating the need to create a new launch template version for every AMI update.  

Amazon Relational Database Service (Amazon RDS) for MariaDB supports encrypted SSL/TLS connections to the database instances. Starting today, you can enforce SSL/TLS client connections to your Amazon RDS for MariaDB database instance for enhanced transport layer security. To enforce SSL/TLS, enable the require_secure_transport parameter (disabled by default) through the Amazon RDS Management Console, the AWS CLI or the API. When the require_secure_transport parameter is enabled, a database client will be able to connect to the RDS for MariaDB instance only if it can establish an encrypted connection. 

Amazon S3 File Gateway increases the number of supported file shares per gateway from 10 to 50 file shares. Previously, a single gateway could only support up to 10 file shares. With this release, gateway admins can optimize resources, and save time and money by creating and managing up to 50 file shares from a single gateway.

Today, Amazon Elastic Container Service (Amazon ECS) launched a new console experience for all users. The new Amazon ECS console makes it easier to deploy containerized applications, and configure load balancing, networking, and monitoring. The new Amazon ECS console also provides users with new workflows for effective operations and troubleshooting.

Customers can now create file systems using Amazon Elastic File System (Amazon EFS) in the AWS Europe (Spain) Region.

Amazon Managed Workflows for Apache Airflow (MWAA) is now Payment Card Industry Data Security Standard (PCI DSS) compliant. Amazon MWAA is a managed orchestration service for Apache Airflow that makes it easier to set up and operate end-to-end data pipelines in the cloud. Customers can now use Amazon MWAA to manage workflows that store, process, and transmit information for use cases such as payment processing that are subject to PCI DSS. 

AWS CodeBuild is now available in the AWS Middle East (UAE) Region. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers. CodeBuild scales continuously and processes multiple builds concurrently, so your builds are not left waiting in a queue. You can get started quickly by using prepackaged build environments, or you can create custom build environments that use your own build tools. Using CodeBuild, you are charged by the minute for the compute resources you use.

Amazon S3 File Gateway now supports capturing, retaining, and enforcing DOS attributes listed in file metadata. Previously, files copied to the gateway were copied without this common metadata (Archive, Hidden, Read Only, and System). Support for DOS attributes is intended for users who want to hide files or folders, enforce read only access at the file or folder level, or mark files as archived once moved to Amazon S3.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Microsoft (MS) Yammer Connector to index and search messages from MS Yammer.

AWS Fault Injection Simulator (FIS) now supports higher resource quotas and quota adjustment using AWS Service Quotas. Quotas, also referred to as limits, are the maximum values for the resources, actions, and items in an AWS account. Previously, a maximum of 5 resources could be targeted by an FIS action. Now, you can adjust the maximum number of resources that some FIS fault actions can target using AWS Service Quotas. Quotas are now more granular so you can define quotas for specific combinations of FIS fault action and target resource type. For example, you can increase the number of instances which terminate from 5 to 200. Actions with increased quotas include EC2 reboot instances, EC2 stop instances, EC2 terminate instances, ECS stop task, Spot instance interruptions, and Systems Manager send command, which supports CPU stress, memory stress, IO stress, kill process, network blackhole, network latency, and network packet loss.

Amazon OpenSearch Service now lets you validate configuration changes before applying them to your clusters. With the enhanced dry run option, Amazon OpenSearch Service checks for validation errors that might occur when deploying your configuration changes and provides a summary of these errors, if any. The dry run feature will also indicate whether a blue/green deployment will be required to apply a change, so that you can plan for these changes accordingly. 

Amazon CloudWatch announces support for cross-account Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new capability you can include metrics that span across multiple AWS accounts within an AWS region in a single Metric Stream. This helps to reduce the number of streams needed to collect metrics for a common destination. 

Amazon ElastiCache for Memcached has added support for Memcached version 1.6.17. This version is a cumulative update and contains all changes and improvements from version 1.6.12 to 1.6.17.

