August 2023

Amazon Relational Database Service (Amazon RDS) for PostgreSQL 16 Release Candidate 1 (RC1) is now available in the Amazon RDS Database Preview Environment, allowing you to evaluate the pre-release of PostgreSQL 16 on Amazon RDS for PostgreSQL. You can deploy PostgreSQL 16 RC1 in the Preview Environment and have the same benefits of a fully managed database, making it simpler to set up, operate, and monitor databases. PostgreSQL 16RC1 in the Preview Environment also includes support for logical decoding on read replicas, AWS libcrypto (AWS-LC), and over 80 PostgreSQL extensions such as pgvector, pg_tle, h3-pg, pg_cron, and rdkit.

Starting today, AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) and AD Connector are integrating with AWS Private Certificate Authority (AWS Private CA) to issue certificates for domain-joined objects that use Active Directory (AD) auto-enrollment. You can use a fully managed AWS Private CA drop-in replacement for your self-managed enterprise CAs without the need to deploy, patch, or update local agents or proxy servers. This also enables you to accelerate the migration of AD-aware workloads to AWS. 

Today, we’re excited to announce console enhancements on AWS Network Firewall console pages to improve user experience. AWS Network Firewall console pages are completely revamped using Cloudscape Design System guidelines, an open source solution for building intuitive, engaging, and inclusive user experiences at scale.

AWS Step Functions is introducing enhancements to Workflow Studio, a visual workflow designer in the AWS console, which includes a streamlined transition between the visual builder and code, making it faster and easier to build workflows. To get started quickly, you can also choose from a collection of starter projects for common use cases and modify them using Workflow Studio.

Amazon Relational Database Service (Amazon RDS) Optimized Writes now supports r5 database (DB) instances. With Amazon RDS Optimized Writes you can improve the write throughput for Amazon RDS for MySQL and MariaDB workloads by up to 2x at no additional cost. This is especially useful for write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Today, AWS announces the launch of Amazon CodeCatalyst in the Europe (Ireland) region. CodeCatalyst provides everything you need to start planning, coding, building, testing, and deploying applications on AWS with a streamlined, integrated experience. With CodeCatalyst, you can spend more time developing application features and less time setting up project tools, creating and managing continuous integration and continuous delivery (CI/CD) pipelines, provisioning and configuring development and deployment environments, and onboarding team members to their projects. CodeCatalyst is also available in the US West (Oregon) AWS Region and can deploy workloads to any public region worldwide.

The AWS SDK for SAP ABAP is now generally available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon QuickSight now supports scaled shared folders for multi-tenant setup that enables you to share QuickSight asset dashboards, analyses, datasets and datasources at scale with all your tenants at once. Prior to this launch, you could share a folder with up to hundred tenants at a time and had to create copies of folders and assets within them. Scaled shared folders are new type of shared folders which can be created and shared using APIs. To learn more, click here.

AWS Lambda functions powered by AWS Graviton2 processors are now available in 6 additional regions - Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich), Israel (Tel Aviv) and Middle East (UAE). With up to 34% better price-performance, functions running on AWS Graviton are ideal for powering mission critical Serverless applications. 

Today, Amazon Simple Email Service (SES) launched a new deliverability feature that helps customers troubleshoot individual email delivery problems, confirm delivery of critical messages, and identify engaged recipients on a granular, single email basis. Senders can investigate trends in delivery performance and see delivery and engagement status for each email sent through SES. This makes it even easier for customers to manage and optimize their delivery and campaign performance using Virtual Deliverability Manager.

AWS IAM Identity Center was launched in the AWS Israel (Tel Aviv) Region. IAM Identity Center helps you securely create or connect your workforce identities and centrally manage their access to AWS accounts and cloud applications across your AWS organization. You can create user identities directly in IAM Identity Center or you can bring them from your Microsoft Active Directory or a standards-based identity provider, such as Okta Universal Directory or Azure AD. With IAM Identity Center, you get a unified administration experience to define, customize, and assign fine-grained access. Your workforce users get a portal for access to all of their assigned AWS accounts and cloud applications. IAM Identity Center is available to you at no additional cost. 

Today we’re excited to announce the release of the AWS SimSpace Weaver SDK for Python to make it easier for simulation developers building Python based simulation projects to integrate with SimSpace Weaver.

Amazon OpenSearch Ingestion now allows you to ingest streaming data from Amazon Managed Streaming for Apache Kafka (MSK), enabling you to seamlessly index the data from Amazon MSK in Amazon OpenSearch Service managed domains or serverless collections without the need for any third-party data connectors. With this integration, you can now use Amazon OpenSearch Ingestion to perform near- real-time aggregations, sampling and anomaly detection on data ingested from Amazon MSK, helping you to build efficient data pipelines to power your complex observability use cases.

AWS AppSync is a managed service that makes it easier to build scalable APIs that connect applications to data. With AppSync, API developers can write resolvers to define the business logic that connects their AppSync GraphQL and Pub/Sub APIs to data. Developers use AppSync to interact with data sources like Amazon DynamoDB tables by writing their JavaScript resolvers that are executed on the AppSync JavaScript (APPSYNC_JS) runtime. Now, AppSync provides new functions to interact with DynamoDB tables that simplifies the developer experience in JavaScript resolvers.

Amazon Simple Notification Service (Amazon SNS) has introduced additional usage metrics in Amazon CloudWatch for the following service quotas: ‘Topics per Account’, ‘Filter Policies per Account’, and ‘Pending Subscriptions per Account’. Under the ‘AWS/Usage’ namespace, you can now view the ‘ApproximateNumberOfTopics', 'ApproximateNumberOfFilterPolicies', and 'ApproximateNumberOfPendingSubscriptions' metrics to monitor your usage of these Amazon SNS resources. Moreover, using AWS Service Quotas, you can also view your utilization metrics per quota, and create Amazon CloudWatch alarms to notify you when your utilization of a given quota exceeds your configurable threshold. This enables you to more precisely adapt your utilization of Amazon SNS, based on your applied quotas.

Today, AWS Clean Rooms announces two new capabilities: the general availability of configurable analysis results setting and the preview of Apache Iceberg support. These launches give customers more flexibility to configure AWS Clean Rooms collaborations with their preferred result recipient and data format.

AWS App Runner adds support to deploy services directly from source code stored in Bitbucket repository. App Runner makes it easier for developers to quickly deploy web applications and APIs to the cloud, at scale, and without having to manage infrastructure.

Amazon S3 now supports multivalue answer (MVA) in response to DNS queries for S3 endpoints. With MVA, you can now get up to eight S3 IP addresses per DNS query. You can use these IP addresses to automatically make multiple concurrent connections to S3 which can improve throughput. MVA also makes retries more efficient as applications will automatically try an alternative IP address without having to wait for another DNS query.

Service Quotas now supports requesting a quota increase on number of instances for a specific Amazon OpenSearch Service domain in your AWS account. With this launch, you can also view applied quota values for each domain in your AWS account.

Starting today, AWS Firewall Manager improves auditing capabilities for Security Groups by identifying excessively permissive rules that permit traffic from all IP ranges. With this enhancement, customers can detect and remediate 0.0.0.0/0 and ::/0 CIDRs in a Security Group using the Security Group Content Audit policy. Previously, AWS Firewall Manager provided customers with an option to audit IP addresses that fall within a defined range. This new capability further simplifies security posture management by detecting these common IP ranges.

You can now add routes in your AWS Outposts rack subnet route table to forward traffic between subnets within the same VPC spanning across disparate Outposts, using the Outpost local gateways (LGW). The LGW enables connectivity between your Outpost subnets and your on-premises network. With this enhancement, you can establish intra-VPC instance-to-instance IP communication across Outposts through your on-premise network, via direct VPC routing (DVR).

Today, AWS is renaming Amazon Kinesis Data Analytics to Amazon Managed Service for Apache Flink. With Amazon Managed Service for Apache Flink, you can transform and analyze streaming data in real time with Apache Flink, an open-source framework and engine for processing data streams. The name change is effective in the AWS Management Console, documentation, and service webpages. There are no other changes, including to service endpoints, APIs, the AWS Command Line Interface (AWS CLI), the AWS Identity and Access Management (IAM) access policies, Amazon CloudWatch metrics, or the AWS Billing console dashboard. Your existing applications will continue to work as they did previously.

AWS DataSync introduces task reports, a new feature that provides detailed reports of data transfer operations for each task execution. Using task reports, you can track and audit your data transfers, monitor the chain of custody of your files, and troubleshoot transfer errors.

Starting today, Amazon Relational Database Service (Amazon RDS) for Oracle supports the auto-upgrade of Oracle time zone files for DB instances on the multitenant container database (CDB) architecture running in single-tenant configuration. The Oracle time zone file auto-upgrade feature provides an automated way to upgrade the daylight savings time (DST) time zone file version in the DB instance.

