January 2024

Amazon DocumentDB (with MongoDB compatibility) Elastic Clusters are now available in 4 additional regions - London (Europe), Seoul (Asia Pacific) , Mumbai (Asia Pacific), São Paulo (South America). DocumentDB Elastic Clusters are a new type of DocumentDB cluster that enables you to elastically scale your document database to handle millions of reads and writes per second with petabytes of storage.

Amazon Elastic Container Service (Amazon ECS) launches its networking capability called ECS Service Connect in Canada West (Calgary) AWS Regions.

Research and Engineering Studio on AWS (RES) 2024.01 is now generally available. This new release adds support for RES deployments in private subnets, reduces the cost of idle installations, and enables better user management among other features. With this release, RES is also available in 4 additional AWS Regions - Canada (Central), Asia Pacific (Tokyo), Asia Pacific (Seoul), and Europe (Milan). Other key features included in the release are:

• Ability to specify a custom Amazon Linux 2 Amazon Machine Image (AMI) to use for RES infrastructure hosts. This, along with the ability to deploy RES in private subnets, will enable enterprise customers and academic organizations to deploy RES within their established security posture.
• Customers with RES 2023.11 installations can take a snapshot of their 2023.11 RES environment and apply it to their new 2024.01 installation to minimize the reconfiguration time.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 16 (16.1). PostgreSQL 16 adds support for SQL/JSON constructors and identity functions, more query types that can use parallelism, and the ‘pg_stat_io’ view that provides statistics on I/O usage. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Aurora PostgreSQL version 4.0 such as support for the Full Text Search CONTAINS function. Please refer to Amazon Aurora PostgreSQL updates for more information.

Today, we launched the new Console Home, a customizable home page for the AWS Management Console, in the AWS GovCloud (US-West and US-East) Regions. The new Console Home provides customers the capability to customize their Console Home experience by adding, removing, resizing, and rearranging widgets. 

Customers can now use AWS AppFabric for use cases that are subject to International Organization for Standardization (ISO), Payment Card Industry Data Security Standard (PCI), and Service Organization Control (SOC I, II, and II) requirements. You can download reports for all three compliance programs in AWS Artifact. To learn more, visit the AWS services compliance page and AWS compliance resources. 

Starting today, AWS Control Tower is authorized for Department of Defense Cloud Computing Security Requirements Guide Impact Levels 4 and 5 (DoD SRG IL4 and IL5) in the AWS GovCloud (US-East and US-West) Regions.

Amazon ElastiCache for Redis now supports auto scaling in the AWS GovCloud (US-West) and AWS GovCloud (US-East) Regions. With auto scaling, ElastiCache for Redis automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. You can automatically scale your cluster horizontally by adding or removing shards or replica nodes. ElastiCache for Redis uses AWS Application Auto Scaling to manage scaling and Amazon CloudWatch metrics to determine when it is time to scale up or down.

AWS Marketplace now provides a self-service listing workflow for AWS Marketplace sellers to publish their container software in the Amazon Elastic Kubernetes (EKS) console. This new self-service workflow, available in the AWS Marketplace Management Portal or through the AWS Marketplace Catalog API, enables sellers to submit their container software to be displayed in the EKS console for customers to discover, purchase, and deploy.

Starting today, Amazon DataZone is now available in 2 additional commercial regions: Asia Pacific (Seoul) and Europe (London).

Amazon QuickSight, which lets you easily create and publish interactive dashboards across your organization and embed data visualizations into your apps, is now available in Amazon Web Services China (Beijing) region, operated by Sinnet.

Today, AWS announces the general availability of a new AWS Local Zone in Chicago, Illinois. This new Local Zone supports Amazon Elastic Compute Cloud (Amazon EC2) C6i, M6i, R6i, and C6gn instances and Amazon Elastic Block Store (Amazon EBS) volume types gp2, gp3, io1, sc1, and st1. You can also access Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), Application Load Balancer, and AWS Direct Connect in this new Local Zone to support a broad set of workloads at the edge.

Today, AWS announces Amazon Q data integration, a new generative AI–powered capability of Amazon Q for AWS Glue that enables you to build data integration jobs using natural language. Amazon Q is your AWS expert that transforms the way you build, optimize, and operate applications and workloads on AWS. With Amazon Q data integration, you can author jobs, troubleshoot issues, and get instant answers to data integration questions for AWS Glue. Powered by Amazon Bedrock, Amazon Q data integration generates relevant results and automates job authoring, reducing the time needed to build data integration jobs in AWS Glue.

AWS AppConfig now supports AWS CloudTrail data event logging for the StartConfigurationSession and GetLatestConfiguration APIs. By opting in to these data events, AWS AppConfig will log details about every data plane request to AWS CloudTrail. These logs include information such as what IAM identity made the request, when the request was made, what AWS AppConfig resources were associated with the request, and whether request was made by the AWS AppConfig Agent.