AWS Elemental MediaTailor is now available in the Africa (Cape Town), Asia Pacific (Mumbai), and US East (Ohio) regions. You may now configure and operate MediaTailor using the console or API endpoints within these new regions.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. Today we are introducing a new service quota called Max concurrent vCPUs per account. This vCPU-based quota allows you to set the maximum number of aggregate vCPUs your applications are able to scale up to within a Region.

AWS CloudFormation announces support for CloudFormation Linter (cfn-lint) in AWS Serverless Application Model Command Line Interface (AWS SAM CLI). The cfn-lint tool validates your SAM JSON/YAML template against CloudFormation-based rules, and returns diagnostic error messages. With this launch, you can use an optional parameter —lint in sam validate command to run cfn-lint validations on your SAM JSON/YAML templates.

Starting today, customers can create SKU pricing rules in AWS Billing Conductor (ABC). An AWS SKU uniquely combines product (service code), Usage Type, and Operation for an AWS resource. Using SKU pricing rules, customers can change the rate for any resource running in their environment. For example, an AWS partner can use a SKU pricing rule to give a specific discount to their customer(s) for all c5.2xl EC2 instances running in us-east-1. Another use case could have an internal Cloud Center of Excellence team give a specific discount to their teams on EC2 (using a service-specific pricing rule for EC2) in combination with a SKU pricing rule for all EBS volumes which defaults to the public on demand rate, replicating the Savings Plans discounting method.

Today, we are excited to announce that Amazon EMR has made it 30% faster to launch an EMR on EC2 cluster in a private subnet. Customers can get the faster cluster start-up times by simply relaunching their EMR on EC2 private subnet clusters. No further action is needed.

Amazon EC2 Auto Scaling now helps you easily determine whether adding a predictive scaling policy can further optimize the capacity of your Auto Scaling groups. Predictive scaling policies proactively add EC2 instances to your Auto Scaling group in anticipation of demand spikes. This results in better availability and performance for your applications that have predictable demand patterns and long initialization times. It may also help alleviate the need for costly capacity buffers that you otherwise maintain to account for demand spikes. This new recommendation feature provides prescriptive indications about the potential impact of predictive scaling on your application availability and EC2 costs, making it simpler for you to get started with predictive scaling. 

The Amazon Chime SDK now supports up to 250 webcam video streams per WebRTC session. The Amazon Chime SDK lets developers add intelligent real-time audio, video, and screen share to their web and mobile applications. Every WebRTC attendee can enable webcam video and view any combination of up to 25 webcam video streams from other attendees.

Starting today, customers can use Amazon Elastic Block Store (EBS) direct APIs in the AWS Europe (Spain), Europe (Zurich) and Asia Pacific (Hyderabad) Regions to create EBS snapshots of their block storage data regardless of where it resides, including on-premises. 

AWS Managed Services (AMS) Accelerate Operations Plan is now available in Cape Town region. AMS helps you operate AWS efficiently and securely. It provides proactive, preventative, and detective capabilities that raise the operational bar and help reduce risk without constraining agility, allowing you to focus on innovation. AMS extends your team with operational capabilities including monitoring, incident detection and management, security, patch, backup, and cost optimization.

Amazon EC2 network performance metrics now supports a new metric to monitor available EC2 instance tracked connections, the ConnTrack Utilization metric. EC2 instance Security Groups act as stateful virtual firewalls to control incoming and outgoing traffic. These stateful firewalls track network connection information to enable return traffic to and from an instance to pass through. With this new metric customers have visibility into the number of ConnTrack entries remaining, which will allow them to proactively manage capacity and select the right instance size to meet emergent demand.

Amazon CloudWatch now provides enhanced visibility into errors in Embedded Metric Format (EMF), with two new error metrics (EMFValidationErrors & EMFParsingErrors). 

On January 17, 2023 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) versions of OpenJDK. Corretto 19.0.2, 17.0.6, 11.0.18, 8u362 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK.

Now customers can search AWS Marketplace Amazon Machine Images (AMIs) directly in the EC2 Image Builder Console and use those AMIs as base images in their image build workflows. Those AMIs can be accessed and used via the EC2 Image Builder Console, CLI, API, CloudFormation and CDK interfaces. This feature makes it easier for you to seamlessly track and integrate your AWS Marketplace AMI subscriptions in your image customization workflows.