AWS ParallelCluster 3.7 is now generally available. Key features in this release are support for Ubuntu 22 and support for login nodes, which enable customers to decouple user access from cluster’s head-node and de-risks the depletion of head-node resources because of excessive user-activity. Other important features in this release include:

Today, AWS HealthOmics announces a new capability to easily archive and retain workflow runs to support your data provenance requirements. In regulated environments, the need to keep long term records of which algorithms you ran on specific input data to produce specific output data is a key component for compliance. The new AWS HealthOmics capability enables you to track your workflow history in Amazon CloudWatch Logs, and use CloudWatch Insights to query this history. You can also export this data to S3 from CloudWatch for even longer term storage to meet your compliance requirements.

We’re excited to announce that Android, Swift, and Flutter libraries now support Time-Based One-time Passwords (TOTP) as a multi-factor authentication (MFA) method. This feature enables developers to provide their users with a secure option for validating a user’s identity after they provide their username and password. 

You can now route any IPv4 and IPv6 traffic entering your Amazon VPC from virtual private gateway through a Gateway Load Balancer endpoint before the traffic reaches the destination. You can use Gateway Load Balancer Endpoint to process your VPC traffic through AWS Network Firewall or other security appliances available on AWS Market Place.

Amazon Chime SDK lets developers add real-time audio and video to their web and mobile applications with one-to-one and group meetings. Amazon Chime SDK meetings are now available in the AWS Israel (Tel Aviv) Region. With this launch, AWS Israel (Tel Aviv) becomes a meetings control region, providing developers with API endpoints to create and manage meetings as well as a media region, providing the ability to connect clients to audio and video hosted in the region. 

Amazon Connect launches new features that improve the user bulk editing experience. With this launch, you can now update multiple user records simultaneously on the Amazon Connect admin website in less than half the time it used to take to make bulk updates. These time savings can make a difference, for example in a crisis situation, when you need to update hundreds of agent routing profiles to ensure that inbound contacts do not experience extreme wait times. For more information see the Amazon Connect admin guide. 

Today, AWS Migration Hub Refactor Spaces launched an SSM automation document for use as an AWS Application Migration Service post launch action. Refactor Spaces provides the AWS infrastructure for incrementally refactoring to microservices that reduces risk when evolving applications, accelerates team agility, and ensures deployment independence. Refactor Spaces’ SSM document automates the creation of a refactor environment and routing traffic to your application running on EC2, so you can continue modernizing as soon as you’ve migrated an application. 

Starting today, AWS Application Migration Service (AWS MGN) supports additional application validation, configuration and modernization actions. 

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a new trusted procedural language in PostgreSQL major versions 13 and 14, expanding support for Rust from major version 15. This helps you build high performance user-defined functions to extend PostgreSQL for compute-intensive data processing.

AWS Transfer Family now offers customers the option to require both SSH key and password authentication when users connect to their SFTP servers. This new method of authentication allows customers to add an additional level of protection to their data when authorizing users to securely access their files.

Amazon Connect Cases now supports nine additional languages: Chinese (Simplified), Chinese (Traditional), French, German, Italian, Japanese, Korean, Portuguese (Brazilian), and Spanish. Now, you can view the Amazon Connect Cases UI in any language supported by Amazon Connect regardless of your AWS Region.

The Amazon VPC Container Networking Interface (CNI) Plugin now supports the Kubernetes NetworkPolicy resource. Customers can use the same open-source Amazon VPC CNI to implement both pod networking and network policies to secure the traffic in their Kubernetes clusters. This reduces the need to run additional software for network access controls and will work alongside all existing VPC CNI capabilities.

Amazon FSx for Lustre, a fully managed service that makes it easy and cost effective to launch, run, and scale the world’s most popular high-performance file system, now supports project quotas. With project quotas, you can group multiple files or directories on your file system into a project, and monitor storage consumption on a per-project basis. Project quotas are ideal for storage administrators who manage file systems that serve multiple projects or teams who want to ensure that no project exceeds its allocated storage capacity.

AWS Outposts can now be shipped and installed at your datacenter and on-premises locations in Iceland and Uruguay.

Amazon Relational Database Service (Amazon RDS) Optimized Writes now supports m6i and m6g database (DB) instances. With Amazon RDS Optimized Writes you can improve the write throughput for Amazon RDS for MySQL and MariaDB workloads by up to 2x at no additional cost. This is especially useful for write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

AWS Private Certificate Authority (AWS Private CA) launches the Connector for Active Directory (AD). The Connector for AD allows you to use AWS Private CA as a drop-in replacement for your self-managed enterprise certificate authorities without the need to deploy, patch, or update local agents or proxy servers. Enterprises that use AD to manage Windows environments can reduce their private certificate authority (CA) costs and complexity. You can help meet your security and compliance goals by using AWS Private CA, a fully-managed service, which stores CA private keys in FIPS 140 validated hardware security modules (HSMs).

We are excited to announce the integration of Amazon OpenSearch Serverless with AWS User Notifications. OpenSearch Serverless is the serverless option for Amazon OpenSearch Service that makes it simple for you to run search and analytics workloads without having to think about infrastructure management.

Using AWS Elemental MediaTailor you can now enable or disable non-linear overlay ads at a per-session level.

Today, AWS Backup announces support for local time zone selection in your backup plan, allowing you to manage your backup schedule according to your local time zone. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. Now, when creating or editing existing backup plans, you can select a backup window time zone, eliminating the need for manual time zone conversions from UTC. 

AWS Neuron is the SDK for Amazon EC2 Inferentia and Trainium based instances purposely-built for generative AI. Today, with Neuron 2.13 release, we are launching support for Llama 2 model training and inference, GPT-NeoX model training and adding support for Stable Diffusion XL and CLIP models inference. 

Patch Manager, a capability of AWS Systems Manager, now supports instances running Red Hat Enterprise Linux (RHEL) 8.7, 9.0, 9.1, 9.2, Rocky Linux 8.6, 8.7, 9.0, 9.1, 9.2, and Oracle Linux 8.6, 8.7, 9.0, 9.1, and 9.2. Patch Manager enables you to automatically patch instances with both security-related and other types of updates across your infrastructure for a variety of common operating systems, including Windows Server, Amazon Linux, and Red Hat Enterprise Linux (RHEL). For a full list of supported operating systems, see the Patch Manager prerequisites user guide page.

Amazon CloudWatch Application Insights now offers observability of SAP NetWeaver applications deployed with Standard System Deployment architecture. This launch builds on our observability of multi-app deployments on a single instance. Application Insights helps customers gain insights for their SAP and non-SAP applications, databases and AWS resources by making it easy to set up and monitor applications, recognize problems, and use data to make decisions. 

Starting today, customers can use AWS Control Tower in the AWS Israel (Tel Aviv) Region. With this launch, AWS Control Tower is available in 23 AWS Regions and the AWS GovCloud (US) Regions. AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It simplifies AWS experiences by orchestrating multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. You can set up a multi-account AWS environment within 30 minutes or less, govern new or existing account configurations, gain visibility into compliance status, and enforce controls at scale.

Customers that use Amazon Simple Notification Service (Amazon SNS) can now host their applications in Tel Aviv region, and send text messages (SMS) to consumers in more than 200 countries and territories. Using Amazon SNS, customers can send a message directly to one phone number, or multiple phone numbers at once by subscribing those phone numbers to a topic and sending messages to the topic. 

You can now use AWS Elemental Link and AWS Elemental MediaLive to ingest and deliver KLV metadata from a MediaLive channel.

AWS Compute Optimizer now recommends licensing optimization opportunities for Microsoft SQL Server workloads on Amazon EC2. With this launch, AWS Compute Optimizer can provide automated recommendations for downgrading SQL Server Edition for your EC2 SQL Server license included and bring-your-own-license (BYOL) instances to reduce licensing cost.

Amazon Simple Email Service (Amazon SES) is now available in Israel (Tel Aviv) AWS Region. Amazon SES is a scalable, cost-effective, and flexible cloud-based email service that allows application developers and digital marketers to send marketing, notification, and transactional emails from within any application. To learn more about Amazon SES, visit this page.

Amazon Connect scheduling now allows contact center managers to more efficiently create and manage activities for groups of agents, such as team meetings. Before this launch, managers could create individual activities in agent schedules and manage them separately for each agent. With this launch, managers can now indicate if an activity is individual or shared (group), for example, scheduling individual 1:1 sessions with 50 agents or scheduling a team meeting that includes all 50 agents. They can further indicate if any overlapping breaks/meals should be automatically moved to a different time, simplifying the process and saving valuable time.