Amazon DocumentDB now supports Global Clusters in the AWS GovCloud (US-East and US-West) Regions. The AWS GovCloud (US) Regions are isolated AWS Regions designed to host sensitive data and regulated workloads in the cloud, assisting customers who have United States federal, state, or local government compliance requirements. Global Clusters in the AWS GovCloud Regions provide disaster recovery from region-wide outages and enable low-latency global reads by allowing reads from an Amazon DocumentDB cluster in the nearest AWS GovCloud Region. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M2 Pro Mac instances are now generally available (GA) in US East (N. Virginia) and Asia Pacific (Sydney). EC2 M2 Mac instances are now GA in Europe (Frankfurt) and Asia Pacific (Sydney). Customers now have access to additional regions with Apple silicon hardware, enabling them to run macOS workloads in regions with pre-existing networking configurations, satisfy data residency requirements, and ensure high availability and continuity of operations with multi-region/multi-availability zone (AZ) architecture.

Amazon DataZone has added several enterprise features, including support for AWS CloudFormation, a user interface for creating custom data assets, and HIPAA eligibility. Amazon DataZone is a data management service to catalog, discover, analyze, share, and govern data at scale across organizational boundaries with governance and access controls. It provides data visibility and helps data producers and consumers across business units more securely share data.

Amazon Relational Database Service (Amazon RDS) for Db2 now supports Extended Binary Coded Decimal Interchange Code (EBCDIC) collation sequence. With this launch, you can now maintain the collation sequence when migrating from Db2 on z/OS, which supports the EBCDIC collation sequence, to Amazon RDS for Db2. You can specify the EBCDIC collation sequence when creating a database using the rdsadmin.create_database stored procedure provided by Amazon RDS for Db2.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R7i instances are available in Asia Pacific (Jakarta) and South America (Sao Paulo).

Starting today, EC2 Auto Scaling and EC2 Fleet customers who use attribute based instance type selection can define their Spot instances price protection limit as a percentage of an instances’ On-Demand price. With this new mechanism, customers have greater control over the instance types that are launched by EC2 Fleet or EC2 Auto Scaling, while also maximizing the benefit of Spot’s lower prices.

Today, Amazon Elastic Container Service (ECS) launched integrated service discovery in Canada West (Calgary) AWS Region. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7gd instances with up to 3.8 TB of local NVMe-based SSD block-level storage are available in Europe (Spain) region.

Amazon SageMaker Automatic Model Tuning now provides an API to programmatically delete tuning jobs. This gives you the ability to clean up the tuning jobs that you no longer would like to see in the ListHyperParameterTuningJob APIs, reuse tuning job names, and streamline your tuning job history.

AWS Launch Wizard now allows customers to automate deployment of SAP workloads in three new AWS regions: Asia Pacific (Melbourne), Europe (Spain), and Europe (Zurich) Regions. 

Amazon Q in QuickSight is now available for preview in Europe (Frankfurt) (eu-central-1) region, in addition to the existing US East (N. Virginia) and US West (Oregon) regions. Amazon Q in QuickSight, powered by Amazon Bedrock large language models (LLMs), makes it easy and fast to explore data, discover data insights, and share findings with others. QuickSight Q subscribers can get started now by enabling the preview through QuickSight’s preview manager.

Amazon Cognito now supports provisioned capacity for customers who need higher request limits for APIs used for authentication, user management, and other operations. Customers can request limits higher than the defaults provided by Cognito in any of nine API categories, including User Authentication, User Creation, User Federation, User Read, and User Token. For a complete list of API categories, and the API operations in them, refer to the documentation. Provisioned capacity will be charged based on the desired request-per-second (RPS) increment and the duration (expressed as a portion of a month).

Amazon Interactive Video Service (Amazon IVS) now offers audio-only pricing for its Low-Latency Streaming capability at 1/10th of the existing HD video rate.

Today, AWS Systems Manager Inventory announces support for Inventory Resource Data Sync in AWS opt-in Regions (Region that is disabled by default). You can use Inventory Resource Data Sync to send inventory data collected from all of your managed nodes to a single Amazon Simple Storage Service (Amazon S3) bucket. By syncing software inventory to Amazon S3, you can run Amazon Athena queries to gain greater inventory insight, such as understanding application use or reviewing application version compliance. You can also use Amazon QuickSight to visualize your software inventory, enabling you to drill down into queries in a point-and-click fashion.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in Europe (Frankfurt) and South America (Sao Paulo). C7i instances supported by custom Intel processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

We are excited to launch the AWS Small & Medium Business (SMB) Competency, the first go-to-market AWS Specialization designed for partners who deliver to small and medium sized customers. The SMB Competency provides enhanced benefits for AWS partners to invest and focus on SMB customer business and an aspirational bar for rising star partners to achieve. SMB Competency benefits include partners becoming the go-to standard for participation in new pilots/sales initiatives and receiving unique access to scale demand generation engines.