AWS Network Firewall now supports IPv6 for dual stack subnets so you can filter IPv4 and IPv6 traffic flows to and from the public internet, on-premises network, or any endpoint in your Amazon Virtual Private Cloud (VPC). Now, you can use AWS Network Firewall to protect your IPv6 workloads on AWS.

Amazon Elastic File System (Amazon EFS) has increased the maximum number of Access Points per file system from 120 to 1,000, enabling you to control file system access permissions across a larger number of applications in multi-tenant environments.

Now deploy patch policies across AWS accounts and AWS Regions using AWS Systems Manager Patch Manager and AWS Organizations.

Today, we released two new AWS managed policies for Amazon Detective. AWS managed policies make it easier for users to gain the proper level of permissions to leverage the service for security investigations. AWS managed policies are maintained by AWS to reduce work for customers in managing access permissions for users in specific job roles. For more information on AWS managed policies, you can read AWS managed policies in the IAM User Guide.

Now customers can use EC2 Image Builder to create custom Amazon Machine Images (AMIs) that are hardened using Center for Internet Security (CIS) Benchmarks. EC2 Image Builder hosts CIS Benchmarks Level 1 for Amazon Linux 2, Red Hat Enterprise Linux (RHEL) 7, Microsoft Windows Server 2019, and Microsoft Windows Server 2022. You no longer have to manage your own custom scripts for CIS Level 1 hardening of images with these operating systems. With this feature, you can also choose to automatically update AMIs to the latest version of the CIS standards as they become available.

AWS Nitro Enclaves now supports the ability to create more than one enclave per EC2 instance. AWS Nitro Enclaves is an Amazon EC2 capability that enables customers to create isolated compute environments to further protect and securely process highly sensitive data such as personally identifiable information (PII), healthcare, financial, and intellectual property data within their EC2 instances.

Amazon Relational Database Service (Amazon RDS) has new certificate authorities with 40 year and 100 year validity. SSL/TLS certificates enable secure communication between your clients and databases.

Amazon CloudFront now supports the “Cloudfront-viewer-header-order” and "Cloudfront-viewer-header-count" headers, enabling customers to track the total number of HTTP headers sent with each request, as well as the order in which the headers were sent. Customers can use the two headers to detect and identify request patterns and compare them to the expected and legitimate patterns. This, used in conjunction with other access control rules, can help customers detect and block any attempts to spoof requests.

AWS Security Hub is now available in the Middle East (UAE) Region. You can now use Security Hub to centrally view and manage the security posture of your AWS accounts in the Middle East (UAE) Region and take advantage of 108 security controls to automatically check your security posture in the Region.

AWS Local Zones are now available in two new metro areas—Perth and Santiago. You can now use these Local Zones to deliver applications that require single-digit millisecond latency or local data processing.

Today, AWS AppConfig announces new options for customers to track and clean up stale feature flags. Previously, customers needed to build their own schedules for managing stale feature flags. Now, customers can do this through AWS AppConfig. Feature flagging is a powerful technique that allows engineering teams to change application behavior on production without pushing out new code. By using feature flags, engineers can develop new capabilities, but hide them behind a feature flag configuration. Once ready to launch, AWS AppConfig allows you to roll flags out slowly. However, a common pain point with feature flags is the management of stale or unused flags. After a feature is launched, the flag may no longer be needed and becomes stale. Stale flags add clutter to your application code and configuration, and can make debugging your application challenging. Cleaning up unused flags improves application hygiene.

Today, AWS announces the preview release of AWS Clean Rooms, a new analytics service that helps customers collaborate with their partners to more easily and securely analyze their collective datasets—without sharing or revealing underlying raw data. Instead of spending weeks or months developing clean room solutions, customers can use AWS Clean Rooms to create their own clean rooms in minutes and collaborate with any other company on the AWS Cloud to generate unique insights about advertising campaigns, investment decisions, and research and development.

AWS Lambda now supports setting Maximum Concurrency to the Amazon SQS event source. Maximum Concurrency for SQS as an event source allows customers to control the maximum concurrent invokes by the Amazon SQS event source. When multiple Amazon SQS event sources are configured to a function, customers can control the maximum concurrent invokes of individual SQS event source. 

