February 2023

Today, AWS Private Certificate Authority (Private CA) released sample AWS Cloud Development Kit (CDK) scripts and AWS CloudFormation stack templates to help you create Certificate Authorites (CAs) that issue Matter Device Attestation Certificates (DACs). Matter is a new standard for smart home security and device interoperability. Matter uses X.509 digital certificates to identify devices. Matter certificates can be issued only by CAs that comply with the Matter PKI Certificate Policy (CP). You can use the AWS CDK and CloudFormation samples to help you configure Matter-compliant CAs. The samples not only construct the CA, but they also create the configuration and auditing infrastructure needed to help you comply with the Matter PKI CP. This includes AWS Identity and Access Management (IAM) roles & permissions, log configuration & retention policies. 

Today, we launched Autocomplete suggestions for AWS Marketplace search. With this feature, users that visit the AWS Marketplace website or console would get search suggestions within the search bar as they type. User queries show up as bolded prefixes within the Autocomplete suggestions which they can select to complete their query and see the results on the main results page. The suggestions are sorted by relevance and tells what’s available, how to spell difficult terms, and what others are searching for.

Amazon Inspector now supports code scanning of Lambda functions, expanding the existing capability to scan Lambda functions and associated layers for software vulnerabilities in application package dependencies. With this expanded capability, Amazon Inspector now also scans the custom proprietary application code within a Lambda function for code security vulnerabilities such as injection flaws, data leaks, weak cryptography, or missing encryption based on AWS security best practices. When code vulnerabilities are identified in the Lambda function or layer, Inspector generates actionable security findings along with impacted code snippets and remediation guidance. All findings are aggregated in the Amazon Inspector console, routed to AWS Security Hub, and pushed to Amazon EventBridge to automate workflows.

Today, we are excited to announce our v1.12.1 AWS SimSpace Weaver app SDK update. This update enables support for AWS IAM Identity Center (successor to AWS Single Sign-On) and the ability to use temporary credentials to start, stop, and manage simulations. AWS SimSpace Weaver is a fully managed compute service that helps customers deploy large spatial simulations in the cloud. Launched this past re:Invent, SimSpace Weaver allows customers to create seamless virtual worlds with millions of objects that can interact with one another in real time without ever worrying about managing the back-end infrastructure.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.12, 10.5.19, 10.4.28 and 10.3.38. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

AWS Lambda Powertools, an open-source developer library, now supports .NET to help you incorporate Well-Architected Serverless best practices into your .NET Lambda function code as early and as fast as possible.

Amazon Redshift now supports new SQL functionalities including ROLLUP, CUBE, and GROUPING SETS, to simplify building multi-dimensional analytics applications. ROLLUP, CUBE, and GROUPING SETS simplifies data warehouse migrations by offering the commonly used syntax across databases. 

Today we are announcing the availability of VMware Cloud on AWS in the AWS Bahrain region. This marks the 23rd AWS region to offer VMware Cloud on AWS, providing customers with a faster and more efficient way to migrate their VMware-based workloads to the cloud.

Today, AWS announces the general availability of FLAC audio and animated GIF video input sources for AWS Elemental MediaConvert. These new input formats are compatible with all MediaConvert outputs. For example, you can convert lossless FLAC files into compressed audio formats like AAC, MP3, and Ogg Vorbis, or use FLAC files as sidecar audio sources to be joined with video files. Animated GIF inputs can be converted into higher-efficiency video streaming codecs like AVC and HEVC and distributed as standalone MP4 files or adaptive-bitrate streaming packages such as HLS or DASH.

AWS Lambda now supports Amazon DocumentDB change streams as an event source. The change streams feature in Amazon DocumentDB (with MongoDB compatibility) provides a time-ordered sequence of change events that occur within your cluster’s collections. Customers can now consume these events in their serverless applications built on Lambda.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest major version PostgreSQL 15. New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. The PostgreSQL 15 release also adds support for new extension pg_walinspect, and server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup.  Please refer to the PostgreSQL community announcement for more details about the release.

The AWS Serverless Application Model (SAM) Command Line Interface (CLI) now announces the preview of sam build support for building and packaging serverless applications developed in Rust. The AWS SAM CLI is a developer tool that makes it easier to build, test, package, and deploy serverless applications. Developers building serverless applications with Rust used cargo-lambda to build their applications, but cargo-lambda wasn't supported within the SAM CLI build workflow.. Starting today, you can use cargo-lambda in the SAM CLI build workflow for your Rust applications.

Amazon Elastic Container Services (Amazon ECS) now enables customers to delete inactive task definition revisions programmatically or via the Amazon ECS console. With this new capability, customers can permanently delete task definition revisions that are no longer needed or contain undesirable configurations, simplifying their resource management and improving security posture.

Amazon SageMaker Autopilot, a low-code machine learning (ML) service which automatically builds, trains and tunes the best ML models based on your data, now supports selection of underlying training algorithms while creating an Autopilot experiment. The ability to select algorithms provides you the flexibility to customize your AutoML journey and complete experiments much faster.

AWS Service Catalog customers can now disassociate and delete their AWS Service Catalog products in one-action, making it easier to update and manage their catalog of AWS resources.

Today, AWS announces the general availability of Amazon CloudWatch Internet Monitor, a feature of Amazon CloudWatch that helps you monitor internet availability and performance metrics between your AWS-hosted applications and application end users.

AWS Lake Formation is a service that makes it simple to set up a secure data lake in days. A data lake is a centralized, curated, and secure repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better decisions.

Amazon Aurora Serverless v1 now allows you to select a specific window for scheduling a maintenance event. You can use the maintenance window to specify, for example, when your PostgreSQL 10 cluster gets upgraded to PostgreSQL 11. You can set the maintenance window with just a few clicks in the AWS Management Console or using the latest AWS SDK or CLI. Review the Aurora documentation to learn more. 

Serverless application developers can now define multiple destinations when integrating AWS services with AWS Serverless Application Model (AWS SAM) connectors. Previously, SAM customers needed to create a SAM connector definition for every source and destination pair. For example, if a AWS::Serverless::Function needed to interact with three SNS topics using identical permissions, three SAM connectors would need to be defined for each connection from the function to each topic. 

AWS App Runner now supports AWS web application firewall (WAF). AWS WAF gives you control over what traffic reaches your web applications or APIs depending upon your security and business needs. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without managing infrastructure. Now, you can strengthen the security posture of your web applications against web exploits and bots while benefiting from the simplicity and scalability offered by App Runner. You can place a security layer in form of WAF web access control lists (web ACLs) in front of your App Runner service endpoint to allow, block, or monitor web requests to your applications on the basis of predefined rules such as IP addresses, HTTP headers, HTTP body, URI strings, SQL injection, and cross-site scripting.

AWS Glue Crawlers now integrate with AWS Lake Formation, simplifying crawler setup, and supporting centralized permissions for in-account and cross-account crawling of AWS S3 data lakes.  

