September 2023

AWS Systems Manager Fleet Manager enables customers to connect to their SSM managed instance through browser based RDP from the SSM Fleet Manager console without opening any inbound ports to the public or any private IPs. In addition to the default resolution of 720p, you can now select resolutions of 600p, 900p and 1080p for your RDP sessions.

Today, AWS IoT Core for LoRaWAN announces the general availability of public network support for LoRaWAN-based Internet of Things (IoT) devices. With this update, you can now connect your LoRaWAN devices to the cloud using publicly available LoRaWAN networks provided by Everynet, a LoRaWAN network operator, without deploying and operating a private LoRaWAN network. The public LoRaWAN network is provided as a service and operated by Everynet, and by adding this public network support, customers can choose from within the AWS console to use Everynet's network. 

Amazon Inspector is now available in four additional regions including Africa (Cape Town), Asia Pacific (Osaka), Asia Pacific (Jakarta), and Europe (Zurich). You can now continuously monitor your Amazon EC2 instances, AWS Lambda functions, and container images residing in Amazon Elastic Container Registry (ECR) for software vulnerabilities and unintended network exposure in these regions.

Amazon Macie has introduced new managed data identifiers to expand its capabilities for discovering and identifying Stripe API keys, Google Cloud API keys, Driver’s license numbers (India) and national identification numbers (India) in Amazon Simple Storage Service (Amazon S3). Understanding the presence and location of such data in your S3 storage helps you to better plan data security, governance, and privacy of your organization. With over 100+ managed data identifiers, Macie helps protect your sensitive data at scale.

Today, we are announcing the availability of Route 53 Resolver Query Logging in the Israel (Tel Aviv) Region. Route 53 Resolver Query Logging enables you to log DNS queries that originate in your Amazon Virtual Private Clouds (Amazon VPCs). With query logging enabled, you can see which domain names have been queried, the AWS resources from which the queries originated - including source IP and instance ID - and the responses that were received. 

Today, AWS announces the availability of AWS Fargate for Amazon ECS Windows containers in the AWS GovCloud (US) Regions. This feature simplifies the adoption of modern container technology for Amazon ECS customers by making it even easier to run their Windows containers on AWS.

Amazon Textract is a machine learning service that automatically extracts printed text, handwriting, and data from any document or image. Today, we are pleased to announce Layout, a new Amazon Textract feature that enables customers to extract layout elements such as paragraphs, titles, lists, headers, footers, and more from documents. Layout will be a new feature type in the Analyze Document API. Customers can use Layout as a stand-alone feature or in combination with other Analyze Document feature types.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7g, M7g and R7g instances are now available in AWS Region Europe (Spain). These instances are powered by AWS Graviton3 processors and built on the AWS Nitro System. AWS Graviton3 processors provide up to 25% better compute performance compared to AWS Graviton2 processors. The AWS Nitro System is a collection of AWS designed hardware and software innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

AWS Compute Optimizer now supports 153 additional Amazon Elastic Compute Cloud (Amazon EC2) instance types. The newly supported instance types include the latest generation general-purpose instances (M7g, M7i, M7i-flex, M7a, M6a), compute optimized instances (C7gn, C7g), memory optimized instances (R7g, R7iz, R6id, R6a, X2iezn), storage optimized instances (I4g, I4i), and high-performance-computing (HPC) optimized instances (Hpc7g, Hpc6id). This expands the total EC2 instance types supported by Compute Optimizer to 636. Additionally, Compute Optimizer now delivers Elastic Block Store (EBS) volume recommendations for EBS volumes that are attached to multiple EC2 instances simultaneously.

Amazon Simple Notification Service (Amazon SNS) now supports AWS CloudTrail logging for the Publish and PublishBatch API actions. By logging these data events, you can get details on when and who made API calls to Amazon SNS, thereby enhancing data visibility for security and operations teams, enabling governance, compliance, and operational auditing.

Amazon QuickSight customers now have three new Generative business intelligence (BI) capabilities available in preview. First, business analysts using QuickSight can now build visualizations by specifying what they want to see in natural language. For example, “Show me count of orders in 2023 by city as a map” will instantly render a geographic map visualization automatically configured with count of “orders” filtered by 2023. Second, business analysts can build complex calculations in seconds by specifying the expected outcome in natural language, without searching for or experimenting with advanced calculation syntax. Lastly, visualizations on dashboards can be refined and tweaked using natural language prompts, removing hours of tedious point-and-click operations traditionally associated with BI tools.

Today, we are announcing the availability of AWS Backup support for Amazon FSx for NetApp ONTAP, Windows File Server, and Lustre in the Asia Pacific (Hyderabad, Jakarta, Melbourne), Europe (Spain, Zurich), Israel (Tel Aviv) and Middle East (UAE) Regions. AWS Backup is a policy-based, fully managed and cost-effective solution that enables you to centralize and automate data protection of Amazon FSx along with other AWS services (spanning compute, storage, and databases) and third-party applications. Together with AWS Organizations, AWS Backup enables you to centrally deploy policies to configure, manage, and govern your data protection activity.

AWS App Runner now supports deploying services from source code repositories that follow a monorepo structure. App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without managing infrastructure. With App Runner build-from-source capability you can offload the build and deployment workflow management to App Runner and deploy services directly from source code. App Runner provides convenient platform-specific managed runtimes. Each one of these runtimes builds a container image from your source code, and adds language runtime dependencies into your application container image.

Amazon Bedrock, the easiest way to build and scale generative AI applications with foundation models (FMs), is now generally available. Amazon Bedrock is a fully managed service that offers a choice of high-performing FMs from leading AI companies including AI21 Labs, Anthropic, Cohere, Meta, Stability AI, and Amazon, along with a broad set of capabilities that you need to build generative AI applications, simplifying development while maintaining privacy and security.

We are excited to announce that Unreal Engine (UE) game developers can now more quickly access and integrate with Amazon GameLift with a new standalone plugin for UE. Amazon GameLift is a fully managed service that allows developers to quickly manage and scale dedicated game servers for multiplayer games. With this release, Amazon GameLift Plugin for Unreal Engine supports UE5, UE5.1, and UE5.2 for Windows and Mac OS.

Amazon Titan Embeddings is a text embeddings model that converts natural language text including single words, phrases, or even large documents, into numerical representations that can be used to power use cases such as search, personalization, and clustering based on semantic similarity. Optimized for text retrieval to enable Retrieval Augmented Generation (RAG) use cases, Amazon Titan Embeddings, enables you to first convert your text data into numerical representations or vectors and then use those vectors to accurately search for relevant passages from a vector database, allowing you to make the most of your proprietary data in combination with other foundation models (FMs).

The Amazon Chime SDK lets developers add real-time audio, video, and screen share to their web and mobile applications. Now, the Amazon Chime SDK provides loss recovery for up to 100ms of audio, which helps enable smooth playback of audio transmitted across networks with random and burst packet loss.

Starting today, you can use AWS Application Migration Service (AWS MGN) to prepare your environment for the migration process using the MGN connector directly from the AWS Application Migration Service console.

Amazon EC2 P5 instances which deliver the highest performance in Amazon EC2 for deep learning and high performance computing (HPC) applications are now available in the US East (Ohio) region.

Today, we are announcing the developer preview of the AWS Amplify JavaScript Library v6 which includes reduced bundle sizes, richer TypeScript support, and integrations with Next.js server-side features. The AWS Amplify JavaScript Library enables frontend developers to connect their web and React Native apps to AWS cloud backends. In this developer preview, Amplify JavaScript now offers richer TypeScript support for the Auth, Analytics, and Storage categories. Apps using this developer preview will be served with smaller bundle sizes. Amplify JavaScript v6 also introduces an integration with Next.js server-side features such as App Router, Middleware, API routes, and server functions.

With the launch of Partner Initiative Funding in AWS Partner Funding Portal (APFP), AWS Partners can easily self-access and manage their initiative and agreement funding.

Amazon DynamoDB global tables is now available in the following AWS Regions: Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Melbourne), Africa (Cape Town), Europe (Spain), Europe (Zurich), Israel (Tel Aviv), Middle East (Bahrain), and Middle East (UAE). Customers can now create global tables with replicas in all AWS Regions.