You can now use data tiering for Amazon ElastiCache for Redis as a lower cost way to scale your clusters to up to hundreds of terabytes of capacity in the Europe (Stockholm) Region. Data tiering provides a new price-performance option for Redis workloads by utilizing lower-cost solid state drives (SSDs) in each cluster node in addition to storing data in memory. It is ideal for workloads that access up to 20% of their overall dataset regularly, and for applications that can tolerate additional latency when accessing data on SSD.

AWS Config now supports 22 more resource types for services including Amazon MQ, AWS AppConfig, AWS Cloud9, Amazon EventBridge, Amazon Fraud Detector, AWS IoT, AWS IoT Analytics, Amazon Lightsail (Virtual Server), AWS Elemental MediaPackage, Amazon Route 53 Recovery Readiness, AWS Resilience Hub, and AWS Transfer.

Today, AWS Resource Groups is launching a new feature that emits lifecycle events when resources are added or removed from your groups and when resource groups are created, updated or deleted. These events allow you to initiate automated, event driven workflows for your applications. For example, with these events you can automate initiation of common operational tasks such as installing software packages, creating backups, or creating Amazon Elastic Block Store snapshots.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Microsoft Teams Connector to index and search messages and other entities from Microsoft Teams.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Microsoft (MS) Exchange Connector to index and search emails from MS Exchange.

Starting today, AWS WAF is available in the AWS Middle East (UAE) region. This is the second region where AWS WAF is available in the Middle East, joining the AWS Middle East (Bahrain) Region and giving customers more choice and flexibility.

Today, AWS CloudFormation updates the language extension transform to support default values and additional intrinsic functions in Fn::FindInMap. Customers can use these features to minimize the size of their CloudFormation templates, and improve their readability. The language transform extends CloudFormation template language with functions such as Fn::Length, Fn::JsonToString, and more. Customers can modularize their templates into groups with different attributes in Parameters and Mappings, and use Fn::FindInMap to refer to attributes of these groups. For example, you can use Fn::FindInMap for EC2 resource type with a Mappings section containing a single map, RegionMap, that associates AMIs with AWS Regions to your EC2 instances. With these language enhancements, you can use intrinsic functions such as Fn::Split, Fn::Select, and others within Fn::FindInMap. Previously, Fn::FindInMap only supported Ref intrinsic functions. Additionally, you can define string or list type default values in Fn::FindInMap. To see the list of supported intrinsic functions and learn about Fn:FindInMap, refer to the user guide.

AWS announces the retirement of IAM actions for AWS Billing, Cost Management, and Account consoles under aws-portal service prefix, purchase-orders:ViewPurchaseOrders, and purchase-orders:ModifyPurchaseOrders and is replacing them with fine-grained service specific actions. This launch gives AWS customers more control over access to Billing, Cost Management, and Account services. These new permissions will also provide a single set of IAM actions that govern console and programmatic access to these services.

Today Amazon Pinpoint is launching a new web form experience in the Amazon Pinpoint console to help make it easier for Amazon Pinpoint and Amazon SNS customers to register SMS Sender IDs in Singapore. Customers are no longer required to create a support ticket to register Sender IDs for Singapore. A Sender ID is an alphanumeric originator that identifies the sender of an SMS message, e.g. “AMAZON”. 

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports Optimized Reads for up to 2X faster query processing compared to previous generation instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by the MariaDB server on the NVMe SSD-based block-level instance storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 2X faster with Optimized Reads on RDS for MariaDB.

Amazon SageMaker Canvas now delivers up to 3x faster machine learning (ML) model training time, enabling rapid prototyping and faster time-to-value for business outcomes. SageMaker Canvas is a visual interface that enables business analysts to generate accurate ML predictions on their own — without requiring any machine learning experience or having to write a single line of code. 