AWS announces the availability of a new Controls view and Consolidated Control Findings in AWS Security Hub. The new controls page shows all security controls in one place, along with their compliance status and a summary of passed and failed security checks. You can use this view to identify misconfigurations based on severity and number of failed resources, to improve your overall security score, and to configure each control across all standards in a single action. This release also includes a matching set of APIs to obtain, list, and update security controls across all your security standards.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7g instances are available in AWS Region Europe (Frankfurt), AWS Region Asia Pacific (Sydney) and AWS Region Asia Pacific (Tokyo). C7g instances are powered by AWS Graviton3 processors and built on the AWS Nitro System. AWS Graviton3 processors provide up to 25% better compute performance compared to AWS Graviton2 processors. The AWS Nitro System is a collection of AWS designed hardware and software innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. C7g instances are built for workloads including batch processing, ad serving, video encoding, gaming, scientific modelling, data analytics, and CPU-based artificial intelligence and machine learning (AI/ML) inference.

AWS Security Hub has released 7 new controls for its AWS Foundational Security Best Practice standard (FSBP) to enhance your cloud security posture management (CSPM). These controls conduct fully-automatic checks against security best practices for Amazon ElastiCache. If you have Security Hub set to automatically turn on new controls and are already using AWS Foundational Security Best Practices, these new controls will run without having to take any additional action.

Amazon CloudWatch Real User Monitoring (RUM) adds the ability for customers to define custom metrics that will be sent to CloudWatch Metrics. Customers can define metrics based on data in customer-defined events (Custom Events), pre-defined RUM events and customer- defined metadata attributes (Custom Attributes). The customer-defined metrics gives customers flexibility to monitor specific parts of their application, troubleshoot end user impacting issues unique to their application, and get alerted for anomalies. For example, a customer could define a metric on the number of dropped calls in a video application sending customer defined events that capture details like call duration, wi-fi or cellular network, network bandwidth etc of a dropped call.

AWS Systems Manager for SAP is now generally available, with initial support for backing up SAP HANA databases using AWS Backup.

AWS Transit Gateway is now available in the Europe (Zurich) AWS Region. AWS Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway.

Amazon Forecast now supports holidays from 251 countries as a built-in featurization, improving the accuracy of your Forecast. Amazon Forecast uses machine learning (ML) to generate more accurate demand forecasts with just a few clicks, without requiring any prior ML experience.

AWS Resilience Hub has added application change capabilities and new APIs to streamline and simplify use of the service and improve the precision of its recommendations. Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions.

We are excited to announce that Amazon EMR on EKS is now available in AWS GovCloud (US-East, US-West) Regions. These regions are in addition to the existing Asia Pacific (Beijing, Mumbai, Ningxia, Seoul, Singapore, Tokyo), Australia (Sydney), Canada (Central), Europe (Frankfurt, Ireland, London, Paris, Stockholm), South America (São Paulo) and US (Northern California, N. Virginia, Ohio, Oregon) regions.

Starting today Amazon Relational Database Service (Amazon RDS) for MySQL supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary AWS Region to a secondary AWS Region. 

Starting today Amazon Relational Database Service (Amazon RDS) for MariaDB supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary AWS Region to a secondary AWS Region. 

Starting today, Amazon Compute Cloud (Amazon EC2) C6in, M6in, M6idn, R6in, and R6idn instances are available in Asia Pacific (Singapore), Asia Pacific (Tokyo), and AWS GovCloud (US-West) regions. These instances are powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of up to 3.5 GHz. They are the first x86-based Amazon EC2 instances to offer up to 200 Gbps network bandwidth, and 2x higher packet performance over comparable fifth-generation instances. 

Amazon Lex is a service for building conversational interfaces into any application using voice and text. With Amazon Lex, you can quickly and easily build conversational bots (chatbots), virtual agents, and interactive voice response (IVR) systems. Amazon Lex is further enhancing the developer experience by providing eight pre-built bot templates, containing 50+ intents, that can be deployed in minutes. 

Amazon Elastic Container Services (Amazon ECS) has increased the “Tasks in PROVISIONING state per cluster“ service quota to deliver a faster Cluster Auto Scaling experience. Customers who need to launch a large number of tasks (>300) in their Amazon ECS clusters will now see their cluster infrastructure scale faster.

You can now use AWS CloudFormation templates to create and manage AWS Transfer Family resources for AS2 including servers, connectors, partner profiles, and certificates. AWS CloudFormation makes it easy to configure the entire stack of AS2 resources required to initiate and test an end-to-end AS2 message exchange. Additionally, you can now access Amazon CloudWatch metrics for AS2, such as number of successful and failed AS2 messages, in the AWS Transfer Family Management Console. These metrics enable you to more effectively monitor your AS2 activity using a centralized dashboard.

AWS Transfer Family now allows you to send Applicability Statement 2 (AS2) messages using HTTPS. AS2 offers security features like encryption and non-repudiation by default. With the ability to send AS2 messages over HTTPS, you can now benefit from an additional layer of in-transit encryption for your most sensitive EDI payloads and further compatibility with trading partners that require SSL/TLS communications.

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics NodeJS runtime version 3.9. This update updates dependency packages and addresses the planned deprecation of Synthetics NodeJS runtime versions 3.5, 3.6, 3.7, and 3.8.

Starting today, Amazon EC2 Hpc6id instances are available in additional AWS Region Europe (Stockholm). These instances are optimized to efficiently run memory bandwidth-bound, data-intensive high performance computing (HPC) workloads, such as finite element analysis and seismic reservoir simulations. With EC2 Hpc6id instances, you can lower the cost of your HPC workloads while taking advantage of the elasticity and scalability of AWS.

Today, Amazon Fraud Detector (AFD) announced the launch of Smart Data Validation, a new feature which helps customers streamline their data preparation process for a successful batch import. Smart Data Validation helps customers save time and resources by validating data at the time of import. This new feature reduces the time to validate and fix customer’s data from days to minutes.

Amazon QuickSight now enables you to add role-based access policies to QuickSight data sources that connect to Amazon S3 and Amazon Athena. With this launch of the Run-as IAM Role for S3 and Athena, QuickSight account administrators will be able to provide an IAM Role to individual S3 or Athena data sources in their QuickSight account, rather than enabling account-wide access to connect from QuickSight to S3 or Athena.

Amazon Detective now supports the ability to export data from Summary page panels and search results in comma-separated values (CSV) format. You can use this new capability to export data from the Detective management console and enrich your security investigations by manipulating the data using other AWS services, third-party applications, or spreadsheet programs that support CSV import.

AWS App Runner now redirects incoming HTTP based requests to an App Runner service endpoint to HTTPS. Until now, incoming requests to an HTTP endpoint failed with timeout status response. Now, you can use both HTTP and HTTPS endpoints from your client to access your application running on App Runner. App Runner will redirect the incoming request to an HTTPS endpoint with 301 “Moved Permanently” status code. You do not need to make any configuration change to your App Runner service to enable HTTP to HTTPS redirect.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle, a managed database services for legacy, custom, and packaged applications that require access to the underlying operating system and database environment, is now available in the AWS Regions of Canada (Central) and South America (São Paulo).

