May 2023

Today, AWS announces the Amazon EventBridge open-source connector for Apache Kafka Connect. This connector allows you to integrate EventBridge into Kafka Connect environments to deliver events from Kafka topics to EventBridge Event Buses. It also includes useful features, such as schema registry support for Avro, Protobuf, and JSON, consuming from multiple Kafka topics, and IAM role-based authentication.

Today, AWS announced the launch of a new customization feature for the Amazon VPC IP Address Manager (VPC IPAM) dashboard, that allows you to adapt the VPC IPAM dashboard to your specific needs. With this new feature, you can rearrange and resize widgets to your preferences. For example, if you want to see the overlapping CIDRs widget as the first item on the dashboard, you can move it to the top and resize it as needed. The dashboard also includes new insights into your top VPCs and subnets by allocated IP count, so you can take action before any resource runs out of IP addresses. You can also easily identify CIDRs that are overlapping, or CIDRs that are noncompliant with your allocation rules, using new intuitive graphs, to help you not overlook them.

Starting today, you can enable a new Managed Domain List on Amazon Route 53 Resolver DNS Firewall, to block domains identified as low-reputation or that are known or suspected to be malicious by Amazon GuardDuty’s threat intelligence. This means that customers using GuardDuty can now block domains using the same GuardDuty threat intelligence used to monitor and alert you on potential DNS threats for your AWS accounts today.

AWS Application Migration Service (AWS MGN) is now available in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. You can now use Application Migration Service to migrate and modernize your applications in these AWS Regions.

AWS Elemental MediaTailor now recognizes overlay ad-break signals as valid ad break types in over the top (OTT) streams. Non-linear overlay ads can be rendered in-line with the program content on to the client device using metadata returned by MediaTailor’s existing interface to an ad decision server (ADS) and the VAST standard.

Starting today, AWS Pricing Calculator will enable you to re-access your previously saved estimate with pricing as on the date you created the estimate, while giving you the option to update the estimate to reflect latest pricing. The new experience will now make it possible for you to track changes to your cost estimates over time. When updating your previously saved estimate to reflect latest pricing, you may have to enter inputs for specific services to account for any new changes made to service estimation logic or the underlying pricing model since the creation of the estimate. To help you stay informed on the factors leading to these changes, we are also launching a Service updates page that records any significant updates made to computation logic of services within the calculator.

AWS announces the general availability of a new AWS Snowball Edge Storage Optimized device with higher storage capacity. The new Snowball Edge Storage Optimized device increases storage capacity on Snow devices from 80TB to 210TB with high performance NVMe storage, enabling customers to simplify multi-petabyte data migrations from on-premises locations to AWS. 

AWS Service Catalog now supports granting portfolio access to IAM principal (user, group or role) names with wildcards, such as ‘*’ or ‘?’. This enables flexible and efficient sharing of infrastructure-as-code templates for customers using wildcard patterns to cover multiple IAM principal names at a time. Previously, customers had to use the exact IAM principal names to share a portfolio. Customers using AWS IAM Identity Center (successor to AWS Single Sign-On) can now quickly grant their workforce users access to Service Catalog portfolio products.

Today, we are excited to announce the general availability of Niamh and Sofie - new Irish English and Danish female Neural Text-to-Speech (NTTS) voices for Amazon Polly. Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk and to build entirely new categories of speech-enabled products. 

Today, AWS announces the general availability of Amazon Security Lake. This service automatically centralizes security data from AWS environments, SaaS providers, on-premises environments, and cloud sources into a purpose-built data lake stored in your account. Security Lake makes it easier to analyze security data, gain a more comprehensive understanding of security across your entire organization, and improve the protection of your workloads, applications, and data. Security Lake automates the collection and management of your security data from multiple accounts and AWS Regions, so you can use your preferred analytics tools while retaining complete control and ownership over your security data. Security Lake has adopted the Open Cybersecurity Schema Framework (OCSF), an open standard. With OCSF support, the service normalizes and combines security data from AWS and a broad range of enterprise security data sources.

We are excited to announce that Amazon Personalize now offers more flexibility in model training by allowing customers to select which columns in their datasets are used for training. Amazon Personalize enables developers to improve customer engagement through personalized product and content recommendations – no ML expertise required. Amazon Personalize uses data provided by customers to train custom models on their behalf. Previously, all columns in a customer’s dataset were considered during model training. Amazon Personalize now allows customers to exclude columns from training, making it easier to experiment with the data that is used to train models. With this new capability, customers now have the flexibility to filter on any of their data, regardless of whether it is used for training.

Today, AWS announced the opening of a new AWS Direct Connect location within the Sonda Quilicura Q2 data center in Santiago, Chile. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Amazon SageMaker Ground Truth Plus now enables customers to prepare high-quality, large-scale training datasets to fine-tune foundation models to perform human-like generative AI tasks. It also allows skilled humans to review model outputs to align them with human preferences. Additionally, it enables application builders to customize models using their industry or company data while preparing training datasets. SageMaker Ground Truth Plus provides workflows, labeling interfaces, and a skilled workforce to generate high quality training data to accomplish these tasks in a turnkey fully managed service on behalf of the customer.

Starting today, Amazon WorkSpaces provides support for the NICE DCV Extension Software Development Kit (SDK). This SDK allows customers and independent software vendors (ISVs) to build custom extensions for the Amazon WorkSpaces Streaming Protocol (WSP), which is powered by NICE DCV technology.

Today, AWS announces the launch of the Invoice Summary feature. This feature offers additional configurations to AWS customers to reduce the overall size of the AWS Invoices.

AWS Shield Advanced now supports AWS CloudFormation. Starting today, you can easily create and configure Shield Advanced protections against Distributed Denial of Service (DDoS) attacks using a CloudFormation template. With CloudFormation, you can use a programming language or simple text file to automatically configure resource protections in a secure, efficient and repeatable way. Shield resource types available to be deployed using CloudFormation stacks across AWS regions and accounts include resource protection with automatic application-layer DDoS mitigation, Route 53 health checks, Shield Response Team (SRT) access, and proactive engagement with emergency contacts. You can also continue to configure Shield Advanced resource protections using the AWS Management Console, Command Line Interface (CLI) or API.

Today, AWS announced the opening of a new AWS Direct Connect location within the NEC Inzai data center in Inzai, Japan. By connecting your network to AWS at the new Inzai location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Today, AWS announced the opening of a new AWS Direct Connect location within the Equinix BG1 Bogotá data center in Bogotá, Colombia. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Starting today, Amazon AppStream now provides support for the DCV Extension Software Development Kit (SDK). This SDK allows customers and independent software vendors (ISVs) to build custom extensions for AppStream 2.0 which is powered by DCV technology.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Reads for up to 50% faster query processing compared to previous generation instances on Multi-AZ deployment option with two readable standby database instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by MySQL on the local NVMe-based SSD block-level storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 50% faster with Optimized Reads on RDS for MySQL.

Amazon RDS for PostgreSQL 16 Beta 1 is now available in the Amazon RDS Database Preview Environment, allowing you to evaluate the pre-release of PostgreSQL 16 on Amazon RDS for PostgreSQL. You can deploy PostgreSQL 16 Beta 1 in the Amazon RDS Database Preview Environment that has the benefits of a fully managed database, making it simpler to set up, operate, and monitor databases.

Starting today, you can build, train, and deploy machine learning (ML) models in Asia Pacific (Melbourne) Region.

Today, AWS announced the opening of a new AWS Direct Connect location within the PLDT Vitro Makati 2 data center in Manila, Philippines. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

We are excited to announce updates to the Amazon GameLift FleetIQ’s ClaimGameServer operation to better handle game session placement decisions. Amazon GameLift FleetIQ optimizes the use of low-cost Amazon Elastic Compute Cloud (Amazon EC2) Spot Instances for cloud-based multiplayer game hosting. With Amazon GameLift FleetIQ, you can leverage your existing Amazon EC2 and Amazon EC2 Auto Scaling hosting resources while taking advantage of Amazon GameLift optimizations to deliver inexpensive, resilient game hosting for your players. 

Customers can now use AWS Transfer Family in three new AWS Regions: Europe (Zurich), Europe (Spain), and Asia Pacific (Hyderabad).

AWS Firewall Manager is now available in Asia Pacific (Melbourne) region, bringing AWS Firewall Manager to a total of 29 AWS commercial regions, AWS GovCloud (US) regions, and all Amazon CloudFront edge locations.

Amazon Connect now provides contact records and real-time contact events for calls and transfers made to external third-party phone numbers. The new contact records can be used for reporting, billing reconciliation, and analytics. Contact events can be used to create analytics dashboards to monitor and track real-time contact lifecycle activity (e.g., call connected to the third-party). To learn more about these new contact records and events, and how you can stream these to your analytics applications, see our documentation for contact records and contact events.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6gd and R6gd instances are available in AWS Region Asia Pacific (Jakarta). These instances are powered by AWS Graviton2 processors, and they are built on AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. Amazon EC2 C6gd and R6gd instances provide local SSD storage and are ideal for workloads that need high-speed, low latency local storage, such as batch processing, ad serving, open-source databases, in-memory caches, and real time big data analytics. These instances offer up to 25 Gbps of network bandwidth, up to 19 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS), and up to 3.8 TB of NVMe-based SSD storage.