AWS Private Certificate Authority (AWS Private CA) now supports revocation for Matter certificates. Matter is an industry standard for smart home devices that provides seamless and secure cross-vendor connectivity for devices like light bulbs, door locks, and media devices. You can use AWS Private CA to issue digital certificates for identifying Matter devices. Matter 1.2 introduced revocation support for device attestation certificates (DACs) to improve the security of the smart home standard. With this new support for revocation from AWS Private CA, you can maintain Matter standard compliance without any disruption to your existing Matter certificate authorities (CAs).

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are now available in Europe (Stockholm) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Today, we are excited to announce the introduction of new IPv6 instance bundles on Amazon Lightsail. With these new instance bundles, you can get up and running quickly on IPv6-only without the need for a public IPv4 address with the ease of use and simplicity of Amazon Lightsail.

Amazon VPC now supports idempotent creation of route tables and network ACLs, allowing you to safely retry creation without additional side effects. Idempotent creation of route tables and network ACLs is intended for customers that use network orchestration systems or automation scripts that create route tables and network ACLs as part of a workflow.

Starting today, customers can choose to create and apply custom line items to any account within an AWS Billing Conductor billing group. By creating account-scoped custom line items, customers can control the application of fees (e.g., support charges) and credits with fine grain detail for specific member accounts enrolled in AWS Billing Conductor, improving the precision of their chargeback methodology.

AWS Payment Cryptography now supports RSA Wrap and IPEK generation, two new features for customers looking for additional options when transferring cryptographic keys into or out of the service. These capabilities bring more flexibility for key exchange in addition to existing support for industry norms such as TR-34 and TR-31/X9.143. With AWS Payment Cryptography, you can simplify cryptography operations in your cloud-hosted payment applications with a service that grows elastically with your business and has been assessed as compliant with PCI PIN Security requirements.

Trusted Language Extensions for PostgreSQL (pg_tle) now supports new crates for PL/Rust such as croaring-rs and num-bigint, enabling you to build more of your extensions on RDS for PostgreSQL. PL/Rust, a PostgreSQL trusted procedural language, combines the performance and resource efficiency of compiled languages like C and provides memory safety so that an unprivileged user can run code in the database.

You can now use Amazon Connect SMS in the Asia Pacific (Seoul) and Asia Pacific (Sydney) AWS regions. Amazon Connect SMS makes it easy for you to resolve customer issues via text messaging. SMS offers a ubiquitous and convenient channel for your customers to get help from any device and anywhere, while enabling you to deliver personalized experiences at a lower cost.

Starting today, the general-purpose Amazon EC2 M7a instances, and the memory-optimized R7a instances are now available in Asia Pacific (Tokyo) region. M7a and R7a instances, powered by 4th Gen AMD EPYC processors (code-named Genoa) with a maximum frequency of 3.7 GHz, deliver up to 50% higher performance compared to M6a and R6a instances, respectively.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle, a managed database service for legacy, custom, and packaged applications that require access to the underlying operating system and database environment, is now available in the AWS Region of Europe (Paris).

Kubernetes version 1.29 introduced several new features and bug fixes, and AWS is excited to announce that you can now use Amazon EKS and Amazon EKS Distro to run Kubernetes version 1.29. Starting today, you can create new EKS clusters using v1.29 and upgrade your existing clusters to v1.29 using the Amazon EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

Amazon Inspector now supports Center of Internet Security (CIS) Benchmark assessments for operating systems in Amazon Elastic Compute Cloud (Amazon EC2) instances. The CIS Security Benchmarks program provides well-defined, unbiased, consensus-based industry best practices to help organizations assess and improve their security. AWS is a CIS Security Benchmarks Member company.

Amazon Keyspaces (for Apache Cassandra) is a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service that offers 99.999% availability. Amazon Keyspaces now supports provisioned capacity mode for Multi-Region Replication tables.

Amazon RDS Custom for SQL Server now supports Microsoft SQL Server 2022 CU9 for Web, Standard, Enterprise and Developer Editions. You can now use SQL Server 2022 features such as Query Store enhancements, Parameter Sensitive Plan optimization, and SQL Server Ledger on your Amazon RDS for SQL Server DB instances. To learn more about the SQL Server 2022 release, please visit Microsoft SQL Server 2022 release notes. To learn more about SQL Server 2022 CU9 fixes and enhancements, visit Microsoft’s release note.

AWS Marketplace sellers, including independent software vendors (ISVs), consulting partners and channel partners, can now resell third-party professional services in AWS Marketplace. Services can include implementation, assessments, managed services, training, or premium support. With this release, AWS Marketplace sellers can authorize other sellers to receive wholesale pricing on professional services, enabling sellers to offer support or implementation services in addition to software in AWS Marketplace. The authorized partner can then use the resell authorization to customize pricing, duration, and legal terms to offer professional services that best meets customers’ needs.

Amazon Elastic Container Service (Amazon ECS) launches support for automatic traffic encryption with Transport Layer Security (TLS) certificates for its networking capability called ECS Service Connect. With this support, ECS Service Connect allows your applications to establish a secure connection by encrypting your network traffic. Automatic traffic encryption with ECS Service Connect uses industry-leading encryption capabilities to secure your inter-service communication that helps you meet your security requirements.