Starting today, the Amazon Elastic Compute Cloud (Amazon EC2) G5g instances powered by AWS Graviton2 processors and featuring NVIDIA T4G Tensor Core GPUs are now available in Europe (Frankfurt). G5g instances can be used for a wide range of graphics intensive and machine learning use cases. They provide the best price performance in Amazon EC2 for Android game streaming use-cases. With G5g instances, developers can run Android games natively, encode the rendered graphics, and stream the game over network to end user devices. This helps simplify development effort and can lower the hourly cost per stream by up to 30% compared to G4dn instances. G5g instances are also ideal for machine learning developers who are looking for cost-effective inference, have ML models that are sensitive to CPU performance, and leverage NVIDIA’s AI libraries. Embedded developers using Arm-based compute with GPU acceleration can also leverage G5g instances to scale their CI/CD and simulation workloads in the cloud.

Amazon Relational Database Service (Amazon RDS) now supports restoring database (DB) snapshots taken from Amazon RDS Multi-AZ deployments with two readable standbys to Amazon RDS Single-AZ DB instances and Amazon RDS Multi-AZ DB instances with one standby. You can now use the DB snapshot restore capability to create new MySQL or PostgreSQL DB instances for your development or test environments.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the new Amazon Kendra Google Drive Connector to index and search documents from Google Drive.

We are excited to announce the general availability of Amazon Route 53 Application Recovery Controller zonal shift which helps you quickly recover from application failures in an AWS Availability Zone (AZ). You can now shift application traffic away from using an AZ with a single action for multi-AZ resources with support of Application Load Balancer and Network Load Balancer. This will help you quickly recover an unhealthy application in an AZ, and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures.

Today we are announcing support for tags in IAM policies to allow granular control over access to Amazon Personalize resources and operations. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. Tags are labels in the form of key-value pairs that can be attached to individual Amazon Personalize resources to manage resources, or allocate costs. With this launch, customers can also perform tag based access control for Amazon Personalize resources and operations such as modify, update or delete. For example, you can limit access to delete or update operations to specific individuals to avoid any accidental impact to your production environment. This functionality also allows customers with multi-tenant deployments to partition access to resources across their end customers. This functionality is available for several Amazon Personalize resources such as dataset groups, solutions, campaigns, recommenders, import jobs, batch inference, batch segment jobs and other resources. 

Today, Amazon Personalize is excited to announce a new Trending-Now recipe that will help customers recommend items gaining popularity at the fastest pace among their users. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. User interests can change based on a variety of factors, such as external events or the interests of other users. It is critical for customers to tailor their recommendations to these changing interests to improve user engagement. With Trending-Now, you can surface items from your catalogue that are rising in popularity faster than other items, such as breaking news articles, popular social content or newly released movies. Amazon Personalize looks for items that are rising in popularity at a faster rate than other catalogue items to help provide an engaging experience. Amazon Personalize also allows customers to define the frequency at which it identifies trending items, with options for refreshing recommendations every 30 mins, 1 hour, 3 hours or 1 day, based on the most recent interactions data from users.

AWS CloudShell is now a Health Insurance Portability and Accountability Act (HIPAA) eligible service. If you have an executed Business Associate Addendum (BAA) with AWS, you can now use AWS CloudShell for workloads that are subject to HIPAA compliance.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra S3 Connector to index and search documents from S3 hosted in their VPC. 

AWS Transit Gateway is now available in the Middle East (UAE) AWS Region. AWS Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway.

Amazon Location Service adds a new data source in Southeast Asia, GrabMaps, offering maps, search, and routing. Developers building applications in Southeast Asia can display their data on local up-to-date maps, use search boxes to locate end-user addresses and points of interest, and calculate routes using real-time traffic conditions.

AWS Network Firewall now supports reject as a firewall rule action so you can improve performance of latency-sensitive applications and improve internal security operations.

Amazon S3 Storage Lens now offers lower pricing tiers for customers with 25 billion or more objects, making continuous monitoring of large storage footprints more cost effective. Customers with hundreds of billions of objects will now see progressively lower prices, saving up to 40% on organization-wide storage monitoring.

Amazon Kendra is an intelligent search service powered by machine learning, that enables organizations to provide more relevant information to customers and employees, when they need it.