AWS Migration Hub Orchestrator now supports Microsoft SQL Server transaction logs to help you minimize the cutover downtime during SQL Server database migration to AWS. With this capability, you can now select the transaction log as one of the backup types, create a migration workflow based on the predefined template, and run the workflow step by step to accelerate SQL Server migration and reduce downtime during cutover to AWS.

Today, Amazon Simple Queue Service (SQS) announces support for Attribute-Based Access Control (ABAC) in Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich) and AWS GovCloud (US) Regions, enabling customers to bolster their overall security postures with a flexible and scalable access control solution. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. 

Amazon SageMaker Canvas now offers a quicker and more user-friendly way to create machine learning (ML) models for time-series forecasting. With its visual, point-and-click interface, business analysts can easily create accurate ML models for insights and predictions, without writing any code or having prior ML knowledge. Canvas supports multiple use cases — including time-series forecasting used in sectors such as retail, manufacturing, and finance — by combining statistical and ML algorithms to generate highly accurate forecasts. 

Today, AWS IoT Core a fully managed cloud service that lets you connect billions of devices and process trillions of messages, announces a new inline Rule function that enables you to extract the source IP address of the publisher of an IoT message. Once you extract the source IP address, you can send it to other AWS and third-party services for further analytics based on your business needs. For example, you can use the source IP address with location solvers (such as, AWS IoT Core Device Location) to determine the approximate location of an IoT device and build location-based applications, such as asset tracking, video content delivery etc.

Today, AWS IoT Core a fully managed cloud service that lets you connect billions of devices and process trillions of messages, supports headers in Rules Engine’s Kafka Action. You can use Kafka headers to send additional metadata from IoT devices to a self-managed Apache Kafka cluster or Amazon Managed Streaming for Apache Kafka (Amazon MSK), without modifying the original IoT message payload. 

Amazon Chime's new Waiting Room adds another layer of privacy to all your meetings. Starting today, anonymous users that attempt to join your meeting are sent to the Waiting Room until you or another attendee from your company admits them in. Registered and signed in attendees who are invited still receive auto-calls and join your meetings without going through the Waiting Room.

Amazon Relational Database Service (Amazon RDS) for Oracle now offers Oracle Standard Edition 2 (SE2) with the License Included (LI) purchase option in additional AWS Regions and for additional instance classes. R6i instances are now available in Asia Pacific (Hyderabad, Seoul, Singapore, Sydney, Tokyo), Europe (Frankfurt, Ireland, London), Middle East (UAE), US East (N. Virginia, Ohio), and US West (Oregon). R5 instances are now supported in Asia Pacific (Jakarta, Melbourne), and Europe (Spain). T3 instances are now supported in Asia Pacific (Hyderabad, Jakarta, Melbourne), Europe (Spain), and Middle East (UAE). 

Customers can now monitor and troubleshoot application environments that span multiple accounts (within a region) using Amazon CloudWatch Application Insights. CloudWatch Application Insights helps customers gain actionable insights for their application environments by making it easier for them to set up and monitor, recognize problems, and use data to make decisions. With this release, customers can analyze and correlate cross-account telemetry data and problems through a centralized view of the monitoring results across their accounts.

Amazon MQ now provides support for RabbitMQ version 3.11.20, which includes several fixes and improvements to the previous versions of RabbitMQ supported by Amazon MQ - 3.11.16. If you are running earlier versions of RabbitMQ, such as 3.10, 3.9 or 3.8, we strongly encourage you to upgrade to RabbitMQ 3.11. This can be accomplished with just a few clicks in the AWS Management Console. We also encourage you to enable automatic minor version upgrades on RabbitMQ 3.11 to help ensure your brokers take advantage of future fixes and improvements in 3.11.

Starting today, EC2 Instance Connect is also available in Middle East (Bahrain), Asia Pacific (Jakarta), Africa (Cape Town), Middle East (UAE), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Osaka), Europe (Milan), Europe (Spain), Europe (Zurich), Asia Pacific (Melbourne) regions. Amazon EC2 Instance Connect is a simple and secure way to connect to your instances using Secure Shell (SSH).

Amazon OpenSearch Service now provides new Auto-Tune metrics and improved Auto-Tune events that give you better visibility into the cluster performance optimizations made by Auto-Tune.

AWS WAF now supports JA3 match, enabling customers to inspect incoming requests’ JA3 fingerprints. Customers can use the JA3 match to implement custom logic to block malicious clients or allow requests from expected clients only. 

Amazon S3 now provides the Last-Modified time of delete markers in the response headers of S3 Head and Get APIs. For buckets that use S3 Versioning, when a customer issues a delete request without a versionId specified, S3 adds a delete marker on the latest version of the object to protect data from accidental deletions. With Last-Modified information added to S3 Head and Get API response headers for delete markers, customers can more easily track changes in their buckets.

Starting today, AWS Network Firewall is available in the AWS Israel (Tel Aviv) Region, enabling customers to deploy essential network protections for all their Amazon Virtual Private Clouds (VPCs).

Amazon RDS Custom for SQL Server now supports changing the server-level collation when creating a new DB Instance. If the collation is not specified the default server-level collation will continue to be SQL_Latin1_General_CP1_CI_AS. To learn more about which collations are supported please visit the RDS Custom for SQL Server User Guide.

Starting today, OpsCenter, a capability of AWS Systems Manager, offers a new insight which automatically identifies resources with the most open operational issues (OpsItems). This insight helps cut through event noise, so that customers can focus their efforts on fixing their most issue-prone resources.

Amazon Kinesis Data Firehose now integrates with Amazon MSK to offer a fully managed solution that simplifies the processing and delivery of streaming data from Amazon MSK Apache Kafka clusters into data lakes stored on Amazon S3. With just a few clicks, Amazon MSK customers can continuously load data from their desired Apache Kafka clusters to their Amazon S3 bucket, eliminating the need to develop or run their own connector applications. 

Today, we are announcing that AWS Telco Network Builder is now available in 5 new regions across Asia, America and Europe. AWS Telco Network Builder is now generally available in 5 additional regions: Asia Pacific (Seoul), Canada (Central), Europe (Spain), Europe (Stockholm), and South America (Sao Paulo). 

You can now better protect your CloudFront distributions with AWS WAF security recommendations in the CloudFront console. CloudFront conveniently displays additional security rules for your distributions based on elements of your CloudFront configuration including path patterns or your origin type. Simply select the rules you’d like to enable and CloudFront automatically adds those rules to your AWS WAF configuration.

Amazon QuickSight introduces the ability to add contextual row subtotals in pivot tables for easier understanding and improved presentation. Authors can now customize subtotal labels by appending the group name, enabling clearer association and understanding. For instance, if the current group is "North America," users can rename their subtotals as ‘North America Total,’ ‘Total for North America,’ or ‘Total North America.’

Amazon Braket, is a fully managed service that makes it easy for customers to get started with quantum computing. Starting today, customers can have real-time visibility into device queue lengths and the individual queue positions for their Quantum Tasks and Hybrid Jobs, providing greater transparency into when their workloads will run.

Amazon EMR Serverless is a serverless option that helps data analysts and engineers to run open-source big data analytics frameworks such as Apache Spark and Apache Hive without configuring, managing, and scaling clusters or servers. We are happy to announce that starting today, you can set default configurations at the application level, allowing you to maintain consistent settings for all Spark and Hive jobs submitted under the same application.

AWS HealthOmics is now available in Israel (Tel Aviv) Region. AWS HealthOmics is a fully managed service that helps healthcare and life science organizations build at-scale to store, query, and analyze genomic, transcriptomic, and other omics data. By removing the undifferentiated heavy lifting, customers can generate deeper insights from omics data to improve health and advance scientific discoveries.