Today, AWS CloudFormation has expanded the availability of StackSets to Asia Pacific (Melbourne), Europe (Spain), and Europe (Zurich) Regions. With this launch, customers can deploy their stack sets to and from these newly supported AWS Regions.

Amazon Cognito now offers a new console experience that makes it even easier for customers to manage Amazon Cognito identity pools and add federated sign in for customers’ applications to get access to AWS resources. Customers that wish to opt in to the new, streamlined experience can do so by navigating to the Amazon Cognito console.

We’re pleased to announce the launch of AWS Glue 4.0 for the AWS GovCloud (US-West) Region. AWS Glue 4.0 is a new version of AWS Glue that accelerates data integration workloads in AWS. AWS Glue 4.0 upgrades the Spark engines to Apache Spark 3.3.0 and Python 3.10. Glue 4.0 gives customers the latest Spark and Python releases so they can develop, run, and scale their data integration workloads and get insights faster.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7g instances are available in AWS Region Asia Pacific (Singapore). C7g instances are powered by AWS Graviton3 processors and built on the AWS Nitro System. AWS Graviton3 processors provide up to 25% better compute performance compared to AWS Graviton2 processors. The AWS Nitro System is a collection of AWS designed hardware and software innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. C7g instances are built for workloads including batch processing, ad serving, video encoding, gaming, scientific modelling, data analytics, and CPU-based artificial intelligence and machine learning (AI/ML) inference.

AWS Security Hub is now available in the Asia Pacific (Melbourne) AWS Region. You can now use Security Hub to centrally view and manage the security posture of your AWS accounts in this Region and take advantage of more than 110 security controls to automatically check your environment against security industry standards and best practices.

Starting today, Amazon SageMaker JumpStart provides the capability to fine-tune a large language model, particularly a text generation model on a domain-specific data set. Customers can now fine-tune models with their custom data set to improve performance in specific domains. For example, this blog describes how to use domain adaption to fine tune a GPT-J 6B model on publicly available financial data from the Security and Exchange Commission so that the model can generate more relevant text for financial services use cases. Customers can fine-tune Foundation Models such as GPT-J 6B and GPT-J 6B FP16 models for domain adaptation on JumpStart inside Amazon SageMaker Studio through UI, and through SageMaker Python SDK.

Amazon ElastiCache for Redis data tiering on Graviton2-based R6gd nodes now supports auto scaling to automatically adjust capacity to maintain steady and predictable performance at the lowest possible cost. You can automatically scale your cluster horizontally by adding or removing shards or replica nodes. ElastiCache for Redis data tiering uses AWS Application Auto Scaling to manage scaling and Amazon CloudWatch metrics to determine when it is time to scale up or down. 

Amazon Aurora PostgreSQL now maintains read availability through writer node restarts. With today’s launch, reader nodes will continue to serve read requests during a writer node restart, improving read availability in the cluster. 

AWS Compute Optimizer now supports external performance metrics from 4 observability partners: Datadog, Dynatrace, Instana, and New Relic in 5 additional regions - Asia Pacific (Osaka), Asia Pacific (Hong Kong), Middle East (Bahrain), Africa (Cape Town), and Europe (Milan). 

AWS AppSync enables developers to build serverless, scalable and performant GraphQL APIs that are designed to securely connect their apps to data and events. Today, we announce the general availability of Merged APIs, which enable GraphQL schema composition and federation for AppSync APIs.

Amazon Athena has updated its data source connectors with new optimizations that can improve performance and reduce cost when querying data that does not reside in Amazon S3. Available today, the updated connectors use dynamic filtering and new predicate push down optimizations to perform more operations in the underlying data source, rather than in Athena, which can reduce query processing time and reduce data scanned.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in Asia Pacific (Melbourne) Region. Amazon MSK is a fully managed service for Apache Kafka and Kafka Connect that makes it easier for you to build and run applications that use Apache Kafka as a data store. Amazon MSK is fully compatible with Apache Kafka, which enables you to more quickly migrate your existing Apache Kafka workloads to Amazon MSK with confidence or build new ones from scratch. With Amazon MSK, you spend more time building innovative streaming applications and less time managing Kafka clusters. 

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Starting today, you can use AWS Shield Advanced in the AWS Europe (Zurich), Europe (Spain), Australia (Melbourne), and Asia Pacific (Hyderabad) Regions. AWS Shield Advanced is a managed application security service that safeguards applications running on AWS from distributed denial of service (DDoS) attacks. Shield Advanced provides always-on detection and automatic inline mitigations that minimize application downtime and latency. Also, it provides protections against more sophisticated and larger attacks for your applications running on Amazon Elastic Compute Cloud (EC2), Amazon Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53. To learn more visit, the AWS Shield Advanced product page.

Today, AWS released new version 1.28 of AWS Copilot with support of a new Static Site pattern, that makes it easier to deploy single page web applications on AWS. AWS Copilot is a command-line interface (CLI) that makes it easier for customers to build, deploy, and operate containerized applications on AWS by providing common application architecture and infrastructure patterns, user-friendly operational workflows, and configuring deployment pipelines.

Starting today, customers can run beta macOS versions on their EC2 M1 Mac instances by registering their instances with the Apple Developer Program, and upgrading to their desired preview, seed, or release candidate macOS versions from within their guest environments. With this capability, Apple developers can now integrate latest macOS features into their applications and test existing applications for compatibility before public macOS releases.

Customers can now create Amazon FSx for Lustre file systems in the AWS Asia Pacific (Melbourne) Region.

Kubernetes 1.27 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.27. Starting today, you can create new 1.27 clusters or upgrade your existing clusters to 1.27 using the Amazon EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

Customers can now create Amazon FSx for NetApp ONTAP file systems in the AWS Asia Pacific (Melbourne) Region.

Customers can now create Amazon FSx for Windows File Server file systems in the AWS Asia Pacific (Melbourne) Region.

Today, AWS announced the opening of a new AWS Direct Connect location within the Equinix TR2 data center in Toronto, Canada. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Starting today you can package your media streams in Low-Latency HTTP Live Streaming (LL-HLS) format with AWS Elemental MediaPackage. LL-HLS functionality can be used with AWS Elemental MediaLive or AWS Elemental Live v2.25.0, in combination with SCTE-35 for ad insertion workflows, and with SPEKE v2 for multi-key digital rights management (DRM), including key rotation. 

AWS DataSync is now available in the Asia Pacific (Melbourne) region. You can now use DataSync to copy data between on-premises, edge, or other cloud storage and AWS Storage services, as well as between AWS Storage services in the Asia Pacific (Melbourne) region.

You can now use Amazon Managed Workflows for Apache Airflow (MWAA) for use cases that are subject to Service Organization Control (SOC) requirements. MWAA is now SOC 1, 2 and 3 compliant, allowing you to get deep insight into the security processes and controls that protect customer data. AWS maintains SOC compliance through extensive third-party audits of AWS controls. These audits ensure that the appropriate safeguards and procedures are in place to protect against security risks that may affect the confidentiality, integrity, and availability of customer and company data. AWS SOC reports are independent third-party examination reports that you can download in AWS Artifact.

Amazon RDS (Relational Database Service) Performance Insights now provides an enhanced console experience to view performance monitoring metrics for Amazon RDS databases. It consolidates information from Amazon CloudWatch and Amazon RDS Performance Insights to provide a comprehensive view of your database’s health. This removes the need for you to gather data from multiple sources and speeds up the diagnosis of database performance issues.

Today, AWS Amplify is announcing Authenticator UI component for Swift and Android. Developers can now use the Authenticator UI component to build end to end login/registration workflows for their Amplify powered Swift and Android projects in minutes. Moreover, the Authenticator UI component sets up the sign in and sign up workflows based on the existing auth configuration right out of the box. This UI component is built entirely using native SwiftUI and Android Jetpack Compose components, so developers can provide a user experience tailored to the Swift and Android platforms that their users feel most comfortable with.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports up to 15 asynchronous read replicas from Amazon RDS Multi-AZ deployments with two readable standbys delivering up to 8x the previous read capacity. 

AWS Key Management Service (KMS) announced today that the hardware security modules (HSMs) used in the service were awarded Federal Information Processing Standards (FIPS) 140-2 Security Level 3 certification from the U.S. National Institute of Standards and Technology (NIST). The FIPS 140 program validates areas related to the secure design and implementation of a cryptographic module, including the correctness of cryptographic algorithm implementations and tamper resistance/response. AWS KMS HSMs have been certified under FIPS 140-2 overall Security Level 2 continuously since 2017. This new certification gives customers assurance that all cryptographic operations involving their keys in AWS KMS happen within an HSM certified at FIPS 140-2 Security Level 3.

Amazon Translate is a neural machine translation service that delivers fast, high-quality, affordable, and customizable language translation. Today, we are announcing the general availability of real time document translation feature that allows customers to translate HTML and Text documents in real time. Until today, to translate documents in real time, customers had to extract the text, translate the text into the target language, and post-process the translated text to convert it into the original file format. With the new real time document translation feature there is no need for any pre-processing or post-processing steps. Customers can use APIs or the AWS console to submit a translation request and receive documents back with source formatting intact.