Kubernetes 1.25 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.25. Starting today, you can create new 1.25 clusters or upgrade your existing clusters to 1.25 using the Amazon EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

AWS Lake Formation is a service that allows you to set up a secure data lake in days. A data lake is a centralized curated, and secured repository that stores all your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better business decisions.

AWS announces the general availability of AWS Telco Network Builder to help communications service providers (CSPs) automate the deployment and management of telco networks on AWS. CSPs want to take advantage of the cost efficiencies, agility, and elasticity of the cloud, but it’s complicated to map traditional network requirements to a cloud environment. To set up a large network, you need to deploy hundreds of compute, storage, and networking components on AWS across thousands of locations. You also need to set up and maintain secure networking between locations, then manage and scale ongoing network operations.

You can now launch and configure Amazon SageMaker Model Monitor from the SageMaker Model Dashboard using a code-free point and click set-up experience. Amazon SageMaker Model Dashboard gives you unified monitoring across to all your models by providing insights into deviations from expected behavior, automated alerts, and troubleshooting to improve model performance. After models are deployed in production, data in the real-world may deviate over time from the data that was used to train the model, which may eventually lead to lower model accuracy. For example, changes in macro-economic conditions such as interest rates could impact the quality of model used to predict housing prices. Model Monitor can detect drift in data quality, model quality, bias, and feature attribution, and alert you to take remedial actions when such changes occur. 

Amazon Relational Database Service (Amazon RDS) for Oracle now supports early notifications of Auto minor Version Upgrades (AmVU) for instances via Pending Maintenance Actions (PMA), enhancing usability of AmVU. 

Torn Write Prevention (TWP) is a feature that ensures 16KiB write operations are not torn in the event of operating system crashes or power loss during write transactions. Starting today, this feature is available for AWS customers using instance store on AWS Nitro SSD based EC2 Im4gn and Is4gen storage optimized instances, and in additional Amazon Elastic Block Store (EBS) regions, a block storage service, when attached to all EC2 Nitro-based instances.

Amazon OpenSearch Service now lets you schedule service software and auto-tune updates during off-peak hours, helping you plan deployments to your domain better. In addition, with improved notifications through EventBridge events, and notifications on the OpenSearch Service console, you have better visibility of scheduled updates, when the updates start, and complete.

Amazon Kinesis Data Analytics makes it easier to transform and analyze streaming data in real time with Apache Flink. Apache Flink is an open source framework and engine for processing data streams. Amazon Kinesis Data Analytics reduces the complexity of building and managing Apache Flink applications. Amazon Kinesis Data Analytics for Apache Flink integrates with Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Kinesis Data Streams, Amazon Opensearch Service, Amazon DynamoDB streams, Amazon Simple Storage Service (Amazon S3), custom integrations, and more using built-in connectors. You can learn more about Amazon Kinesis Data Analytics for Apache Flink here.

You can now use AWS PrivateLink to privately access Amazon Connect Cases from your Amazon Virtual Private Cloud (Amazon VPC) without using public IPs, and without requiring the public internet.

Amazon Connect Cases can now be used by Amazon Connect customers in the Europe (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), and Europe (London) AWS regions.

AWS ParallelCluster 3.5 is now generally available and expands your choices and flexibility by adding the graphical user interface for AWS ParallelCluster to help you set up, monitor, and manage High Performance Computing (HPC) clusters on AWS. Other important features in this release include:

• Enhancements designed to improve visibility for cluster errors during compute node bootstrap, execution of pre and post install script
• Enhancements designed to improve reliability for compute node reboot
• Support of long cluster names up to 40 characters
• Programmatic interface you can use to access AWS ParallelCluster via a Python library
  

You can now learn to use Amazon Detective with a new self-paced workshop in AWS Workshop Studio. AWS Workshop Studio is a collection of self-paced tutorials designed to teach practical skills and techniques to solve business problems. Amazon Detective Workshop is designed to teach you how to use the primary features of Detective through a series of interactive modules that cover topics such as security alert triage, security incident investigation, and threat hunting. Together with an updated Amazon GuardDuty Workshop, you can learn how to identify security findings and more quickly analyze and determine the nature and extent of those security issues.

Amazon Connect now provides the ability for contact center administrators to apply granular access permissions to real-time metrics available in the Amazon Connect UI using resource tagging and tag-based access controls. This new capability enables customers to define who is able to see real-time metrics for specific users, queues, and routing profiles. For example, you can tag users with Team:Compliance and then only enable the Compliance team manager to see real-time metrics for these users.

AWS Systems Manager customers now have the option to enable Systems Manager, and configure permissions for all EC2 instances in an account, with a single action using Default Host Management Configuration (DHMC). This feature provides a method to help ensure core Systems Manager capabilities such as Patch Manager, Session Manager, and Inventory are available for all new and existing instances in an account. DHMC is ideal for all EC2 users, and offers a simple, scalable process to standardize the availability of System Manager tools for users who manage a large number of instances.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c.

Amazon CloudWatch Logs Insights has increased the log group quota from 20 to 50, increased query timeouts from 15 minutes to 60 minutes, and increased query concurrency quota from 20 to 30. By increasing the queried log groups’ quotas from 20 to 50, customers can now select up to 50 log groups in a single query. With the increased query timeout from 15 mins to 60 mins, customers can successfully execute long-running queries. With increased concurrency from 20 to 30, customers can now run 30 queries parallel. The increases across log group limits, timeouts and concurrency provides an even powerful customer experience to troubleshoot better as customers can efficiently and effectively query on log data in Amazon CloudWatch Logs. The quota increase is supported for both single and cross-account queries.

With the general availability of Amazon Data Lifecycle Manager in the AWS Europe (Spain) and AWS Europe (Zurich) Regions, customers in those regions can now automate the creation, sharing, copying and retention of Amazon EBS Snapshots and EBS-backed AMIs via policies. Data Lifecycle Manager eliminates the need for complicated custom scripts to manage your EBS resources, saving you time and money.

AWS Step Functions expands its AWS SDK integrations with support for 35 additional AWS services including Amazon EMR Serverless, AWS Clean Rooms, AWS IoT Fleetwise and AWS IoT Roborunner.

AWS App Runner now adds service level metrics for CPU utilization, Compute Memory utilization, and the total number of concurrent requests served by the App Runner service in the App Runner console and Amazon CloudWatch. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without managing infrastructure. Earlier, you could only view the CPU and memory utilization at application instance level. Now, you can view all these metrics at your App Runner service level. You can use these metrics to optimize your App Runner service’s auto-scaling configuration by analyzing the CPU and Memory utilization for the concurrent requests served by your service.