AWS Step Functions expands its AWS SDK integrations with support for 33 additional AWS services including Amazon Q, AWS B2B Data Interchange, and Amazon CloudFront KeyValueStore.

Amazon Elastic Container Services (Amazon ECS) launches support for configuring timeout for service-to-service communication with its networking capability called ECS Service Connect. This feature enables you to set custom timeouts for Amazon ECS services running with Service Connect, supporting applications serving long-running requests. Amazon ECS is a fully managed container orchestration service that makes it easier for you to deploy, manage, and scale containerized applications. Customers can use ECS Service Connect capability to easily configure service discovery, connectivity and traffic observability for services running in Amazon ECS. This helps build applications faster by letting you focus on the application code and not on your networking infrastructure. 

Starting today, Amazon Virtual Private Cloud (VPC) customers can use AWS Transit Gateway Flow Logs in Israel (Tel Aviv), and Canada West (Calgary) regions. The expansion into these regions enables customers to export detailed telemetry information such as source/destination IP addresses, ports, and various metadata for all of their network flows. This feature provides customers with an AWS native tool to centrally export and inspect flow-level telemetry for all network traffic that is traversing between Amazon VPCs and on-premises networks via AWS Transit Gateway.

Today, Amazon Simple Queue Service (SQS) announces support in the AWS GovCloud (US) Regions for logging data event SQS APIs using AWS CloudTrail, enabling customers to have greater visibility into SQS activity in their AWS account for best practices in security and operational troubleshooting. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Starting today Amazon RDS for Db2 supports Cross-Region Automated Backups. With this launch, customers can now choose to automatically replicate the backups created by RDS for their Db2 databases to a secondary AWS Region.

Amazon Kinesis Data Firehose (Firehose) now offers direct integration with Snowflake Snowpipe Streaming in preview. Firehose enables customers to reliably capture, transform, and deliver data streams into Amazon S3, Amazon Redshift, Splunk, and other destinations for analytics. With this new feature, customers can stream clickstream, application, and AWS service logs from multiple sources, including Kinesis Data Streams, to Snowflake. With a few clicks, customers can setup a Firehose stream to deliver data to Snowflake. Firehose automatically scales to stream gigabytes of data, and records are available in Snowflake within seconds.

Amazon Elastic File System (Amazon EFS) now delivers 40% higher read IOPS per file system, making it easier to power data-intensive file workloads on AWS.

Network Load Balancer (NLB) now supports RSA 3072-bit certificates, and Elliptic Curve Digital Signature Algorithm (ECDSA) 256, 384 and 521-bit certificates via AWS Certificate Manager (ACM). This launch enables customers use stronger encryption during transit to meet their compliance goals.

Starting today, Amazon EC2 High Memory instances with 12TiB of memory (u-12tb1.112xlarge) are now available in Asia Pacific (Seoul) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Today, Amazon Elastic Container Services (Amazon ECS) announced managed instance draining, a new capability that facilitates graceful shutdown of workloads deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances by safely stopping and rescheduling workloads to other, non-terminating instances. This capability enables customers to simplify infrastructure maintenance workflows, such as rolling out a new Amazon Machine Image (AMI) version, without needing to build custom solutions to gracefully shutdown instances without disrupting their workloads.

You can now deploy AWS IAM Identity Center in the Middle East (UAE) AWS Region. With the addition of this AWS Region, IAM Identity Center is now available in 29 AWS Regions globally.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, now provides 14% higher levels of I/O operations per second (IOPS) for throughput capacity levels of 4 GB/s through 12 GB/s at no additional cost, bringing the new maximum IOPS level to 400,000. The increased IOPS levels enable you to improve price-performance for IOPS-intensive workloads like SQL Server databases and optimize costs for workloads like periodic reporting jobs with IOPS requirements that vary over time. 

Amazon Connect now supports barge-in for chat, a capability that enables contact center managers to join and participate in ongoing customer service chats to help ensure that even the most complex customer issues are resolved quickly and accurately.

We are excited to announce that Amazon SageMaker Canvas is now generally available in the US West (N. California), Canada (Central), Europe (Stockholm), Europe (London), Europe (Paris), South America (São Paulo) AWS regions.

Amazon Simple Notification Service (Amazon SNS) now supports delivering mobile push notifications via Google Firebase’s HTTP V1 API. When creating a new platform application in the Amazon SNS console or API, you can choose token-based authentication to enable Amazon SNS to deliver mobile push notifications on your behalf, using the new Google FCM HTTP v1 API. You can also upgrade your existing platform application to use token-based authentication. Once you provide a valid key file, Amazon SNS will switch your application from the legacy FCM API to the new HTTP v1 API.

AWS CodeBuild now supports reserved capacity, to enable building and testing of software packages with latency sensitive workloads. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces ready-to-deploy software packages.