AWS CodeBuild is now available in the AWS Asia Pacific (Melbourne) Region. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. With CodeBuild, you don’t need to provision, manage, and scale your own build servers. CodeBuild scales continuously and processes multiple builds concurrently, so your builds are not left waiting in a queue. You can get started quickly by using prepackaged build environments, or you can create custom build environments that use your own build tools. Using CodeBuild, you are charged by the minute for the compute resources you use.

Amazon Connect Contact Lens now provides a machine learning powered capability for businesses to help identify top contact drivers by grouping customer conversations into themes. This complements Contact Lens' existing automated contact categorization capabilities that businesses have been using to label contacts for tracking known issues across their contact centers. With theme detection, businesses can discover previously unknown or emerging contact themes from thousands of customer interactions. Businesses can also spot common reasons for customer outreach (e.g. “cancel reservation”, “delayed order”, etc.). They can then take appropriate actions to improve customer experience by expediting issue resolution, and improving IVR options, knowledge base articles, and agent training.

Today, Amazon Simple Email Service (Amazon SES) announces enhancements to its dedicated IPs (managed) feature. Dedicated IPs (managed) helps customers to grow, manage and maintain their sending reputation via exclusive IP addresses without the heavy lifting associated with provisioning and managing dedicated IPs. With this release, customers can view metrics about their dedicated IPs (managed), getting greater visibility into how their dedicated IPs are performing, can create up to 50 dedicated IPs (managed) pools, and can easily convert their dedicated IP (standard) IPs into dedicated IPs (managed).

Starting today, AWS Global Accelerator supports application endpoints in two additional AWS Regions - Asia Pacific (Hyderabad), and Middle East (UAE), expanding the number of supported AWS Regions to twenty-three.

Amazon Redshift announces support for enhanced transaction controls inside stored procedures which enables you to automatically commit the statements inside the procedure. This new NONATOMIC mode can be used for those applications that would like to handle exceptions inside a stored procedure more smoothly. In addition, the NONATOMIC mode helps prevent disruptions in applications due to an error inside a stored procedure.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a new trusted procedural language. This allows you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

AWS re:Post is a cloud knowledge service that provides customers the technical guidance they need to innovate faster and improve operational efficiency with AWS services. Today, re:Post launched the capability for users to associate multiple email addresses to their re:Post profile. re:Post users now have the flexibility to add up to three email addresses and can designate a primary email account for receiving notifications. If users don’t receive an email verification in their primary email account during registration, then they can use one of the other email addresses for verification.

AWS Wickr is now a Health Insurance Portability and Accountability Act of 1996 (HIPAA) eligible service. Customers that are subject to HIPAA can use AWS Wickr to communicate with internal stakeholders and external partners while helping to protect against third-party access to personal data, including personally identifiable information (PII) and protected health information (PHI).

Starting today, memory optimized Amazon Compute Cloud (Amazon EC2) X2idn and X2iedn instances are available in Asia Pacific South (Hyderabad) region. These instances, powered by 3rd generation Intel Xeon Scalable Processors and built with AWS Nitro System, are designed for memory-intensive workloads. They deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These instances are SAP-certified for running Business Suite on HANA, SAP S/4HANA, Data Mart Solutions on HANA, Business Warehouse on HANA, SAP BW/4HANA, and SAP NetWeaver workloads on any database.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6i and M6i instances are available in AWS Region Asia Pacific (Hyderabad). These instances are built on AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

Starting today, memory optimized Amazon Compute Cloud (Amazon EC2) X2idn and X2iedn instances are available in Asia Pacific South (Hyderabad) region. These instances, powered by 3rd generation Intel Xeon Scalable Processors and built with AWS Nitro System, are designed for memory-intensive workloads. They deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These instances are SAP-certified for running Business Suite on HANA, SAP S/4HANA, Data Mart Solutions on HANA, Business Warehouse on HANA, SAP BW/4HANA, and SAP NetWeaver workloads on any database.

Customers of AWS IAM Identity Center (successor to AWS Single Sign-On) can use CyberArk Secure Cloud Access, Ermetic, and Okta Access Requests for temporary elevated access, also known as just-in-time access. As part of an ongoing collaboration with partners, AWS Identity validated that these solutions integrate with Identity Center and address common customer requirements, such as the ability to request and approve time-bound access, and to audit action logs.

AWS Chatbot now supports access to Amazon CloudWatch dashboards and Logs Insights from AWS Chatbot for Microsoft Teams and AWS Chatbot for Slack. AWS customers can now find the status of their application health by accessing CloudWatch dashboards and log telemetry from their chat channels. When they receive Amazon CloudWatch alarm notifications for an incident in their chat channel, they can analyze the diagnostic data from the dashboards and remediate directly from their chat channel without switching context.

Amazon Aurora MySQL-Compatible Edition now supports a new, enhanced binary log (binlog). The enhanced binlog reduces the compute performance overhead caused by enabling binlog, which, in certain cases, can reach up to 50%, down to 13%. The enhanced binlog also improves database recovery time by up to 99% after restarts and failovers, as compared to when native MySQL binlog is enabled.

AWS ParallelCluster 3.6 is now generally available. Key new features include support for automatic health checks for GPU instances and support for Red Hat Enterprise Linux (RHEL8). Other important features in this release include:

1. Ability to customize Slurm settings not managed by ParallelCluster
   
2. A programmatic interface to manage ParallelCluster using AWS CloudFormation
   
3. Support for up to 50 queues and a total of 50 compute resources per cluster
   
4. Tag-based cost monitoring in ParallelCluster UI
   
5. Support for custom resource tags for queues, head node, and ParallelCluster-managed storage
   
6. Extended Amazon CloudWatch metrics for disk usage, idle instances, and errors
   
7. Improved head node resiliency with configurable log rotation
   

Today, AWS Backup is announcing support for restoring resources with tags copied from protected resources. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. This launch allows you to seamlessly extend using tag-based policies for access, cost allocation, compliance, and automation workflows for your restored resources.

Today, we are excited to announce that Amazon Transcribe now supports streaming transcription in 3 more AWS regions -Asia Pacific (Singapore), Asia Pacific (Mumbai) and Africa (Cape Town). Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capabilities to your applications. 

Amazon SageMaker now supports geospatial machine learning (ML), making it easier for data scientists and ML engineers to build, train, and deploy ML models using geospatial data. Today, the majority of all data generated contains geospatial information, but only a small fraction of it is used for ML because accessing, processing, and visualizing the data is complex, time consuming, and expensive.

Amazon EventBridge Event Buses now delivers events with lower latencies enabling you to power an even broader set of latency sensitive event-driven applications, especially in industrial and medical applications. Amazon Eventbridge delivers events up to 80% faster than before, as measured by the time an event is ingested to the first invocation attempt.

Today we are excited to announce the launch of 28 new proactive controls in AWS Control Tower. This launch enhances AWS Control Tower’s governance capabilities, allowing you to implement controls at scale across your multi-account AWS environments by blocking non-compliant resources before they are provisioned for services such as AWS OpenSearch Service, AWS Auto Scaling, Amazon SageMaker, Amazon API Gateway, and Amazon RDS. These new controls help you meet control objectives such as data encryption at rest or limit network access. To see a full list of the new controls, see the controls reference guide. 

Amazon Connect now provides APIs to programmatically create and manage prompts. Prompts are audio files like on-hold music that can be customized and configured to play within call flows. With this launch, you can now programmatically create new custom prompts, or extract prompts stored within Amazon Connect and add them to your Amazon S3 bucket. Additionally, these APIs support AWS CloudTrail, AWS CloudFormation and tagging. To learn more about the new prompt APIs, see the Amazon Connect API reference guide. For more information on AWS CloudFormation, see Amazon Connect Resource Type Reference in the AWS CloudFormation User Guide.

Starting today, Amazon Elastic Compute Cloud (EC2) I4g storage-optimized instances powered by AWS Graviton2 processors are now available in Canada (Central) region. I4g instances deliver the best compute price performance for a storage-optimized instance and the best storage performance per TB for a Graviton-based storage instance. 

Starting today, the AWS Application Discovery Service Agentless Collector supports the discovery of on-premises databases, allowing you to achieve more comprehensive data collection through the deployment of a single tool.

Today, AWS Marketplace announced General availability of two Amazon QuickSight dashboards for AWS Marketplace sellers. Sellers can now access the billed revenue dashboard and collections & disbursements dashboard from the Insights tab of AWS Marketplace Management Portal (AMMP). Previously, sellers could access their business data via downloadable CSV reports on AMMP. Now, the sellers can view, analyze and track key trends and metrics in a visualized manner on QuickSight dashboards on AMMP.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Alfresco PaaS Connector to index and search documents from their Alfresco PaaS repository.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Alfresco Enterprise Connector to index and search documents from their Alfresco Enterprise repository.

Amazon MQ is now available in Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad) and Asia Pacific (Melbourne). With this launch, Amazon MQ is now available in a total of 31 regions.

Amazon Athena has expanded its support for inbound connections via Internet Protocol Version 6 (IPv6) endpoints to include AWS PrivateLink. Starting today, you can now connect to Athena securely and privately using PrivateLink from your Amazon Virtual Private Cloud (VPC), in addition to the public IPv6 endpoints that were previously available.