AWS Incident Detection and Response now supports ingestion of events from New Relic via Amazon EventBridge. AWS Incident Detection and Response offers AWS Enterprise Support customers proactive monitoring and incident management for their selected workloads to help improve operations, increase workload resiliency, and accelerate recovery from critical incidents. Now when your New Relic Workflow creates an event, AWS Incident Detection and Response is notified of this event and starts the response process. You maintain control of the event details you share with AWS Incident Detection and Response. This launch extends the supported event sources for AWS Incident Detection and Response.

Amazon Pinpoint now helps customers determine the amount spent for SMS and voice activity during the current month by providing visibility to SMS and voice spend metrics through the Amazon CloudWatch console. Amazon CloudWatch is a monitoring service for AWS cloud resources that you can use to collect and track metrics, collect and monitor log files, and set alarms. With Amazon CloudWatch, users can view their Amazon Pinpoint month to date SMS or voice spend metrics, as well as analyze historical trends.

AWS Control Tower now provides you with the ability to trace a customization request through the entire AWS Control Tower Account Factory for Terraform (AFT) workflow. With AFT, Terraform customers can automate the creation of fully functional accounts that grant them access to all the resources they need to be productive. This feature enhancement allows customers to track where their customizations are in the pipeline and enables them to identify and troubleshoot issues more easily.

AWS WAF Captcha helps block unwanted bot traffic by requiring users to successfully complete challenges before their web requests are allowed to reach AWS WAF-protected resources. WAF Captcha challenges are simple for humans while remaining effective against bots. Starting today, AWS WAF Captcha is adding ten additional languages - Arabic, German, Spanish, French, Italian, Dutch, Japanese, Portuguese, Turkish, and Chinese (simplified) - and is designed to meet WCAG accessibility requirements. AWS WAF Captcha uses the client browser language settings to select the language of the challenge, so there is no additional configuration needed. In addition, you will see a new option to change the Captcha page language, if needed.

Amazon Managed Grafana now supports inbound network access control that helps you to restrict user access to your Grafana workspaces. Amazon Managed Grafana is a fully managed service for Grafana, a popular open-source analytics platform that enables you to query, visualize, and alert on your metrics, logs, and traces. With this launch, you have granular security controls over the rollout of Grafana workspaces by defining customer-managed prefix lists and VPC endpoints to help you restrict the inbound network traffic that can reach your Grafana workspaces. 

Amazon MQ now supports the AWS Key Management Service (AWS KMS) to create and manage keys for at-rest encryption of customer data for RabbitMQ brokers. Amazon MQ handles the encryption and decryption seamlessly, so you don’t have to change your applications to access your data. When you create a broker, you can now select the KMS key used to encrypt your data from the following three options: a KMS key in the Amazon MQ service account, a KMS key in your account that Amazon MQ creates and manages, or a KMS key in your account that you create and manage. In addition to encryption at rest, all data transferred between Amazon MQ and client applications is securely transmitted using TLS/SSL.

Starting today, memory optimized Amazon EC2 X2iedn instances are available in Asia-Pacific(Osaka) region. X2iedn instances are powered by 3rd generation Intel Xeon Scalable Processors and delivers improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1e instances. X2iedn instances have a memory to vCPU ratio of 32:1 and are great fit for memory-intensive workloads such as databases and analytics, and big data processing engines. X2iedn instances are SAP-certified for running Business Suite on HANA, SAP S/4HANA, Data Mart Solutions on HANA, Business Warehouse on HANA, SAP BW/4HANA, and SAP NetWeaver workloads on any database. You can view the certification data for X2iedn on the Certified and Supported SAP HANA Hardware Directory.

AWS WAF Fraud Control - Account Takeover Protection (ATP) can now inspect origin responses, giving customers additional protection against brute force and credential stuffing attacks on their login pages. Until today, ATP rules were limited to inspecting incoming login requests against a stolen credentials database, analyzing requests seen over time for username and password traversals, and then aggregating this data based on unique identifiers, such as IP address or session ID. With this release, ATP managed rules can now also inspect application response data and block login attempts based on customer-defined login failure conditions. This capability helps to protect against brute force attacks involving non-compromised credentials.

Customers can now create file systems using Amazon Elastic File System (Amazon EFS) in the AWS Asia Pacific (Hyderabad) Region.

Amazon Cognito identity pools now publishes data events to AWS CloudTrail logs. Customers now have greater visibility into access-related activities for both guest and authenticated users of their applications. Administrators can now configure Amazon CloudWatch Alarms to monitor specific activity on Amazon Cognito identity pools and react based on automated workflows. Customers can record data events in AWS CloudTrail and gain better insight into the identity providers leveraged by users to access AWS resources with Amazon Cognito identity pools. AWS CloudTrail may charge for recording data events. 

AWS Resource Access Manager (AWS RAM) now supports higher default quotas to help you scale your resource sharing. AWS RAM helps you securely share your resources across AWS accounts, within your organization or organizational units (OUs), and with AWS Identity and Access Management (IAM) roles and users for supported resource types. For each AWS Region in an account, you can now share up to 25,000 resources and share resources with up to 25,000 principals. Additionally, you can create up to 25,000 resource shares per AWS Region in an account. For each individual resource share, you can share up to 5,000 resources and share resources with up to 5,000 principals.

The AWS Trusted Advisor fault tolerance check for Amazon ElastiCache for Redis is now generally available in 14 additional regions: AWS GovCloud (US-West), AWS GovCloud (US-East), Africa (Cape Town), Asia Pacific (Hong Kong), Asia Pacific (Melbourne), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Europe (Milan), Europe (Spain), Europe (Zurich), Middle East (Bahrain), Middle East (UAE), China (Beijing, operated by Sinnet), and China (Ningxia, operated by NWCD). With this launch, the Trusted Advisor fault tolerance check for ElastiCache for Redis is now available in all AWS regions. AWS Trusted Advisor evaluates customers’ AWS account with automated best practice checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, and monitor service quotas. 

AWS Network Firewall now supports tag-based resource groups to simplify management of your firewall rules. AWS Network Firewall is a managed firewall service that makes it easy to deploy essential network protections for all your Amazon VPCs. With this launch, you can tag and filter AWS resources to centrally manage and reference sets of resources in your stateful firewall rules, instead of manually updating your rule groups every time you make changes to a set of resources.

Amazon Kinesis Data Streams for Amazon DynamoDB now supports AWS CloudFormation for DynamoDB global tables, which means you can enable streaming to an Amazon Kinesis data stream on your DynamoDB global tables with CloudFormation templates. By streaming your DynamoDB data changes to a Kinesis data stream, you can build advanced streaming applications with Amazon Kinesis services. For example, Amazon Kinesis Data Analytics reduces the complexity of building, managing, and integrating with Apache Flink and provides built-in functions to filter, aggregate, and transform streaming data for advanced analytics. You also can use Amazon Kinesis Data Firehose to take advantage of managed streaming delivery of DynamoDB table data to other AWS services such as Amazon OpenSearch Service, Amazon Redshift, and Amazon S3.