You can now use AWS Elemental MediaLive with a POIS (placement opportunity information system) to condition and react to in-band SCTE-35 signals in your sources.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. Today, we are excited to announce that EMR Serverless now allows you to customize images for Apache Spark and Hive. This means that you can package application dependencies or custom code in the image, simplifying running Spark and Hive workloads.

Amazon EC2 Auto Scaling now produces predictive scaling policy forecasts 4x per day, up from 1x per day prior to now. Reducing our forecast interval from 24 hours to 6 hours produces more accurate predictive scaling policies that quickly adapt to changing demand trends. All customers will benefit from this new default for predictive scaling. Customers use predictive scaling policies to scale out the capacity of their Auto Scaling groups based on forecasted demand, improving application availability, and alleviating the need for costly capacity buffers to accommodate spikes in demand.

AWS App Runner now supports retrieving secrets and configuration data stored in AWS Secrets Manager and AWS Systems Manager (SSM) Parameter Store in an App Runner service as runtime environment variables. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without managing infrastructure. Many web applications and APIs access sensitive information such as database credentials and API keys to connect to downstream systems. Some developers prefer to decouple the management of sensitive information from application code to improve code re-usability and reduce operational overhead of updating and re-building application code to update secrets and configuration data. Now, you can securely reference secrets and configuration data stored in Secrets Manager and SSM Parameter Store as runtime environment variables in your App Runner service. This allows you to manage your sensitive information separate from the application code and service configuration, helping you enhance the security posture of applications running on App Runner.

You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the Middle East (UAE) Region.

AWS released a newer version of Elastic Fabric Adapter (EFA) Installer (v1.21). This version introduces support for the Rocky Linux v9.0 and OpenSUSE Leap 15.4 operating systems. Support for Rocky Linux 9.0 is being requested by customers who deploy High Performance Computing applications as well as customers of AWS Elemental. Starting with EFA Installer v1.21, OpenSUSE Leap 15.4 will also be supported.

You can now create Apache Airflow version 2.4 environments on Amazon Managed Workflows for Apache Airflow (MWAA) with Python 3.10 support.

Amazon S3 now automatically applies S3 managed server-side encryption (SSE-S3) as a base level of encryption to all new objects added to S3, at no additional cost and with no impact on performance. SSE-S3 uses 256-bit Advanced Encryption Standard and has been configured for trillions of objects by customers. This new base level of encryption helps customers meet their encryption requirements, with no changes to applications. Alternatively, customers can still choose to update this default configuration using customer-provided encryption keys (SSE-C) or AWS Key Management Service keys (SSE-KMS).

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R6g instances are available in AWS Region Asia Pacific (Osaka). R6gd instances are available in AWS Regions Asia Pacific (Osaka), Asia Pacific (Seoul) and Europe (Stockholm). M6gd instances are available in AWS Regions Asia Pacific (Osaka) and Africa (Cape Town). These instances are powered by AWS Graviton2 processors, and they are built on AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. R6g instances are built for running memory-intensive workloads such as open-source databases, in-memory caches, and real time big data analytics. R6gd instances provide local SSD storage and are ideal for memory-intensive workloads that need access to high-speed, low latency storage. M6gd offer a balance of compute, memory, networking, and local SSD resources for a broad set of workloads. They are built for applications such as application servers, microservices, gaming servers, mid-size data stores, and caching fleets that also need access to high-speed, low latency storage.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R6i instances are available in AWS Region Asia Pacific (Osaka), Middle East (Bahrain), and Africa (Cape Town). R6i instances are powered by 3rd generation Intel Xeon Scalable processors, with an all-core turbo frequency of 3.5 GHz. These instances come with always-on memory encryption using Intel Total Memory Encryption (TME) and are built on AWS Nitro System. The AWS Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. R6i instances are SAP Certified and are built for workloads such as SQL and NoSQL databases, distributed web scale in-memory caches (Memcached and Redis), in-memory databases (SAP HANA), and real time big data analytics (Apache Hadoop and Apache Spark clusters).