Amazon API Gateway now supports WebSocket APIs in the Middle East (UAE) Region, enabling customers to build APIs with real-time bi-directional communication.

AWS customers can now pre-book purchases and setup renewals in AWS Marketplace using the future dated agreements feature. With this feature, AWS Marketplace sellers can specify a future ‘start date’ as part of the SaaS private offer creation process. When an offer is accepted, a ‘future dated’ agreement is created, where the customer’s entitlement (or ability to use the product) starts at the specified future start date. 

Keep your projects on track with the new Migration Hub experience offering guided journeys for accelerating end-to-end migration and modernization of your applications to AWS. Optimize planning, execution and tracking with proven tasked-based migration and modernization journeys that offer expert guidance, specialized tooling and cross-team collaboration to move and improve your applications.

You can now create provisioned Amazon Managed Streaming for Apache Kafka (Amazon MSK) clusters running on AWS Graviton3-based M7g instances in the Asia Pacific (Seoul), Asia Pacific (Hyderabad), Europe (Frankfurt) and Canada (Central) AWS Regions.

We are pleased to announce the General Language Independent Driver for the Enterprise (GLIDE) for Redis, an AWS-sponsored, open-source Redis client, which is now available in preview. GLIDE for Redis works with any Redis distribution that adheres to the Redis Serialization Protocol (RESP) specification, including open-source Redis, Amazon ElastiCache for Redis, and Amazon MemoryDB for Redis.

Amazon CloudWatch Metric Streams enables you to create a continuous, near real-time stream of metrics to a destination of your choice.

Amazon RDS for SQL Server now supports TempDB configuration replication for Multi-AZ database instances. With this new feature enabled, we will synchronize TempDB file configurations on the primary host, such as type, name, physical_name, size, max_size, growth, and is_percent_growth, with the secondary host in a Multi-AZ configuration. 

Starting today, Amazon EC2 Instance Connect and EC2 Serial console are also available in the Israel (Tel-Aviv) region. Amazon EC2 Instance Connect provides a single-click and single command Secure shell (SSH) based connectivity to instances and EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues by establishing a connection to the serial port of an instance. 

Today, AWS announces the general availability of the AWS Supply Chain N-Tier Visibility module that streamlines communication between customers and multiple tiers of suppliers, improving their ability to more accurately respond to supply plans, as well as manage demand or supply changes during the execution window. With this capability, customers can invite and onboard trading partners in just a few clicks. Trading partners can then automate communication with their customers and improve their own forecasts. 

Amazon Relational Database Service (Amazon RDS) for MySQL now supports multi-source replication, which allows you to configure multiple RDS for MySQL database instances as sources for a single RDS for MySQL target database instance. Multi-source replication on RDS for MySQL enables you to merge multiple shards into a single target, or consolidate data in one RDS for MySQL instance for analytics, or long-term backups.

Today, AWS announces the general availability of AWS Supply Chain Sustainability, a module that creates a more secure and efficient way for companies to obtain Environmental, Social, and Governance (ESG) documents and datasets from their supplier network. With this module, customers can request, collect, and export artifacts, such as product life cycle assessments, certificates on product safety, or reports on hazardous substances used, at any point in the supply chain. Customers can also upload their own data collection form for their suppliers to document any sustainability issue, utilize a standard workflow process to send their suppliers reminders to answer data requests, and communicate necessary changes based on supplier responses.

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are now available in Europe (London) Regions. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are now available in US East (Ohio) Region. Customers can start using these new High Memory instances with On Demand and Savings Plan purchase options.

AWS Transfer Family now provides static IP addresses for SFTP connectors, enabling connection with remote SFTP servers that are secured by IP allowlisting controls. With this enhancement, you can now reliably and seamlessly exchange files with external business partners that only accept inbound connections from known IP addresses. 

AWS Transfer Family now uses static IP addresses when sending messages to remote AS2 servers and when returning asynchronous message disposition notification (MDN) responses. This adds to AWS Transfer Family’s existing support for static IPs when receiving AS2 messages with internet-facing, VPC-hosted AS2 endpoints.

Today, AWS announces the general availability of the AWS Supply Chain Supply Planning module, which provides specialized models to accurately forecast and plan purchases of raw materials, components, and finished goods to improve in-stock rates across customers’ supply chains. AWS Supply Chain Supply Planning draws on Amazon’s expertise in developing ML for its own operations and applies this knowledge to create sophisticated supply planning models that can accurately plan the right levels of inventory needed across customer's facilities. With this addition, AWS Supply Chain customers can more easily manage their upstream supply chain, and more accurately plan needed materials and inventory.

You can now use AWS Private Certificate Authority (AWS Private CA) to help issue ISO/IEC 18013-5:2021 international standard mobile driver’s license (mDL) certificates. mDLs are digital representations of the information contained in a physical driver’s license or non-driver identification card. Organizations are working together to use mDLs across various situations, ranging from validating identity during airplane boarding to sharing information for age-restricted activities. 