The AWS Trusted Advisor fault tolerance check for Amazon MemoryDB for Redis is now generally available in 4 new regions: Asia Pacific (Hong Kong), Europe (Milan), China (Beijing, operated by Sinnet), and China (Ningxia, operated by NWCD). With this launch, the AWS Trusted Advisor fault tolerance check for MemoryDB is now available in all regions where MemoryDB is generally available. AWS Trusted Advisor evaluates customers’ AWS accounts with automated best practice checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, and monitor service quotas. 

You now have the automated host maintenance feature available for your Amazon EC2 Dedicated Hosts. With automated host maintenance, in the rare event of degradation of a dedicated host, AWS will automatically reboot the EC2 instances running on it onto a newly allocated dedicated host during a scheduled maintenance event, to reduce your application’s downtime and offload undifferentiated heavy-lifting of host maintenance.

Today, Amazon Fraud Detector (AFD) announces the launch of AFD Lists feature. Lists allows you to reference a set of values in your AFD rules. Fraud risk teams commonly maintain lists of attributes, such as IP, email address, and devices fingerprints to allow/deny transaction as part of their fraud prevention and detection strategy. With Lists, an organization can dynamically update these lists in real time, without re-publishing the rule.

Starting today, AWS Resource Access Manager (AWS RAM) is available for use in the AWS Asia Pacific (Melbourne) Region.

Database Activity Streams (DAS) now supports Amazon RDS for SQL Server to provide a near real-time stream of database activities for auditing and compliance purposes. You can integrate DAS with your monitoring tools in order to monitor and set alarms for auditing the database activity. You can also connect Amazon Kinesis Data Stream to Amazon Kinesis Data Firehose to save stream logs in a user readable format to S3 . You can enable DAS with only a few clicks in the AWS Console to provide safeguards for your databases and help you meet compliance and regulatory requirements. 

ENA Express now supports 15 new instances including: C6i.32xlarge, C6i.metal, C6id.32xlarge, C6id.metal, M6i.32xlarge, M6i.metal, M6id.32xlarge, M6id.metal, R6i.32xlarge, R6i.metal, R6id.32xlarge, R6id.metal, i4i.32xlarge, i4i.metal, and im4gn.16xlarge. Customers using these instances today can now enable ENA Express with a simple configuration. ENA Express is a networking feature that uses the AWS Scalable Reliable Datagram (SRD) protocol to improve network performance in two key ways: higher single flow bandwidth and lower tail latency for network traffic between EC2 instances. SRD is a proprietary protocol that delivers these improvements through advanced congestion control, multi-pathing, and packet reordering directly from the Nitro card. 

Today, AWS announced the opening of a new AWS Direct Connect location within the Digital Realty data center in Ashburn, Virginia. By connecting your network to AWS at this location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

AWS Identity and Access Management (IAM) now supports the ability to refine permissions policies based on the organizational unit (OU) or organization ID in AWS Organizations of the principal or resource for IAM policies in the AWS China (Beijing) region, operated by Sinnet, and the AWS China (Ningxia) region, operated by NWCD. With these new IAM capabilities, you now can author IAM policies to enable your principals to access only resources inside specific OUs, or organizations.

Amazon GuardDuty is now available in the Asia Pacific (Hyderabad) Region. You can now continuously monitor and detect security threats in this additional region to help protect your AWS accounts, workloads, and data.

Amazon EventBridge event buses now supports enhanced integration with AWS Service Quotas. Previously, you could use the AWS Service Quotas page to view the default quotas, applied quotas, and also request quota increases for Amazon EventBridge. Now, with enhanced integration, your quota increase requests for limits such as PutEvents transactions-per-second, number of rules, and invocations per second among others will be processed within one business day or faster, enabling you to respond quickly to changes in usage. 

Today, we are making it easier for customers to view and manage enabled and disabled opt-in AWS Regions on their AWS accounts using the AWS Command Line Interface (CLI) and AWS Software Development Kit (SDK). We previously released the Accounts SDK that enables customers to programmatically manage both primary and alternate contact information for their accounts. Starting today, customers can use the same SDK to additionally enable and disable opt-in AWS Regions, saving them the time and effort of doing it through the AWS Management Console.

Today, Workspot announces Workspot Cloud PCs powered by Amazon WorkSpaces Core. You can now provision, deploy, and manage Workspot Cloud PCs powered by Amazon WorkSpaces Core directly from Workspot Control: your single global administration console. You can also use your existing security, PC management tools, and Security Event and Incident Management (SIEM) solutions seamlessly extending your current desktop management processes to your new Cloud PCs. 

Today, we are excited to announce the general availability of Amazon Elastic Kubernetes Service (Amazon EKS) Anywhere on Snow, a new deployment option that helps customers create and operate Kubernetes clusters on AWS Snow Family devices. EKS Anywhere on Snow is designed to provide Kubernetes cluster provisioning and familiar operational visibility tooling for customers to manage container applications lifecycle running on Snow devices deployed at the edge. 

Amazon GameLift can now publish events to Amazon Simple Notification Service (Amazon SNS) topics that have server-side encryption (SSE) enabled, for additional protection of events that carry sensitive data. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. With this release, customers can now enable server-side encryption to receive player matchmaking and game session queue notifications from the GameLift service.  

Amazon VPC announces general availability of Resource Map, a tool that displays all your VPC resources and their connections in a visual format on a single page, providing you a clear understanding of your VPC architecture.

Today, AWS announces the availability of AWS Modular Data Center (MDC) to the U.S. Department of Defense (DoD). AWS MDC makes it easy for DoD agencies to deploy modular data centers managed by AWS in infrastructure-limited locations. AWS MDC is available as a self-contained modular data center unit: an environmentally controlled physical enclosure that can host racks of AWS Outposts or AWS Snow Family devices. AWS MDC can scale further through the deployment of additional units. Customers can proactively monitor and manage their modular data centers using the management system available with every unit. Customers also have the option to use satellite communications for network connectivity.

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) M7g instances and Amazon EC2 R7g instances. These instances are powered by AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based instances. Compared to AWS Graviton2 processors, they offer up to 2x better floating-point performance, up to 2x faster crypto performance, and up to 3x better machine learning (ML) performance, including support for bfloat16. These Graviton3-based instances feature the latest DDR5 memory, which provides 50% more memory bandwidth than DDR4, to enable high-speed access to data in memory. These instances are built on the AWS Nitro System. M7g instances are built for general purpose workloads, such as application servers, microservices, gaming servers, midsize data stores, and caching fleets. R7g instances are used for memory-intensive workloads such as open-source databases, in-memory caches, and real-time big data analytics.