Starting today, the Amazon Elastic Compute Cloud (Amazon EC2) G5 instances powered by NVIDIA A10G Tensor Core GPUs are now generally available in the Local Zones location in Los Angeles. G5 instances can be used for a wide range of graphics intensive and machine learning use cases. These instances are designed for graphics-intensive applications, machine learning inference, and deliver higher performance for training simple to moderately complex machine learning models when compared to Amazon EC2 G4dn instances.

AWS IoT SiteWise, a service that makes it easy to collect, store, organize, and monitor data from industrial equipment, is announcing user experience improvements of the formula builder in the AWS Console, making it easier for customers to create and manage their metrics and transforms.

AWS DataSync announced support for moving data to and from Amazon S3 compatible storage on AWS Snowball Edge Compute Optimized devices. Amazon S3 compatible storage delivers secure object storage with high resiliency, increased scale, and an expanded S3 API feature set to rugged, mobile edge, and disconnected environments. Customers storing data and running applications on AWS Snowball Edge Compute Optimized devices can now use AWS DataSync to more quickly and easily move data between their Amazon S3 compatible storage and AWS Storage services in-region, enabling them to make a second copy of their data in AWS, archive cold data, or move data to and from AWS for ongoing data workflows.

We are excited to announce that the newly re-designed Amazon EMR console is now available in AWS GovCloud (US-East, US-West) Regions. Amazon EMR is the cloud big data solution for petabyte-scale data processing, interactive analytics, and machine learning using open-source frameworks such as Apache Spark, Apache Hive, and Presto. The re-designed console introduces a new simplified experience to launch and manage EMR on EC2 clusters, EMR on EKS, and EMR Studio.

Starting today, Amazon Elastic Compute Cloud(Amazon EC2) C6in instances are available in Europe (Frankfurt, London, Milan, Zurich). These instances are powered by 3rd Generation Intel Xeon Scalable processors with all-core turbo frequency of up to 3.5 GHz, and are the first x86-based Amazon EC2 instances to offer up to 200 Gbps network bandwidth.

You can now use AWS CloudFormation templates to create and manage Amazon Neptune Serverless clusters in all AWS Regions where Neptune Serverless is supported. You can also use CloudFormation templates to perform in-place engine version upgrades for your Neptune clusters.

Amazon VPC IP Address Manager (IPAM) makes it easier for you to plan, track, and monitor IP addresses for your AWS workloads. Amazon VPC IPAM is now available in Middle East (UAE) Region.

We are announcing the availability of AWS User Notifications for AWS Data Exchange. This feature allows data subscribers to configure human-readable notifications for AWS Data Exchange events, such as when a provider publishes a new revision to a data set or when a provider adds a data set to a product. Previously, data subscribers could configure similar notifications by using AWS Data Exchange events sent via Amazon EventBridge and integrating with services such as Amazon Simple Notification Service.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2023 Release Update (RU) for Oracle Database 19c.

Amazon Detective now helps provide root cause analysis for security findings from eight additional services integrated with AWS Security Hub. With this expanded capability, you can use Detective to conduct more comprehensive investigations, helping you identify resources, patterns, and the scope of potential security issues.

AWS Global Accelerator now supports TCP termination at the edge for IPv6 traffic, in addition to IPv4 traffic. TCP termination automatically improves performance for workloads such as API operations, file uploads, and HTTP workloads. Starting today, customers who use dual-stack accelerators can get the benefits of TCP termination at the edge for both IPv4 traffic and IPv6 traffic. 

Today, AWS announced the general availability of eye gaze direction detection in Rekognition’s Face APIs to support accessibility and safety, validate photos, and help identify where users focus on the screen. The new EyeDirection attribute in Amazon Rekognition DetectFaces and IndexFaces APIs predicts a person’s eye gaze direction yaw (rotation on vertical axis) and pitch (rotation on horizontal axis) angles for each face detected in an image.

Amazon CloudFront announces support for stale-while-revalidate and stale-if-error cache control directives, which can improve performance and availability. The stale-while-revalidate directive instructs CloudFront to immediately deliver stale responses to users while it revalidates caches in the background. The stale-if-error directive defines how long CloudFront should reuse stale responses if there’s an error, which provides a better user experience.

AWS Device Farm is an application testing service that provides web and mobile developers with desktop browsers and real mobile devices so that they can improve the quality of their apps. With today’s launch, we are adding support for VPC connectivity to Private Devices, providing a simple way to connect with endpoints that are accessible only from within a private VPC. The feature supports multiple traffic types, including TCP, UDP, Websockets, and streaming protocols. This new configuration is now available via the AWS API or Console.

Distributor, a capability of AWS Systems Manager that allows you to install and update software on your instances with version control, now allows you to install the CrowdStrike Falcon Sensor agent directly from Distributor without having to create or maintain any software packages. You can easily deploy the CrowdStrike Falcon Sensor agent across your fleet of AWS Systems Manager managed instances by navigating to the “Third Party” tab in the Distributor console, and selecting to “Install one time” or “Install on a schedule”. 

Today, Amazon Omics announces integration with Amazon EventBridge. This integration means customers can now use Amazon Omics published events as part of their event-driven architecture. Amazon EventBridge is a serverless event bus that makes it easy to connect and route events between AWS services, third-party applications, and customers in their own applications. Within Omics, customers can now receive state changes for asynchronous tasks, such as workflow run and task changes and progress of importing data into sequence and variant stores.

Patch Manager, a capability of AWS Systems Manager, now supports patch deployments for instances running Alma Linux versions 8.3-8.7, 9.0-9.1. Patch Manager enables you to automatically patch nodes with both security related and other types of updates across your infrastructure. Patch Manager supports a variety of common operating systems, including Windows Server, Amazon Linux, and Red Hat Enterprise Linux (RHEL). For a full list of supported operating systems, see the Patch Manager prerequisites user guide page.

AWS Cost Categories has added a new dimension “Usage Type” to its rules. You can now use seven types of dimensions: “Linked Account”, “Charge Type”, “Service”, "Usage Type", “Cost Allocation Tags”, “Region”, and other “Cost Category” while creating cost categories rules.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Adobe Experience Manager On-Premise Connector to index and search documents from Adobe Experience Manager.

With AWS Elemental MediaTailor you can now initialize playback sessions with query parameter metadata that will be written into the personalized manifests as query parameters for subsequent manifest requests.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Adobe Experience Manager Cloud Connector to index and search documents from Adobe Experience Manager.

AWS WAF now supports additional request parameters for rate-based rules, including cookies and other HTTP headers. Additionally, you can now create composite keys based on up to 5 request parameters, providing more granular options for managing and securing web application traffic. With these capabilities, customers can better identify and block malicious traffic patterns while minimizing the impact on legitimate users. 

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. AWS customers can now use the Amazon Kendra Gmail Connector to index and search messages from Gmail.

Amazon Relational Database Service (RDS) for PostgreSQL, MySQL, and MariaDB now supports M6i and R6i in US East (N. Virginia, Ohio), US West (Oregon, N. California), Europe (Ireland, London, Paris, Stockholm, Milan, Frankfurt), Asia Pacific (Mumbai, Seoul, Hong Kong, Singapore, Tokyo, Sydney), Canada (Central), South America (São Paulo), Africa (Cape Town), and Middle East (Bahrain).

Amazon Braket, the quantum computing service from AWS, adds support for Aria, IonQ’s largest and highest fidelity publicly available device to date. With Aria, customers can also experiment with IonQ’s built-in error mitigation techniques for the first time, a key tool to get the most out of today’s noisy quantum hardware. Furthermore, customers can now choose between two trapped-ion devices, including the current IonQ Harmony device, allowing them to compare and contrast quantum hardware characteristics by only changing a few lines of code. Finally, the availability of each IonQ device is now expanded to 15 hours per day on weekdays.

Amazon QuickSight is excited to announce the launch of Common Sub-expression Elimination (CSE) - a performance optimization initiative for better query generation for SPICE datasets. The CSE improves QuickSight user experience through pushing down repeated use of complex expressions into intermediate tables hence simplify complex queries, such as for totals/subtotals, top bottom filter, conditional formatting, and “others” bucket for charts, etc. Through the CSE query optimization, customers would observe faster loading dashboards, especially for complex dashboards and time-consuming interactions. Currently, the CSE is released with SPICE datasets only. There is no customer configuration needed, the backend change will seamlessly apply to the QuickSight usage.

Patch Manager, a capability of AWS Systems Manager, now supports patch deployments for instances running Ubuntu 22.04. Patch Manager enables you to automatically patch nodes with both security related and other types of updates across your infrastructure. Patch Manager supports a variety of common operating systems, including Windows Server, Amazon Linux, and Red Hat Enterprise Linux (RHEL). For a full list of supported operating systems, see the Patch Manager prerequisites user guide page.

AWS Clean Rooms is now a Health Insurance Portability and Accountability Act of 1996 (HIPAA) eligible service, enabling covered entities and their business associates to use AWS Clean Rooms to process, maintain, and store protected health information. If you have an executed Business Associate Addendum (BAA) with AWS, you can now use AWS Clean Rooms for workloads that are subject to HIPAA compliance.