Starting today, you can use Amazon Route 53 Resolver DNS Firewall in the Middle East (UAE) and Israel (Tel Aviv) Region.

Amazon GuardDuty is now available in the Israel (Tel Aviv) Region. You can now continuously monitor and detect anomalous behavior and security threats in this additional region to help protect your AWS accounts, workloads, and data.

Amazon Detective is now available in the AWS Israel (Tel Aviv) Region. You can now analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities using Detective in the new AWS Region.

Amazon Connect now provides the ability for contact center administrators to apply granular permissions to the agent activity audit report in the Amazon Connect UI using resource tagging and tag-based access controls. This new capability enables customers to define who is able to see the historical agent statuses (e.g. “Available”) for specific agents. For example, you can tag agents with Team:Compliance and then only enable the Compliance team manager to see activity for these agents.

Amazon QuickSight now supports scheduled generation of Excel workbooks by selecting multiple tables and pivot table visuals from any sheet of a dashboard. Snapshot Export APIs will now also support programmatic export to Excel format, in addition to Paginated PDF and CSV. 

In May, Red Hat announced the preview of Red Hat OpenShift Service on AWS (ROSA) with hosted control planes (HCP), a new deployment model for ROSA clusters. Today, we are introducing an AWS account configuration workflow for ROSA with HCP on the AWS Management Console. Under the original ROSA deployment model, now called ROSA classic, all AWS infrastructure required to run the ROSA control plane is hosted on your AWS account. Now, you can create ROSA clusters with the control plane hosted and managed on a service account. During the preview, ROSA with HCP clusters will not incur ROSA service fees and should not be used for production workloads.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.4, 14.9, 13.12, 12.16, and 11.21. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Customers can now create Amazon FSx for Lustre file systems in the AWS Israel (Tel Aviv) Region.

We are excited to announce preview of Amazon SageMaker Profiler, an advanced observability tool for large deep learning workloads. With this new capability, you will be able to access granular compute hardware related profiling insights for optimizing model training performance.

Customers can now create Amazon FSx for Windows File Server file systems in the AWS Israel (Tel Aviv) Region.

Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) now supports Percona Xtrabackup for completing physical migrations of your existing MySQL 8.x databases running on Amazon EC2 or outside of AWS. This capability makes it easier and faster to migrate large MySQL databases with complex schemas into Amazon Aurora MySQL. Percona XtraBackup allows you to perform consistent, non-blocking, online backups of your source MySQL database which can then be migrated to Aurora MySQL with minimal downtime.

Customers that are subject to HIPAA can use AWS AppFabric to aggregate normalized audit logs from supported Software as a Service (SaaS) applications or audit user access in those applications. If you have an executed Business Associate Addendum (BAA) with AWS, you can now use AWS AppFabric for workloads that are within the scope of HIPAA.

AWS Microservice Extractor for .NET simplifies refactoring older monolithic applications into smaller code projects to build a microservices-based architecture. Microservice Extractor analyzes source code and runtime metrics to create a visual representation of the application with its dependencies. Now Microservice Extractor offloads compute intensive graph processing to the cloud and allow developers to visualize and interact with large enterprise applications with up to 50,000 classes on their own laptop. 

AWS Wickr is now available in the AWS Europe (London) Region. This expansion allows organizations to establish a Wickr network in an AWS Europe Region to help meet data residency requirements, and other obligations. The expansion also allows customers to manage networks across multiple commercial regions, and marks the extension of Wickr’s global reach.

The Amazon Elastic Compute Cloud (Amazon EC2) Trn1 instances are now generally available in the US East (Ohio) region. Trn1 instances deliver high performance training of popular Generative AI models on AWS, while offering up to 50% lower cost-to-train over comparable Amazon EC2 instances. 

Today, Amazon WorkSpaces introduces new Linux client with versions supporting Ubuntu 20.04 and 22.04. The new client, powered by WSP(WorkSpaces Streaming Protocol), improves the remote desktop experience by offering enhanced web conferencing functionality, better multi-monitor support, and a more user-friendly interface.

AWS Dedicated Local Zones are a type of AWS infrastructure that is fully managed by AWS, built for exclusive use by you or your community, and placed in a location or data center specified by you to help comply with regulatory requirements. Dedicated Local Zones can be operated by local AWS personnel and offer the same benefits of Local Zones, such as elasticity, scalability, and pay-as-you-go pricing, with added security and governance features. With Dedicated Local Zones, we work with you to configure your own Local Zones with the services and capabilities you need to meet your regulatory requirements.

We are excited to announce that customers can now update their Amazon SageMaker Endpoints using a rolling deployment strategy. Rolling deployment makes it easier for you to update fully-scaled endpoints that are deployed on hundreds of popular accelerated compute instances.

AWS DataSync is now available in the Israel (Tel Aviv) region. You can now use DataSync to copy data between on-premises, edge, or other cloud storage and AWS Storage services, as well as between AWS Storage services in the Israel (Tel Aviv) region.

You can now use Amazon SageMaker Model Cards with AWS Resource Access Manager (AWS RAM) to securely share model cards from your AWS account with a different AWS account, and also view, modify, and export (PDF) model cards shared with your account. Cross-account support of SageMaker Model Cards facilitates governance and collaboration by enabling you to view, track, and audit all available model cards within your organization in your centralized account.

AWS Storage Gateway expands availability to the AWS Israel (Tel Aviv) Region enabling customers to deploy and manage hybrid cloud storage for their on-premises workloads.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7gd, M7gd, and R7gd instances with up to 3.8 TB of local NVMe-based SSD block-level storage are available in Europe (Frankfurt) region. They have up to 45% improved real-time NVMe storage performance than comparable Graviton2-based instances. These Graviton3-based instances with DDR5 memory are built on the AWS Nitro System and are great fit for applications that need access to high-speed, low latency local storage, including those that need temporary storage of data for scratch space, temporary files, and caches. C7gd instances are ideal for high performance computing (HPC), CPU-based machine learning (ML) inference, and ad serving. M7gd instances are ideal for general purpose workloads, such as application servers, microservices, and gaming servers. R7gd instances are ideal for memory-intensive workloads such as open-source databases, and real-time big data analytics.

With today’s release, Amazon Athena and its latest features and benefits are available in the AWS Israel (Tel-Aviv) Region. 

Enterprise, network and security admins can now use AWS Identity and Access Management (IAM) condition context keys with AWS Certificate Manager (ACM) to help ensure that users are issuing certificates that conform to their organization’s public key infrastructure (PKI) guidelines. For example, you can use condition keys to allow only DNS validation. Or, you can authorize which of your users can request certificates for specific domain names such as accounting.example.com and/or wildcard names.

AWS Cost Allocation Tags now has two additional metadata fields, Last Used Month and Last Updated Date. You can use these fields to know when tag keys were last used or updated.

Today, we are announcing the availability of AWS Backup in the Israel (Tel Aviv) Region. AWS Backup is a fully-managed, policy-driven service that allows you to centrally automate data protection across multiple AWS services spanning storage, compute, databases, and hybrid workloads. Using AWS Backup, you can centrally create and manage immutable backups of your application data, protect your data from inadvertent or malicious actions, and restore the with a few simple clicks.

Amazon Monitron is an end-to-end system that uses machine learning to detect abnormal conditions in industrial equipment to enable predictive maintenance. Amazon Monitron includes wireless sensors to capture vibration and temperature data; gateways to automatically transfer data to the AWS Cloud; the Amazon Monitron service that analyzes the data for abnormal machine patterns using ML, and a companion mobile app to set up the devices and receive reports on operating behavior and alerts to potential failures in machinery.

Starting today, you can now hibernate Amazon EC2 M7i and M7i-flex instances. Hibernation provides you with the convenience of pausing your instances and resuming them later from a saved state. Using hibernation, your applications will resume from right where they left off. With hibernation, you can maintain pre-warmed instances that can get to a productive state faster without modifying existing applications. 

Starting today, Amazon Virtual Private Cloud (VPC) customers can use Reachability Analyzer and Network Access Analyzer in Asia Pacific (Osaka) region.

Amazon ElastiCache for Memcached now makes it simpler and faster for you to get started with setting up an ElastiCache for Memcached cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7i-flex and M7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in Europe (Spain, Stockholm) regions. These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

We are pleased to announce that, starting today, you can preserve client IP addresses towards Network Load Balancers (NLBs) with AWS Global Accelerator. With this feature, you can meet security and compliance restrictions around client IP addresses, apply client-specific logic for IP address or location-based filters, or gather connection statistics. You can also use client IP address preservation to serve personalized content in your applications.