Amazon Elastic Container Service (Amazon ECS) has improved the accuracy of Elastic Load Balancing (ELB) for Amazon ECS services. Load balancing on Amazon ECS now more accurately routes traffic to running tasks as tasks will be deregistered from the ELB before they enter a stopped state. Furthermore, with these improvements, Amazon ECS also helps your services running on the Fargate Spot capacity provider be more resilient to Spot termination notices.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the tcn extension which provides a trigger function that allows you to asynchronously notify listeners of changes to a table.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. An EMR Serverless application internally uses workers to execute your workloads and you can configure different worker configurations based on the need of your workload. Previously, the largest worker configuration available on EMR Serverless was 4 vCPUs with up to 30 GB memory. Today, we are excited to announce that EMR Serverless now offers worker configurations of 8 vCPUs with up to 60 GB memory and 16 vCPUs with up to 120 GB memory, allowing you to run more compute or memory-intensive workloads on EMR Serverless. 

Amazon Lex is a service for building conversational interfaces into any application using voice and text. With Amazon Lex, you can quickly and easily build sophisticated, natural language, conversational bots (“chatbots”), virtual agents, and IVR systems. Today, Amazon Lex introduces Network of Bots that enables enterprises to deliver a unified user-experience across multiple bots present in a network.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6i instances are available in AWS Region Asia Pacific (Jakarta). These instances are built on AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

AWS Elemental MediaConnect has expanded the availability of event notifications in Amazon EventBridge. You can now see notifications for flow, source, and output state changes to more closely monitor your live broadcast operations. You can also use EventBridge to build event-driven applications to correct issues that may be impacting your MediaConnect flows.

AWS Console Mobile Application users can now access Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), and Europe (Zurich) AWS regions in the Console Mobile App.

AWS Cloud Map increases default limit of service instances that can be registered in a namespace with API calls discovery from 2,000 to 6,000. AWS Cloud Map is a cloud resource discovery service. With AWS Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resources. You can then use these custom names to discover the location and metadata of cloud resources from your applications using AWS SDK and authenticated API queries.

Today, we are excited to announce the expansion of instance refresh to support instances on standby or protected from scale in. For instances on standby, you now have the options to terminate them, ignore them altogether, as well as the current option to wait until they return to in service. For protected instances, you now have the options to refresh them, ignore them altogether, as well as the current option to wait for them until you remove scale-in protection.

AWS Launch Wizard now allows you to automate deployment of SAP S/4HANA Foundation applications, and SAP S/4HANA 2022. This launch expands on existing Launch Wizard capabilities that allow you to automate deployment of SAP HANA, SAP NetWeaver, SAP BW/4HANA, and SAP S/4HANA 2020 and 2021.

Today, we are excited to announce the ability to roll back an EC2 Auto Scaling instance refresh. EC2 Auto Scaling’s instance refresh feature allows you to replace instances in an Auto Scaling group on a rolling basis. With today’s launch, you can use rollback to undo changes an instance refresh made when it fails.

Starting today, memory optimized Amazon Elastic Compute Cloud (Amazon EC2) X2idn instances are available in AWS Region Europe (Zurich). X2idn instances, powered by 3rd generation Intel Xeon Scalable Processors (Ice Lake), are designed for memory-intensive workloads and deliver improvements in price performance compared to previous generation X1 instances. The X2idn instance is built on the AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. X2idn has a 16:1 ratio of memory to vCPU making this instance a great fit for workloads such as in-memory databases, analytics, and big data processing engines. X2idn instances are SAP-Certified for running Business Suite on HANA, SAP S/4HANA, Data Mart Solutions on HANA, Business Warehouse on HANA, SAP BW/4HANA, and SAP NetWeaver workloads on any database. You can view the certification data for X2idn on the Certified and Supported SAP HANA Hardware Directory. 

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports active tracing with AWS X-Ray. Customers can now view traces that flow through Amazon SNS topics to destination services, such as Amazon Simple Queue Service, AWS Lambda, and Amazon Kinesis Data Firehose, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. Customers can enable AWS X-Ray active tracing using the Amazon SNS SetTopicAttributes API, Amazon SNS Management Console, or via AWS CloudFormation.

Serverless application developers can now use the new Connectors attribute available in AWS Serverless Application Model (AWS SAM) to simplify authoring connectors and help keep SAM templates readable and maintainable over time. Previously, SAM customers could only define SAM connectors as a AWS::Serverless::Connector resource. While these resources simplified granting the appropriate level of access to the resources in their application’s infrastructure, customers also wanted to define the connections needed by a resource as part of the resource itself.

Amazon ElastiCache for Redis 7 now includes enhanced I/O multiplexing, which delivers significant improvements to throughput and latency at scale. Enhanced I/O multiplexing is ideal for throughput-bound workloads with multiple client connections, and its benefits scale with the level of workload concurrency. As an example, when using r6g.xlarge node and running 5200 concurrent clients, you can achieve up to 72% increased throughput (read and write operations per second) and up to 71% decreased P99 latency, compared with ElastiCache for Redis 6.

We are excited to announce the update to the Amazon GameLift Server SDK to include support for Go and .NET 6 to integrate with your Windows or Linux game servers. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. With this release, Amazon GameLift Server SDK now supports Unity 2020.3, Unreal 4.26, Go language, and custom C++ and C# engines. 

AWS Config now supports 20 more resource types for services, including Amazon Elastic Kubernetes Service (Amazon EKS), AWS Glue, AWS IoT Core, AWS IoT TwinMaker, AWS IoT Analytics, AWS IoT SiteWise, Amazon Interactive Video Service (Amazon IVS), Amazon Kinesis Data Analytics, Amazon Relational Database Service (Amazon RDS), and Amazon Simple Storage Service (Amazon S3).

AWS Lambda has launched three new metrics AsyncEventsReceived, AsyncEventAge and AsyncEventsDropped, to monitor the performance of asynchronous event processing. Until now, Lambda customers had little visibility into the processing of asynchronous requests and had to rely on Lambda service teams to resolve any processing delays leading to inefficiencies in asynchronous event processing. With these new metrics customers have better visibility into their asynchronous invocations and can track the events sent to Lambda, monitor delays in event processing and take corrective actions if required.

Amazon EMR Serverless is a serverless option in Amazon EMR that allows data engineers to process and analyze large datasets using popular open-source frameworks such as Apache Spark and Apache Hive without having to configure, manage, and scale clusters. 

Today, we are introducing a new capability for Amazon EMR on EKS to increase job execution resiliency. Until now, users had to build their own custom job execution retry mechanism outside of Amazon EMR on EKS, to make sure their Spark jobs keep running in case of failure. With this feature, users can now save time and keep their business-critical and long-running streaming workloads running, by having Amazon EMR on EKS automatically re-submit jobs in case of failure.

The AWS Common Runtime (CRT) HTTP Client is now available in the AWS SDK for 2.x. The AWS CRT HTTP Client is the asynchronous, non-blocking HTTP client built on top of the AWS Common Runtime libraries. It is an alternative to the Netty implementation of the SdkAsyncHttpClient interface that can be used to communicate with AWS services or any HTTP servers.

Amazon CloudFront enhanced its Origin Access Control (OAC) feature by adding support for AWS Elemental MediaStore. This enables customers to secure MediaStore origins with improved security, allowing only authorized CloudFront distributions to access them. Customers can now enable AWS Signature Version 4 (SigV4) on CloudFront requests for MediaStore origins and set when and if CloudFront should sign the requests.