Today, Amazon Omics announces the availability of Ready2Run workflows, a set of pre-built workflows from third-party software companies and open-source pipelines. With just a few clicks or a single API call, customers can run pre-built pipelines to perform primary analysis such as converting base calls to FASTQ files, secondary analysis such as gene expression or variant calling, and tertiary analysis such as protein structure prediction. Ready2Run workflows are priced-per-run to give customers predictable pricing. We are launching with 35 Ready2Run workflows, which are a combination of workflows built by Element Biosciences, NVIDIA, and Sentieon Inc, as well as popular open-source pipelines developed by the life sciences community.

Amazon Timestream now enables you to export your query results to Amazon S3 in a cost-effective and secure manner using the new UNLOAD statement.

AWS Config supports 62 new resource types in advanced queries. The advanced queries feature provides a single query endpoint and a powerful query language to get current resource state metadata without performing service-specific describe API calls. You can use configuration aggregators to run the same queries from a central account across multiple accounts and AWS Regions.

Today, Amazon Omics announces a new capability for direct data ingestion to Omics storage. Omics storage enables customers to store FASTQ, BAM, and CRAM files at a cost-effective price at scale. Previously, Omics had an asynchronous batch upload process for bulk loading of sequence readsets. This new capability adds a simple synchronous upload capability. The multi-part direct upload APIs will now allow customers to upload their data directly to the sequence stor­­e. This functionality allows customers to integrate existing processing pipelines and/or sequencers to directly write their outputs to a sequence store. Additionally, the transfer manager utility has been updated so that customers can directly upload large files with a single python command.

Today, Amazon Omics announces support for NVIDIA T4 and a10 graphical processing units (GPUs) for Omics workflows. Omics private workflows allows customers to bring their own workflow scripts and specify the compute resources that they need for each task in their workflow. Customers can now enable NVIDIA T4 and a10g GPUs for use in Omics private workflows to support accelerated and AI-based genomics analysis with NVIDIA Parabricks and open-source protein folding pipelines.

Amazon Textract is a machine learning service that automatically extracts text, handwriting, and data from any document or image. We regularly improve the underlying machine learning models based on customer feedback to deliver better accuracy and latency. Today, we are pleased to announce quality enhancements to our Queries feature available via the AnalyzeDocument API. 

Today, we are announcing the general availability of the tail sampling processor and the group-by-trace processor in the AWS Distro for OpenTelemetry (ADOT) collector. ADOT is a secure, production-ready, AWS supported distribution of the OpenTelemetry project. With this release, customers can use the ADOT collector for advanced distributed trace sampling use cases. 

AWS CloudFormation now supports AWS IoT Core thing group, thing type and billing group resources. AWS CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage AWS and third-party resources. You can now use an AWS CloudFormation template to pre-configure and deploy AWS IoT Core registry resources for your targeted Internet of Things (IoT) solution in a secure, efficient, and repeatable way.

Starting today, you can use Amazon SageMaker Studio in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions to perform all ML development steps in one place, from preparing raw data to building, training, and deploying ML models.

AWS Marketplace now features a new self-service listing experience in the AWS Marketplace Management Portal for single AMI products. The new feature enables AWS Marketplace sellers to publish and update AMI listings more quickly and easily. This feature enables you to directly interact with AWS Marketplace catalog to create, preview, test, and update your product listing without needing AWS Marketplace to manually process your inputs.

AWS Glue Crawler now supports the ability for customers to bring their own custom JDBC drivers to extract data schemas from data sources and populate the AWS Glue Data Catalog. Glue Crawlers already support JDBC Glue connections to supported data sources on AWS. Now, you can bring your own JDBC driver versions to connect to data sources in Glue Crawlers. These data sources include Postgres, MySQL, Oracle, SQL Server, and Amazon Redshift.

Amazon Relational Database Service (Amazon RDS) now supports AWS Graviton2-based M6g and R6g database instances in Asia Pacific (Hyderabad, Jakarta), Europe (Spain), and the Middle East (UAE). Depending on the database engine, version, and workload, Graviton2-based instances provide up to 19% better price/performance than comparable M4 and R4 instances.

Amazon Connect Contact Lens now provides supervisor alerts on agent performance, enabling businesses to identify contacts (e.g., evaluation score < 50%) that require supervisors follow-up with agents on their team. Supervisors can now do proactive follow-ups with specific agents on their team that require more immediate support instead of waiting for periodic follow-ups with every agent on their team.

Amazon Kinesis Data Firehose customers can now send data to Amazon OpenSearch Service using OpenSearch Service auto-generated document ID option. This configuration option enables write-heavy operations, such as log analytics and observability, to consume fewer CPU resources at the OpenSearch domain, resulting in improved performance.

You can now use AWS PrivateLink to privately access AWS App Mesh APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the AWS PrivateLink pricing page for more information.

Starting today, customers can use AWS Service Catalog to enable self-service provisioning of Terraform configurations in the AWS Service Management Connector for ServiceNow. These Terraform products will render as ServiceNow Service Catalog items that can leverage approvals and business workflows within ServiceNow. Customers can now use AWS Service Catalog as the single tool to organize, govern, and distribute their Terraform configurations within AWS at scale.

You can now update your Amazon ElastiCache for Redis cluster configuration to enable cluster mode without needing to rebuild your cluster, migrate data, or affect application availability. Cluster mode allows you to scale beyond the performance limitations of a single shard Redis cluster. For more information about cluster mode in ElastiCache for Redis, see the documentation.

Today, we are announcing the general availability of Amazon Aurora I/O-Optimized, a new configuration that provides improved price performance and predictable pricing for customers with I/O-intensive applications. Aurora I/O-Optimized offers improved performance, increasing throughput and reducing latency for customers’ most demanding workloads. With Aurora I/O-Optimized, there are zero charges for read and write I/O operations—you only pay for your database instances and storage usage, making it easy to predict your database spend up front. Aurora I/O-Optimized offers up to 40% cost savings for I/O-intensive applications where I/O charges exceed 25% of the total Aurora database spend.

Today, we’re excited to announce that data scientists can use CodeWhisperer for no additional charge to generate real-time code suggestions for Python notebooks in JupyterLab and Amazon SageMaker Studio. With CodeWhisperer, you can write a comment in natural language that outlines a specific coding task in English and CodeWhisperer will recommend one or more code snippets directly in the Notebook that can accomplish the task.

AWS Lambda now supports Amazon MSK, self-manged Apache Kafka and Amazon MQ for Apache ActiveMQ as event sources in the AWS GovCloud (US) Regions. This gives customers more choices for how they want to send messages to Lambda. Customers can build applications quickly and easily with Lambda functions that are invoked based on messages from these event sources connected to an event source mapping.

Customers can now create Amazon FSx for NetApp ONTAP file systems in two additional AWS Regions: US West (N. California) and Asia Pacific (Jakarta).

Amazon IVS now offers developers the ability to monitor the health of live streams with multiple hosts. Hosts are connected to each other using the stage resource, which allows them to exchange audio and video with each other in real time. This release gives developers building with Amazon IVS the tools needed to better understand what is happening with stage resources and for any participant.

Amazon EMR is excited to announce that Amazon EMR Serverless is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) region, operated by NWCD.

AWS Graviton3-based R7g database instances are now generally available for Amazon Aurora with PostgreSQL compatibility and Amazon Aurora with MySQL compatibility in US East (N. Virginia, Ohio), US West (Oregon), and Europe (Ireland) regions. Graviton3 instances provide up to 30% performance improvement and up to 20% price-performance improvement over Graviton2 instances for Aurora depending on database engine, version, and workload.

Amazon SageMaker Studio notebooks and Notebook Instances now support ml.p4d and ml.p4de GPU-based instances that provide the best performance for interactive machine learning (ML) workloads in the cloud for applications such as large language models with billions of parameters, natural language processing, object detection and classification, seismic analysis, genomics research, and more. These instances are powered by the latest Intel® Cascade Lake processors and eight NVIDIA A100 Tensor Core GPUs.

You can now secure your web applications and APIs with AWS WAF with a single click in the Amazon CloudFront console. CloudFront can create and configure out-of-the-box AWS WAF protection for your application as a first line of defense against common web threats. Optionally, you can later configure additional security protections against bots and fraud or other threats specific to your application in the AWS WAF console.

Today, AWS announced the opening of a new AWS Direct Connect location within the Rack Center data center in Lagos, Nigeria. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Today, we are excited to announce general availability of Provisioned Concurrency support for Amazon SageMaker Serverless Inference. Provisioned Concurrency allows you to deploy models on serverless endpoints with predictable performance and high scalability. You can add provisioned concurrency to your serverless endpoints, and for the pre-defined amount of provisioned concurrency SageMaker will keep the endpoints warm and ready to respond to requests instantaneously. Provisioned Concurrency is ideal for customers who have predictable traffic, with low throughput.

Today, AWS Backup is announcing support for managing your backup notifications from the AWS User Notifications console. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. This launch enables you to easily configure, monitor, and manage your notifications related to AWS Backup from a central location.

You can now use AWS X-Ray to trace and analyze your Lambda functions enabled with Lambda SnapStart. You can use X-Ray traces to gain deeper visibility into your function’s performance and execution lifecycle, helping you identify errors and performance bottlenecks for your latency-sensitive Java applications built using SnapStart-enabled functions.

