April 2023

Amazon Connect has reduced pricing for the Japan toll-free inbound minute rate by 46% from $0.1482/min to $0.08/min in the Asia Pacific (Tokyo) region.

AWS Graviton3-based M7g and R7g database instances are now generally available for Amazon Relational Database Service (RDS). Graviton3-based instances provide up to a 30% performance improvement and up to a 27% price/performance improvement (based on on-demand pricing) over Graviton2-based instances on RDS for open-source databases depending on database engine, version, and workload. You can launch these database instances when using Amazon RDS for MySQL, Amazon RDS for PostgreSQL, and Amazon RDS for MariaDB.

Amazon Managed Streaming for Apache Kafka (MSK) now offers multi-VPC private connectivity that simplifies connectivity and access to your Amazon MSK clusters from your Apache Kafka clients hosted in any VPC or AWS account.  

Amazon Connect has reduced prices for direct-inward dial (DID) rates for South Korea in the Asia Pacific (Seoul) region. This includes claimed DID phone numbers reduced by 89% from $0.8/day to $0.0864/day and DID inbound minutes by 97% from $0.0736/min to $0.0020/min.

Amazon Managed Grafana is a fully managed service for Grafana, a popular open-source analytics platform that enables you to query, visualize, and alert on your metrics, logs, and traces. Since inception, Amazon Managed Grafana maintained a single version offering across all workspaces globally. With this release, you can select an Amazon Managed Grafana supported version to create a new workspace. Version 9.4 includes several new features to further enhance your experience in Amazon Managed Grafana including, but not limited to: plugin enhancements to support CloudWatch cross-account querying, OpenSearch serverless, querying multiple asset properties from AWS IoT Sitewise, query result reuse and async queries for Athena; Prometheus and Loki query builders make it even easier to create and modify queries for your data sources; Service accounts that provide a secure and efficient way to automate tasks within your Grafana instance.

Amazon S3 now applies two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. This change was first announced on December 13, 2022, began deploying on April 5, 2023, and is now applied to all AWS Regions. To learn more about the change, read Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023 in the AWS News Blog and Default access settings for new S3 buckets FAQ in the S3 User Guide.

Today, AWS announces the expanded support of AWS Fault Injection Simulator (FIS) for Amazon EC2 with a new SSM document to the fill disk of EC2 instances. FIS is a fully managed service which allows you to run experiments to test how your applications behaves during an impairment, and helps you improve application performance, observability, and resilience. The new disk fill document consumes disk space to see how the application behaves when disk space is unavailable.

You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the Europe (Spain), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne) Regions.

Today, AWS announces the general availability of AWS Verified Access, a service that helps you provide secure access to your corporate applications without using a VPN. Built based on AWS Zero Trust principles, you can use Verified Access to implement a work-from-anywhere model with added security and scalability.

Starting today, Amazon EC2 C6id, M6id and R6id instances are available in the AWS GovCloud (US-West) Region. These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. Compared to previous generation C5d, M5d and R5d instances, C6id, M6id and R6id instances deliver up to 15% better price performance. C6id offers up to 138% higher TB storage per vCPU and 56% lower cost per TB; M6id and R6id offer up to 58% higher TB storage per vCPU, and 34% lower cost per TB.

Amazon CloudWatch is introducing enhancements to the console experience, which improve data visualizations, cross-console navigation and user experience. 

Amazon EMR is excited to announce that Amazon EMR Serverless is now available in the Asia Pacific (Hong Kong) and Middle East (Bahrain) Regions.

Amazon EC2 now supports AMD Secure Encrypted Virtualization-Secure Nested Paging (AMD SEV-SNP), a feature on AMD EPYC™ processors, on M6a, C6a, and R6a instance types. The availability of AMD SEV-SNP in EC2 further increases the diversity of options that our customers have to meet the unique requirements of any workload. 

Today, AWS announced Provisioned Capacity for Amazon Athena, a new feature that allows you to run SQL queries on fully-managed compute capacity for a fixed price and no long-term commitments. Provisioned Capacity enables you to allocate dedicated compute to mission-critical queries and control workload performance characteristics such as query concurrency and cost. You can add capacity at any time, and pay only for the amount of capacity you specify and time it is active in your account.

AWS Lambda now supports Java 17 as both a managed runtime and a container base image. Developers creating serverless applications in Lambda with Java 17 can take advantage of new language features including Java records, sealed classes and multi-line strings. The Lambda Java 17 runtime also has numerous performance improvements, including optimizations when running Lambda functions on Graviton 2 processors. It supports AWS Lambda Snap Start (in supported Regions) for fast cold starts, and the latest versions of the popular Spring Boot 3 and Micronaut 4 application frameworks. For more information on Lambda’s support for Java 17, see our blog post at Java 17 runtime now available in AWS Lambda.

Amazon QuickSight launches two suites of data ingestion APIs, including 1/Ingestion schedule APIs and 2/ Incremental Refresh Configuration APIs. Before enabling the APIs, QuickSight users have to setup their ingestion refresh schedule and lookback window in the console UI manually. The new suite of APIs allows users to define their refresh schedule and incremental refresh configuration programmatically hence help developers to automate and integrate seamlessly. The APIs will also largely speed up the migration to QuickSight from other BI tools. For further details, visit here.

We are excited to announce Amazon CloudWatch Logs data protection is now available in Middle East (UAE), Asia Pacific (Hyderabad), Europe (Spain), Europe (Zurich), and Asia Pacific (Melbourne). Data protection is a feature that leverages pattern matching and machine learning capabilities to detect and protect sensitive log data-in-transit. Amazon CloudWatch Logs enables you to centralize the logs from all of your systems, applications, and AWS services, in a single, highly scalable service. With log data protection in Amazon CloudWatch Logs, you can now detect and protect sensitive log data in-transit such as, Credit Card Numbers or Government ID’s logged by your systems, and applications.

AWS Network Firewall now supports Transport Layer Security (TLS) inspection for ingress VPC traffic in 8 additional regions for a total of 10 regions. Starting today, you can use AWS Network Firewall to decrypt, inspect, and re-encrypt inbound TLS traffic in Asia Pacific (Sydney), Asia Pacific (Jakarta), Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Tokyo), Europe (Ireland), Europe (Stockholm), Europe (Frankfurt), South America (Sao Paulo), and US East (N. Virginia).

Fleet Manager now enables a console-based management experience for Windows instances in the AWS GovCloud (US) Regions. This feature provides customers a full graphical interface to setup secure connections to and manage Windows instances. You no longer need to install additional software, set up additional servers, or open direct inbound access to ports on the instance.

Today, Amazon Location Service added support for long distance matrix routing, making it easier for customers to quickly calculate driving time and driving distance between multiple origins and destinations, no matter how far apart they are. Developers can now make a single API request to calculate up to 122,500 routes (350 origins and 350 destinations) within a 180 km region or up to 100 routes without any distance limitation.

Amazon MQ now provides support for RabbitMQ version 3.10.20 and RabbitMQ 3.9.27, which include several important fixes and performance optimizations to the previously supported versions. Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that makes it easier to set up and operate message brokers on AWS. You can reduce your operational burden by using Amazon MQ to manage the provisioning, setup, and maintenance of message brokers. Because Amazon MQ connects to your current applications with industry-standard APIs and protocols, you can more easily migrate to AWS without having to rewrite code.

Today, AWS AppSync released enhanced support for TypeScript in JavaScript resolvers, along with integrated support for source maps in bundled JavaScript code. Plus, we’ve released updated guidance to help you during your development process, and we are updating the AppSync utility library to provide better type and generics support.

Today Amazon OpenSearch Service announces Amazon OpenSearch Ingestion, a new fully managed data ingestion tier that allows you to ingest and process petabyte-scale data before indexing it in OpenSearch-managed clusters or serverless collections. OpenSearch Ingestion provides a no-code capability to filter, transform, redact, and route data prior to indexing it in OpenSearch. OpenSearch Ingestion automatically provisions and scales the underlying resources for even the most demanding and unpredictable workloads. 