Today, Amazon DynamoDB announces the general availability of incremental export to S3, that allows you to export only the data that has changed within a specified time interval. With incremental exports, you can now export data that was inserted, updated or deleted, in small increments. You can export changed data ranging from a few megabytes to terabytes with a few clicks in the AWS Management Console, an API call, or the AWS Command Line Interface. Choose a DynamoDB table that has point-in-time-recovery enabled, specify an export time period for which you want incremental data, choose your target Amazon S3 bucket, and export.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) Hpc7g instances are available in Asia Pacific (Tokyo), Europe (Ireland), and the AWS GovCloud (US-West) Regions. Amazon EC2 Hpc7g instances are powered by AWS Graviton processors, which are custom Arm-based processors designed by AWS.

AWS Glue now supports custom icons for custom visual transforms. Custom visual transforms let customers define, reuse, and share business-specific ETL logic among their teams. Reusable transforms increase consistency between teams and help keep jobs up to date by minimizing duplicate effort and code. 

Kubernetes 1.28 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.28. Starting today, you can create new 1.28 clusters or upgrade your existing clusters to 1.28 using the Amazon EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

Today, AWS Lake Formation announces the general availability of Hybrid Access Mode for AWS Glue Data Catalog. This feature provides you the flexibility to selectively enable Lake Formation for databases and tables in your AWS Glue Data Catalog. Before this launch, you had to move all existing users of a table into Lake Formation in a single step, which required a certain amount of coordination among data owners and data consumers. With the Hybrid Access Mode, you now have an incremental path wherein you can enable Lake Formation for a specific set of users without interrupting other existing users or workloads.

AWS Verified Access, a service that helps you provide secure VPN-less access to your corporate applications, now offers Federal Information Processing Standard (FIPS) 140-2 validated endpoints to help you protect sensitive information. These endpoints terminate Transport Layer Security (TLS) sessions using a FIPS 140-2 validated cryptographic software module, making it easier for you to use Verified Access for regulated workloads. Companies contracting with the US and Canadian federal governments can now meet the FIPS security requirement to encrypt sensitive data in these Regions. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.5.1 for new and existing clusters. Apache Kafka 3.5.1 includes several bug fixes and new features that improve performance. Key features include the introduction of new rack-aware partition assignment for consumers. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.5.1. 

Amazon Chime SDK lets developers add real-time audio and video to their web and mobile applications. Amazon Chime SDK meetings API endpoints used to create and manage meetings are now available in the Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), and Europe (London) regions.

Amazon Connect Contact Lens now supports a new permission to provide agents with access to only the contacts that they handled, within the contact search page in the Amazon Connect UI. Today, Amazon Connect has permissions that enable contact center managers to access contacts handled by agents in their teams and evaluate agent performance. With this launch, agents can securely search for their own contacts and review their recordings and transcripts alongside performance evaluations submitted by managers.

Starting today, AWS Global Accelerator supports application endpoints in four additional AWS Regions - Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich) and Israel (Tel Aviv), expanding the number of supported AWS Regions to twenty-eight. 

AWS Batch DescribeJobDefinitions API now supports server-side filtering by job definition status. AWS Batch customers filtering job definitions by ACTIVE or INACTIVE status will now receive smaller DescribeJobDefinitions API response improving performance of the API and AWS Batch Management Console.

Amazon Chime SDK media pipelines now enable the sending of Amazon Chime SDK WebRTC audio to Amazon Kinesis Video Streams. With the Amazon Chime SDK, developers can add real-time audio, video, and screen share to their web and mobile applications. Sending WebRTC session audio to Amazon Kinesis Video Streams provides developers access to the audio for live analysis during the session. 

Amazon QuickSight and AWS Billing now support tagging users with the TagResource and RegisterUser APIs. With this launch, administrators can tag users and use AWS cost allocation tags to categorize and allocate user based costs by team, department or application.

Today, Amazon Web Services, Inc launches expanded resource support for AWS Application Composer, from 13 to all 1000+ resources supported by AWS CloudFormation. This launch allows you to drag any resource required for your use case onto an interactive diagram-like canvas where an editor provides auto completion and validation as you configure each service. With AWS Application Composer, you can focus on the high-level architecture of your application while the canvas assists with configuration and maintains deployment-ready infrastructure as code definitions. 

Starting today, Amazon EC2 C6gd instances powered by AWS Graviton2 processors are available in Europe (Zurich) region. These instances are built on the AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

You can now use Amazon SageMaker Model Monitor to run a single execution of a monitoring job, enabling you to get results for your machine learning and data performance on demand. Running a monitoring job on-demand provides you the flexibility to monitor specific aspects of your ML as required and allows adaptability for situations with irregular monitoring needs, such as troubleshooting.

Amazon EventBridge Pipes is now available in the Europe (Spain), Europe (Zurich), and Asia Pacific (Hyderabad) AWS Regions, providing a simpler, consistent, and cost-effective way to create point-to-point integrations between event producers and consumers when building event-driven architectures. You can use Pipes to connect your applications with data from sources including Amazon SQS, Amazon Kinesis Data Streams, Amazon DynamoDB, Amazon Managed Streaming Kafka, self-managed Kafka, and Amazon MQ. EventBridge Pipes supports the same 20+ targets as the EventBridge Event Bus, such as Amazon SQS, Amazon Kinesis Data Streams and Firehose, AWS Step Functions, Amazon SNS, Amazon ECS, and event buses themselves.

Amazon QuickSight now supports the ability to freeze columns in Tables. Both Authors and Readers can freeze columns to affix columns in place while scrolling horizontally, ensuring it remains visible and accessible even as other columns move out of view. The frozen column is moved left until it reaches another frozen column, maintaining its fixed placement.

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) R7g and M7g instances in Europe (Stockhom). These instances are powered by AWS Graviton3 processors that provide up to 25% better compute performance compared to AWS Graviton2 processors, and built on top of the the AWS Nitro System, a collection of AWS designed innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage.

Starting today, the interactive EC2 Serial Console is now also available in Middle East (Bahrain), Asia Pacific (Jakarta), Africa (Cape Town), Middle East (UAE), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Osaka), Europe (Milan), Europe (Spain), Europe (Zurich), Asia Pacific (Melbourne) regions. EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues by establishing a connection to the serial port of an instance. It provides a one-click, text-based access to an instances’ serial port as though a monitor and keyboard were attached to it. This access can be used for interactive troubleshooting.

AWS IAM Identity Center is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD. With the addition of these regions, IAM Identity Center is now available in 28 regions globally.

Amazon Connect Contact Lens now supports the ability for contact center managers to search and view in-progress contacts across voice, chat, and task channels within the contact search page in the Amazon Connect UI. Today, managers can search and view completed contacts on the contact search page to monitor contact quality and agent performance. With this launch, managers can search and view in-progress contacts enabling them to view real-time conversational analytics (e.g., customer sentiment) and take actions (e.g., transfer tasks across agents).

Amazon Connect Contact Lens now supports the ability to transfer, reschedule or end in-progress contacts on the contact details page within the Amazon Connect UI. Today, Amazon Connect Contact Lens enables supervisors to search for and view in-progress and completed contacts across voice, chat and task channels. With this launch, supervisors can perform actions on in-progress contacts using the Amazon Connect UI, enabling them to end stale or inactive contacts in different channels, and reschedule or redistribute tasks across agents.

Prototyping your application’s data model with Amazon DynamoDB has just gotten simpler with sample data generation using NoSQL Workbench for Amazon DynamoDB. The ability to generate sample data enables you to create realistic demos and test your application access patterns under conditions that closely simulate a production environment. You can use NoSQL Workbench to generate sample data to visualize if your data model design and item collections will fulfill your application’s access patterns. During application development you will also want to test that your application can function and handle use cases with enough data. NoSQL Workbench helps you generate the volume and variety of data that you will need to test your code. You can directly deploy your data models with sample data to Amazon DynamoDB and DynamoDB local, or download the sample data as a CSV file for later use.

Amazon Redshift now adds support for role-based access control in workload management (WLM). With this support, when your Amazon Redshift users run queries in the database, their queries are routed to the query queue that is associated with their user role. 

Amazon DocumentDB now supports schema validation with $jsonSchema operator. You can now attach schema validation rules to a DocumentDB collection that are validated during inserts and updates to the collection.

Amazon DocumentDB is now available in the Asia Pacific (Hong Kong) region adding to the list of available regions where you can use Amazon DocumentDB.