Application Manager, a capability of AWS Systems Manager that helps DevOps engineers to investigate and remediate issues in the context of their applications, now enables customers to optimize the cost of compute resources associated with their applications. Customers can now view the cost of their applications in Application Manager and also take recommended actions, such as right sizing instances, to save costs.

Amazon CodeGuru Security now supports security and code quality scans for Amazon SageMaker Studio and Jupyter notebooks. This new capability assists notebook users in detecting security vulnerabilities such as injection flaws, data leaks, weak cryptography, or missing encryption within the notebook cells. Users can also detect many common issues that affect the readability, reproducibility, and correctness of computational notebooks, such as misuse of ML library APIs, invalid execution order, and nondeterminism. When vulnerabilities or quality issues are identified in the notebook, CodeGuru generates recommendations that enable users to remediate those issues based on AWS security best practices.

Today, AWS open-sourced the Cedar policy language and authorization engine. You can use Cedar to express fine-grained permissions as easy-to-understand policies enforced in your applications, and you can decouple access control from your application logic. Cedar supports common authorization models such as role-based access control and attribute-based access control. It follows a new verification-guided development process to give you high assurance of Cedar’s correctness and security: AWS formally models Cedar's authorization engine and other tools, proves safety and correctness properties about them using automated reasoning, and rigorously tests that the model matches the Rust implementation.

Amazon SageMaker Autopilot, a low-code machine learning (ML) service which automatically builds, trains and tunes the best ML models, now supports training with weighted objective metrics in Ensemble mode and also supports eight additional objective metrics. Assigning weights to each data sample in the training data set can improve overall model performance by helping the model learn better, reduce bias towards a particular class, and increase stability. 

Amazon MemoryDB for Redis now supports AWS Identity and Access Management (IAM) authentication access to its clusters. With this launch, you can associate IAM users and roles with MemoryDB users and manage their cluster access.

Today, AWS announces the general availability of AWS Management Console Private Access. AWS Management Console Private Access is an advanced security feature that allows customers to define a set of trusted AWS accounts and organizations that can access the AWS Management Console from within their network. For example, with AWS Management Console Private Access, customers can restrict access to personal AWS accounts from the company network.

You can now register machine learning (ML) models built in Amazon SageMaker Canvas with a single click to SageMaker Model registry enabling you to operationalize ML models in production. SageMaker Canvas is a visual interface that enables business analysts to generate accurate ML predictions on their own — without requiring any ML experience or having to write a single line of code. 

Today, AWS announced the opening of a new AWS Direct Connect location within the QTS Atlanta DC1 data center in Atlanta, Georgia. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Amazon MemoryDB for Redis now supports Redis 7. This release brings several new features to MemoryDB:

• Redis Functions: MemoryDB adds support for Redis Functions, and provides a managed experience enabling developers to execute LUA scripts with application logic durably stored on the MemoryDB cluster.
• ACL improvements: MemoryDB adds support for the next version of Redis Access Control Lists (ACLs). With MemoryDB, clients can now specify multiple sets of permissions on specific keys or keyspaces in Redis.
• Sharded Pub/Sub: MemoryDB now gives you the ability to run Redis’ Pub/Sub functionality in a sharded way. With MemoryDB, channels are bound to a shard in the MemoryDB cluster, eliminating the need to propagate channel information across shards resulting in improved scalability.
• Enhanced I/O Multiplexing: MemoryDB now includes enhanced I/O multiplexing, which delivers significant improvements to throughput and latency at scale. As an example, when using r6g.4xlarge node and running 5200 concurrent clients, you can achieve up to 46% increased throughput (read and write operations per second) and up to 21% decreased P99 latency, compared with MemoryDB for Redis 6.
  

Amazon Simple Notification Service (Amazon SNS) now supports automatic deletion of unconfirmed subscriptions once they have been in a pending confirmation state for 48 hours. This reduces the time to delete your unconfirmed subscriptions from the previous 72 hour period. This applies to all new subscriptions and does not require any on-boarding.

Today, AWS announces the general availability of AWS Glue G.4X and G.8X, the next series of AWS Glue workers for your most demanding serverless data integration workloads. Glue G.4X and G.8X workers provide higher compute, memory, and storage resources than current Glue workers. These new types of workers help you scale and run your most demanding data integration workloads, such as memory-intensive data transforms, skewed aggregations, machine learning transforms, and entity detection checks with petabytes of data.

Amazon QuickSight now supports advance use cases for scatterplots with new options like support for visualizing unaggregated data, new ‘label’ field well and performance improvements.

AWS IoT SiteWise now provides the ability for customers to automatically compute aggregated asset property values every 15 minutes. Customers can now get aggregated values for asset properties, metrics and transforms (mathematical expressions that map asset properties' data points from one form to another) for every minute, 15-minute, hour, and day. AWS IoT SiteWise computes commonly used statistical aggregates such as average, count, maximum, minimum, standard deviation, and sum over multiple time intervals. Customers can map data streams and define static or computed equipment and process properties across all facilities so they're readily available for analysis. For non-numeric properties, such as Strings and Booleans, AWS IoT SiteWise computes only the count aggregate.

Ingress Transport Layer Security (TLS) inspection for AWS Network Firewall is now available in all AWS Regions where AWS Network Firewall is available today, including the AWS GovCloud (US) Regions. With this launch, you can use AWS Network Firewall to decrypt, inspect, and re-encrypt TLS traffic originating from the internet, another VPC, or another subnet.

Amazon Elastic Compute Cloud (EC2) I4g storage-optimized instances powered by AWS Graviton2 processors are now generally available. I4g instances deliver the best compute price performance for a storage-optimized instance versus comparable x86-based storage optimized instances, and the best storage performance per TB for a Graviton-based storage instance. Based on AWS Nitro SSDs that are custom built by AWS and reduce both latency and latency variability, I4g instances are optimized for workloads that perform a high mix of random read/write and require very low I/O latency, such as transactional databases (Amazon DynamoDB, MySQL, and PostgreSQL) and real-time analytics such as Apache Spark.

Today, AWS IoT SiteWise announced new performance enhancements that will significantly improve the retrieval of industrial data from its hot storage tier. We have improved the GetAssetPropertyValueHistory and BatchGetAssetPropertyValueHistory APIs by increasing the maximum number of results for each paginated response from 250 up to 20K.  With these upgrades, developers can now retrieve asset property data, including measurements, attributes, metrics, and transforms, at high velocity to build industrial applications.

Amazon Managed Service for Prometheus is now available in Asia Pacific (Mumbai), Asia Pacific (Seoul), South America (Sao Paulo) and Europe (Paris). Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor and alarm on operational metrics at scale. Prometheus is a popular Cloud Native Computing Foundation open-source project for monitoring and alerting that is optimized for container environments such as Amazon Elastic Kubernetes Service.

We’re excited to announce the General Availability of AWS IoT Device Defender and the secure tunneling feature of AWS IoT Device Management in the AWS Middle East (UAE) Region, providing flexibility to customers and extending the service footprint to an additional location in the Middle East besides AWS Middle East (Bahrain) Region. 

You can now use Amazon Athena to query tables created with Apache Hudi 0.12.2 which includes support for improved scalability of queries accessing data sets in Amazon S3 data lake. The updated integration enables you to use Athena to query Hudi 0.12.2 tables managed via Amazon EMR, Apache Spark, Apache Hive or other compatible services.

AWS CloudTrail Lake, a managed data lake that lets organizations aggregate, immutably store, and query their audit and security logs for auditing, security investigations and operational troubleshooting, now supports all Presto SQL SELECT query functions for easy and flexible queryability of data . This new release includes support for popular query functions such as REGEXP_EXTRACT for sophisticated pattern matching such as finding all S3 requests made on a specific S3 bucket prefix, and UNNEST an array such as resources to query over its objects like resourceType. With this release, you can also add comments within the query for better readability.

Amazon QuickSight now supports State Persistence for embedded dashboards (and consoles) for registered users. Embedded QuickSight dashboards now remember filter selections between visits when accessed as a registered QuickSight user. Registered users can also Bookmark specific views of the embedded dashboard, making it simple to access your preferences from one convenient location. For example, you can create a Bookmark for an embedded dashboard with a specific filter setting that differs from the original dashboard. This allows you to quickly switch between relevant views without having to re-initializing the filters. You can enable Bookmarks and State Persistence using the GenerateEmbedUrlForRegisteredUser API. To learn more about, please visit our documentation.

Amazon MemoryDB for Redis now makes it simpler and faster for you to get started with setting up a new MemoryDB cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

Amazon Redshift Data Sharing, a secure way to share live data across Amazon Redshift clusters, is now available in AWS China regions. Customers can now share data to provisioned clusters and serverless workgroups in the same account and different accounts, as long as they are within the same region. Redshift Data Sharing enables instant, granular, and high-performance data access across Redshift clusters without the need to copy or move data. Redshift Data Sharing provides live access to the data so that your users always see the most up-to-date and consistent information as it is updated in the data warehouse. Redshift Data Sharing can be used on your Amazon Redshift RA3 clusters at no additional cost.