Today, AWS announces the general availability of Amazon SageMaker with TensorBoard, which provides a hosted TensorBoard experience. This launch allows you to use TensorBoard to visualize and debug model convergence issues for Amazon SageMaker training jobs. 

Starting today, Amazon Compute Cloud (Amazon EC2) T4g instances are available in Africa (Cape Town) region. These instances are powered by Arm-based AWS Graviton2 processors and deliver up to 40% better price performance over T3 instances. The T4g instances provide a baseline level of CPU performance with the ability to burst CPU usage at any time for as long as required. Amazon EC2 T4g instances are built on the AWS Nitro System, a collection of AWS-designed hardware and software innovations that enable the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. T4g instances offer a balance of compute, memory, and network resources for a broad spectrum of general purpose workloads, such as large scale micro-services, caching servers, search engine indexing, e-commerce platforms, and virtual desktops.

Contact Lens for Amazon Connect now provides a set of evaluation capabilities (GA) that enable contact center managers to create evaluation forms with criteria (e.g., agent adherence to talk scripts or compliance with sensitive data collection practices) that can be scored using Contact Lens’ machine learning powered speech analytics, and view aggregated agent performance results. Contact centers can also use public APIs to ingest data (e.g., customer satisfaction scores, sales records, etc.) from third-party sources such as CSAT survey tools or CRM systems, and have all relevant agent performance data and insights across cohorts of agents over time, in a single easy-to-use web interface.

AWS Global Accelerator now supports traffic through two new AWS edge locations in Lima, Peru and Nashville, Tennessee (United States). With the addition of these two edge locations, Global Accelerator is now available through 106 Points of Presence globally and supports application endpoints in 21 AWS Regions.

We are announcing the general availability of AWS DataSync Discovery, giving you visibility into on-premises storage performance and utilization, and providing recommendations to simplify and accelerate data migration to AWS. DataSync Discovery enables you to understand your on-premises storage performance and capacity through automated data collection and analysis. It helps you quickly identify data to be migrated and evaluate suggested AWS Storage services that align to your performance and capacity needs. Capabilities added since preview include support for NetApp ONTAP 9.7, recommendations at cluster and storage virtual machine (SVM) levels, and discovery job events in Amazon EventBridge.

If you deliver multichannel audio experiences, you can now use AWS Elemental Link UHD to pass through Dolby Digital and Dolby Digital Plus audio to your AWS Elemental MediaLive channel.

AWS Resource Access Manager (AWS RAM) now supports customer managed permissions so you can author and maintain fine-grained resource access controls for supported resource types. AWS RAM helps you securely share your resources across AWS accounts, within your organization or organizational units (OUs), and with AWS Identity and Access Management (IAM) roles and users. With customer managed permissions, you can apply the principles of least privilege, or the minimum permissions required to perform a task.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the use of the IN operator in SELECT queries of Cassandra Query Language (CQL).

Amazon SageMaker Python SDK is an open source library for training and deploying machine-learning models on Amazon SageMaker. We are excited to announce SageMaker Python SDK now helps data scientists execute any local ML code authored in their preferred IDE and local notebooks along with the associated runtime dependencies as large-scale ML model training jobs with minimal code changes.

We are excited to announce the General Availability of AWS IoT Core Device Advisor support for MQTT over WebSocket. AWS IoT Core Device Advisor is a cloud-based, fully managed test capability that validates AWS IoT device software for reliable and secure connectivity with AWS IoT Core. With this update, customers can run all three test suites of AWS IoT Core Device Advisor - qualification, custom, and long duration tests - using Signature Version 4 for MQTT over WebSocket. Signature Version 4 is a protocol for authenticating inbound API requests to AWS services, in all AWS Regions. 

AWS License Manager announces a new feature to upgrade EC2 instances with Ubuntu LTS (Long Term Support) operating system to Ubuntu Pro. With Ubuntu Pro subscription, customers get five years of Expanded Security Maintenance (ESM) on the Ubuntu LTS releases from Canonical. Using this License Manager feature, customers can upgrade their Ubuntu LTS instances in-place to Ubuntu Pro without needing to migrate to a new Ubuntu Pro Amazon Machine Image (AMI). For the use of upgraded EC2 instances with Ubuntu Pro, you will be charged on a per-second basis at the applicable On-Demand or Savings Plan rates for Ubuntu Pro.

You can now add data overlays and text annotations in the AWS IoT TwinMaker Scene Composer. Data overlay and text annotations provide context in scenes like access to key performance metrics and sensor data, making it easier to navigate your twins and monitor your facilities with AWS IoT TwinMaker.

AWS Glue Crawlers extract the data schema and partitions from Amazon S3 and populate the AWS Glue Data Catalog, keeping metadata current. Today, AWS Glue Crawler support is expanded to automatically add partition indexes for newly discovered tables that will help analytics services such as Amazon Athena and AWS Glue to optimize partition processing to help with query performance on highly partitioned tables. 

Today, AWS announces the general availability of AWS Support in Korean in all commercial regions. Customers can now select Korean, in addition to Chinese, English, and Japanese as their preferred language to interact with our team of support engineers and customer service representatives. Customers will receive personalized support in the language of their choice with predictable response times as per their Support plan at no additional cost.

Starting today, customers with multiple organizational units (OU’s), and accounts can now create up to 10 AWS Firewall Manager administrator accounts from AWS Organizations service to manage their firewall policies. Customers can delegate responsibility for firewall administration at a granular scope by restricting access based on OU, account, policy type, and region, thereby enabling policy management tasks to be implemented faster and more effectively.

Starting today, Amazon EC2 High Memory instances with 6TiB (u-6tb1.56xlarge, u-6tb1.112xlarge) of memory are now available in the Europe (Zurich) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Application Manager, a capability of AWS Systems Manager that helps DevOps engineers investigate and remediate issues in the context of their applications, now supports AWS CDK applications. Customers who use CDK to model their cloud infrastructure can view their CDK constructs grouped as applications in the Application Manager console. 

Amazon Personalize has launched a new open source Amazon Personalize Kafka Sink connector that makes it easy to stream data in real-time for use in Amazon Personalize. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. Amazon Personalize uses data provided by customers to train custom models on their behalf. With this launch, customers can readily ingest their data from Apache Kafka clusters and call the Amazon Personalize-specific APIs to enable real-time data steaming, without the need for custom code. This makes it faster and easier to bring real-time data to Amazon Personalize for those using Apache Kafka.

Today, AWS announced the opening of a new AWS Direct Connect location within the KIO Networks data center in Querétaro, Mexico. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Today, we are announcing the availability of AWS Backup for Amazon S3 in South America (São Paulo) Region. AWS Backup is a policy-based, fully managed and cost-effective solution that enables you to centralize and automate data protection of Amazon S3 along with other AWS services (spanning compute, storage, and databases) and third-party applications. Together with AWS Organizations, AWS Backup enables you to centrally deploy policies to configure, manage, and govern your data protection activity. 

Today, we are announcing the availability of AWS Backup in the Asia Pacific (Melbourne) Region. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning compute, storage, and databases. Using AWS Backup, you can centrally create and manage immutable backups of your application data, protect your data from inadvertent or malicious actions, and restore the with a few simple clicks.

AWS Migration Hub Refactor Spaces is now available in 7 new AWS regions: US West (N. California), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Canada (Central), Europe (Paris), and South America (São Paulo). Customers in these regions can now use Refactor Spaces as the starting point to accelerate application refactoring.

Today, we are announcing the general availability of Apache Kafka receiver and exporter in AWS Distro for OpenTelemetry (ADOT). ADOT is a secure, production-ready, AWS-supported distribution of the OpenTelemetry project. With this release, customers can use the ADOT collector to collect metrics and traces from Kafka and send metrics and traces to Kafka. The release includes support for Amazon Managed Streaming for Apache Kafka (MSK).