You can now access Amazon S3 on Outposts buckets using IPv6 via S3 on Outposts dual-stack endpoints. IPv6 support for S3 on Outposts allows you to manage your S3 on Outposts buckets and control plane resources over IPv6 networks.

On Jan 16, 2024 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) and Feature (FR) versions of OpenJDK. Corretto 21.0.2, 17.0.10, 11.0.22, 8u402 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK. 

Today, we are excited to announce a simplified console experience for creating Amazon EMR Studio. With the new experience, with just a few clicks, you can get started with interactive and batch workloads with default settings. The default experience also creates an EMR Serverless application ready to serve interactive workloads. Additionally, with improved start times, you can now launch your EMR Studio Workspaces in seconds to perform interactive analysis in notebooks.

Amazon Location Service now has full support for managing resources via CloudFormation. AWS CloudFormation simplifies provisioning and management of resources on AWS. It allows you to track changes over time, apply updates in a controlled and automated manner, and include version controls so you can easily roll back changes if needed. Amazon Location now has CloudFormation support for API keys, enabling automated and streamlined management of these keys through CloudFormation templates, making it easier to provide secure access control. Additionally, developers can now modify Amazon Location resource properties through Cloudformation without having to delete the underlying data. This facilitates more efficient resource management, allows users to change the political view of Map resources, and manage tags on Amazon Location resources. Amazon Location has also introduced the ability to delete unused API Keys via CloudFormation, which optimizes testing and deployment processes. Lastly, Amazon Location now provides the option to delete active API Keys using an API call with a force-delete feature, applicable even to keys that have already been utilized.

We are excited to announce the launch of Unified Search in the Amazon Web Services Management Console in the AWS GovCloud (US) Regions, enabling customers to easily search and discover information in the AWS Management Console. You can search for services (e.g., EC2) and service features (e.g., Events) from any page in the AWS Console Management. Unified Search provides search box focus using a keyboard shortcut (alt-s or option-s), autocomplete results using the right arrow key, and navigation to the top search result by pressing the enter key.

Today, AWS announces the availability of AWS Management Console Private Access in Asia Pacific (Sydney), Asia Pacific (Seoul), Asia Pacific (Hyderabad), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Europe (London), and Canada (Central) Regions. AWS Management Console Private Access is an advanced security feature that allows customers to define a set of trusted AWS accounts and organizations that can access the AWS Management Console from within their network. For example, with AWS Management Console Private Access, customers can restrict access to personal AWS accounts from the company network.

AWS Lambda now supports SnapStart for Java functions in 5 additional AWS Regions: Middle East (UAE), Europe (Spain, Zurich), and Asia Pacific (Hyderabad, Melbourne).

AWS Config is adding support for 22 more resource types in the following services: AWS App Mesh, Amazon AppStream 2.0, Amazon Connect, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Container Service (Amazon ECS), AWS Identity and Access Management (AWS IAM), AWS IoT, AWS Key Management Service (AWS KMS), AWS IoT TwinMaker, AWS Lambda, Amazon Managed Grafana, Amazon Managed Streaming for Apache Kafka (Amazon MSK), AWS Network Manager, AWS Private Certificate Authority, Amazon Relational Database Service (Amazon RDS), AWS Resource Explorer, and Amazon Route 53 Resolver. 

The Red Hat OpenShift Service on AWS (ROSA) with hosted control planes (HCP) deployment model is generally available. Under the classic ROSA deployment model, AWS infrastructure required to run the ROSA control plane is hosted on your AWS account. Now, you can create ROSA clusters with the control plane hosted and managed on a service account. Like ROSA classic, ROSA with HCP clusters incur on-demand service fees per worker node vCPU. Additionally, ROSA with HCP clusters incur an on-demand service fee per cluster hour. For service fee discounts, you can optionally purchase upfront ROSA with HCP contracts from the ROSA console.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports this latest minor version of SQL Server 2019 across the Express, Web, Standard, and Enterprise editions.

Amazon Connect outbound campaigns now supports high-volume voice outreach via the PutDialRequestBatch API to make it easier to proactively communicate with your customers while optimizing agent productivity for use cases such as appointment reminders, marketing promotions, deliveries, and billing reminders. You can now use your own list management capability to set up the contact strategy (e.g., campaign start and end times, do-not-call times, maximum contact attempts) while programmatically using Amazon Connect’s predictive dialer with machine learning (ML)–powered answering machine detection to help increase live-party connections and not waste agents’ time with unanswered calls. You can also track the outcome of each campaign call using Amazon Connect's Contact Record. 

Amazon RDS for MySQL now supports MySQL Innovation Release 8.2 in the Amazon RDS Database Preview Environment, allowing you to evaluate the latest Innovation Release on Amazon RDS for MySQL. You can deploy MySQL 8.2 in the Amazon RDS Database Preview Environment that has the benefits of a fully managed database, making it simpler to set up, operate, and monitor databases.