Amazon SNS message data protection is a set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data. Now, you can de-identify outbound message data within a payload, in real-time, via data redaction or masking. Thus, each endpoint subscribed to your Amazon SNS topic may receive a different payload from the topic, with different sensitive data de-identified, according to their data access permissions.

AWS Identity and Access Management (IAM) Roles Anywhere is now available in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. IAM Roles Anywhere enables workloads that run outside of AWS to access AWS resources using IAM roles and policies in the same way you do from your AWS workloads. IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary AWS credentials.

Amazon Connect now supports AWS CloudFormation for security profiles. You can now use AWS CloudFormation templates to deploy Amazon Connect security profiles —along with the rest of your AWS infrastructure— in a secure, efficient, and repeatable way, allowing you to apply consistent security policies across instances. CloudFormation allows you to track changes over time, apply updates in a controlled and automated manner, and includes version controls so you can easy roll back changes if needed. For more information, see Amazon Connect Resource Type Reference in the AWS CloudFormation User Guide.

AWS HealthImaging now supports AWS CloudFormation. With CloudFormation support, you can now use CloudFormation templates to create and delete your AWS HealthImaging resources. This helps you automate and standardize DevOps processes across your AWS accounts and AWS Regions for AWS HealthImaging.

Today, AWS App Runner launched improvements for managing Auto-Scaling Configuration (ASC). App Runner makes it easier for developers to quickly deploy containerized web applications and APIs to the cloud, at scale, and without managing infrastructure. With App Runner, you do not have to manage load balancer for your service(s). App Runner automatically scales compute resources, specifically instances, up or down for your App Runner service. Automatic scaling provides adequate request handling when traffic is heavy, and reduces your cost when traffic slows down. You can control auto scaling settings through a sharable resource called AutoScalingConfiguration.

Amazon DocumentDB (with MongoDB compatibility) now supports an in-place major version upgrade (MVU) from Amazon DocumentDB versions 3.6 and 4.0 to version 5.0. Instead of backing up and restoring the database to the new version or relying on database migration tools, you can perform an in-place major version upgrade with a few clicks using the AWS console, the latest AWS Software Development Kit (SDK), or Command Line Interface (CLI). With in-place MVU, no new clusters are created in the process and you can continue using the existing cluster endpoints for your applications. 

Amazon Corretto 21 is now generally available. This Long Term Support (LTS) version supports the latest Java release, OpenJDK 21, and is available on Linux, Windows, and macOS. You can download Corretto 21 from our downloads page.

You can now inject random Amazon EC2 Spot Instance interruptions into your Spot Fleets directly from the Amazon EC2 console. In 2022, we launched the ability for you to use AWS Fault Injection Simulator (AWS FIS) in the Amazon EC2 console to simulate what happens when Amazon EC2 reclaims a single EC2 Spot Instance. Now, we have enhanced this capability so you can introduce interruptions in a randomly selected set of instances of a Spot Fleet with just a couple of clicks. This makes it easy to test if your Spot Fleet-based application is resilient against the random nature of Spot Interruptions. 

Amazon Relational Database Service (Amazon RDS) for Oracle now supports M6i, R6i, and R5b instances in additional regions. M6i instances for RDS for Oracle will now be available in 9 new regions: Africa (Cape Town), Asia Pacific (Hong Kong, Hyderabad, Jakarta, Osaka), Europe (Milan, Stockholm), and Middle East (Bahrain, UAE). R6i instances for RDS for Oracle will now be available in 8 new regions: Africa (Capetown), Asia Pacific (Hong Kong, Osaka), Europe (Frankfurt, Milan, Stockholm), and Middle East (Bahrain, UAE). R5b instances for RDS for Oracle will now be available in 6 new regions: Asia Pacific (Seoul, Sydney), Canada (Central), Europe (Milan, Stockholm), and South America (São Paulo).

AWS Glue Data Quality can now identify records that have the CustomSQL rule type, enabling customers to isolate problematic records from the good records to allow only high-quality data flows into their data lakes and warehouses.

Today, Amazon Location Service announced a price reduction of up to 75% for tracking position writes and up to 70% for geofence evaluations, depending on your usage levels. Developers can use Amazon Location Trackers to track the current and historic location of devices in order to optimize operations such as asset management and delivery dispatch. They can evaluate location updates from their devices against their geofences to detect and act when a tracked device enters or exits a geographical boundary. This event-driven setup makes it easy for applications to scale in size and sophistication as needed.

Today, AWS Identity and Access Management (IAM) Roles Anywhere released credential helper version 1.1.0 to include support for X.509 certificates and private keys that are stored in Public-Key Cryptography Standards (PKCS) #11 compatible security modules. IAM Roles Anywhere credential helper is a tool that manages the process of signing CreateSession API with the private key associated with an X.509 end-entity certificate and calls the endpoint to obtain temporary AWS credentials. With this release, you can use the credential helper to delegate signing operations to keys stored within PKCS #11 compatible security modules, without those keys ever leaving those stores; which can help improve your security posture.

AWS Glue Interactive Sessions now supports 4 new notebook kernel magics: assume_role, tags, session_type and matplot. These magics are available in Glue Interactive Sessions kernel 1.0 or later. Additionally, Glue Interactive Sessions now supports IAM Conditionals. 

AWS Cloud Map introduces a new API for retrieving the revision of your services. It allows your applications to update the state of your cloud resources only when it has changed, minimizing the discovery traffic and API cost. With AWS Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resources. You can then use these custom names to discover the location and metadata of cloud resources from your applications using AWS SDK and authenticated API calls.

Today, AWS announces the general availability of Swift Package Manager (SwiftPM) support in CodeArtifact. Swift is the language of choice for developing applications on the Apple platform, and the Swift Package Manager is used to distribute source code in the Swift ecosystem. With SwiftPM support in CodeArtifact, developers can publish and download their Swift package dependencies to their CodeArtifact repository.

Amazon CloudWatch announces support of a new Metric Math function called DB_PERF_INSIGHTS() to create CloudWatch alarms and dashboards on Amazon RDS Performance Insights metrics. 

Amazon QuickSight introduces a range of exciting enhancements to KPI visual, including templated KPI layouts, support for sparklines, improvements in conditional formatting, and a revamped format pane. The KPI visual now offers a user-friendly onboarding experience, allowing authors to select from pre-designed KPI layouts tailored to various use cases and configurations. This empowers authors to effortlessly craft visually appealing KPIs with just a few clicks.

Amazon Lookout for Equipment is an ML industrial equipment monitoring service that detects abnormal equipment behavior so you can act and avoid unplanned downtime. Lookout for Equipment uses your unique ML model(s) and in real-time helps accurately identify early warning signs that could lead to machine failures. This helps you detect equipment abnormalities with speed and precision, quickly diagnose issues, and take action to reduce expensive downtime.

Amazon RDS for SQL Server now supports memory optimized X2iedn DB instances that are well-suited for memory-intensive, read-heavy and high-throughput write operations.  

Today, we launched four usability improvements and enhancements in the AWS Management Console. Usability improvements include descriptive page titles and high resolution favicons that display in the browser tab for an AWS Console page. We also updated the Navigation bar to include a display option for favorite icon size and a new settings menu. With this launch, the link to Unified Settings is moving from the account menu to the new settings menu shown as the gear icon in the navigation bar.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M2 Pro Mac instances are now generally available (GA). These instances deliver up to 35% faster performance over the existing M1 Mac instances when building and testing applications for Apple platforms such as iOS, macOS, iPadOS, tvOS, watchOS, visionOS, and Safari. M2 Pro Mac instances are powered by the AWS Nitro System and are built on Apple M2 Pro Mac Mini computers featuring 12 core CPU, 19 core GPU, 32 GiB of memory, and 16 core Apple Neural Engine.

Amazon EBS io2 volumes now support shared storage fencing through NVMe reservations. For clustered applications that leverage EBS Multi-Attach capability of io2 volumes, NVMe reservations enables safe write access across the cluster nodes. Clustered applications are designed to increase application availability and scalability by using multiple compute nodes that coordinate access to shared storage. You can now use Multi-Attach on io2 volumes to deploy clustered Windows and Linux applications that require storage-layer fencing, such as SQL Server Failover Cluster Instances (FCI), within a single Availability Zone.