AWS Web Application Firewall customers can now use the AWS WAF Captcha JavaScript API for enhanced control over the Captcha workflows. AWS WAF Captcha helps block unwanted bot traffic by requiring users to successfully solve visual or audio problems before their web requests are allowed. Until today, AWS WAF Captcha redirected customers to a different page for solving the Captcha problem. With this release, developers can improve the Captcha customer experience by embedding Captcha problems in their existing webpages, including Single Page applications (SPAs).

Today, Amazon Personalize announces the launch of popularity tuning for its Similar-Items recipe (aws-similar-items). Similar-Items generates recommendations that are similar to the item that a user selects, helping users discover new items in a customer’s catalog based on the behavior of all users and item metadata. 

Amazon Elastic Container Services (Amazon ECS) launches a networking capability called Service Connect in the Middle East (UAE) and Europe (Zurich) Regions.

Amazon Redshift already supports role-based access control, row-level security, and column-level security to enable organizations to enforce fine-grained security on Redshift data. Amazon Redshift now extends these security features by supporting Dynamic Data Masking (DDM) that allows you to simplify the process of protecting sensitive data in your Amazon Redshift data warehouse. With Dynamic data masking, you control access to your data through SQL based masking policies that determine how Redshift returns sensitive data to the user at query time.

We are excited to announce the new AWS WAF Ready specialization for AWS Partners with software products that integrate with AWS Web Application Firewall (WAF). Ensuring websites and applications are protected from external threats that can lead to a loss of revenue, customer trust, and brand reputation has become a top concern for businesses of all shapes and sizes. AWS WAF Ready specialization offers customers a simple solution to deploying and maintaining their application layer security solution with AWS WAF Ready Partner offerings.

Today, AWS announces the general availability of Amazon CodeCatalyst, a unified software development service that makes it easier for you to quickly build and deliver applications on AWS. CodeCatalyst provides everything you need to start planning, coding, building, testing, and deploying applications on AWS with a streamlined, integrated experience. With CodeCatalyst, you can spend more time developing application features and less time setting up project tools, creating and managing continuous integration and continuous delivery (CI/CD) pipelines, provisioning and configuring development and deployment environments, and onboarding team members to their projects.

The AWS Serverless Application Model (SAM) Command Line Interface (CLI) announces the launch of local testing support for Amazon API Gateway Lambda authorizers making it easier for developers to locally test their applications containing API Gateway. The AWS SAM CLI is a developer tool that makes it easier to build, test, package, and deploy serverless applications.

Amazon Redshift announces support for MERGE command which enables you to apply source data changes unto Redshift warehouse tables with a simple SQL command. MERGE command allows you to combine a series of DML (Data Manipulation Language) statements into a single statement, .

Amazon S3 compatible storage is now available on AWS Snowball Edge Compute Optimized devices. Amazon S3 compatible storage enables customers to store data and run highly available applications on AWS Snowball Edge Compute Optimized devices by delivering secure object storage with high resiliency, increased scale, an expanded S3 API feature-set to rugged, mobile edge, and disconnected environments.

Amazon GuardDuty expands threat detection coverage to continuously monitor network activity logs, starting with VPC Flow Logs, generated from the execution of AWS Lambda functions to detect threats to Lambda such as functions maliciously repurposed for unauthorized cryptocurrency mining, or compromised Lambda functions that are communicating with known threat actor servers. GuardDuty Lambda Protection can be enabled with a few steps in the GuardDuty console, and using AWS Organizations, can be centrally enabled for all existing and new accounts in an organization.

Amazon Redshift data sharing enables you to share live data across Amazon Redshift data warehouses. Amazon Redshift now supports simplified governance of Amazon Redshift data sharing by using AWS Lake Formation to centrally manage permissions on data being shared across your organization. With the new Amazon Redshift data sharing managed by AWS Lake Formation, you can manage permission grants, view access controls, and audit permissions on the tables and views in the Redshift datashares using Lake Formation APIs and the AWS Console.

Amazon Web Services announces the general availability of Ubuntu Pro on Amazon EC2 in a subscription-included model. You can now easily deploy Ubuntu Pro on-demand instances and purchase Ubuntu Pro Compute Savings Plans from the AWS EC2 console, and get five additional years of Ubuntu security updates from Canonical. You will be charged on a per-second basis for Ubuntu Pro EC2 AMI instances. For any new Ubuntu Pro EC2 AMI deployments, you will now see Ubuntu Pro charges in the Elastic Cloud Compute section of your AWS bill.

AWS Amplify Flutter is announcing the launch of version 1.0.0, expanding support to web and desktop as target platforms. Amplify is a set of tools and services that help frontend web and mobile developers build secure, scalable, fullstack applications. With this release, Flutter developers can target 6 platforms, including iOS, Android, web, MacOS, Linux, and Windows. Developers can build Authentication, API (GraphQL +REST), Storage, and Analytics experiences with Amplify targeting the platforms that matter most to their users. 

Today, we launched a redesigned opportunity management experience within the AWS Partner Central portal. This launch provides AWS Partners, using APN Customer Engagements (ACE), a faster, simpler and intuitive experience to securely collaborate and co-sell with AWS. The improved experience will enable our partners to drive successful customer engagements for their continued growth and profitability.

The Amazon Chime SDK now supports Hindi and Thai languages for live transcription of WebRTC media sessions. Amazon Chime SDK lets developers add real-time audio, video, and screen share to their web and mobile applications. Live transcription integrates with Amazon Transcribe to generate live audio transcription for use as subtitles or transcripts. 

Amazon SageMaker Studio Lab deployed CAPTCHA, (Completely Automated Public Turing test to tell Computers and Humans Apart), to deter automated bots and scripts, from absorbing compute capacity that is meant for customers experimenting with machine learning.

On April 18, 2023 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) versions of OpenJDK. Corretto 20.0.1, 17.0.7, 11.0.19, 8u372 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK. With this release, we are declaring aarch64 Alpine Linux binaries of Corretto 17, 11, and 8 GA.

Starting today, Amazon Virtual Private Cloud (VPC) customers can create their own Prefix Lists in three additional AWS Regions: Asia Pacific (Hyderabad), Asia Pacific (Melbourne) and Europe (Spain).

Amazon Inspector now supports deep inspection of EC2 instances when the continual EC2 scanning feature is activated. With this expanded capability, Inspector now identifies software vulnerabilities in application programming packages including Python, Java, and Node.js packages in addition to operating system packages. Inspector discovers these application programming packages installed in default directory paths, and also allows customers to provide additional custom directory paths for Inspector discovery. This feature is activated by default for all new customers, and existing customers can activate this feature across their organization with a single click in the console. Deep inspection of EC2 instances is offered at no additional cost to Inspector customers.

Today, AWS Control Tower is available in 7 additional AWS Regions: US West (N. California), Asia Pacific (Hong Kong, Jakarta, and Osaka), Europe (Milan), Middle East (Bahrain), and Africa (Cape Town). With this launch, AWS Control Tower is now available in 22 AWS Regions and 2 AWS GovCloud (US) Regions. AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It simplifies AWS experiences by orchestrating multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. You can set up a multi-account AWS environment within 30 minutes or less.

Amazon GuardDuty is now available in the Asia Pacific (Melbourne) Region. You can now continuously monitor and detect security threats in this additional region to help protect your AWS accounts, workloads, and data.

Amazon WorkSpaces Web Access is now available in the AWS GovCloud (US-West) Region. You can deploy Amazon WorkSpaces using WorkSpaces Streaming Protocol (WSP), without having to install a native client application and your users can now access Amazon WorkSpaces from supported web browsers on devices running Windows, macOS, and Linux.

Today, we are announcing the availability of AWS Backup for Amazon S3 in AWS GovCloud (US-East, US-West) Regions. AWS Backup is a policy-based, fully managed and cost-effective solution that enables you to centralize and automate data protection of Amazon S3 along with other AWS services (spanning compute, storage, and databases) and third-party applications. Together with AWS Organizations, AWS Backup enables you to centrally deploy policies to configure, manage, and govern your data protection activity. 