Today AWS Control Tower is launching Landing Zone 3.1. A landing zone is a well-architected, multi-account AWS environment that is a starting point from which you can deploy workloads and applications. AWS Control Tower automates the setup of a new landing zone using AWS best-practices blueprints for identity, federated access, logging, monitoring, and account structure. Landing Zone 3.1 includes security best practice updates for Amazon Simple Storage Service (Amazon S3) access logging and updates to exceptions in the Region Deny control. 

Amazon GuardDuty is now available in the Europe (Spain) Region. You can now continuously monitor and detect security threats in this additional region to help protect your AWS accounts, workloads, and data.

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of Kazuha and Tomoko, two new female Japanese neural Text-to-speech (NTTS) voices.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R6gd instances are available in AWS Region Europe (London). These instances are powered by AWS Graviton2 processors, and they are built on AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. R6gd instances provide local SSD storage and are ideal for memory-intensive workloads such as open-source databases, in-memory caches, and real time big data analytics that need access to high-speed, low latency storage.

Amazon ElastiCache for Redis now supports auto scaling in the following six regions - Middle East (UAE), Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad), Asia Pacific (Melbourne) and Asia Pacific (Jakarta). With auto scaling, ElastiCache for Redis automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. You can automatically scale your cluster horizontally by adding or removing shards or replica nodes. ElastiCache for Redis uses AWS Application Auto Scaling to manage scaling and Amazon CloudWatch metrics to determine when it is time to scale up or down.

Today, AWS CloudFormation adds Spotlight tab on the AWS Management Console for CloudFormation to give quick access to curated articles on CloudFormation. You can now find AWS CloudFormation articles from multiple official AWS channels at a single location. You can use this feature to discover the editor’s choice articles from the AWS team on CloudFormation. With this launch, you can find the latest information on CloudFormation features, blogs, and workshops.

Today, AWS announced the opening of a new AWS Direct Connect location in Kolkata, India. By connecting your network to AWS at the new Kolkata location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 5.7.41 and 8.0.32. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous fixes, performance improvements, and new functionality added by the MySQL community.

Starting today, customers can search, provision, terminate, update and use self-service actions on products from AWS Service Catalog through Atlassian’s Jira Service Management Cloud customer portal via AWS Service Management Connector. This feature enables Jira Service Management end users who are registered users of the Atlassian site but are not Jira agents to provision resources using the AWS Service Catalog integration. With this connector, administrators can use existing AWS Service Catalog configurations, including curated products, portfolios, constraints, and tagging, and expose them to Jira Service Management Cloud administrators and users. Jira Service Management customers can browse and request provisioning of AWS Service Catalog products in their familiar IT Service Management (ITSM) tooling.

Starting today, AWS customers can use Amazon Kendra to build intelligent search applications in the Asia Pacific (Tokyo) AWS Region.

AWS DataSync is now available in the Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad) AWS Regions. You can now use DataSync to copy data between on-premises, edge, or other cloud storage and AWS Storage services, as well as between AWS Storage services, within each of these new AWS Regions.

With today’s announcement, you can now use CloudFormation templates to setup, run, and clean-up AWS SimSpace Weaver simulations. AWS SimSpace Weaver is a fully managed compute service that helps customers deploy large spatial simulations in the cloud. Launched at AWS re:Invent 2022, AWS SimSpace Weaver allows customers to create seamless virtual worlds with millions of objects that can interact with one another in real time without worrying about managing the back-end infrastructure. AWS CloudFormation is a service that enables you to model, provision, and manage AWS and third-party resources by treating infrastructure as code.

Change Manager, a capability of AWS Systems Manager, helps customers request, approve, implement, and report on operational changes to their application configuration and infrastructure on AWS and on premises. With this launch, customers can now set a required number of approvers for a change request before adding all eligible approvers. This provides requesters with additional flexibility to add multiple approvers for the request and get the change approved as soon as the required number is achieved. For example, customers can require three approvals for a level but specify up to five approvers. Approvals from any three of those approvers are sufficient to approve the level.

Today, Amazon Fraud Detector (AFD) announced the launch of the Cold Start feature. Now customers can start training a sign-up or a transaction frauds detection model with minimal historical-data. Up to now, AFD customers were required to provide 10K+ labeled events with at least 400 examples of fraud to train a model. With the release of Cold Start only 50 labeled fraud events and 50 unlabeled events are necessary. The new feature introduces intelligent methods for treating your unlabeled data and optimizes model training with small datasets.

Change Calendar, a capability of AWS Systems Manager, now helps customers view their operational events, such as maintenance windows, state manager associations, and planned automation executions alongside their business-critical events. Using Change Calendar, you can schedule calendar events to control the changes made to your AWS resources during events, such as public marketing promotions and when you expect high demand on your resources. To help you get a comprehensive view of operational changes, Change Calendar integrates with other Systems Manager capabilities, such as Automation, Maintenance Windows, State Manager, and Change Manager, and pre-populates your Change Calendar with the operational events view. This new feature automatically displays operational events alongside your business-critical events to help customers become aware of restricted periods while scheduling new tasks.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the seg extension which provides the "seg" data type for representing line segments or floating point intervals.

Starting today, Graviton3-based Amazon Elastic Compute Cloud (Amazon EC2) C7g instances are available in bare metal size. C7g instances deliver up to 25% better compute performance, up to 2x higher floating-point performance, up to 2x faster cryptographic performance, and up to 3x faster CPU-based machine learning (ML) performance compared to AWS Graviton2 processors, including support for bfloat16. C7g instances feature the latest DDR5 memory, which provides 50% more memory bandwidth compared to DDR4. They are built on the AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. C7g instances are built for workloads including batch processing, ad serving, video encoding, gaming, scientific modelling, data analytics, and CPU-based artificial intelligence and machine learning (AI/ML) inference.

AWS Firewall Manager is now available in the Asia Pacific (Jakarta) and Middle East (UAE) regions, bringing AWS Firewall Manager to a total of 25 AWS commercial regions, 2 GovCloud regions, and all Amazon CloudFront edge locations.

Amazon CloudWatch now supports high resolution metric extraction with up to 1 second granularity from structured logs using Embedded Metric Format (EMF). Customers can now provide an optional “StorageResolution” parameter within EMF specification logs with a value of 1 or 60 (default) to indicate the desired resolution (in seconds) of the metric. 

Amazon Elastic Kubernetes Service (EKS) customers can now create and manage clusters in Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad) AWS regions.

You can now make changes to an AWS Elemental MediaTailor Channel closer to the live edge. When a channel is running and content is playing, it is often necessary to amend the schedule quickly in reaction to unplanned or non-determined events. For example, cutting from a live source to a VOD source after a live event has concluded or adjusting what source plays for an upcoming program a few minutes before it begins. From today, you can make certain program updates in a channel’s schedule to take effect 60 seconds or more in the future. 