AWS is excited to introduce the AWS Telecom Services Competency, which provides customers with a vetted list of AWS Partners validated for their expertise and proven success delivering telecom consulting services. The AWS Telecom Services Competency validates partner strengths and capabilities in key telecom service areas including Operation Support Services (OSS), Business Support Systems (BSS), Communication as a Service (CaaS), Mobile Networks, and Media & TV.

Bottlerocket, a Linux-based operating system that is purpose built to host container workloads, announced a new ECS-optimized AMI featuring version 6.1 of the Linux kernel. Customers using Bottlerocket with Amazon Elastic Container Service (Amazon ECS) can now benefit from additional features offered in this new AMI as well as the option to specify the needed Bottlerocket AMIs directly from the Amazon ECS console.

Amazon CloudWatch Synthetics announces a new update to Synthetics Python runtime version syn-python-selenium-2.0 and recommends that customers migrate Synthetics canaries to the latest runtime version. Runtime version syn-python-selenium-2.0 includes updates to third-party dependency packages (Selenium v4.10.0 and Chromium v111.0.5563.146).

Amazon RDS (Relational Database Service) Performance Insights supports SQL-level metrics for Amazon RDS for SQL Server so that you can identify high-frequency, long-running, and stuck SQL queries in seconds. SQL level statistics are already available for all other Amazon RDS engines. 

AWS IAM Identity Center was launched in the Europe (Zurich) Region. With the addition of this Region, IAM Identity Center is now available in 26 AWS Regions globally.

AWS Step Functions is announcing the general availability of distributed map in the AWS GovCloud (US) Regions. AWS Step Functions is a workflow service capable of orchestrating 11,000+ API actions from over 220 AWS services to automate business processes and data processing workloads.

Today, we are excited to announce that Amazon EMR on EKS now supports Apache Flink, available in public preview. With this launch, customers who already use EMR can run their Apache Flink application along with other types of applications on the same Amazon EKS cluster, helping improve resource utilization and simplify infrastructure management. For customers who already run big data frameworks on Amazon EKS, they can now let Amazon EMR automate provisioning and management.

Today, AWS announces that using Amazon CodeCatalyst with source repositories hosted in GitHub is now compatible with IP address access restrictions in GitHub Organizations. This ensures that CodeCatalyst is compatible with all features in GitHub Enterprise Cloud.

You can now use repositories in your project in a GitLab.com Group to build, test, and deploy code changes using AWS CodePipeline. Connect your GitLab.com account using AWS CodeStar Connections, and use the connection in your pipeline to automatically start a pipeline execution on changes in your repository.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL 16.0 is now available in the Amazon RDS Database Preview Environment, allowing you to evaluate PostgreSQL 16.0 on Amazon RDS for PostgreSQL. You can deploy PostgreSQL 16.0 in the Preview Environment and have the same benefits of a fully managed database, making it simpler to set up, operate, and monitor databases. PostgreSQL 16.0 in the Preview Environment also includes support for logical decoding on read replicas, AWS libcrypto (AWS-LC), and over 80 PostgreSQL extensions such as pgvector, pg_tle, h3-pg, pg_cron, and rdkit. 

AWS Cloud Map now supports AWS PrivateLink. You can now use AWS PrivateLink to privately access AWS Cloud Map APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the AWS PrivateLink pricing page for more information. 

Today, AWS Control Tower is available in Asia Pacific (Hyderabad), Europe (Spain and Zurich), and the Middle East (UAE). With this launch, AWS Control Tower is available in 27 AWS Regions and the AWS GovCloud (US) Regions. AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It simplifies AWS experiences by orchestrating multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. You can set up a multi-account AWS environment within 30 minutes or less, govern new or existing account configurations, gain visibility into compliance status, and enforce controls at scale. 

You can now subscribe Amazon Simple Queue Service (SQS) Standard queues to Amazon Simple Notification Service (SNS) First-In-First-Out (FIFO) topics. Thus, from a single SNS FIFO topic, you can now deliver messages to SQS Standard queues, which offer best-effort ordering and at-least-once delivery, as well as to SQS FIFO queues, which support strict ordering and exactly-once delivery. This new capability further decouples message publishers from subscribers, as the SNS topic type no longer dictates the SQS queue type that subscribers ought to use.

Amazon QuickSight introduces pixel-based font sizing for Textbox, a departure from the fixed font sizes ranging from small to X-large. This enhancement empowers authors with unmatched precision, allowing them to finely adjust font sizes based on numeric or pixel values ("14px" or "32px"), granting greater flexibility. Along with this we are also adding text highlighting capabilities, similar to that of Insights visual. You can highlight text to emphasis key data points and insights making it easier to drive user attention precisely where you want it, making your data-driven narratives even more compelling. For more details refer here.

Starting today, storage optimized Amazon EC2 I4i instances are now also available in Europe (Zurich) Region. Amazon EC2 I4i instances are powered by 3rd generation Intel Xeon Scalable processors (Ice Lake) and deliver the highest local storage performance within Amazon EC2 using AWS Nitro NVMe SSDs.

Starting today, Amazon EC2 Is4gen instances, the latest generation storage-optimized instances, are available in Asia Pacific (Mumbai) region. Based on the AWS Nitro System, Is4gen instances are powered by AWS Graviton2 processors and are built using AWS Nitro SSDs which reduce both latency and latency variability compared to the third generation of EC2 storage optimized instances.

Starting today, manual forecast overrides (i.e. adjustments) made by a demand planner are automatically saved and reapplied from one planning cycle to the next. Demand planners commonly adjust system-generated baseline forecasts for known demand variations. These adjustments, or forecast overrides, reflect seasonality fluctuations, promotions, or other variable that affects the forecast. These adjustments were always entered manually during the new planning cycle. With this release, overrides are remembered and then applied to the re-calibrated system generated baseline forecast. Demand planners can now view and manage forecast overrides across planning cycles in one unified view.

AWS Identity and Access Management (IAM) now provides action last accessed information for more than 140 services to help you refine the permissions of your IAM roles. You can review action last accessed information, identify unused permissions, and refine to scope down the access of your IAM roles to only the actions that they use for services such as Amazon CloudWatch, AWS Key Management Service (AWS KMS), and Elastic Load Balancing (ELB). 

AWS Amplify Studio is excited to announce full support for GraphQL APIs - all developers using GraphQL APIs created either with Amplify Studio or Amplify CLI will now fully have access to all of Studio’s features. This includes Form Builder, Figma to Code UI generation, and Data Manager.

Starting today, memory optimized Amazon Compute Cloud (Amazon EC2) X2idn and X2iedn instances are available in Africa (Cape Town) region. These instances, powered by 3rd generation Intel Xeon Scalable Processors (Ice Lake) and built with AWS Nitro System, are designed for memory-intensive workloads. They deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These instances are SAP-certified for running Business Suite on HANA, SAP S/4HANA, Data Mart Solutions on HANA, Business Warehouse on HANA, SAP BW/4HANA, and SAP NetWeaver workloads on any database.

AWS Supply Chain Demand Planning, one of AWS Supply Chain’s purpose-built supply chain management applications, is now generally available in Australia (Sydney). With this release AWS Supply Chain Demand Planning is now available in the following AWS Regions: US East (N. Virginia), US West (Oregon), Europe (Frankfurt), and Australia (Sydney).

AWS announces the general availability of Amazon Elastic Compute Cloud (Amazon EC2) C7i instances powered by custom 4th Generation Intel Xeon Scalable processors (code-named Sapphire Rapids). These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

Amazon GuardDuty announces a new capability in GuardDuty EKS Runtime Monitoring that allows you to selectively configure which Amazon Elastic Kubernetes Service (Amazon EKS) clusters are to be monitored for threat detection. Previously, configurability was at the account level only. With this added cluster-level configurability, customers can now selectively monitor EKS clusters for threat detection or continue to use account level configurability to monitor all EKS clusters in a given account and region.  