Today, Amazon QuickSight announces the general availability of managing Virtual Private Cloud (VPC) connections via public APIs and an enhanced UX with Multi-AZ support. APIs enable you to create, update, delete, list and describe VPC connections. This launch enables you to create private VPC connections as part of your Infrastructure as Code (IaC) efforts with full support for AWS CloudFormation.

Starting today, Amazon EC2 High Memory instances with 12TiB of memory (u-12tb1.112xlarge) are now available in Asia Pacific (Mumbai) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics NodeJS runtime version 4.0. With this update, runtime version of AWS Lambda, executing the canaries, is updated to NodeJS 16.x.

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in the Asia Pacific (Hyderabad), Europe (Spain), Europe (Zurich) and Middle East (UAE).

Today, we are announcing cross-Region backup support for Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), and Europe (Zurich) Regions. With cross-Region backups, you can store a copy of your backup data in AWS Regions other than where your primary backups are stored, helping you meet business continuity, disaster recovery, and compliance requirements. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning compute, storage, and databases. Using AWS Backup, you can centrally create and manage immutable backups of your application data, protect your data from inadvertent or malicious actions, and restore the with a few simple clicks.

We are introducing a new kind of parameter in Amazon QuickSight that will help users create interactive experiences in their dashboards. With Dataset Parameters, authors can optimize the experience and load time of dashboards that are connected-live to external SQL-based sources. When readers interact with their data, the selection and actions they make in controls, filters and visuals can be propagated to the data sources via live, custom, parameterized SQL queries. By mapping multiple Dataset Parameters to Analysis parameters, users can create a wide variety of experiences using controls, user actions, parameterized URLs, and calculated fields, as well as create dynamic visuals’ titles, descriptions, bookmarks, emails and PDF reports.

AWS Device Farm is an application testing service that provides web and mobile developers with desktop browsers and real mobile devices so that they can improve the quality of their apps. With today’s launch, we are adding support for Rooted Android devices in our private device fleets. With Rooted Android devices, customers will be able to perform advanced testing with expanded device access, including more metrics, battery benchmarking, and increased access to the device file system.

Today, AWS announced the general availability of face occlusion detection to improve face verification accuracy. The new FaceOccluded attribute in Amazon Rekognition DetectFaces and IndexFaces APIs detects if the face in an image is partially captured or not fully visible due to overlapping objects, clothing, and body parts.

Amazon CloudWatch announces support for filtering by metric name on CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new capability you can now select the specific metrics you want to stream, providing additional filtering controls. 

AWS Security Hub, a cloud security posture management service that performs security best practice checks, aggregates alerts, and facilitates automated remediation, now features a detailed history of changes that have occurred for each finding in your environment. This view provides an immutable trail of changes, indicating what fields were changed, by whom, and when. You can now get more visibility into the changes made to your findings over time, making it easier to identify and investigate any suspicious or unauthorized changes.

Amazon VPC IP Address Manager (IPAM) makes it easier for you to plan, track, and monitor IP addresses for your AWS workloads. Amazon VPC IPAM is now available in two additional Regions: Asia Pacific (Hyderabad), and Asia Pacific (Jakarta).

Today, AWS announces support for Reject action in stream exception policy of AWS Network Firewall to improve performance of latency-sensitive applications. AWS Network Firewall is a managed firewall service that makes it easy to deploy essential network protections for all your Amazon VPCs.

Amazon Kinesis Data Analytics makes it easier to transform and analyze streaming data in real time with Apache Flink. Apache Flink is an open source framework and engine for processing data streams. Amazon Kinesis Data Analytics reduces the complexity of building and managing Apache Flink applications. Amazon Kinesis Data Analytics for Apache Flink integrates with Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Kinesis Data Streams, Amazon OpenSearch Service, Amazon DynamoDB streams, Amazon Simple Storage Service (Amazon S3), custom integrations, and more using built-in connectors. You can learn more about Amazon Kinesis Data Analytics for Apache Flink here.

We are excited to announce the availability of ml.inf2 and ml.trn1 family of instances on Amazon SageMaker for deploying machine learning (ML) models for Real-time and Asynchronous inference. You can use these instances on SageMaker to achieve high performance at a low cost for generative artificial intelligence (AI) models, including large language models (LLMs) and vision transformers. In addition, you can use SageMaker Inference Recommender to help you run load tests and evaluate the price-performance benefits of deploying your model on these instances.

We are excited to announce that Amazon EMR on EKS now supports vertical autoscaling, a feature to automatically tune the memory and CPU resources of EMR Spark Applications to adapt to the needs of the provided workload, offering a simplified mechanism for customers to tune resources, enhance reliability and optimize costs. Amazon EMR on EKS enables customers to run open-source big data frameworks such as Apache Spark on Amazon EKS without having to manage application provisioning themselves.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.4.0 for new and existing clusters. Apache Kafka 3.4.0 includes several bug fixes and new features that improve performance. Key features include a fix to improve stability to fetch from the closest replica. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.4.0.

Zonal shift for Amazon Route 53 Application Recovery Controller is now available in all standard AWS Regions. 

Today, we are excited to announce the launch of the customizable dashboard feature on the AWS Batch console, providing a single view that displays resource metrics based on your specific needs. This feature allows you to redesign and target different types of widgets in your preferred order, making it easier to troubleshoot issues using widgets such as job logs, job queue metrics, etc. You can also add a container insights widget to track your compute environment utilization. 

AWS Resilience Hub has expanded support for AWS Trusted Advisor and applications using Amazon DynamoDB. Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions.

Today, AWS announces the general availability of AWS CodePipeline in the AWS GovCloud (US-East) Region.

AWS VSS application-consistent backups now allows customers to take application-consistent backups while PowerShell Logging is enabled. AWS VSS application-consistent backups now incorporates a parallel processing ability that enables its EC2 Windows customers to achieve successful VSS backups in a broader range of environments. With this launch, customers will see improved compatibility between VSS and applications such as antivirus and application monitoring that require PowerShell logging to be enabled. 

We are excited to announce the addition of self-hosted Jupyter notebooks as another mechanism to run interactive workloads via managed endpoints. Amazon EMR on EKS enables customers to run open-source big data frameworks such as Apache Spark on Amazon EKS. Amazon EMR on EKS customers setup and use a managed endpoint (available in preview) to run interactive workloads using an integrated development environments (IDEs) such as EMR Studio.

AWS Elemental MediaConvert now supports video passthrough for mezzanine video formats. You can now run MediaConvert jobs that preserve the original video essence without re-encoding for intra-frame-only video formats such as AVC Intra, Apple ProRes, VC3, and JPEG2000.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it.

Today, AWS announced the opening of a new AWS Direct Connect location within the EdgeConnex PHX01 data center in Phoenix, Arizona. By connecting your network to AWS at the new location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Starting today, you can use Common Access Card (CAC) and Personal Identity Verification (PIV) smart cards to authenticate users into Amazon WorkSpaces through your self-managed Active Directory (AD) and AWS Directory Service AD Connector in the AWS GovCloud (US-East) Region. Additionally, you can now use the AWS Management Console to configure smart card authentication with AWS Directory Service. 

Starting today, Bring Your Own IP (BYOIP) is available in Asia Pacific (Hyderabad) Region.

Today, Amazon OpenSearch Service announces Multi-AZ with Standby, a new deployment option that enables 99.99% availability and consistent performance for business-critical workloads. With Multi-AZ with Standby, OpenSearch Service domains are resilient to potential infrastructure failures, such as a node or an Availability Zone (AZ) failure. Multi-AZ with Standby also ensures OpenSearch Service domains follow recommended best practices, simplifying configuration and management.

Amazon WorkSpaces is now available in the AWS GovCloud (US-East) Region, an isolated AWS Region designed to host sensitive data and regulated workloads in the cloud for customers who have U.S. federal, state, or local government security and compliance requirements. For a list of regions where WorkSpaces is available, see the AWS Region Table. With this launch, you can now use Amazon WorkSpaces cloud desktops to help address data sovereignty requirements without the cost and complexity of building on-premises Virtual Desktop Infrastructure (VDI).

Amazon Relational Database Service (RDS) for PostgreSQL now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

Today, AWS CloudFormation has expanded the availability of AWS CloudFormation Hooks to the Middle East (Dubai) and Asia Pacific (Jakarta) Regions. With this launch, customers can deploy Hooks in these newly supported AWS Regions to help keep resources secure and compliant.

Amazon Web Services (AWS) is announcing the general availability of of Push Notifications for the AWS Console Mobile Application. You can now use AWS User Notifications to create actionable push notifications from AWS services, such as CloudWatch, to be delivered to your mobile device when a resource requires your attention. You can then receive push notifications, and learn more about events while on-the-go without needing to return to your computer. If you want to see more detail about a notification from your device’s lock screen, you can simply tap the notification, authenticate, and be directed to the relevant details screen inside the app.