Amazon GuardDuty announces a new capability to help customers streamline and simplify how they set up and administer protection plan coverage across all member accounts in an organization. Delegated Administrators (DAs) can now enable one or more GuardDuty features, for all existing and newly-added members of an organization within the same region and helps ensure consistent security coverage across their organization.

AWS Outposts rack is now supported in the AWS Middle East (UAE) and the AWS Israel (Tel Aviv) Regions. AWS Outposts rack is a fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any on-premises data center or co-location space for a truly consistent hybrid experience.

Starting today, AWS Billing Conductor (ABC) customers can view proforma costs in AWS Cost Explorer. This release allows ABC customers’ account owners to analyze and save reports of their proforma costs. For example, organizations can use the feature to grant cross-account billing visibility for their business units. Partners can use the feature to give their customers a cost reporting experience in AWS Cost Explorer that matches the customer’s specific pricing agreement.

Amazon SageMaker Data Wrangler reduces the time it takes to aggregate and prepare data for machine learning (ML) from weeks to minutes in Amazon SageMaker Studio. SageMaker Data Wrangler enables you to access data from a wide variety of popular sources including Amazon S3, Amazon Athena, Amazon Redshift, Amazon EMR, Snowflake, and over 50 other third-party sources. Starting today, you can use role-based access control with AWS Lake Formation in EMR Hive and Presto connections to create datasets for ML in SageMaker Data Wrangler. 

Amazon SageMaker Data Wrangler now supports S3 access points for previewing and importing data to SageMaker Data Wrangler and as a destination for data exported from SageMaker Data Wrangler. Preparing high quality data for ML is often complex and time consuming as it requires aggregating data across various sources and formats using different tools. With SageMaker Data Wrangler, you can explore and import data from a variety of popular sources, such as Amazon S3, Amazon Athena, Amazon Redshift, Snowflake, Databricks and 40+ SaaS data sources. Customers increasingly use Amazon S3 to store shared datasets, where data is aggregated and accessed by different applications, teams and individuals. S3 access points enable organizations to grant fine-grained access control at a granular level. Instead of modifying a single bucket policy, organizations can create multiple access points with individual policies tailored to specific use cases, reducing the risk of misconfiguration or unintended access to sensitive data. Starting today, SageMaker Data Wrangler is making it easier for customers to prepare data from shared datasets stored in S3 while enabling organizations to securely control data access in their organization. 

AWS Elemental MediaConvert is now available in both the Asia Pacific (Osaka) and Australia (Melbourne) regions, giving customers two additional options for configuring and submitting MediaConvert jobs using the console or API endpoints.

AWS re:Post is a cloud knowledge service that provides customers the technical guidance they need to innovate faster and improve operational efficiency with AWS. Today, re:Post launches an enhanced search experience to help users locate answers and discover articles more quickly. When submitting a search query, users are presented search results in a consolidated view of all AWS knowledge on re:Post. The view shows AWS Knowledge Center articles, question and answers, and community articles that are relevant to the user’s search query.

Amazon Aurora now supports Global Database Failover, a fully managed experience for performing a cross-Region database failover to respond to unplanned events such as a regional outage. With Global Database Failover, you can convert a secondary region into the new primary region in typically a minute and also maintain the multi-region Global Database configuration. To learn more about Global Database Failover, see this blog.

Amazon RDS for MariaDB now supports MariaDB major version 10.11, the latest long-term maintenance release from the MariaDB community. Amazon RDS for MariaDB 10.11 includes performance improvements that enable up to 40% higher transaction throughput than prior versions. You can deploy RDS for MariaDB 10.11 on RDS Optimized Read and Optimized Write enabled instance classes for additional performance gains. MariaDB 10.11 major version also includes improvements to authentication, information schema, system versioning, and the InnoDB storage engine made by the MariaDB community.

We are excited to announce that Amazon SageMaker Studio Lab now supports the SageMaker Distribution image. Studio Lab customers have often asked for an environment that comes pre-installed with popular libraries including PyTorch, TensorFlow, and Keras, and an easier way to migrate their Studio Lab environment to Amazon SageMaker Studio. SageMaker Distribution fulfills both of these needs.

Starting today, you can use AWS Application Migration Service (AWS MGN) to migrate and modernize your applications in Israel (Tel Aviv) region.

AWS CloudFormation has expanded the availability of StackSets to AWS Israel (Tel Aviv) Region. With this launch, customers can deploy their stack sets to and from this newly supported AWS Region.

You can now choose IP addresses for your AWS PrivateLink VPC endpoints. AWS PrivateLink is a fully-managed, private connectivity service that enables customers to share and access services including AWS services, third-party services, and internal enterprise services hosted on AWS in a secure and scalable manner while keeping network traffic private.

AWS Firewall Manager is now available in Israel (Tel-Aviv) region, bringing AWS Firewall Manager to a total of 30 AWS commercial regions, 2 GovCloud regions, and all Amazon CloudFront edge locations.

AWS Batch on Amazon Elastic Container Service (ECS) now supports ECS-optimized Amazon Linux 2023 (AL2023) AMIs. AL2023 provides customers the latest innovations in Linux with long-term technical support until March 2028.

Today, AWS Audit Manager announces integration with Amazon EventBridge. This integration means customers can now use AWS Audit Manager published events as part of their event-driven architecture. Amazon EventBridge is a service that provides real-time access to changes in data in AWS services, your own applications, and software as a service (SaaS) application without writing code.Within AWS Audit Manager, you can now receive state change notifications whenever an assessment is created, edited, or deleted. You can also be notified about changes to any delegation workflow or assessment control status.

Starting today, storage optimized Amazon EC2 I4i instances are now also available in the Middle East (UAE), Asia Pacific (Jakarta, Hyderabad) Regions. Amazon EC2 I4i instances are powered by 3rd generation Intel Xeon Scalable processors (Ice Lake) and deliver the highest local storage performance within Amazon EC2 using AWS Nitro NVMe SSDs.Amazon EC2 I4i instances are designed for databases such as MySQL, Oracle DB, and Microsoft SQL Server, and NoSQL databases such as MongoDB, Couchbase, Aerospike, and Redis where low latency local NVMe storage is needed in order to meet application service level agreements (SLAs). I4i instances are available in 8 sizes - large, xlarge, 2xlarge, 4xlarge, 8xlarge, 16xlarge, 32xlarge and metal.

AWS announces the general availability of the Confirmation slot type for Amazon Lex that enables developers to effectively capture “Yes” and “No” responses from users. Amazon Lex is a service for building conversational interfaces into any application, using voice and text. With Amazon Lex, you can quickly and easily build sophisticated natural language conversational bots (“chatbots”), virtual agents, and interactive voice response (IVR) systems.

AWS Marketplace sellers can now utilize a new, simplified onboarding process to create Vendor Insights security profiles, reducing the time it takes to make their product profiles visible to prospective buyers. AWS Marketplace Vendor Insights allows customers to complete third-party software risk assessments in days instead of months. Sellers with AWS Marketplace Vendor Insights profiles can showcase their security posture while reducing the operational burden of responding to buyer requests for security and risk information.

Amazon FSx for NetApp ONTAP, an AWS service that provides the only complete, fully managed NetApp ONTAP file systems in the cloud, now provides additional Amazon CloudWatch performance metrics for improved visibility into file system activity and enhanced monitoring dashboards with performance insights and recommendations . You can use the new metrics and dashboards to more easily monitor and right-size your file systems to optimize performance and costs.

Starting today, customers can use AWS Client VPN in Israel (Tel Aviv) Region. You can now provide VPN access to your remote workforce to securely access resources in the Israel (Tel Aviv) Region.

We are excited to announce that Amazon GameLift now supports the latest generation of compute-optimized AWS Graviton instances. Amazon GameLift is a fully-managed service that allows developers to quickly manage and scale dedicated game servers for multiplayer games. Graviton-based instances are powered by the latest AWS Graviton3 processors and deliver up to 25% higher performance over Graviton2 processors. With this release, Amazon GameLift now supports 68 instance families across 23 regions.

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) Hpc7a instances. Amazon Elastic Compute Cloud Hpc7a instances, powered by 4th generation AMD EPYC processors, deliver up to 2.5x better performance compared to Amazon EC2 Hpc6a instances. Hpc7a instances feature 2x higher core density (up to 192 cores), 2.1x higher memory bandwidth throughput, 2x memory (768 GB), and 3x higher network bandwidth compared to Hpc6a instances. 

Introducing AWS DeepRacer Student educator playbooks - the perfect tool for educators to seamlessly integrate foundational machine learning (ML) curriculum and labs into their classrooms for students 16 years and older. With educator playbooks, educators can easily upskill students in the basics of ML through the excitement of racing autonomous vehicles.