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6in and M6idn instances are available in AWS Region US West (Oregon). These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors, deliver up to 200Gbps network bandwidth, 2x more network bandwidth and up to 2x higher packet-processing performance over comparable fifth-generation instances. They are built on AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. Customers can use M6in and M6idn instances to scale the performance and throughput of network-intensive workloads such as high-performance file systems, distributed web scale in-memory caches, caching fleets, real-time big data analytics, and Telco applications such as 5G User Plane Function (UPF).

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C5n instances are available in AWS Region Asia Pacific (Osaka). C5n instances, powered by 3.0 GHz Intel® Xeon® Scalable processors (Skylake) and based on the AWS Nitro System, offer customers up to 100Gbps networking for network-bound workloads, while continuing to take advantage of the security, scalability and reliability of Amazon’s Virtual Private Cloud (VPC). Customers can also take advantage of C5n instances network performance to accelerate data transfer to and from S3, reducing the data ingestion wait time for applications and speeding up delivery of results. They are built for workloads such as High Performance Computing (HPC), analytics, machine learning, Big Data and data lake applications.

Application Auto Scaling now offers customers more visibility about the scaling decisions it takes for an auto scaled resource. Application Auto Scaling (AAS) is a service that offers standardized experience across 13 different AWS services beyond Amazon EC2, for example Amazon DynamoDB provisioned read and write capacity, and Amazon Elastic Container Service (ECS) services. Application Auto Scaling takes scaling actions based on the customer-defined scaling policies that act as a guideline for scaling decisions. Until now, customers only got details about successful and not about deferred scaling actions. With this feature, customers get more insights about scaling decisions that do not lead to a scaling action in both descriptive and machine-readable format.

Amazon Kinesis Data Streams for Amazon DynamoDB is now available in 11 additional AWS Regions around the world. With Amazon Kinesis Data Streams, you can capture item-level changes in your DynamoDB tables as a Kinesis data stream with a single click in the DynamoDB console, or by using the AWS API, CLI or CloudFormation templates.

Amazon Aurora MySQL Version 3 (Compatible with MySQL 8.0) now offers support for Backtrack. Backtrack allows you to move your database to a prior point in time without needing to restore from a backup, and it completes within seconds, even for large databases.

AWS Glue Studio Job Notebooks provide interactive job authoring in AWS Glue, which helps simplify the process of developing data integration jobs. Job Notebooks also provide a serverless, built-in interface for AWS Glue Interactive Sessions, a feature of AWS Glue that allows customers to run interactive Apache Spark workloads on demand.

Starting today, Amazon CloudWatch Logs is removing the 5 requests per second log stream quota when calling Amazon CloudWatch Logs PutLogEvents API. There will be no new per log stream quota. With this change we have removed the need for splitting your log ingestion across multiple log streams to prevent log stream throttling.

Amazon SageMaker is now available in Middle East (UAE) Region. Starting today, you can build, train, and deploy machine learning (ML) models in the region.

Today, the Matter PKI Compliance Customer Guide for AWS Private Certificate Authority (AWS Private CA) is avaliable on AWS Artifact. This Guide provides information about how you can use AWS Private CA to help you create and operate Matter-compliant Certificate Authorities (CAs). Matter is a new smart home connectivity standard, governed by the Connectivity Standard Alliance, that allows smart home devices from different vendors to work together. For smart home devices to be Matter-compliant, manufacturers are required to certify these devices and provision them with Device Attestation Certificates (DACs).

Amazon Relational Database Service (Amazon RDS) Performance Insights is now available in AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions. Amazon RDS Performance Insights is a database performance tuning and monitoring feature of RDS and Aurora that helps you quickly assess the load on your database and determine when and where to take action.

Today, Amazon Neptune announced a new open-source low-code visual exploration tool, the graph-explorer, that is available under the Apache-2.0 license. With this launch, customers can effortlessly browse either labeled property graphs (LPG) or Resource Description Framework (RDF) data in a graph database and discover connections between data without having to write graph queries. 

Amazon CloudFront now supports the removal of response headers using response header policies, giving customers a native capability to remove specified headers served from CloudFront. This new capability, along with the existing ability to add and override headers, provides comprehensive flexibility for customers to customize response headers.