Today, we announce the introduction of 11 new AWS managed policies for Red Hat OpenShift Service on AWS (ROSA) with hosted control planes (HCP), which is now in Technology Preview. The AWS managed policies provide narrowly-scoped permissions for the IAM roles that ROSA uses to manage your cluster infrastructure, and ensure that these permissions stay up-to-date with new OpenShift versions.

AWS Glue Streaming ETL now supports the Amazon Kinesis Data Streams (KDS) enhanced fan-out feature for Kinesis event sources. Enhanced fan-out allows developers to scale up the number of stream consumers (applications reading data from a stream in real-time) by offering each stream consumer its own read throughput. 

Amazon EC2 now supports AMI Block Public Access (BPA), an account-wide setting that allows customers to block public sharing of Amazon Machine Images (AMIs) in a region. Customers managing AMIs at-scale now have a simple and proactive way of safeguarding their AMIs from inadvertent access by unauthorized users.

Today, Amazon API Gateway announces a console experience refresh with usability improvements to REST and WebSocket API workflows, accessibility enhancements, and dark mode support.

AWS Elastic Disaster Recovery (AWS DRS) now allows you to define actions that run automatically after launching recovery instances, empowering you to automate any action you need to run after an instance has successfully launched.

Starting today, AWS Elastic Disaster Recovery (DRS) is available in Israel (Tel Aviv) region.

We are excited to announce that Amazon OpenSearch Serverless has expanded its auto-scaling capabilities to efficiently handle tens of thousands of query transactions per minute. With this new feature, you can rely on OpenSearch Serverless to help handle unpredictable surges in your search and query traffic. 

AWS Marketplace now features a new self-service listing experience in the AWS Marketplace Management Portal for SaaS products. The new feature enables AWS Marketplace sellers to publish and update SaaS listings more quickly and easily. This feature enables you to directly interact with AWS Marketplace catalog to create, preview, test, and update your product listing without needing AWS Marketplace to manually process your inputs.

Today, we are announcing knowledge base for Amazon Bedrock in preview that lets you connect your organization’s private data sources to foundation models (FMs) to enable retrieval augmented generation in your generative AI applications to deliver more relevant and contextual FM responses. 

We are excited to announce support for Amazon Linux 2023 (AL2023) on Amazon EMR on EKS. Customers can now use AL2023 as the operating system together with Java 17 as Java runtime to run Spark workloads on Amazon EMR on EKS. This provides customers a secure, stable, high-performance environment to develop and run their applications as well as enables them to access the latest enhancements such as kernel, toolchain, glibc, openssl and other system libraries and utilities.

AWS AppSync is a fully managed service that enables developers to build digital experiences based on real-time data. With AppSync, you can configure data sources to push and publish real-time data updates to subscribed clients. AppSync handles connection management, scalability, fan-out and broadcasting, allowing you to focus on your application business needs instead of managing complex infrastructure. With AppSync, developers can easily specify filtering roles for their subscriptions to target specific connected clients based on the published data.

Amazon Connect now supports outbound campaigns in the Europe (Frankfurt) AWS region making it easier to proactively communicate across voice, SMS, and email for use cases such as delivery notifications, marketing promotions, appointment reminders, or debt collection. Communication capabilities include features such as point-of-dial checks, calling controls for time of day, time zone, number of attempts per contact, and predictive dialing with integrated voicemail detection. A list management capability provided by Amazon Pinpoint can also be used to build customer journeys and multi-channel user contact experiences. With this launch, high-volume outbound calls can now be made to customers in the United Kingdom, Italy and Spain from Amazon Connect instances located in Europe (Frankfurt) or Europe (London) AWS regions. Outbound campaigns can be enabled within the AWS Connect Console.

AWS announces the general availability of Amazon EC2 R7a instances. R7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7GHz, deliver up to 50% higher performance compared to R6a instances.  

Amazon Redshift enables you to use AWS Lake Formation to centrally manage permissions on data being shared across your organization. Amazon Redshift already supports sharing live data across AWS regions. Amazon Redshift now supports cross-region data sharing via AWS Lake Formation so you can centrally define AWS Lake Formation permissions of Amazon Redshift datashares and restrict user access to objects within a datashare.

Today, AWS announces the general availability of custom notifications in AWS Chatbot. Customers can use AWS Chatbot custom notifications to define and add additional information in the notifications to monitor the health and performance of their AWS applications in Microsoft Teams and Slack channels. 

AWS IAM Identity Center administrators can now configure the access portal session duration to last up to 90 days. The session duration limit defines how long signed-in users can access the AWS access portal and Identity Center enabled applications before being prompted to re-authenticate.

Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of anomalous spent pattern. Starting today, Cost Anomaly Detection users with a management account will be able to create up to 500 custom anomaly monitors to track spend in their account(s). A custom anomaly monitor allows a user to track AWS spend across either linked accounts, cost allocation tags, or cost categories.

Amazon Relational Database Service (Amazon RDS) PostgreSQL Multi-AZ Deployments with two readable standbys now supports major version upgrades. Starting today, you can upgrade your RDS for PostgreSQL Multi-AZ Deployments with two readable standbys from major version 13.4 and above and 14.5 and above to 15.4 with just a few clicks on the AWS Management Console.

You can now use AWS Elemental Link UHD to directly contribute live video to AWS Elemental MediaConnect, a reliable, secure, and flexible transport service for live video. With MediaConnect, you can build live video workflows and securely share high-value live content globally with your partners and customers.

Amazon DocumentDB (with MongoDB compatibility) is now available in the Asia Pacific (Hyderabad) region adding to the list of available regions where you can use Amazon DocumentDB.

Amazon Connect Cases now supports displaying the author name for comments that are written on cases. By seeing who added comments to a case, you can more easily track who contributed to the resolution of the case and enable your team to collaborate more effectively.

Amazon Connect Cases now supports uploading attachments to a case, enabling agents to have the information they need at their fingertips in order to resolve cases. Attaching files to a case helps ensure your agents don’t lose track of critical context and information for a customer issue, improving agent productivity and customer satisfaction.

Amazon Connect provides a new event for updates to contact (voice call, chat, and task) attributes. This new event will notify customers in two scenarios: 1) when there is an update to the scheduled timestamp of a task, and 2) when there is an update to a contact’s user-defined attributes. As an example, customers can use this event to update an analytics dashboard that monitors task scheduling changes in real-time.

Amazon Relational Database Service (Amazon RDS) now supports M6id and R6id database (DB) instances for RDS for PostgresSQL, MySQL, and MariaDB. Amazon RDS M6id and R6id DB instances provide up to a 24% performance improvement and up to a 13% price/performance improvement (based on on-demand pricing) over Amazon RDS M5d and R5d DB instances for open-source databases depending on database engine, version, and workload. These instances support local block storage with up to 7.6 TB of NVMe-based solid state disk (SSD) storage.

Red Hat OpenShift Service on AWS (ROSA) is now available in the Europe (Spain) Region. Starting today, you can enable ROSA from the AWS Console and launch ROSA clusters in the Europe (Spain) Region.

Amazon Connect now provides APIs to programmatically create and manage view resources used in step-by-step guides. View resources define what gets displayed in your agent’s UI during a step-by-step guide. With this launch, you are able to define static and dynamic content in a view, including layouts and style, which enables you to help control the look and feel of your agent’s experience. Additionally, these APIs support AWS CloudTrail, AWS CloudFormation, and tagging. To learn more about the new view resource APIs, see the Amazon Connect API reference guide, the Amazon Connect administrator guide, and the Amazon Connect resource type reference in the AWS CloudFormation user guide.

Today, AWS Marketplace announces general availability for programmatic notifications to communicate relevant details to buyers and partners once an AWS Marketplace offer is successfully created and available for subscription. With this launch, buyers and partners can use AWS EventBridge to quickly ingest, filter, transform, and deliver offer lifecycle events to build new applications quickly. 

IAM roles last used and IAM last accessed information are now available in the AWS GovCloud (US) Regions. IAM reports the latest timestamp when role credentials were used to make an AWS request. This information makes it easier for you to identify and remove unused roles. IAM also provides the latest timestamp when an IAM user or role used an action. You can use last accessed information to identify unused service and action-level permissions granted to your active roles and refine access for your workloads. 