Amazon RDS (Relational Database Service) Performance Insights now provides an enhanced console experience to view performance monitoring metrics for Amazon RDS databases in AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions. It consolidates information from Amazon CloudWatch and Amazon RDS Performance Insights to provide a comprehensive view of your database’s health. This removes the need for you to gather data from multiple sources and speeds up the diagnosis of database performance issues. 

Today, we are excited to announce the general availability of Zayd - new Gulf Arabic Neural Text-to-Speech (NTTS) voice for Amazon Polly.

AWS Glue Studio now offers 5 new visual transforms: Record matching, Remove null rows, Extract string fragments from a regular expression, Parse JSON column, and Extract JSON path. AWS Glue Studio offers a visual extract-transform-and-load (ETL) interface to author, run, and monitor AWS Glue ETL jobs. With these new components, ETL developers can quickly build more sophisticated data pipelines without having to write code.

Amazon Relational Database Service (Amazon RDS) Customfor Oracle now supports R5b and x2iedn instances. These instances are designed to deliver high EBS-optimized throughput and IOPS to enhance performance of Oracle database workloads that require high IO and that process large data sets in memory. Amazon RDS Custom for Oracle customers, with right-sizing, can migrate their database instances to smaller-sized R5b or x2iedn instances and still meet their workload throughput, IOPS, and memory requirements, saving on compute and database licensing costs.

AWS AppSync is a managed service that makes it easier to build scalable APIs that connect applications to data. With AppSync, API developers can write resolvers to define the business logic that connects their AppSync GraphQL and Pub/Sub APIs to data. Now, developers can use JavaScript to write their unit resolvers, pipeline resolvers, and AppSync functions that are executed on the AppSync JavaScript (APPSYNC_JS) runtime.

AWS announces the general availability of Amazon EC2 M7a instances. M7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz,  deliver up to 50% higher performance compared to M6a instances.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL, MySQL, and MariaDB now supports AWS Graviton2-based T4g database instances in Africa (Cape Town), Asia Pacific (Jakarta, Melbourne, Osaka), Europe (Zurich), and Middle East (Bahrain) Regions. T4g database instances provide a baseline level of CPU performance, with the ability to burst CPU usage for as long as required. Depending on the database engine, version, and workload, T4g database instances provide up to 36% better price performance over comparable x86-based T3 database instances.

Today, AWS announced support for delegated backup administrators to use AWS Backup Audit Manager for creating and managing audit reports across accounts in AWS Organizations.

Starting today, Amazon EC2 D3en instances, the latest generation of the dense HDD-storage instances, are available in the Europe (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Tokyo) regions. D3en instances are ideal for workloads including distributed / clustered file systems, big data and analytics, and high capacity data lakes. With D3en instances, you can easily migrate from previous-generation D2 instances or on-premises infrastructure to a platform optimized for dense HDD storage workloads. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7g and R7g instances are now available in AWS Region Asia Pacific (Singapore). These instances are powered by AWS Graviton3 processors that provide up to 25% better compute performance compared to AWS Graviton2 processors, and built on top of the the AWS Nitro System, a collection of AWS designed innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL, MySQL, and MariaDB now supports AWS Graviton2-based M6g and R6g database instances in Africa (Cape Town), Asia Pacific (Jakarta, Melbourne, Osaka), Europe (Zurich), and Middle East (Bahrain) Regions. 

Amazon RDS (Relational Database Service) Performance Insights now helps customers analyze database performance metrics on demand to troubleshoot performance issues. It leverages machine learning models to help identify performance bottlenecks during the selected time period and gives advice on what to do next. This feature is available for Aurora MySQL, Aurora PostgreSQL and RDS for PostgreSQL engines.

AWS Resilience Hub adds support for customers to exclude operational recommendations provided to more accurately reflect your application’s resilience posture in your resilience score. Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle now supports R6i, M6i, and T3 instances. R6i instances are designed for memory-intensive workloads with 8:1 ratio of memory to vCPU. M6i are general purpose compute instances designed to provide a balance of compute, memory, storage, and network resources with 4:1 ratio of memory to vCPU. T3 instances are ideal for database workloads with moderate CPU usage that experience temporary spikes in use.

Amazon VPC Lattice is now available in 4 additional AWS Regions: Europe (Frankfurt), Europe (London), Europe (Stockholm), and Canada (Central).

Amazon EMR Serverless is a serverless option for Amazon EMR that makes it simple for data analysts and engineers to run open-source big data analytics frameworks such as Apache Spark and Apache Hive without configuring, managing, and scaling clusters or servers. Starting today, you can specify fine-grained log configurations for your driver and executor logs, making it simple to troubleshoot your Apache Spark jobs.  

Today, AWS announces improvements to the image extraction functionality within Amazon Kinesis Video Streams. Now customers can extract images at a rate of 5 frames per second, improved from one image every 3 seconds. Customers can now use high frequency sampling for ML inferencing and a rich playback experience.

 Starting today, you can enable Red Hat OpenShift Service on AWS (ROSA) from the AWS Console and launch ROSA clusters in the Europe (Zurich) Region.

We are excited to announce public availability of AWS Mainframe Modernization Data Replication with Precisely. The capability leverages data replication offered by Precisely to enable near real-time replication of mainframe data to the AWS Cloud with support for heterogeneous source and target databases. It builds resilient high-performance data pipelines that dynamically replicate data changes via Change Data Capture (CDC) from mainframe data stores to AWS database services like Amazon Aurora and Amazon RDS. As a result, businesses can migrate and augment mainframe applications by offloading data processing, building new business functions or channels, and driving business insights and intelligence with analytics, ML, and AI on the AWS Cloud to speed modernization and deliver cost savings, agility, and innovation.

Today, AWS HealthOmics launches the ability to share variant and annotations stores across accounts. Customers can now share their genomic variant and annotation data with both internal and external collaborators while retaining ownership of the data.

Today, AWS HealthOmics launched the ability for customers to version genomic annotation data. Previously, customers would create a new annotation store for each version of the data source they needed to support. Now, as customers add or update data, they can create new versions within existing annotation stores to simplify how they organize and govern their data. This makes it easier to build and share this data across an organization.

We are excited to announce that Amazon OpenSearch Serverless can now scan and search up to 6TB of time series data which includes one or more indexes within a collection. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple for you to run search and analytics workloads without having to think about infrastructure management. With the support for larger datasets, you can unlock valuable operational insights and make data driven decisions to troubleshoot application downtime, improve system performance, or identify fraudulent activities.

Amazon QuickSight is now an AWS IAM Identity Center enabled application. This capability allows administrators that subscribe to QuickSight to use IAM Identity Center to enable their users to login using their existing credentials.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7g, M7g and R7g instances are now available in AWS Regions Asia Pacific (Mumbai). These instances are powered by AWS Graviton3 processors and built on the AWS Nitro System. AWS Graviton3 processors provide up to 25% better compute performance compared to AWS Graviton2 processors. The AWS Nitro System is a collection of AWS designed hardware and software innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. 

Amazon Connect Contact Lens now provides real-time conversational analytics for voice in Asia Pacific (Singapore) region, enabling businesses to get transcription, sentiment analysis, supervisor alerts, and more during live customer calls.

You can now use your GitLab.com source repository to build, test, and deploy code changes using AWS CodePipeline. Connect your GitLab.com account using AWS CodeStar Connections, and use the connection in your pipeline to automatically start a pipeline execution on changes in your repository.

Today, AWS Startups introduced an improved AWS Startups experience that brings together startup resources and programs in one central location; including credits, accelerators, learning resources, and Showcase, an interactive directory where startups can promote their business to potential customers and partners. Through this experience, startups can register for AWS Activate, the leading program helping startups bring their ideas to market, innovate faster and more cost-efficiently using resources relevant to their needs.

Today, we are announcing the general availability of the Kubernetes attributes processor in the AWS Distro for OpenTelemetry (ADOT) collector. ADOT is a secure, production-ready, AWS supported distribution of the OpenTelemetry project. With this release, customers can use the ADOT collector to enable filtering and correlation use cases with Kubernetes-specific metadata such as a namespace or pod.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the July 2023 Release Update (RU) for Oracle Database versions 19c and 21c.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL 16 Beta 3 is now available in the Amazon RDS Database Preview Environment, allowing you to evaluate the pre-release of PostgreSQL 16 on Amazon RDS for PostgreSQL. You can deploy PostgreSQL 16 Beta 3 in the Preview Environment that has the benefits of a fully managed database, making it simpler to set up, operate, and monitor databases. PostgreSQL 16 Beta 3 in Preview Environment also includes support for logical decoding on read replicas, AWS libcrypto (AWS-LC), and over 80 PostgreSQL extensions. 