Amazon Comprehend announced that Amazon Comprehend APIs for Document Classification will now use layout of the document in addition to text, to provide higher accuracy. 

AWS Amplify is announcing support for Push Notifications for Swift, Android, Flutter, and React Native applications. This means that developers can now use Amplify to set up push notifications when targeting iOS and Android platforms, providing developers and businesses with a way to engage with users and send them timely and relevant information.

AWS Lake Formation and the Glue Data Catalog now extend data cataloging, data sharing and fine-grained access control support for customers using a self-managed Apache Hive Metastore (HMS) as their data catalog. Previously, customers had to replicate their metadata into the AWS Glue Data Catalog in order use Lake Formation permissions and data sharing capabilities. Now, customers can integrate their HMS metadata within AWS, allowing them to discover data alongside native tables in the Glue data catalog, manage permissions and sharing from Lake Formation, and query data using AWS analytics services.

Amazon CodeCatalyst (Preview) has added an administrative dashboard for Dev Environments. This dashboard enables users with the Space administrator role to centrally view and manage Dev Environments across projects. CodeCatalyst is a unified software development service that makes it faster to build and deliver software on AWS. Dev Environments, a feature of CodeCatalyst, are preconfigured, scalable cloud development environments accessible from popular IDEs.

AWS Lambda now supports Python 3.10 as both a managed runtime and a container base image. Developers creating serverless applications in Lambda with Python 3.10 can take advantage of numerous Python language enhancements to make code more readable and maintainable. These include pattern matching for data structures, parenthesized context managers to simplify managing resources such as file handles or database connections, and better error handling. For more information on Lambda’s support for Python 3.10, see our blog post at Python 3.10 runtime now available in AWS Lambda.

AWS IoT Core for LoRaWAN announces public network support (preview) for LoRaWAN-based Internet of Things (IoT) systems. With this update, customers can now easily connect their IoT devices to the cloud using publicly available LoRaWAN networks provided by Everynet, a global LoRaWAN network operator offering carrier grade networks. Using AWS IoT Core for LoRaWAN, customers can simply register their devices to the cloud and opt for public network support in the AWS IoT console. Within minutes, they will be able to receive data from registered LoRaWAN devices in their AWS account. 

Amazon EMR on EC2 now provides contextual error details that makes it easier to troubleshoot cluster provisioning failures. EMR lets you provision your EMR on EC2 cluster without worrying about managing compute infrastructure or open-source application setup. However, there can be circumstances when your cluster provisioning fails, such as an insufficient EC2 instance capacity error, bootstrap action failure or a VPC-subnet misconfiguration error. With today’s launch, you will now find additional error details in the new EMR console, AWS Command Line Interface (AWS CLI), and the AWS SDK. These additional error details are automatically enabled for all EMR versions and no further action is needed.

Amazon EMR Serverless is a serverless option that makes it simple for data analysts and engineers to run open-source big data analytics frameworks like Apache Spark and Apache Hive without configuring, managing, and scaling clusters or servers. Starting today, you can view the aggregated Billed resource utilization for each job within an EMR Serverless application, simplifying the cost calculation per job run.

AWS Backup now offers a simple, cost-effective, and application-consistent backup and restore solution for SAP HANA databases running on Amazon EC2. With this launch, you can centrally automate backup and restore of your SAP HANA application data, in addition to the currently supported AWS services. Using AWS Backup’s seamless integration with AWS Organizations, you can create and manage immutable backups of SAP HANA databases across all your accounts, help protect your data from inadvertent or malicious actions, and restore the data.

Amazon Relational Database Service (Amazon RDS) events now include tags in the message body, which provide metadata about the resource that was affected by the service event. The message receiver can use these tags to do payload-based parsing with rule matching, enabling workflows such as routing, filtering, and down stream automation.

Amazon DynamoDB now supports up to 50 concurrent table restores per AWS account. The default service quota for table restores increased from 4 to 50, and is applicable to restores performed using point-in-time recovery and on-demand backups managed by DynamoDB and AWS Backup.

Amazon Elastic File System (Amazon EFS) has increased the maximum throughput per file system by 3x to 10 GiB/s of read throughput and 3 GiB/s of write throughput.

Amazon Personalize is integrating with Amazon SageMaker Data Wrangler to make it easier for customers to import and prepare their data. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. The quality of data used for model training affects the quality of the recommendations, which makes data aggregation and preparation a critical step to get high-quality recommendations using Amazon Personalize. With this launch, Amazon Personalize gives you the ability to prepare your data through Amazon SageMaker Data Wrangler before using it in Amazon Personalize. Customers can use Amazon SageMaker Data Wrangler to import data from 40+ supported data sources and perform end-to-end data preparation (including data selection, cleansing, exploration, visualization, and processing at scale) in a single user interface using little to no code. This allows customers to rapidly prepare their users, items or interactions dataset using Amazon SageMaker Data Wrangler by leveraging over 300 built-in data transformations, retrieving data insights, and quickly iterating by fixing data issues.

We are excited to announce the launch of our AWS Manufacturing and Industrial Competency. Previously known as the AWS Industrial Software Competency, the updated AWS Manufacturing and Industrial Competency has expanded to include new categories to further differentiate partners and help customers find the right solution for their unique business needs.

AWS Glue is a serverless data integration service that makes it easy to discover, prepare, and combine data for analytics, machine learning (ML), and application development. Similar to other AWS services, AWS Glue has service limits to protect customers from an unexpected increase in their bill caused by excessive provisioning. Customers can view their current resource limits and request an increase (where appropriate) by logging into the AWS Service Quota console. Today, we are pleased to announce a new capability on Glue that will allow customers to monitor the utilization of certain Glue resources in Cloudwatch and configure the appropriate CloudWatch alarms. 

Amazon DocumentDB (with MongoDB compatibility) is a scalable, highly durable, and fully managed database service for operating mission-critical MongoDB workloads. 

Using Amazon Connect Customer Profiles inside the agent workspace, agents can now see cases from 3P case management solutions and Connect Cases inside a particular customer profile. Having both customer profile information together with case details in the same window makes it easier for agents to understand the customer context and reduces wasted time switching between applications. Using the cases table inside the Customer Profile, agents can see case information such as status, date last updated, title, and source system. If agents need more detail, they can click on the case to access additional information from the source system. For example, agents handling transfers, can now see the caller’s open case regarding license renewal, quickly assist them without needing to gather more information, and help provide faster issue resolution. As another example, agents can now see repeat callers’ open cases regarding late deliveries and quickly give them an update on the delivery status.

AWS Elastic Disaster Recovery (AWS DRS) now supports additional capabilities to help simplify managing the launch settings for your source servers. The launch settings you define using Elastic Disaster Recovery determine how to launch your source servers on AWS as drill and recovery instances. Elastic Disaster Recovery minimizes downtime and data loss with fast, reliable recovery of on-premises and cloud-based applications using affordable storage, minimal compute, and point-in-time recovery.

Today, AWS announces the preview release of the AWS CloudFormation Template Sync Controller for Flux, a new open source project that automates the process of syncing changes from CloudFormation templates to CloudFormation stacks.

Amazon SageMaker announced Collections, a new capability to organize your machine learning models in the Amazon SageMaker Model Registry. You can use Collections to group registered models that are related to each other and organize them in hierarchies to improve model discoverability at scale.

Today, we are announcing the availability of AWS Backup in the Asia Pacific (Hyderabad), Europe (Spain), and Europe (Zurich) Regions. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning compute, storage, and databases. Using AWS Backup, you can centrally create and manage immutable backups of your application data, protect your data from inadvertent or malicious actions, and restore the with a few simple clicks.

Amazon Elastic Container Service (Amazon ECS) on AWS Fargate now lets you configure the size of ephemeral storage up to a maximum of 200GiB for your Windows containers. With this launch, you can now configure ephemeral storage for your Fargate tasks running on both Linux (platform 1.4.0 and above) and Windows (platform 1.0.0 and above). 