AWS Network Firewall now allows you to override the Suricata HOME_NET variable making it easy to use AWS managed rule groups in firewalls that are deployed in a centralized deployment model. Managed rule groups are collections of predefined, ready-to-use rules that AWS writes and maintains for you. The Suricata HOME_NET variable of the managed rule group has the Classless Inter-Domain Routing (CIDR) range which is inspected by the AWS Network Firewall. Previously, you were unable to override HOME_NET variable as it used the CIDR ranges of VPC where the firewall is deployed. If your firewall uses a central inspection VPC, AWS Network Firewall populates HOME_NET with CIDR ranges of the inspection VPC, instead of the application (spoke) VPCs which you want to filter. 

AWS AppSync is a fully managed service that enables developers to build scalable, performant APIs that connect applications to data and events. Today, we announce the general availability of Private API support for AWS AppSync. With Private APIs, you can now create GraphQL APIs that can only be accessed from your Amazon Virtual Private Cloud (“VPC”).

Amazon Web Services (AWS) is announcing the general availability of AWS User Notifications, a new service that enables you to centrally setup and view notifications from AWS services, such as AWS Health events, Amazon CloudWatch alarms, or Amazon EC2 instance state changes, in a consistent, human-readable format. You can view notifications across accounts, regions, and services in a Console Notifications Center, and configure delivery channels where you want to receive these notifications, like email, AWS Chatbot, and AWS Console Mobile App. Notifications include URLs to direct to resources on the AWS Console, where you can take take additional actions.

Amazon Rekognition content moderation is a deep learning-based feature that can detect inappropriate, unwanted, or offensive images and videos, making it easier to find and remove such content at scale. Starting today, Amazon Rekognition content moderation comes with an improved model for image and video moderation that significantly improves the detection of explicit, violence, and suggestive content. Customers can now detect explicit and violence content with higher accuracy to improve the end-user experience, protect their brand identity, and ensure that all content complies with their industry regulation and policies.

Amazon WorkSpaces Core is now available in the AWS GovCloud (US-East) Region and AWS GovCloud (US-West) Region. These are isolated AWS Regions designed to host sensitive data and regulated workloads in the cloud for customers who have U.S. federal, state, or local government security and compliance requirements. For a list of regions where WorkSpaces is available, see the AWS Region Table. 

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in 26 regions including AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions.

AWS is pleased to announce an enhancement to the AWS Well-Architected (WA) Tool integration with AWS Service Catalog AppRegistry (AR). This integration allows customers to now filter their AWS Trusted Advisor checks based on resources defined within application, helping surface the most relevant checks in the Well-Architected console.

Amazon Inspector now allows customers to search its vulnerability intelligence database if any of the Inspector scanning types is activated. With this expanded capability, customers can retrieve the details for any vulnerability stored in Inspector vulnerability database and covered by Inspector’s scanning engine by simply providing a Common Vulnerability and Enumerations (CVE) ID, for example, “CVE-2023-1264“. This allows customers to confirm the CVEs covered by Inspector scanning engine and do preliminary research on a CVE. Inspector customers can access the search capabilities using both Inspector console and APIs.

You can now use Amazon Simple Notification Service (SNS) message data protection in five additional AWS Regions: Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich), and Middle East (UAE). Amazon SNS message data protection is a set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data.

Amazon Elastic File System (EFS) Replication is now available in 10 more AWS Regions: Africa (Cape Town), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Melbourne), Europe (Milan), Europe (Spain), Europe (Zurich), Middle East (Bahrain), Middle East (UAE), in addition to the 19 AWS Regions and 2 AWS GovCloud (US) Regions where it was previously supported. With this launch, EFS Replication is available in all AWS Regions where EFS is supported.

You can now use Amazon Simple Notification Service (SNS) FIFO topics in five additional AWS Regions: Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich), and Middle East (UAE). You can use Amazon SNS FIFO topics, in combination with Amazon Simple Queue Service (SQS) FIFO queues, to build applications that require messages to be sent and processed in a strict sequence and without duplicates.  

Amazon Neptune is now available in the AWS Middle East (UAE) Region on engine versions 1.2.1.0 and later. You can now create Neptune clusters using R5, R5d, R6g, and T3 instance types in the AWS Middle East (UAE) Region.

AWS Health now publishes service health events to Amazon EventBridge. Previously, you could receive only account-specific events on this channel. Now, you can also receive events about the overall health of AWS services. This enables you to get a full picture of service issues that might affect the performance of your applications. 

Amazon Connect forecasting, capacity planning, and scheduling, a feature of Amazon Connect, helps you to predict, allocate, and verify that the right number of agents are scheduled at the right time to meet your operational goals with minimal overstaffing. Machine learning (ML)–powered capabilities allow you to anticipate contact volume and arrival rates, convert forecasts into projected staffing needs, and assign daily shifts to the right number of agents. With forecasting, capacity planning, and scheduling, you can help optimize internal operations, meet service goals, and improve agent and customer satisfaction.

AWS Config now supports 24 more resource types for services, including Amazon Route 53 Resolver, Amazon Elastic Computer Cloud (Amazon EC2), AWS IoT Wireless, AWS Network Manager, AWS Device Farm, AWS Ground Station, Amazon AppFlow, Amazon Redshift, Amazon Pinpoint, AWS IoT, AWS AppConfig, AWS Image Builder, Amazon CloudWatch, AWS Panorama, Amazon SageMaker, Amazon Elastic Container Registry (ECR), AWS Audit Manager, and AWS Network Firewall.

Amazon GuardDuty Malware Protection adds a new capability that allows customers to initiate on-demand malware scans of Amazon Elastic Compute Cloud (Amazon EC2) instances, including instances used to host container workloads. Scans can be initiated using the GuardDuty console, or programmatically via the API, without the need to deploy security software and are designed to have no performance impact to running workloads. When potential malware is identified, GuardDuty generates actionable security findings with information such as the threat and file name, the file path, the Amazon EC2 instance ID, resource tags and, in the case of containers, the container ID and the container image used. This capability builds on the existing Malware Protection capability of GuardDuty-initiated scans that when enabled, automatically initiates a malware scan when GuardDuty detects suspicious behavior indicative of malware on the instance.

AWS IoT Core, a managed cloud service that lets customers securely connect Internet of Things (IoT) devices the cloud and manage them at scale, announces support for Transport Layer Security (TLS) 1.3 through Configurable Endpoints. TLS 1.3 provides two major improvements in security and performance - it removes legacy features and older cipher suites in previous versions of TLS, and offers better performance through a simplified handshake process. With this launch, AWS IoT customers can also use TLS 1.3 in AWS IoT Core Device Advisor, a fully managed test capability to help developers test their IoT devices for reliable and secure connectivity with AWS IoT Core.

Starting today, AWS Elemental MediaConnect supports failover for streams that have SRT caller or listener sources. You can configure SRT failover via the AWS Management Console, CloudFormation, the AWS CDK, or the MediaConnect API.

AWS Local Zones is now available in Auckland, New Zealand. You can now use AWS Local Zones in Auckland to deliver applications that require single-digit millisecond latency or local data processing.

Today, we are excited to announce AWS SimSpace Weaver Snapshots, a new feature that allows SimSpace Weaver developers to save the state of their simulations at a specific point in time.

Amazon Redshift ra3.xlplus instances are now available in the Middle East (UAE), Europe (Spain), Europe (Zurich), Asia Pacific (Hyderabad) and Asia Pacific (Jakarta) Regions. Amazon Redshift ra3 instances with Redshift Managed Storage (RMS) allow you to scale and pay for compute and storage independently for fast query performance and to optimize costs. It also enables you to more securely and more easily share live data across Amazon Redshift clusters. Amazon Redshift ra3.16xlarge and ra3.4xlarge instances are already available in those regions. With this announcement, we will be launching ra3.xlplus instance types in those regions.

AWS Security Hub has added four new integration partners to help customers with their cloud security posture monitoring. The additions of Trend Micro, Claroty, New Relic, and Metric Stream bring Security Hub to 91 integrations. 

Amazon SageMaker Data Wrangler reduces the time it takes to aggregate and prepare data for machine learning (ML) from weeks to minutes. With SageMaker Data Wrangler, you can simplify the process of data preparation and feature engineering, and complete each step of the data preparation workflow, including data selection, exploration, cleansing, and processing from a single visual interface.

AWS Compute Optimizer now supports the ability to filter your rightsizing recommendations by tags. This includes tag keys, tag key and value pairs, or combinations of both. Tag filtering will be available on these rightsizing recommendations pages: Amazon Elastic Compute Cloud (EC2) instance types, Amazon Elastic Block Store (EBS) volumes, AWS Lambda functions, and Amazon Elastic Container Service (ECS) services on AWS Fargate.

Amazon Aurora Serverless v1 now supports PostgreSQL major version 13. PostgreSQL 13 includes improved functionality and performance from enhancements such as de-duplication of B-tree index entries, improved performance for queries that use partitioned tables, incremental sorting to accelerate data sorts, parallel processing of indexes with the VACUUM command, more ways to monitor activity within a PostgreSQL database, new security capabilities, and more. 

AWS Compute Optimizer now supports inferred workload type filtering on Amazon EC2 instance recommendations. The inferred workload type feature utilizes Machine Learning and automatically detects the applications that might be running on your AWS resources. By leveraging the inferred workload type filter, customers can easily pinpoint cost-saving opportunities based on the specific workload running on their EC2 instances. In addition, AWS Compute Optimizer now supports Microsoft SQL Server as an inferred workload type.