Amazon CloudWatch, the native monitoring and observability service provided by AWS, has added CloudWatch Agent support for the collection of AWS X-Ray and OpenTelemetry traces. Whether you’re already an X-Ray customer, or just getting started with OpenTelemetry, you are now able to collect metrics, logs, and traces with a single agent, simplifying installation, configuration and management of telemetry collection.

Amazon QuickSight introduces a new layout option called hierarchy layout for pivot tables. This allows users to view data in a hierarchical manner, where all row fields are presented in a single column with indentation to differentiate between items from different fields. The hierarchy layout optimizes space by reducing the footprint of row fields, creating more room for numeric data and resulting in more organized and compact pivot tables.

Amazon EventBridge API Destinations is now available in Europe (Spain, Zurich), Asia Pacific (Jakarta, Osaka, Hyderabad) and Middle East (UAE) regions, making event-driven applications more extensible by allowing you to send events to any HTTP APIs for self-managed or Software-as-a-Service (SaaS) applications. Authorization is built in so you don’t have to write or manage additional code to authorize their requests. 

Today, AWS announces AWS Service Catalog support for HashiCorp Terraform Cloud. With this launch, customers using Terraform Cloud can provide self-service provisioning with governance to their teams. AWS customers can now use Service Catalog as the single tool to organize, govern, and distribute their Terraform configurations within AWS at scale. Customers can access Service Catalog key features, including cataloging of standardized and pre-approved infrastructure-as-code templates, access control, cloud resources provisioning with least privilege access, versioning, sharing to thousands of AWS accounts, and tagging. End users such as engineers, database administrators, and data scientists simply see the list of products and versions they have access to, and can deploy them in a single action.

Starting today, you can enable Red Hat OpenShift Service on AWS (ROSA) from the AWS Console and launch ROSA clusters in the Asia Pacific (Melbourne) Region.

Starting today, AWS Firewall Manager now supports a new policy feature that allows you to ensure AWS WAF web ACLs are exclusively created in AWS accounts with resources in scope. Additionally, AWS Firewall Manager removes web ACLs from AWS accounts that no longer have resources within scope. In the past, AWS Firewall Manager would create web ACLs in all AWS accounts within a policy's scope, even if no resources were in scope. This functionality enables customers to optimize costs associated with unassociated web ACLs and helps customers to effectively scale existing Firewall Manager WAF policies across organizations and accounts.

You can now create Apache Airflow version 2.6 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.6 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Network Load Balancers (NLB) now supports security groups, enabling you to filter the traffic that your NLB accepts and forwards to your application. Using security groups, you can configure rules to help ensure that your NLB only accepts traffic from trusted IP addresses, and centrally enforce access control policies. This improves your application's security posture and simplifies operations. 

The Amazon EventBridge Schema Registry and Schema Discovery features are now available in the Europe (Spain), Europe (Zurich), Europe (Milan), Asia Pacific (Osaka), Africa (Cape Town), Middle East (Bahrain), Middle East (UAE), and Asia Pacific (Jakarta) AWS Regions, allowing you to discover and store event structure - or schema - in a shared, central location. You can download code bindings for those schemas for Java, Python, Typescript, and Golang so it’s easier to use events as objects in your code.

Starting today, customers can use Amazon Kinesis Data Analytics for Apache Flink in Israel (Tel Aviv) region.

AWS DataSync announces expanded support for copying data to and from storage in other clouds. In addition to support for Google Cloud Storage, Azure Files, and Azure Blob Storage, DataSync now supports copying data to and from DigitalOcean Spaces, Wasabi Cloud Storage, Backblaze B2 Cloud Storage, Cloudflare R2 Storage, and Oracle Cloud Storage. Using DataSync, you can move your object data at scale between S3-compatible storage on other clouds and AWS Storage services such as Amazon S3. DataSync makes it fast and simple to migrate your data from other clouds to AWS, archive your data in AWS, or move data to and from other clouds as part of your business workflows.

Starting today, the Amazon Elastic Compute Cloud (Amazon EC2) Inf2 instances are generally available in the US West (Oregon) region. These instances deliver high performance at the lowest cost in Amazon EC2 for generative AI models.

Amazon Detective has released several enhancements to finding groups visualization that help reduce noise and make your security investigations more effective. These enhancements help cut down on the amount of time it takes to identify root cause and affected resources in potential security issues.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 5.7.43 and 8.0.34. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon FSx for Lustre, a fully managed service that makes it easy and cost effective to launch, run, and scale the world’s most popular high-performance file system, now supports the ability to free up storage capacity on an FSx file system that has data synchronized with Amazon S3.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, now enables you to select and update the level of I/O operations per second (IOPS) separately from storage capacity on your file system. This new capability enables you to improve price-performance for IOPS-intensive workloads like SQL Server databases and optimize costs for workloads with IOPS requirements that vary over time like periodic reporting jobs.

Amazon S3 Glacier Flexible Retrieval improves data restore time by up to 85%, at no additional cost. Faster data restores automatically apply to the Standard retrieval tier when using Amazon S3 Batch Operations. These restores begin to return objects within minutes, so you can process restored data faster. Now, whether you are transcoding media, restoring operational backups, training machine learning models, or analyzing historical data, you can easily speed up your data restores from archive.

Today, AWS announces the general availability of Mountpoint for Amazon S3, a new open source file client that delivers high-throughput access to Amazon Simple Storage Service (Amazon S3), lowering processing times and compute costs for data lake applications. Mountpoint for Amazon S3 is a file client that translates local file system API calls to S3 object API calls such as GET and PUT.

Amazon Interactive Video Service (Amazon IVS) live video output prices for Low-Latency Streaming are now reduced by up to 50%. Per hours rates for video output are cut by up to 50% in South Korea, 46% in India, 43% in Taiwan, 41% in Australia, 30% in South America, 29% in Japan, Hong Kong, and South East Asia, and 4% in North America and Europe.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, is increasing the per-file system maximum throughput from 2 GB/s to 12 GB/s and maximum I/O operations per second (IOPS) from 80,000 to 350,000, enabling a broader set of performance-intensive workloads.

You can now use a Multi-AZ deployment option when creating file systems on Amazon FSx for OpenZFS, making it easy to deploy file storage that spans multiple AWS Availability Zones (AZs) to support business-critical workloads that require high availability and enhanced durability.

Today, AWS Backup announces the preview of logically air-gapped vault, a new type of AWS Backup Vault that allows secure sharing of backups across accounts and organizations, supporting direct restore to help reduce recovery time from a data loss event. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. Logically air-gapped vault stores immutable backup copies that are locked by default, and isolated with encryption using AWS owned keys.

AWS Fargate now supports Process ID (PID) namespace sharing and kernel parameter configuration (sysctl) for applications orchestrated by Amazon ECS. You can now configure the pidMode and the sysctl parameters in your ECS task definition for tasks running on Fargate. 

Amazon QuickSight now supports embedded callback actions that can help you integrate your SaaS application with Amazon QuickSight embedded dashboards and visuals. You can use callback actions to build custom workflows and business logic so that your users can take instant action from the application. Developers can now register to datapoint callbacks (ie. slice in a pie chart, bar on a bar chart) through the Embedding SDK. They can then pass the information about that datapoint (ie. value of the slice) to other parts of their application or other services in their workflow. To learn more about embedded workflows, click here.

We are pleased to announce Terraform support for Amazon OpenSearch Serverless deployments. OpenSearch Serverless is the serverless option for Amazon OpenSearch Service that makes it easier for you to run search and analytics workloads without having to think about infrastructure management. Terraform enables OpenSearch Serverless deployments as infrastructure as code(IaC). Using Terraform for deployments, you can ensure that the configurations are measured and validated, minimizing the chances of errors caused by human oversight.

Starting today, AWS Global Accelerator offers dual-stack accelerators that enable you to route IPv6 traffic to EC2 endpoints, in addition to dual-stack Application Load Balancer (ALB) endpoints.

Amazon ElastiCache for Redis now supports online migration from self-managed Redis clusters to ElastiCache for Redis clusters running in cluster mode. Online migration simplifies moving data from self-managed Redis clusters to ElastiCache with minimal application disruption. During the migration, ElastiCache replicates cache data from each self-managed Redis source shard to the target ElastiCache cluster. Once initial replication is complete, the two clusters will be kept in sync until you are ready to update your application configuration to use ElastiCache.

AWS Glue now supports Amazon CodeWhisperer in additional regions. You can use Amazon CodeWhisperer with no additional charge to generate real-time code suggestions in AWS Glue Studio notebooks. CodeWhisperer can generate code suggestions ranging from snippets to full functions in real time based on your prompts and existing code.