AWS Transit Gateway is now available in the Europe (Spain) AWS Region with AWS Direct Connect. AWS Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway.

Today, Amazon Elastic Container Service (ECS) is announcing availability of ECS-optimized Amazon Linux 2023 (AL2023) AMIs and group managed service accounts (gMSA) on ECS Linux containers through credentials-fetcher integration. gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Today, AWS announces the general availability of Incident Managers support of Microsoft Teams, extending support to three chat collaboration platforms, Amazon Chime, Slack, and now Microsoft Teams.

We are excited to announce that Amazon EMR on EKS is now available in the Middle East (Bahrain) and Asia Pacific (Hong Kong) Regions.

We are excited to highlight AWS Media & Entertainment Competency Partners, who enable enterprises to navigate their media and entertainment workloads to the cloud in an efficient, cost-effective method backed by AWS.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Asia Pacific (Melbourne) Region.

AWS Transit Gateway is now available in the Asia Pacific (Hyderabad) AWS Region with AWS Direct Connect. AWS Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway. 

Today, Amazon Redshift introduced additional performance enhancements that speed up string-based data processing by 5x to 63x compared to alternative compression encodings such as LZO or ZSTD. Amazon Redshift achieves this through vectorized scans over light weight CPU-efficient dictionary-encoded string columns that allows the database engine to operate directly over compressed data. These techniques are optimal on low cardinality string columns (CHAR or VARCHAR). Low cardinality string columns are columns that have up to a few hundred unique string values.

Today, AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) Trn1n instances, which are powered by AWS Trainium accelerators. Building on the capabilities of Trainium-powered Trn1 instances, Trn1n instances double the network bandwidth to 1600 Gbps of second-generation Elastic Fabric Adapter (EFAv2). With this increased bandwidth, Trn1n instances deliver up to 20% faster time-to-train for training network-intensive generative AI models such as large language models (LLMs) and mixture of experts (MoE). Similar to Trn1 instances, Trn1n instances offer up to 50% savings on training costs over other comparable Amazon EC2 instances.

Today, AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) Inf2 instances. These instances deliver high performance at the lowest cost in Amazon EC2 for generative AI models including large language models (LLMs) and vision transformers. Inf2 instances are powered by up to 12 AWS Inferentia2 chips, the latest AWS designed deep learning (DL) accelerator. They deliver up to four times higher throughput and up to 10 times lower latency than first-generation Amazon EC2 Inf1 instances.

Starting today, storage optimized Amazon EC2 I4i instances are now also available in Asia Pacific (Melbourne, Mumbai, Osaka), Europe (Milan, Stockholm), and Middle East (Bahrain) regions. Amazon EC2 I4i instances are powered by 3rd generation Intel Xeon Scalable processors (Ice Lake) and deliver the highest local storage performance within Amazon EC2 using AWS Nitro NVMe SSDs. 

Today, AWS announces the general availability of AWS Elemental MediaConnect Gateway, a new cloud-connected software application that transmits live video between your on-premises multicast network and AWS Elemental MediaConnect. You can easily build end-to-end live video contribution and distribution workflows in AWS at scale.

Today, AWS is announcing the general availability of Amazon CodeWhisperer. This artificial intelligence (AI) coding companion generates real-time single-line or full function code suggestions in your integrated development environment (IDE) to help you more quickly build software. With general availability, we are excited to introduce two tiers: CodeWhisperer Individual and CodeWhisperer Professional.

Customers can now create Amazon FSx for Windows File Server file systems in three new AWS Regions: Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad).

Starting today, customers can use Atlassian’s Jira Service Management (JSM) Cloud as a single place to track and manage cases (incidents) from AWS Support via the AWS Service Management Connector for JSM. AWS Support enables users to create, track and resolve cases related to AWS resources in a central place, helping customers reduce the time to issue resolution. This dual sync integration between AWS Support cases and JSM incidents (issues) enables users to manage AWS Support cases while using their existing workflows in JSM Cloud.

AWS Lambda now supports SnapStart for Java functions in 6 additional AWS Regions: Asia Pacific (Mumbai), Asia Pacific (Seoul), Canada (Central), Europe (London), South America (São Paulo), US West (N. California). AWS Lambda SnapStart for Java delivers up to 10x faster function startup performance at no extra cost. Lambda SnapStart is a performance optimization that makes it easier for you to build highly responsive and scalable Java applications using AWS Lambda, without having to provision resources or spend time and effort implementing complex performance optimizations.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in Asia Pacific (Hyderabad), Europe (Spain), and Europe (Zurich) Regions. Amazon MSK is a fully managed service for Apache Kafka and Kafka Connect that makes it easier for you to build and run applications that use Apache Kafka as a data store. Amazon MSK is fully compatible with Apache Kafka, which enables you to more quickly migrate your existing Apache Kafka workloads to Amazon MSK with confidence or build new ones from scratch. With Amazon MSK, you spend more time building innovative streaming applications and less time managing Kafka clusters. 

AWS has updated the Service Level Agreement (SLA) for Amazon Chime SDK to include a Monthly Uptime Percentage of 99.99% with a completed AWS Well-Architected Review. The Amazon Chime SDK provides builders with an easy way to add real-time voice, video, and messaging, powered by machine learning, into their applications.

Customers can now create Amazon FSx for Lustre file systems in three new AWS Regions: Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad).

Developers can now use updated video background blur and replacement with improved quality in Amazon Chime SDK client library for JavaScript. The Amazon Chime SDK lets developers add real-time audio, video, and screen share to their web applications. Video background blur and replacement obscure users’ surroundings to help increase visual privacy. 

Customers can now create Amazon FSx for NetApp ONTAP file systems in three new AWS Regions: Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad).

We are excited to announce Amazon GameLift now supports games built on Unreal Engine 5 with the latest update to the Amazon GameLift Server SDK. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. The latest version of the Amazon GameLift Server SDK 5.0 now supports Unity 2020.3, Unreal 4.26, Unreal 5.0, Go language, and custom C++ and C# engines. 

AWS IoT Core, a managed cloud service that lets customers connect billions of Internet of Things (IoT) devices and routes trillions of messages to AWS services, announces support for Shared Subscriptions to its MQTT-based messaging broker service. MQTT is a device-to-device messaging communication standard widely used in IoT applications for device to cloud message delivery. AWS IoT Core supports both MQTT3.1.1 and the newer MQTT5 industry specifications allowing clients with either version to take advantage of this new feature seamlessly.

AWS Lake Formation is a service that allows you to set up a secure data lake in days. A data lake is a centralized, curated, and secured repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better business decisions.

Starting today, customers can receive cost data for Amazon Elastic Container Service (Amazon ECS) tasks and AWS Batch jobs in the AWS Cost and Usage Reports (CUR), enabling you to analyze, optimize, and chargeback cost and usage for your containerized applications. With AWS Split Cost Allocation Data, customers can now allocate application costs to individual business units and teams based on how containerized applications consume shared compute and memory resources.

Customers can now use EC2 Image Builder to easily scan custom Amazon Machine Images (AMIs) and Container images in their image pipelines to evaluate the impact of CVEs (Common Vulnerabilities and Exposures). You no longer have to manage custom scripts that identify CVEs on your images during image build process, to analyze next steps and mitigate the impact of CVEs. With this feature, powered by Amazon Inspector, you are provided a security overview of your AMIs and Container images that details the affected resources, vulnerability details, and known remediations.

Amazon Web Services (AWS) announces the general availability of Wideband Digital Intermediate Frequency (DigIF) for satellite operators using Software Defined Radios (SDRs) with AWS Ground Station. With Wideband DigIF, satellite operators can use a SDR of their choice to perform demodulation and decoding of data in their Amazon Virtual Private Cloud (Amazon VPC), resulting in more control and flexibility of downlink data.