Today, AWS Marketplace announced the general availability of a new Amazon QuickSight dashboard, displaying customer’s product usage for AWS Marketplace sellers. Sellers can now access the usage dashboard under the Insights > Sales operations tab of AWS Marketplace Management Portal (AMMP). Previously, sellers could only access their customer’s SaaS and Server product usage with the legacy Daily business report Section 1: Usage by instance type; and programmatically by Commerce Analytics Service (CAS). 

Amazon Relational Database Service (Amazon RDS) for Db2 allows customers to set up, operate, and scale Db2 database in the cloud with just a few clicks. RDS for Db2 now supports up to 5,000 users for database authentication.

Amazon EventBridge Event Bus now supports AWS AppSync as a target of an Event Bus, which enables you to stream real-time updates such as sport scores and stock updates from your own applications to frontend applications including mobile and desktop. With AppSync as a target, clients can now subscribe to mutations or changes in data and AppSync will notify those subscribers of that data change on successful completion of the mutation.

AWS Backup now allows you to protect your Amazon FSx for NetApp ONTAP FlexGroup volumes. Amazon FSx for NetApp ONTAP is a fully managed AWS service that allows you to run NetApp ONTAP file systems in the AWS Cloud. Previously, you could only protect your FlexVol volumes using AWS Backup. AWS Backup now supports backing up and restoring Amazon FSx for NetApp ONTAP FlexVol and FlexGroup volumes. You can now use AWS Backup’s policy-based capabilities to centralize and automate data protection of Amazon FSx for NetApp ONTAP FlexGroup volumes alongside other supported AWS services (spanning compute, storage, and databases) and hybrid workloads.

AWS customers using the AWS Console Mobile App for Android can now use their mobile device’s password manager for faster sign in, set a default AWS identity for quicker recurring access to their resources, and use supported virtual authenticator apps, FIDO security keys and hardware TOTP tokens for multi-factor authentication (MFA). The enhanced sign in experience for the AWS Console Mobile App for iOS was released on October 25th, 2023.

Amazon CloudWatch Logs is excited to announce support for creating account-level subscription filters using the put-account-policy API. This new capability enables you to deliver real-time log events that are ingested into Amazon CloudWatch Logs to an Amazon Kinesis Data Stream, Amazon Kinesis Data Firehose, or AWS Lambda for custom processing, analysis, or delivery to other destinations using a single account level subscription filter.

Amazon Elastic Container Service (Amazon ECS) and AWS Fargate now integrate with Amazon Elastic Block Store (EBS), allowing you to easily provision and attach EBS volumes to Amazon ECS tasks running on both AWS Fargate and Amazon Elastic Compute Cloud (EC2) using Amazon ECS APIs. This capability makes it easier for you to deploy storage and data intensive applications such as ETL jobs, media transcoding, and ML inference workloads using serverless containers.

Today, AWS made available on GitHub for public comment, the Open Job Description specification for describing portable render jobs. Open Job Description (OpenJD), lets you describe the work instructions and asset locations for visual compute render farm jobs in a way that is extensible and open to help you create interoperable pipelines. OpenJD specifies a structured format that is human and machine readable for ease of development. OpenJD is designed to be extensible for new types of visual compute workflows and applications. This open specification is made available for public comment under a Creative Commons (CC) license.

Amazon SageMaker is pleased to announce support for M7i, C7i, and R7i instance types for real-time and asynchronous inference.

Amazon Web Services (AWS) is announcing an integrated mobile experience for AWS services in the AWS Console Mobile App for Android. AWS customers using the AWS Console Mobile App for Android can now access the full breadth of AWS resource information and management functionality that’s available to them on the AWS Console for natively supported services including EC2, RDS, and S3 via an integrated mobile web browser experience in the Console Mobile App.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6in instances are available in AWS Region Europe (Spain). These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, 2x more network bandwidth and up to 2x higher packet-processing performance over comparable fifth-generation instances. 

Amazon ElastiCache for Memcached now supports Memcached version 1.6.22 when using the node-based deployment option. With this release, you can now design your own ElastiCache for Memcached cluster using Memcached version 1.6.22. ElastiCache Serverless for Memcached already supports Memcached version 1.6.22.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R7i instances are available in Asia Pacific (Mumbai, Seoul, Singapore, Tokyo) regions, Australia (Sydney) Region, Europe (Frankfurt, London) regions, Canada (Central) Region and US West (Northern California) Region.

Starting today, you can enable Route 53 Resolver DNS Firewall to filter DNS traffic based on the query type (QTYPE) contained in the question section of the DNS query format.

Amazon ElastiCache now supports additional sizes of the Graviton3-based network-optimized C7gn node type. ElastiCache C7gn nodes feature the new 5th generation AWS Nitro Cards and enable you to achieve the highest network bandwidth across ElastiCache node families for network-intensive workloads. With this launch, ElastiCache C7gn nodes are available in 7 different node sizes (large to 16xlarge) for increased scalability. ElastiCache C7gn nodes offer up to 200 Gbps network bandwidth.