Customers can now create file systems using Amazon Elastic File System (Amazon EFS) in the AWS Israel (Tel Aviv) Region.

Amazon Timestream announces the availability of the Amazon Timestream ODBC driver, based on Microsoft's Open Database Connectivity. This new driver allows applications such as Excel, PowerBI, JMP, and more to seamlessly integrate with Timestream's powerful query engine, facilitating the analysis of billions of data points.

Amazon Web Services (AWS) is announcing the general availability of notifications on the AWS Artifact console. You can now subscribe to notifications and create configurations to get notified when a new report or agreement, or a new version of an existing report or agreement becomes available on AWS Artifact. While creating a configuration, you can choose whether you need notifications on all reports and agreements or a subset of reports, and provide the email addresses of the individuals who would like to receive notifications. Once the recipient verifies their email address, they will start receiving email notifications as per the preferences selected within the configuration. To use notifications on AWS Artifact, you will also need to enable permissions to the AWS User Notifications service. 

Amazon EMR Studio is an integrated development environment (IDE) that makes it easy for data scientists and data engineers to develop, visualize, and debug big data and analytics applications written in PySpark, Python, Scala, and R. EMR Studio provides fully managed Jupyterlab Notebooks and tools such as Spark UI and YARN Timeline Service to simplify debugging. Today, we are excited to announce that EMR Studio workspaces now supports applying fine-grained data access control with AWS Lake Formation when accessing data through EMR on EC2 clusters.

Starting today, you can build, train, and deploy machine learning (ML) models in Israel (Tel Aviv) Region.

You can now connect your Apache Kafka applications to Amazon MSK Serverless in the Asia Pacific (Seoul), Europe (Paris), and Europe (London) AWS Regions.

AWS Security Hub has released 12 new security controls, increasing the overall number of controls Security Hub offers to 276. With these new controls, Security Hub now supports three additional AWS services: Amazon Athena, Amazon DocumentDB (with MongoDB compatibility), and Amazon Neptune. Security Hub has also added an additional control against Amazon Relational Database Service (Amazon RDS). For the full list of recently-released controls and the AWS Regions in which they are available, visit the Security Hub user guide.

Starting today, customers can use AWS Service Catalog in the AWS Israel (Tel Aviv) Region to create, govern, and manage a catalog of Infrastructure as Code (IaC) templates that are approved for use on AWS. These IaC templates can include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures. AWS Service Catalog helps you centrally curate and share commonly deployed templates across teams to achieve consistent governance and meet compliance requirements. End users such as engineers, database administrators, and data scientists simply see the list of products and versions they have access to, and can deploy them in a single action.

Amazon Interactive Video Service (Amazon IVS) now has the capability to deliver live streams with latency that can be under 300 millisecond from host to viewer, to an audience of up to 10,000 viewers.

Amazon Connect now provides you the ability to configure routing profiles to exclude all outbound call activity from setting the order in which inbound contacts are assigned to agents. Contact center managers can use this configuration to ensure that agents maintain their position in line to receive inbound calls and do not move to the bottom of the list when honoring their outbound call commitments. As a result, agents will continue to meet their outbound call goals while also receiving a fair share of inbound contacts.

Today, Amazon SageMaker announces a new direct integration with Salesforce Data Cloud, allowing customers to securely access their data in Salesforce Data Cloud from SageMaker to build, train, and deploy ML models on SageMaker. Customers can then bring the ML models into Salesforce Data Cloud using Salesforce Einstein Studio to power their ML-driven business applications. 

Amazon SageMaker training jobs now support ml.p5 instances, powered by NVIDIA H100 chips, which are purpose built for high-performance ML training applications in the cloud. You can use ml.p5 instances on SageMaker to train some of the most demanding models. This includes large language models (LLMs) and diffusion models powering the most demanding generative AI applications. These applications include question answering, code generation, video and image generation, and speech recognition.

AWS Resilience Hub adds support for application resilience drift detection, allowing you to opt into notifications that your application is no longer meeting the recovery objectives set by your business. Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions.

Amazon Web Services (AWS) announces the launch of primary IPv6 address in a Virtual Private Cloud (VPC), enabling customer to make the first IPv6 address associated with their elastic network interface (ENI) immutable. Once the first IPv6 address is made primary on the ENI, the IPv6 address cannot be removed as long as the ENI is attached to an instance or until the instance is terminated, effectively making the address immutable. The primary IPv6 address can be an Amazon provided IPv6 address or a Bring your own IP (IPv6) addresses.

AWS Thinkbox Deadline 10.3.0.9 is generally available with a DeadlineCommand application plugin, updated support for third-party integrations, and an upgrade to Python 3.10.

Starting today, you have the option to automatically set up connectivity between an Amazon Relational Database Services (Amazon RDS) or an Amazon Aurora database and an AWS Lambda function using an Amazon RDS Proxy. From the Amazon RDS console, you can choose an action to set up a connection between your Amazon RDS or Amazon Aurora database and a Lambda function using an existing Amazon RDS Proxy or using an auto-created, new Amazon RDS Proxy in your account. Amazon RDS automatically sets up your related network settings to enable a secure and scalable connection between the Lambda function and the Amazon RDS or Amazon Aurora database.

Amazon Translate is a neural machine translation service that delivers fast, high-quality, affordable, and customizable language translation. Today, we are enabling language detection for real time document translation. Customers can now automatically detect the source document's dominant language leveraging Amazon Comprehend’s language detection API.

Starting today, Amazon Virtual Private Cloud (VPC) customers can use AWS Transit Gateway Flow Logs in five additional AWS regions: Middle East (UAE), Europe (Zurich), Europe (Spain), Asia Pacific (Hyderabad), and Asia Pacific (Melbourne).

Amazon Aurora MySQL-Compatible and PostgreSQL-Compatible editions now supports automatic backups for deleted clusters. Customers can now choose to retain automatic backups when deleting an Aurora cluster, and later use it to restore a new cluster from it. 

VT1 instances are the first Amazon EC2 instances that deliver dedicated hardware acceleration for video transcoding, and are optimized for workloads such as live streaming, video conferencing, video library optimization, and just-in-time asset transcoding. VT1 is powered by the AMD-Xilinx Alveo U30 media accelerator and can support streams up to 4K UHD resolution at 60 frames per second (fps) and can transcode up to 64 simultaneous 1080p60 streams in real time.

You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the Israel (Tel Aviv) Region.

Starting today, the Amazon Relational Database Service (Amazon RDS) for SQL Server now supports secondary host metrics in Enhanced Monitoring. Customers can now view essential metrics associated on the secondary host of a Multi-AZ DB instance, such as free storage, free memory, Read/Write IOPS, Read/Write Throughput, CPU utilization, and etc. See OS metrics in Enhanced Monitoring for more details.

Amazon Elastic File System (EFS) now supports up to 55,000 read IOPS and 25,000 write IOPS, making it easier to power Machine Learning (ML) research, financial simulations, big data analytics, and other data-intensive workloads on AWS.

Amazon RDS Custom for SQL Server now supports Local Time Zones. You can now set the time zone for your Amazon RDS Custom for SQL Server instances to the local time zone of your choice. Amazon RDS Custom for SQL Server is a managed database service that allows customization of the underlying operating system and database environment.

Today, AWS announced the opening of a new AWS Direct Connect location within the EdgeConnex Herzliya data center in Herzliya, Israel. By connecting your network to AWS at this location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones.

Starting today, customers can specify the price-capacity-optimized allocation strategy in AWS Batch. Previously, AWS Batch supported the capacity optimized Spot allocation strategy that is designed to optimize Spot Instance placement based on capacity availability to help reduce the likelihood that workloads are interrupted. The new price and capacity optimized allocation strategy is designed to provide a balance between price and capacity.

AWS announces the general availability of Amazon EC2 M7i-flex and EC2 M7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids). These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning (ML) that enables Data Scientists and ML practitioners with their end to end machine learning workflow, from preparing data to building, training, tuning, and deploying models. In May 2023, we launched SageMaker Distribution a pre-built docker image which includes the most popular libraries for machine learning as an open-source project at JupyterCon. Today, we are announcing support for SageMaker Distribution in Amazon SageMaker Studio.

AWS Batch now supports Linux ARM64 and Windows x86 containers in AWS Fargate via AWS Batch console. This feature helps AWS Batch customers simplify the adoption of modern container technology by expanding their architecture options for scheduling Linux ARM64 and Windows x86 containers in Fargate compute environments. Support for ARM64 architecture also gives customers the benefits of Graviton instances in Fargate which can help improve price/performance over comparable x86-based instances for a variety of workloads including high performance computing.