AWS Lambda now supports Node.js 18 as a managed runtime in the AWS GovCloud (US) Regions. Developers creating serverless applications in Lambda with Node.js 18 in the AWS GovCloud regions can take advantage of new features such as an upgrade of the bundled AWS SDK for JavaScript to v3 and improved support for deploying ES Modules using Lambda layers. This release also provides access to Node.js 18 language enhancements, including the experimental ‘fetch’ API. For more information on Lambda’s support for Node.js 18, see our blog post at Node.js 18.x runtime now available in AWS Lambda.

Customers can now create file systems using Amazon Elastic File System (Amazon EFS) in the AWS Asia Pacific (Melbourne) Region.

Kubernetes 1.26 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.26. Starting today, you can create new 1.26 clusters or upgrade your existing clusters to 1.26 using the Amazon EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

AWS Lake Formation is a service that allows you to set up a secure data lake in days. A data lake is a centralized curated, and secured repository that stores all your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better business decisions.

Amazon AppFlow announces the release of 6 new data connectors for Software-as-a-Service (SaaS) applications. The new connectors enable you to transfer your data from Aftership, BambooHR, Freshsales, Google Sheets, Kustomer, and Pipedrive, providing connectivity to CRM, HR, and shipment tracking applications. The Amazon AppFlow integrations make it easier for you to access your data, gain actionable insights, and streamlines analysis and reporting.

AWS Firewall Manager is now available in the Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad) Regions, bringing AWS Firewall Manager to a total of 28 AWS commercial regions, two GovCloud regions, and all Amazon CloudFront edge locations.

AWS WAF customers can now use up to 5,000 Web ACL capacity units (WCU) per web ACL. WAF uses WCU to calculate and control the operating resources that are required to run WAF rules, rule groups, and web ACLs. Previously, WAF permitted a maximum of 1,500 WCU per web ACL. Customers who needed more than 1,500 WCU for their web ACLs needed to request manual limit increases. As WAF has launched new features and improved core product capabilities over the past few years, customers have asked us to increase the WCU limit so that it’s easier for them to use these new features without worrying about running out of capacity. 

AWS Lambda now supports setting Maximum Concurrency to the Amazon SQS event source in the AWS GovCloud (US) Regions, which allows customers to control the maximum concurrent invokes by the Amazon SQS event source. When multiple Amazon SQS event sources are configured to a function, customers can control the maximum concurrent invokes of an individual SQS event source.

AWS AppSync is a managed service for building scalable APIs that connect applications to data and events. Developers can now use the new AppSync EventBridge data source target in their AppSync API to easily publish events generated from their applications, such as shopping cart actions, to subscribers of an event bus powered by Amazon EventBridge. 

Starting today, AWS WAF supports inspecting the body of incoming requests to protected CloudFront distributions, up to 64KB. The default inspection size of the body of an HTTP/S request has been increased from 8KB to 16KB. This new default will be applied to all new and existing WAF web access control lists, free of charge. 

Starting today, EC2 Serial Console is now generally available on EC2 bare metal instances in addition to Nitro virtual instances. EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues interactively, by establishing a connection to the serial port of an instance.

You can now create Apache Airflow version 2.5 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.5 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

You can now use AWS PrivateLink to privately access Amazon Pinpoint from your Amazon Virtual Private Cloud (Amazon VPC) without using public IPs, and without requiring the public internet.

Today, AWS announced the general availability of Amazon Rekognition Face Liveness, a new feature to deter fraud in facial verification. Face Liveness helps customers detect in seconds that real users, and not bad actors using spoofs, are accessing their services.

AWS Firewall Manager now supports AWS WAF Bot Control for Targeted Bots, AWS WAF Fraud Control - Account Takeover Prevention, AWS WAF Rules action overrides for managed rule groups, centralized AWS WAF logging directly to S3 buckets and new logging filters, and AWS WAF Captcha Configuration, Challenge configuration, and Token Domains.

Starting today, customers can deploy their workloads on Amazon ECS on AWS Fargate in a manner compliant with Federal Information Processing Standard (FIPS) 140-2. FIPS is a U.S. and Canadian government standard that specifies the security requirements for cryptographic modules that protect sensitive information.

AWS Config supports 27 new resource types in advanced queries for services including AWS IoT Analytics, AWS IoT SiteWise, Amazon Interactive Video Service (Amazon IVS), Amazon Kinesis Data Analytics, Amazon Relational Database Service (Amazon RDS), Amazon Simple Storage Service (Amazon S3), AWS Network Firewall, Amazon Elastic File System (Amazon EFS), AWS Global Accelerator, and Amazon Elastic Kubernetes Service (Amazon EKS).

Amazon Connect Voice ID now enables customers to maintain multiple fraudster watchlists for their Voice ID domains, with each watchlist supporting up to 500 fraudsters. Previously one Voice ID domain only supported one fraudster watchlist for known fraudster detection. With the availability of multiple watchlists, customers can configure which fraudster watchlist within their Voice ID domain is to be used for a specific contact in the Amazon Connect Contact Flow. Voice ID APIs allow customers to specify which watchlist a fraudster will be associated with when registering fraudsters, as well as manage individual fraudsters within watchlists.

Amazon GuardDuty adds three new threat detections to help detect suspicious DNS traffic indicative of potential attempts by malicious actors to evade detection when performing activities such as exfiltrating data, or using command & control servers to communicate with malware.

Amazon Connect now supports the ability to concurrently offer agents contacts across multiple channels, including voice, chat, and tasks. Now contact center managers can configure an agent’s routing profile to receive contacts from multiple channels at the same time. For example, an agent currently handling a chat could be offered a voice call from a high-priority queue when other agents aren't available. Contact center managers can also choose which channels cannot be interrupted. For example, they can allow chats to be interrupted by a phone call, but then prevent offering any further contacts until the agent completes that phone call.

Today, AWS announces media metrics for AWS Elemental MediaConvert, increasing the information available for transcoding events and associated media assets. Now you can view and act on a broader set of data both during and after transcoding jobs complete. You can use the information available through media metrics to build dashboards with Amazon CloudWatch and to programmatically integrate actions into your workflows via Amazon EventBridge.  

AWS is pleased to announce an update to the AWS Well-Architected Framework, which will provide customers and partners with more prescriptive guidance on building and operating in the cloud, and enable them to stay up-to-date on the latest architectural best practices in a constantly evolving technological landscape.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports Amazon RDS Optimized Reads for up to two times faster query processing compared to previous generation instances. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to two times faster with Optimized Reads on RDS for PostgreSQL. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by PostgreSQL on the local NVMe-based SSD block-level storage, thereby reducing your traffic to Elastic Block Storage (EBS) over the network. Refer to our recent blog post to learn more about performance improvements using local disk based database instances for workloads that have highly concurrent read/write processing.

Amazon QuickSight now supports nested conditions within Row Level Security (RLS) tags where you can combine AND and OR conditions to simplify multi-tenant access patterns. You can use RLS with tag-based rules to restrict access to a dataset when embedding dashboards for anonymous users. Previously, you could combine RLS tags using AND condition with a value you assign to the tags at run time. To learn more about setting up row level security using session tags with the OR condition click here.

Amazon SageMaker Inference Recommender (IR) helps customers select the best instance type and configuration (such as instance count, container parameters, and model optimizations) for deploying their ML models on SageMaker. Today, we are announcing deeper integration with Amazon CloudWatch for logs and metrics, python SDK support for running IR jobs, enabling customers to run IR jobs within a VPC subnet of their choice, support for running load tests on existing endpoint via a new API, and several usability improvements for easily getting started with IR.

AWS Glue Studio now supports new native Amazon Redshift connector capabilities: browse Amazon Redshift tables directly in Glue Studio, add native Redshift SQL, execute common operations while writing to Amazon Redshift including drop, truncate, upsert, create or merge. AWS Glue Studio offers a visual extract-transform-and-load (ETL) interface that helps ETL developers to author, run, and monitor AWS Glue ETL jobs quickly. With this new feature, ETL developers can read and write data into Amazon Redshift more effectively using AWS Glue.