Today we're thrilled to announce that Amazon Simple Email Service (SES) is expanding its email receiving capabilities to 7 new regions. This expansion provides businesses and developers who deal with a high volume of emails a robust solution for swift processing. As the email receiver, SES handles underlying mail-receiving operations, such as communication with other mail servers, scanning for spam and viruses, blocking mail from untrusted sources, and accepting mail for recipients in your domain.

AWS NAT Gateway is now available in the Los Angeles Local Zone us-west-2-lax-1a. AWS Local Zones is a type of AWS infrastructure deployment that places AWS compute, storage, database, and other select services closer to large population, industry, and IT centers where no AWS Region exists today. 

Today, AWS Backup announces support for Amazon Aurora continuous backup, allowing specific point-in-time restore within customers' retention period of up to 35 days. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. With this launch, Aurora customers using AWS Backup can now restore their database to a specific time directly from their AWS Backup console or API/CLI.

Starting today, AWS-managed prefix lists can be used for Amazon Route 53 health checks to simplify the process of limiting inbound traffic to only the IP addresses associated with Route 53 health check servers. These prefix lists are maintained by Route 53 and contain up-to-date IP ranges for Route 53 health check servers.

Amazon FSx for NetApp ONTAP is announcing two additional capabilities that make it even easier for you to secure and audit access to your file systems: you can now create additional ONTAP file system administrator users for your file system and you can use Active Directory credentials to access the ONTAP CLI.

AWS Step Functions announces the availability of enhanced error handling capabilities in your AWS Step Functions workflows to help you identify errors more clearly and provide you with fine-grained control over your retry strategies. AWS Step Functions is a visual workflow service capable of orchestrating 12,000+ API actions from over 220 AWS services to automate business processes and data processing workloads.

AWS announces the availability of control and finding consolidation capabilities in AWS Security Hub in the AWS GovCloud (US-West and US-East) Regions. The consolidated controls view shows all security controls in one place. You can use it to help identify misconfigurations based on severity and number of failed resources, improve your overall security score, and configure each control across standards. This release also includes a matching set of APIs to obtain, list, and update security controls across standards.

AWS Marketplace now enables sellers to set disbursement preferences to receive their outstanding balances on a daily basis, granting increased flexibility. While AWS Marketplace sellers, including independent software vendors (ISVs) and Channel Partners, were previously limited to monthly disbursements on a specific day, now sellers can select between daily and monthly disbursements. For the monthly disbursement option, sellers can also select what day of the month they want to receive their disbursements.

Today, AWS announces the general availability of memory-optimized, high CPU performance Amazon Elastic Compute Cloud (Amazon EC2) R7iz instances. R7iz instances are the fastest 4th generation Intel Xeon Scalable-based (Sapphire Rapids) instances in the cloud with 3.9 GHz sustained all-core turbo frequency. They deliver up to 20% better performance than previous generation z1d instances. These instances are built on the AWS Nitro System. The Nitro System is a collection of AWS-designed hardware and software innovations that enables the delivery of efficient and flexible cloud services with enhanced security, isolated multi-tenancy, private networking, and fast local storage. R7iz instances are ideal for front-end Electronic Design Automation (EDA), relational databases with high per-core licensing fees, financial, actuarial, data analytics simulations, and other workloads requiring a combination of high compute performance and high memory footprint.

Today, we are excited to announce the new quick Studio setup for Amazon SageMaker. This new quick setup allows you to create SageMaker Studio with default pre-sets in minutes for individual users.

Trusted Language Extensions for PostgreSQL now supports building your own custom data types and is available on Amazon Relational Database Service (RDS) for PostgreSQL. You can now use Trusted Language Extensions for PostgreSQL to create a new base (or scalar) data type, specify how it is stored, and define functions that support SQL and index operations for this new data type.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.5, 10.6.15, 10.5.22 and 10.4.31. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Kendra is an intelligent search service powered by machine learning, enabling organizations to provide relevant information to customers and employees, when they need it. Starting today, AWS customers can use the Amazon Kendra Web Crawler to index and search pages, including dynamic pages from web sites they have authorization to crawl from.

Starting today, AWS Elemental MediaConnect has additional metrics for improved visibility into your video streams and upfront error detection. The new metrics indicate consecutive packet drops, consecutive packets not recovered, jitter, latency, and up time. You can easily monitor your live video stream source metrics in the AWS Management Console, via Amazon CloudWatch, or via the API. 

You can now learn how to use Amazon Detective to conduct security investigations for threats detected in Amazon Elastic Kubernetes Service (Amazon EKS) and AWS security findings in the latest Amazon Detective Workshop Studio. These new modules will help you understand how to dive deep quickly on container threats but also broaden your investigations to services beyond Amazon GuardDuty.

Starting today, Amazon EC2 C6id instances are available in the AWS Europe (London) Region. C6id instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage.

We are excited to announce regular expression support for Amazon CloudWatch Logs filter pattern syntax, making it easier to search and match relevant logs. Customers use filter pattern syntax today to search logs, extract metrics using metric filters, and send specific logs to other destinations with subscription filters. With today’s launch, customers will be able to further customize these operations to meet their needs with flexible and powerful regular expressions within filter patterns. Now customers can define one filter to match multiple IP subnets or HTTP status codes using a regular expression such as ‘{ $.statusCode=%4[0-9]{2}% }’ rather than having to define multiple filters to cater to each variation, reducing the configuration and management overhead on their logs.

AWS WAF Bot Control for Targeted Bots now offers predictive Machine Learning (ML) technology to provide protection against distributed, proxy-based attacks. AWS WAF previously launched AWS Bot Control for Targeted Bots which provides protection against sophisticated bots that attempt to evade detection. Now, AWS WAF Bot Control for Targeted Bots can also be used to define block, challenge and Captcha rules against distributed bot attacks, such as attacks using residential and mobile proxies.

Today, we are announcing the availability of Amazon Location Service in the AWS GovCloud (US-West) Region. Amazon Location Service is a location-based service that helps developers easily and securely add maps, points of interest, geocoding, routing, tracking, and geofencing to their applications without compromising on data quality, user privacy, or cost. With Amazon Location Service, you retain control of your location data, protecting your privacy and reducing enterprise security risks. Amazon Location Service provides a consistent API across commercial location-based service data providers (Esri and HERE), as well as popular open data source OpenStreetMap, all managed through one AWS console.

Today, AWS Backup announces support for AWS CloudFormation resource exclusion, allowing you to exclude resources from your application backups. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. Now, when assigning resources to backup plans, you can exclude specific resources within your CloudFormation stacks, optimizing cost on non-critical resources.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in Israel (Tel Aviv) Region. Amazon MSK is a fully managed service for Apache Kafka and Kafka Connect that makes it easier for you to build and run applications that use Apache Kafka as a data store. Amazon MSK is fully compatible with Apache Kafka, which enables you to more quickly migrate your existing Apache Kafka workloads to Amazon MSK with confidence or build new ones from scratch. With Amazon MSK, you spend more time building innovative streaming applications and less time managing Kafka clusters. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6i and R6i instances are available in AWS Europe (Zurich) region. These instances are built on AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. Amazon EC2 M6i and R6i instances are powered by 3rd Generation Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz. They offer up to 50 Gbps of network bandwidth and up to 40 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS).

SageMaker Multi-Model Endpoint (MME) is a fully managed capability that allows customers to deploy 1000s of models on a single SageMaker endpoint and reduce costs. Until today, MME was not supported for PyTorch models deployed using TorchServe. Now, customers can use MME to deploy 1000s of PyTorch models using TorchServe to reduce inference costs.

Today, we are announcing the availability of Route 53 Resolver Query Logging in the Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich), and Middle East (UAE) Regions. Route 53 Resolver Query Logging enables you to log DNS queries that originate in your Amazon Virtual Private Clouds (Amazon VPCs). With query logging enabled, you can see which domain names have been queried, the AWS resources from which the queries originated - including source IP and instance ID - and the responses that were received. 