Today, with the launch of M7i instances, customers can attach up to 128 EBS volumes to an EC2 instance. By comparison, previous generation M6i instances allow up to 28 EBS volume attachments to an EC2 instance. The higher volume attachment limit enables customers to increase storage density per EC2 instance, so that they can host larger applications per instance or reduce total compute cost by improving their resource utilization. With this launch, customers can also take crash-consistent snapshots for up to 128 EBS volumes attached to a single EC2 instance.

Amazon EventBridge Scheduler now supports the ability to set schedules to automatically delete upon completion of the last invocation. This can be used for one-time, cron, and rate schedules with an end date.  

Amazon VPC IP Address Manager (IPAM) now supports three new CloudWatch metrics — VpcIPUsage, SubnetIPUsage, and PublicIPv4PoolIPUsage, that allow you to identify underutilized or near full capacity IP address ranges, optimizing your IP address usage on AWS. These metrics proactively track IP address usage across resources such as Amazon Virtual Private Clouds (Amazon VPCs), subnets, and Public IPv4 Pools. You can also set alarms for these metrics in Amazon CloudWatch to receive notifications when an IP address usage threshold is breached. Moreover, for a consolidated view of all IP address-related insights, these metrics are available on the IPAM Dashboard.

We are excited to announce the launch of a new CloudWatch Logger feature with AWS Amplify, which is available now for Swift and Android developers. This feature empowers developers to log errors from the Amplify libraries to CloudWatch, enhancing the ability to detect production issues. It also enables developers to write custom logs to detect failures in different parts of their applications. 

Amazon Elastic Kubernetes Service (Amazon EKS) now supports the Amazon Elastic File System (EFS) Container Storage Interface (CSI) driver as an EKS add-on, making it simpler and easier to use EFS shared file storage with your EKS clusters.

Starting today, Amazon Relational Database Service (RDS) for Oracle supports read and mounted replicas for instances on the multitenant container database (CDB) architecture running in single-tenant configuration. Amazon RDS for Oracle replicas fully manage the configuration of Oracle Data Guard to create and maintain replicas in the same or different AWS Region as the primary DB instance.

AWS Fargate for Amazon Elastic Kubernetes Service (EKS) now lets customers configure the size of ephemeral storage for their workloads up to a maximum of 175 GiB. This enables customers with data intensive workloads to utilize AWS Fargate for Amazon EKS. AWS Fargate for Amazon EKS removes the need to provision and manage servers, lets you specify and pay for resources per application, and improves security through application isolation by design.

AWS Config now supports 19 more resource types for services, including AWS Amplify, Amazon AppIntegrations, AWS App Mesh, Amazon Athena, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently, Amazon Forecast, AWS IoT Greengrass Version 2, AWS Ground Station, AWS Elemental MediaConnect, AWS Elemental MediaTailor, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Personalize, Amazon Pinpoint, and AWS Resilience Hub.

Amazon Simple Queue Service (SQS) announces an increased quota for a high throughput mode for FIFO queues, allowing you to process up to 9,000 transactions per second, per API action in US East (Ohio), US East (N. Virginia), US West (Oregon), Europe (Ireland), Europe (Frankfurt) regions. For Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), and Asia Pacific (Tokyo) regions, the throughput quota has been increased to 4,500 transactions per second, per API action. For all other regions where SQS is generally available today, the quota for high throughput mode quota has been increased to 2,400 transactions per second.

You can now access Claude 2, the latest version of Anthropic’s large language model (LLM), on Amazon Bedrock. Claude 2 can take up to 100,000 tokens in each prompt, meaning it can work over hundreds of pages of text, or even an entire book. Claude 2 can also write longer documents—on the order of a few thousand tokens—compared to its prior version, giving you even greater ways to develop generative AI applications using Amazon Bedrock.

AWS Transit Gateway is now available in the Israel (Tel Aviv) AWS Region with AWS Direct Connect. AWS Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway.

AWS Database Migration Service (DMS) makes homogeneous migrations simpler with built-in native database tooling. Today, in addition to supporting MySQL and PostgreSQL, this feature now supports MariaDB. Built-in native database tooling with homogeneous data migrations provides simple and performant like-to-like migrations with minimal downtime.

AWS Lake Formation is  a service that allows you to set up a secure data lake in days. A data lake is a centralized, curated, and secured repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better business decisions. AWS Lake Formation is now available in the following two additional AWS Regions:

• Asia Pacific (Melbourne)
• Asia Pacific (Hyderabad)

Starting today, customers can use Amazon Kinesis Data Firehose in the Israel (Tel Aviv) AWS Region.

You can now use AWS Resource Access Manager (AWS RAM) in the AWS Israel (Tel Aviv) Region.

AWS Backup for Amazon S3 now improves the speed of backups by up to 10x for buckets with more than 300 million objects. This performance improvement enables you to speed up your initial S3 backup workflow and back up buckets with more than 3 billion objects. AWS Backup is a policy-based, fully managed and cost-effective solution that enables you to centralize and automate data protection of Amazon S3 along with other AWS services (spanning compute, storage, and databases) and third-party applications. The performance improvement is automatically enabled at no additional cost in all Regions where AWS Backup support for Amazon S3 is available.

AWS Managed Services (AMS) Accelerate Operations Plan is now available in Jakarta region. AMS helps you operate AWS efficiently and securely. It provides proactive, preventative, and detective capabilities that raise the operational bar and help reduce risk without constraining agility, allowing you to focus on innovation. AMS extends your team with operational capabilities including monitoring, incident detection and management, security, patch, backup, and cost optimization.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Israel (Tel Aviv) Region.

Today, AWS announced the availability of Microsoft 365 Apps for enterprise on Amazon WorkSpaces cloud-based virtual desktop services. Your end users can now benefit from Microsoft 365 apps on WorkSpaces services along with their other devices. 

AWS open sourced the Amazon Redshift integration for Apache Spark to help Apache Spark developers seamlessly build and run Apache Spark applications on Amazon Redshift data. With this release, Amazon Redshift open-sources the Amazon Redshift contributions and integration for Apache Spark, empowering Spark developers to review the source code, extend it, contribute features and/or make modifications that meet their Spark application needs.

Amazon CloudWatch Internet Monitor now allows you to customize thresholds for when to trigger a health event for the internet-facing traffic between your end users and your applications hosted on AWS. The default threshold for overall availability and performance scores to trigger a health event is 95%. Now, you can set a custom threshold for the availability score, performance score, or both. If your application is at or below the performance or availability threshold, you receive a notification of a health event that includes the impacted location and network provider (ASN). 

Today, we are excited to announce the general availability of Isabelle - new Belgian French Neural Text-to-Speech (NTTS) voice for Amazon Polly. Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk and to build entirely new categories of speech-enabled products. 

Starting today, you can use AWS Shield Advanced and AWS WAF in the AWS Israel (Tel Aviv) Region. AWS Shield Advanced is a managed application security service that safeguards applications running on AWS from distributed denial of service (DDoS) attacks. It also provides protections against more sophisticated and larger attacks for your applications running on Amazon Elastic Compute Cloud (EC2), Amazon Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53. AWS WAF is a web application firewall that helps you protect your web application resources against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. You can protect the following resource types: Amazon CloudFront distributions, Amazon API Gateway REST APIs, Application Load Balancer, AWS AppSync GraphQL API, AWS Verified Access Instances and Amazon Cognito user pools. To learn more about AWS Shield Advanced and AWS WAF, visit the AWS Shield Advanced product page and the AWS WAF product page.

Amazon ElastiCache now supports Graviton3-based M7g and R7g node families. ElastiCache Graviton3 nodes deliver improved price-performance compared to Graviton2. As an example, when running ElastiCache for Redis on an R7g.4xlarge node, you can achieve up to 28% increased throughput (read and write operations per second) and up to 21% improved P99 latency, compared to running on R6g.4xlarge. In addition, these nodes deliver up to 25% higher networking bandwidth. 

The AWS Application Composer introduces three new updates to help developers build and share modern applications faster. With these capabilities, developers can more easily iterate on their application, export an image of the application, and integrate Application Composer with their local development environment whenever they’re ready.

Starting today, you can use Amazon CloudWatch alarms to trigger an instance refresh rollback. EC2 Auto Scaling’s instance refresh allows you to perform a rolling replacement of instances in an Auto Scaling group, and instance refresh rollback can undo changes an instance refresh made if the instance refresh cannot complete as desired. With this launch, you can configure Auto Scaling to monitor CloudWatch alarms during an instance refresh, and automatically revert any changes made if the alarms are triggered.

Amazon Athena is a serverless, interactive analytics service built on open-source frameworks that supports open-table and file formats. Athena provides a simplified, flexible way to analyze petabytes of data. Athena is built on open-source Trino and Presto engines, with no provisioning or configuration effort required.