AWS Lambda functions can now progressively stream response payloads back to the client, including payloads larger than 6MB, helping you improve performance for web and mobile applications. AWS Lambda is a serverless compute service that lets you run code without provisioning or managing infrastructure.

AWS Trusted Advisor Engage, a new capability in AWS Trusted Advisor, is now available in preview to AWS Enterprise On-Ramp Support customers. Trusted Advisor Engage makes it easy for AWS Enterprise On-Ramp Support customers to view, request, and track AWS Support Engagements. Support Engagements are services delivered by AWS Support experts to help Support customers review the health of their cloud operations, optimize costs, and scale workloads efficiently. Examples include Cost Optimization Workshop, AWS Infrastructure Event Management, and strategic business reviews.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6gd instances are available in Asia Pacific (Seoul). C6g instances are available in Asia Pacific (Melbourne) and Europe (Zurich). M6g instances are available in Africa (Cape Town), Asia Pacific (Melbourne, Osaka) and Europe (Zurich). R6g instances are available in Africa (Cape Town), Middle East (Bahrain), Asia Pacific (Melbourne) and Europe (Zurich).

Starting today, you have the option to use the AWS Management Console for Amazon Relational Database Services (Amazon RDS) and Amazon Aurora to create an Amazon ElastiCache cluster and attach it to your relational database.

NICE DCV announces the general availability of the DCV Extension Software Development Kit (SDK). This SDK allows customers and independent software vendors (ISVs) to build custom extensions for the DCV protocol. These extensions provide a flexible method to integrate your streaming session to support custom peripherals, native applications, and more.

We are excited to announce that AWS CloudTrail Lake is now available in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. These regions are in addition to the existing Regions where CloudTrail Lake is available.

Amazon SageMaker Canvas continues to democratize machine learning (ML) by enabling business analysts to share predictions from ML models with Amazon QuickSight. This enables business analysts to leverage ML predictions generated in SageMaker Canvas, enrich them with interactive dashboards in QuickSight, and use the insights from these dashboards in their day-to-day business decisions. SageMaker Canvas is a visual interface that enables business analysts to generate accurate ML predictions on their own — without requiring any ML experience or having to write a single line of code.

Amazon Relational Database Service (Amazon RDS) Custom for SQL Server now supports the Multi-AZ deployment model, which provides enhanced availability and durability. Amazon RDS Custom is a managed database service for applications that require customization of the underlying operating system and database environment. RDS Custom lets you automate database administrative efforts for legacy, custom, and packaged apps so you can focus on more strategic, business-impacting activities.

Following the open source community announcement of updates to the PostgreSQL database, we updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.7, 13.10, 12.14, and 11.19. These releases contain bug fixes and improvements by the PostgreSQL community. Refer to the Aurora version policy to help you decide how often and how to plan your upgrade. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 15 (15.2). New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Aurora PostgreSQL version 3.1 such as Kerberos support with Active Directory and support for Linked Servers. Please refer to Amazon Aurora PostgreSQL updates for more information.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports up to 15 asynchronous read replicas from Amazon RDS Multi-AZ deployments with two readable standbys delivering up to 8x the previous read capacity. 

Amazon Relational Database Service (Amazon RDS) for MySQL now supports inbound replication from Amazon RDS Single-AZ database (DB) instances and Amazon RDS Multi-AZ DB instances with one standby to Amazon RDS Multi-AZ deployments with two readable standby database (DB) instances. You can use this inbound replication to help migrate your existing Amazon RDS MySQL deployments within minutes to Amazon RDS Multi-AZ deployments with two readable standby db instances, which has one writer instance and two readable standby instances across three availability zones. By creating a Multi-AZ deployment with two readable standby db instances as a read replica of your existing RDS MySQL database instance, you can promote the read replica to be your new primary, typically within minutes. 

We are excited to announce support for Apache Spark with Java 11 in EMR on EKS. Amazon EMR on EKS enables customers to run open-source big data frameworks such as Apache Spark on Amazon EKS. AWS customers can now leverage Java 11 as a supported Java runtime to run Spark workloads on Amazon EMR on EKS.

AWS Proton now allows customers to sync their service specifications from a Git repository. Customers use Proton as a self-service template system to define and update infrastructure. Now, customers can sync Proton service configurations like compute size and target deployment environment directly from GitHub or Bitbucket.

We are excited to launch the AWS Cloud Operations Competency. AWS Cloud Operations covers five fundamental solution areas: Cloud Governance, Cloud Financial Management, Monitoring and Observability, Compliance and Auditing, and Operations Management. The new competency enables customers to select validated AWS Partners who offer comprehensive solutions with an integrated approach across multiple areas. 

Starting today, you can use Amazon CodeCatalyst Dev Environments (Preview) with linked GitHub repositories. CodeCatalyst is a unified software development service that makes it faster to build and deliver software on AWS. Dev Environments, a feature of CodeCatalyst, are preconfigured, scalable cloud development environments accessible from popular IDEs. They help developers instantly start editing, testing and pushing code.

You can now subscribe to Microsoft Office 2019 Professional Plus from AWS on Windows 10 and Windows 11 Bring Your Own License (BYOL) Amazon WorkSpaces Core instances. The new offering makes it easier for customers to use the Office suite of applications on WorkSpaces Core. 

Distributor, a capability of AWS Systems Manager that allows you to install and update software on your instances with version control, now allows you to install the New Relic Infrastructure Monitoring agent directly from Distributor without having to create or maintain any software packages. You can easily deploy the New Relic Infrastructure Monitoring agent across your fleet of AWS Systems Manager managed instances by navigating to the “Third Party” tab in the Distributor console, and selecting to “Install one time” or “Install on a schedule”. 

AWS Security Hub has released 4 new controls for its National Institute of Standards and Technology (NIST) SP 800-53 Rev. 5 standard. These controls conduct fully-automatic security checks against Elastic Load Balancing (ELB), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Redshift, and Amazon Simple Storage Service (Amazon S3). To use these controls, you should first turn on the NIST standard. If you are already using the standard and have Security Hub set to automatically turn on new controls, these new controls will run without having to take any additional action.

Amazon Monitron is an end-to-end system that uses machine learning to detect abnormal conditions in industrial equipment and enable predictive maintenance. Amazon Monitron includes purpose-built sensors to capture vibration and temperature data; gateways to automatically transfer data to the AWS Cloud; and a mobile and web application for system setup, analytics, and notification. 

Amazon AppStream 2.0 is now available in the AWS GovCloud (US-East) Region, an isolated AWS Region designed to host sensitive data and regulated workloads in the cloud for customers who have U.S. federal, state, or local government compliance requirements. With this launch, you can deploy general purpose, compute-optimized, memory-optimized, accelerated computing, storage optimized, graphics pro, graphics-g4, and graphics pro-g4 streaming instances in both the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions to help meet the needs of your users.

We are happy to announce that AWS Glue, a serverless data integration service, is now available in the AWS Europe (Spain) and AWS Europe (Zurich) Regions.

Amazon Kinesis Data Analytics for Apache Flink is now available in three additional AWS regions: Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad).

AWS App Runner adds 7 new compute configurations to the App Runner service settings. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without having to manage infrastructure. With App Runner, you do not have to manage any load balancers and auto-scaling groups. When you create an App Runner service, you select a compute configuration, a combination of vCPU and compute memory, for your web application or API, and define maximum concurrency, the maximum number of concurrent requests one application instance can process. App Runner automatically scales your application instances based on concurrent requests that your App Runner service receives.

The AWS Controllers for Kubernetes (ACK) service controller for Amazon MemoryDB for Redis is now generally available. Customers can provision and manage MemoryDB resources using the ACK service controller.

Amazon S3 adds a new Amazon CloudWatch metric that can be used to diagnose and correct S3 Replication configuration issues more quickly. The OperationFailedReplication metric, available in both the S3 console and in Amazon CloudWatch, gives you per-minute visibility into the number of objects that did not replicate to the destination bucket for each of your replication rules.