Starting today, Amazon EC2 C6gd and R6gd instances powered by AWS Graviton2 processors are available in the AWS GovCloud (US-West) Region. These instances are powered by AWS Graviton2 processors and are built on the AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. 

Amazon Relational Database Service (RDS) for PostgreSQL now supports the h3-pg extension, which provides an API to H3, an open-source hexagonal, hierarchical geospatial indexing system. With this extension, you can perform different kinds of spatial analysis over large datasets, including efficient indexing and lookups, modeling flow through a grid, and applying machine learning models over your geospatial data stored in Amazon RDS for PostgreSQL.

The AWS Serverless Application Model (SAM) Command Line Interface (CLI) announces the launch of SAM CLI local testing and debugging on HashiCorp Terraform. The AWS SAM CLI is a developer tool that makes it easier to build, test, package, and deploy serverless applications. Terraform is an infrastructure as code tool that lets you build, change, and version cloud and on-premises resources safely and efficiently.

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are now available in Asia Pacific (Seoul) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Customers can now create Amazon FSx for NetApp ONTAP file systems in the AWS Israel (Tel Aviv) Region.

AWS Trusted Advisor now supports a new fault tolerance check for events that fail processing during asynchronous invocations with AWS Lambda. AWS Trusted Advisor evaluates your AWS account with automated checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security and fault tolerance, and monitor service quotas.

We are excited to announce the launch of the AWS Automotive Competency designed to highlight APN Partners who have demonstrated technical proficiency and proven customer success in the automotive industry. AWS Automotive Competency Partners have shown their AWS competency across at least one of eight automotive strategic workloads: 1/Autonomous Mobility (AM), 2/Software Defined Vehicle (SDV), 3/Connected Mobility, 4/ Sustainability, 5/Digital Customer Experience (DCE), 6/Product Engineering, 7/Manufacturing, and 8/Supply Chain. 

Amazon Managed Workflows for Apache Airflow (MWAA) has added certification for International Organization for Standardization (ISO) and Information Security Registered Assessors Program (IRAP) assessment. Amazon Web Services (AWS) maintains certifications through extensive audits of its controls to ensure that information security risks that affect the confidentiality, integrity, and availability of company and customer information are appropriately managed. 

Amazon Personalize now makes it easier to implement machine learning powered personalization by reducing the need for experimentation with increased dataset column limits. Amazon Personalize uses datasets provided by customers to train custom personalization models on their behalf. Some customers experiment with multiple iterations of their datasets in order to optimize model performance while fitting within column limits on datasets. With this launch, we increased column limits to reduce the need for experimentation and accelerate implementation. Customers can now bring double the number of columns to their Items datasets (100 columns) and five times as many columns to their Users datasets (25 columns). With these increases, customers can now bring more of their data and allow Personalize to optimize model performance on their behalf.

You can now use the geospatial image within SageMaker Studio’s notebook with GPU-based instances. Support for GPU-based instances with the geospatial image makes it easier for data scientists and machine learning (ML) engineers to build, train, and deploy ML models using geospatial data.  

AWS Compute Optimizer now supports 11 additional Amazon Elastic Compute Cloud (Amazon EC2) instance types. Newly supported instance types include accelerated computing instance families (G4dn, P3). The newly launched recommendations help customers discover opportunities to optimize their Machine Learning (ML), High-performance computing (HPC), and graphically intensive workloads. 

Amazon Elastic Kubernetes Service (EKS) control plane logs are now classified as Vended Logs in Amazon CloudWatch Logs. Vended Logs are specific AWS service logs natively published by AWS services on behalf of the customer and available at volume discount pricing. 

Amazon AppFlow, a fully managed integration service that helps customers securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks, now supports concurrent processing and setting configurable page sizes for data transfers from SAP applications to AWS services.

AWS Marketplace customers can now view AWS CloudTrail logs to monitor procurement activity for their AWS Marketplace subscriptions (agreements). Customers can view activity logs anytime a user in the AWS Account subscribes or unsubscribes to an AWS Marketplace SaaS, AMI, container, or professional services product. This visibility will provide improved security & governance to account administrators or procurement/finance users. Logs include:

1. [Subscribe] Creation of any new agreement (by accepting an offer)
2. [Subscribe] Amendment of an existing agreement (such as increasing units of a dimension/instance type, or changing auto-renewal status)
3. [Subscribe] Replacement of an existing agreement by another agreement (by accepting an ‘Agreement Based Offer’)
4. [Unsubscribe] Cancellation of an existing agreement from the Marketplace Console

Amazon Chime SDK call analytics now includes a new machine-learning-powered voice enhancement option to help improve the audio quality of call recordings. The Amazon Chime SDK provides a set of composable APIs that enable builders to add communication capabilities to their applications. With the call recording capability of Amazon Chime SDK call analytics, enterprises can record communication sessions for compliance and analytics. The optional voice enhancement capability helps provide an improved listening experience for narrowband call recordings by using machine learning to remove noise and to carry out super-resolution to restore wideband speech frequency content.

Amazon Connect outbound campaigns now supports high-volume outreach with no agents required. A new dial type called “Agentless“ makes it easier to proactively communicate with your customers for use cases such as personalized voice notifications, appointment reminders, or to enable self-service using the Interactive Voice Response (IVR). You may use integrated answering machine detection to help identify a live customer pickup or a voicemail, and customize your contact strategy accordingly (e.g., if a live person, present options for them to select, and if a voicemail, leave a message). You can also manage pacing by specifying dial capacity for each campaign (e.g., send more voice notifications faster by setting a higher dial capacity for a specific Agentless campaign compared to other dialer campaigns). An optional integrated list management capability provided by Amazon Pinpoint can also be used to build customer journeys and multi-channel user experiences. The Agentless dial type is available out-of-the box and can be enabled within the AWS Connect Console.

Amazon Connect now has support for two new number types. Universal international freephone numbers (UIFN) allows customers to have a single number that’s free to call for your consumers in 64 countries globally. The addition of UIFN extends the number of inbound countries Amazon Connect can now support to 107. Amazon Connect has also added a second new number type to support the shared cost number type(0860/0861) commonly used by businesses in South Africa.

Customers in AWS Israel (Tel Aviv) Region can now use AWS Transfer Family.

Amazon Cognito is now available in the Asia Pacific (Osaka) and Israel (Tel Aviv) regions. Amazon Cognito makes it easy to add authentication, authorization, and user management to your web and mobile apps. Amazon Cognito scales to millions of users and supports sign-in with social identity providers such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via standards such as SAML 2.0 and OpenID Connect.

You can now use Amazon Macie to discover and help protect sensitive data in Amazon Simple Storage Service (Amazon S3) in the AWS Israel (Tel Aviv) Region.

Amazon Relational Database Service (RDS) announces Amazon RDS Extended Support for Amazon Aurora and Amazon RDS database instances running MySQL 5.7, PostgreSQL 11, and higher major versions beyond the community end of life. Amazon RDS Extended Support provides you more time, up to three years, to upgrade to a new major version to help you meet your business requirements. Extended Support is available for Aurora MySQL-compatible edition, Aurora PostgreSQL-compatible edition, RDS for MySQL and RDS for PostgreSQL.

Starting today, Amazon RDS Custom for SQL Server makes it simple to stop and start your database instances. This lets you save costs by stopping a database instance when it does not need to be running, such as when it is used for development or test purposes. Amazon RDS Custom for SQL Server is a managed database service that allows customization of the underlying operating system and includes the ability to bring your own licensed SQL Server media.

Customers can now continuously stream inference responses back to the client when using SageMaker real-time inference to help you build interactive experiences for various generative AI applications such as chatbots, virtual assistants, and music generators.

Amazon SageMaker Canvas now supports eight new JDBC connectors for Salesforce, Databricks, SQL Server, MySQL, PostgreSQL, MariaDB, Amazon RDS, and Amazon Aurora. Additionally, importing data from Snowflake without a storage intermediary and OAuth 2.0 connectivity for Salesforce and Snowflake are now supported, enabling customers to seamlessly import data from a variety of sources. SageMaker Canvas is a visual interface that empowers business analysts and citizen data scientists to generate accurate ML predictions without ML expertise.