Starting today, Amazon EC2 High Memory instances with 12TiB (u-12tb1.112xlarge) of memory are now available in South America (Sao Paulo) region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

AWS Glue Crawlers support MongoDB to extract the data schema and automatically populate the AWS Glue Data Catalog, which keeps the metadata current. Today we are expanding the support to include MongoDB Atlas. This feature makes it much simpler to bring the managed MongoDB Atlas metadata into the AWS Glue Data Catalog, so that data engineers can integrate MongoDB Atlas data with S3 based data lakes and extract meaningful insights. 

Amazon EC2 now supports replacing the root volume on a running EC2 Mac instance, enabling you to restore the root volume of an EC2 Mac instance to its initial launch state or to a specific snapshot, without requiring you to stop or terminate the instance. You can now reset the EC2 Mac instance back to a known state, while still retaining any local data, networking configurations, and IAM instance profiles. You can also leverage this capability to quickly provision fresh macOS environments on your EC2 Mac Dedicated Hosts without triggering the host scrubbing workflow.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports additional cipher suites that can be used with the Oracle Enterprise Manager (OEM) Agent and Oracle Secure Socket Layer (SSL) options. Customers can make use of these new cipher suites, as they provide stronger security for the RDS for Oracle database instance(s) connections, thereby strengthening the security posture of their infrastructure.

The AWS Serverless Application Model (SAM) Command Line Interface (CLI) announces the launch of sam list command, helping developers access information about deployed resources while they are testing their SAM applications. The AWS SAM CLI is a developer tool that makes it easier to build, test, package, and deploy serverless applications. 

The Amazon Chime SDK now provides a native client library for Windows applications to connect to WebRTC media sessions. The Amazon Chime SDK lets developers add intelligent real-time audio, video, and screen share to their web, mobile applications, and now, Windows applications.  

AWS Panorama customers are now able to get faster quotes and place orders for AWS Panorama Appliances directly in the AWS Panorama Console. With these new capabilities, customers can receive an automated quote from the AWS Panorama Console. This will reduce the time needed for customers to generate purchase orders and will expedite orders for the AWS Panorama Appliance. To get started on this new ordering capability for AWS Panorama, click here.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Europe (Spain), Europe (Zurich) and Asia Pacific (Hyderabad) Regions.

Starting today, customers can use Amazon Kinesis Data Firehose in the Europe (Zurich), Europe (Spain), Asia Pacific (Hyderabad) AWS Regions.

Today, AWS AppConfig announces integrations with AWS Secrets Manager and AWS Key Management Service (AWS KMS), providing customers with additional configuration sources and encryption capabilities. In addition to its own AWS AppConfig Hosted Configuration store, AWS AppConfig already integrates with Amazon Simple Storage Service (Amazon S3), AWS CodePipeline, AWS Systems Manager Parameter Store, and AWS Systems Manager Documents as data sources. Now customers can use Secrets Manager as a single source to safely and securely deploy sensitive data. All sensitive data retrieved from Secrets Manager via AWS AppConfig can be encrypted at deployment time using an AWS KMS Customer Managed Key (CMK). In addition, AWS AppConfig now offers support for CMK encryption for other configuration data. The integration with AWS KMS enables support for Amazon S3 objects encrypted with a customer managed key or secure strings from AWS Systems Manager Parameter Store encrypted with a customer managed key. 

AWS Elemental MediaLive now supports decoding audio from sources with Dolby E compressed tracks. Dolby E supports delivery of eight discrete audio source channels in a PCM (pulse code modulated) stereo pair. With this feature you can deliver content with different language tracks and/or high channel count spatial audio from a single high-quality source. This is useful for international syndication of sports and events where commentary and immersive audio are present.

Amazon SageMaker Training reduces the time and cost to train and tune machine learning (ML) models at scale without the need to manage infrastructure. In addition to providing built-in libraries and tools, SageMaker works with popular open-source foundation models such as GPT, BERT, and DALL·E and ML frameworks, such as PyTorch and TensorFlow. We are excited to announce that SageMaker Training now supports using images with pre-installed frameworks or algorithms stored in your private Docker registry to build ML models.

Amazon OpenSearch Service now supports enabling Security Assertion Markup Language (SAML) authentication for OpenSearch Dashboards during domain creation. SAML authentication for OpenSearch Dashboards enables users to integrate directly with identity providers (IDPs) such as Okta, Ping Identity, OneLogin, Auth0, Active Directory Federation Services (ADFS) and Azure Active Directory.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.6, 13.9, 12.13, 11.18, and 10.23. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon Connect now supports outbound campaigns in the Canada (Central) AWS region, making it easy to proactively communicate across voice, SMS, and email for use cases such as delivery notifications, marketing promotions, appointment reminders, or debt collection. Communication capabilities include features to support compliance of local regulations such as CRTC through point-of-dial checks and calling controls for time of day, time zone, number of attempts per contact, and time required to connect to an available agent. An optional integrated list management capability provided by Amazon Pinpoint can also be used to build customer journeys and multi-channel user experiences. With this launch, high-volume outbound calls can now be made to customers in Canada. This feature is available out-of-the box and can be enabled within the AWS Connect Console.

AWS IoT Core announces General Availability of the capability to send device logs from Internet of Things (IoT) devices to Amazon CloudWatch Logs in batches, enabling you to optimize the cost of using CloudWatch Log Action in IoT Rules.

Starting today, you can configure your NAT Gateway to support up to 440,000 concurrent connections to a unique destination by adding multiple IP addresses to same NAT Gateway.

Today, AWS CloudFormation StackSets adds a new parameter in DescribeStackSet API to improve visibility to the list of Regions where a given stack set is deployed. You can now access the list of Regions directly through your management or delegated administrator AWS account.

Amazon Connect now supports AWS CloudFormation for instance management, in addition to previously launched CloudFormation support for instance creation and data storage APIs. You can now use AWS CloudFormation templates to manage Amazon Connect instances for associating Lex bots (and Lex v2), Lambda functions, Security keys, and Approved origins —along with the rest of your AWS infrastructure—in a secure, efficient, and repeatable way. 

AWS App Runner now supports incoming requests based on HTTP 1.0 protocol for applications running on App Runner.

Amazon Omics now supports AWS PrivateLink and AWS CloudFormation. You can now use AWS PrivateLink to privately access Amazon Omics APIs from your Amazon Virtual Private Cloud (VPC). Creating VPC Endpoints incurs charges. See the AWS PrivateLink pricing page for more information. With CloudFormation support, you can now use AWS CloudFormation templates to create, update, and delete your Amazon Omics resources. This helps you automate and standardize DevOps processes across your AWS accounts and AWS Regions for Amazon Omics.

Amazon Inspector is now available in both AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. You can now continuously monitor your AWS workloads including Amazon Elastic Compute Cloud (EC2) instances, container images in Amazon Elastic Container Registry (ECR), and AWS Lambda functions for software vulnerabilities in these additional regions.