Starting today, you can build, train, and deploy machine learning (ML) models in Asia Pacific (Hyderabad) Region.

AWS Network Firewall now supports IPv6-only subnets, in addition to dual stack (IPv4 and IPv6) subnets. Starting today, you can filter IPv6 traffic to and from the public internet, on-premises network, or any endpoint in your IPv6-enabled Amazon Virtual Private Cloud (VPC) with IPv6-only subnets.

Today, we are pleased to announce that AWS Resource Explorer now supports export and download of search results in comma-separated values (CSV) format. You can use this new capability to export resource search results from the AWS Resource Explorer console and continue your workflow in third-party applications that support CSV import.

Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and build entirely new categories of speech-enabled products. Today, we are excited to announce the general availability of the entire portfolio of Amazon Polly's Neural and Standard voices in the Asia Pacific (Osaka) Region.

Today, AWS CloudFormation has expanded the availability of StackSets to Middle East (UAE) and Asia Pacific (Hyderabad) Regions. With this launch, customers can deploy their stack sets to and from these newly supported AWS Regions.

Starting today, Amazon CloudFront supports the use of S3 Object Lambda Access Points as origins. This means that you can now use S3 Object Lambda Access Point aliases to configure an S3 bucket-style CloudFront origin, and take advantage of CloudFront's 480+ global edge locations to accelerate the delivery of data transformed by your S3 Object Lambda function.

As announced on December 13, 2022, Amazon S3 is now deploying two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. To learn more about the change, read Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023 in the AWS News Blog and Default access settings for new S3 buckets FAQ in the S3 User Guide.

Starting today, Bring Your Own IP (BYOIP) is available in two additional AWS Regions: Asia Pacific (Jakarta) and Middle East (UAE).

Starting today, healthcare and life sciences customers can use Amazon HealthLake in the Asia Pacific (Mumbai) AWS Region. 

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Microsoft OneDrive Connector to index and search messages from Microsoft OneDrive.

Amazon SageMaker Feature Store now supports the ability to permanently delete records from the online store. The online store contains the most recent features and is used for low latency model serving. With this launch, you can now chose between soft delete and hard delete when deleting records, so you have more flexibility when it comes to managing online store data.

Now generally available, AWS Supply Chain is a cloud-based application that helps supply chain leaders mitigate risks and lower costs to increase supply chain resilience. AWS Supply Chain unifies supply chain data, provides machine learning (ML)–powered connectors and actionable insights, and offers built-in contextual collaboration. It is designed to help you increase customer service levels by reducing stock outs and help you lower costs from overstock.

Today, AWS announces the general availability of AWS CodePipeline in Middle East (Bahrain), Africa (Cape Town), and Europe (Zurich).

Starting today, Amplify Studio is available in the Europe South (Milan) region. Customers building Amplify applications with Studio can now deploy applications to Europe South (Milan) region, improving performance for end users in the region.

AWS CodeBuild is now available in three additional AWS Regions: Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad). AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers. CodeBuild scales continuously and processes multiple builds concurrently, so your builds are not left waiting in a queue. You can get started quickly by using prepackaged build environments, or you can create custom build environments that use your own build tools. Using CodeBuild, you are charged by the minute for the compute resources you use.

Today, we are announcing general availability of macOS support for AWS Amplify for Swift (v2.7.1)! This launch allows developers to build cloud-connected apps for iOS and macOS apps. Developers can now leverage the power of the AWS Amplify across iOS and macOS platforms for production workloads. We will be announcing support for watchOS and tvOS in future releases of the library.

With Amazon Athena, you can use your SQL knowledge to query nearly 30 popular AWS and third-party data stores - in addition to data stored in an Amazon S3 data lake - all without learning a new language, developing scripts to extract and duplicate data, or managing infrastructure. Starting today, you can now create and query views on these data sources, which include relational databases, streaming sources, and cloud object stores, for use cases such as interactive analysis and business intelligence reporting.

AWS Migration Hub Orchestrator now supports migration of SAP HANA based systems configured with High Availability configurations, as well as the standalone migration of SAP HANA databases.

Amazon Managed Workflows for Apache Airflow (MWAA) now supports shell launch scripts for environments version 2.x and later.

Amazon Textract is a managed machine learning service that automatically extracts text, handwriting, and data from scanned documents. We regularly improve the accuracy of the underlying machine learning models and add new features based on customer feedback. Today, we are pleased to announce new features and accuracy enhancements for the AnalyzeDocument - Tables feature to help customers automate their document processing workflows. 

Today, we are announcing an improvement for Amazon Elastic Block Store (EBS) performance on Amazon EC2 compute-optimized C6a and general purpose M6a instance types, with similar improvement on R6a in the coming weeks.

AWS Trusted Advisor fault tolerance checks for Amazon ECS are now generally available. AWS Trusted Advisor evaluates your AWS account with automated checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, increase fault tolerance, and monitor service quotas.

Starting today you will receive notifications for your On-Demand Capacity Reservations that are utilizing less than 20% of Amazon EC2 instances in the reservation. These alerts will be delivered to you through AWS Health Dashboard, Cloudwatch Events and email, without any action required from your side and at no additional cost to you.

SageMaker Canvas now supports 45+ data sources that can be used for no-code ML including Amazon Athena and 3rd party SaaS applications such as Snowflake, Salesforce, and SAP OData. Canvas is a point-and-click interface that enables analysts to generate ML predictions without requiring ML experience or having to write a single line of code.

AWS Cloud Development Kit (CDK) now enables developers to validate Infrastructure as Code (IaC) templates against policy-as-code tools during the development lifecycle. Developers can now receive fast and actionable feedback about security or configuration issues, as defined by organizational policies, during CDK application development cycles. By verifying compliance with organizational policies at the early stages of development, the teams can enhance the success rate of the deployment phase for their CDK applications.

AWS Billing Conductor (ABC) now applies a tiered, account-based pricing model for all accounts assigned to an ABC billing group (effective June 1, 2023). The pricing change replaces prior ABC pricing, which relied on the volume of proforma billing records generated. The number of running resources in your account does not affect the new account-based pricing model. Along with the pricing model change, ABC's free tier policy has also been updated as a free trial of 62 days (2 months), rather than the previous limit on usage records. For existing ABC customers, the new free tier policy takes effect on April 1, 2023. For new ABC customers, including those who've tried the service, but don't have an active billing group as of April 1, 2023, the free tier trial begins when they add accounts to an ABC billing group.

Amazon ElastiCache for Redis now makes it simpler and faster for you to get started with setting up an ElastiCache for Redis cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

Today, AWS announces AWS Service Catalog support for Terraform open source. With this launch, customers using Terraform open source can provide self-service provisioning with governance to their teams. Customers can now use Service Catalog as the single tool to organize, govern, and distribute their Terraform configurations within AWS at scale. You can access Service Catalog key features, including cataloging of standardized and pre-approved infrastructure-as-code templates, access control, cloud resources provisioning with least privilege access, versioning, sharing to thousands of AWS accounts, and tagging. End users such as engineers, database administrators, and data scientists simply see the list of products and versions they have access to, and can deploy them in a single action.

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from any document or image. Today, we’re excited to announce the launch of Bulk Document Uploader feature in the Textract Console that enables customers to quickly evaluate the capabilities of Textract on their own set of documents without writing any code. 

Amazon SWF now supports AWS PrivateLink allowing you to run workflows from your Virtual Private Cloud (VPC) without traversing the public internet.

AWS Config now supports 23 more resource types for services, including Amazon AppStream 2.0, AWS EC2 Auto Scaling, Amazon Connect, Amazon Connect Customer Profiles, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EventBridge, Amazon HealthLake, AWS IoT TwinMaker, Amazon Kinesis Video Streams, Amazon Lookout for Vision, AWS Network Manager, Amazon Pinpoint, AWS RoboMaker, and Amazon Route 53 Application Recovery Controller.