Amazon Connect now makes it easier to deliver high-quality voice experiences in Citrix Virtual Desktop Infrastructure (VDI) environments. Amazon Connect automatically optimizes audio by redirecting media from your agent’s local desktop to Connect, simplifying the agent experience and improving audio quality by reducing network hops. Agents can simply log into their Citrix remote desktop application (e.g., Citrix Workspaces) and start accepting calls using your custom agent user interface (i.e., custom Contact Control Panel) using APIs in the Amazon Connect open source JavaScript libraries.

Starting today, Amazon Virtual Private Cloud (VPC) customers can create their own Prefix Lists in Canada West (Calgary) Region.

Starting today, Amazon Route 53 supports geoproximity routing as an additional routing policy for DNS records in public and private hosted zones. Geoproximity routing improves application responsiveness for your end users and helps organizations apply data residency preferences by routing traffic to the geographically nearest resource. With this release, you can add geoproximity routing to your DNS records via the Route 53 Console, API, SDK, and CLI. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7i-flex and M7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in Asia Pacific (Singapore, Tokyo) regions. These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

Amazon Kinesis Data Firehose (Firehose) enables customers to capture, transform, and deliver data streams into Amazon S3, Redshift, OpenSearch, Splunk, and 10+ other destinations for analytics. With this new feature, customers can now use Firehose to deliver streams to their Splunk cluster configured with either an Application Load Balancer (ALB) or a Classic Load Balancer (CLB). 

OpenSearch Service 2.11 now supports hybrid query score normalization. It is now easier than ever for search practitioners to leverage a combination of lexical and semantic search to improve their search relevance with OpenSearch. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R7iz instances are available in AWS Region US East (Ohio) and AWS Region Europe (Ireland). R7iz instances are powered by 4th generation Intel Xeon Scalable processors (code named Sapphire Rapids) with an all core turbo frequency up to 3.9 GHz, and built on the AWS Nitro System, a collection of AWS-designed hardware and software innovations that enables the delivery of efficient and flexible cloud services with enhanced security, isolated multi-tenancy, private networking, and fast local storage.

Amazon Location Service has updated the Maps service to include a richer set of places, such as shops, services, restaurants, attractions, and other points of interest, in one of our map styles. The updated Esri Navigation style now provides developers the option to display a detailed map with global places content for reference or navigation purpose.

Amazon EMR Studio is an integrated development environment (IDE) that makes it easy for data scientists and data engineers to develop, visualize, and debug big data and analytics applications written in PySpark, Python, Scala, and R. Today, we are excited to announce that you can now use customer managed keys for EMR Studio workspace storage.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in US West (N. California), Europe (London), Canada (Central) and Asia Pacific (Mumbai, Seoul, Singapore, Sydney, Tokyo) regions. C7i instances supported by custom Intel processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

AWS Outposts can now be shipped and installed at your data center and on-premises locations in Turkey.

AWS CloudShell now has built-in support for Docker, making it easier than ever for developers to quickly spin up containers and run commands inside them directly from their CloudShell environment. With this new integration, CloudShell users can initialize Docker containers on demand and connect to them to prototype or deploy Docker based resources via AWS CDK Toolkit. By providing instant access to Docker without needing to install or configure it, CloudShell aims to simplify container-based development workflows for AWS CloudShell users. This feature is now available in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Sydney), Asia Pacific (Singapore), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), and South America (São Paulo). To learn more, see CloudShell Docker Documentation.

AWS Lambda now supports Amazon Managed Streaming for Apache Kafka (MSK) and self-managed Apache Kafka as event sources in the Israel (Tel Aviv) Region, enabling customers to build serverless applications that process streaming data from Kafka event sources.

Today, we are excited to announce that Amazon EMR now supports backup and restore for your Apache HBase tables. For customers running Apache HBase databases on EMR, now with disaster recovery operations, you can easily ensure business continuity in case of a disaster as well as offer a higher resilience for workloads. This feature also allows Apache HBase administrators to easily perform common operational tasks like upgrading to the latest versions, rotating your clusters, and cleaning up old write ahead logs.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M6gd instances are available in Europe (Milan), Middle East (Bahrain), and Asia Pacific (Hong Kong). These instances are powered by AWS Graviton2 processors and are built on the AWS Nitro System, a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. These instances offer up to 25 Gbps of network bandwidth, up to 19 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS), and offer up to 3.8 TB of NVMe-based SSD storage.

Starting today, you can launch builds on a new compute type, X-Large, when using AWS CodeBuild.

Starting today, Amazon EC2 M6id instances are available in AWS Regions South America (Sao Paulo) and Canada (Central). These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. 

Amazon OpenSearch Service now offers support for the Amazon Graviton2 instance family in six additional regions- Africa (Cape Town), Asia Pacific (Osaka), Europe (Zurich), Middle East (Bahrain). Israel (Tel Aviv), and AWS GovCloud (US-West). Graviton-based instances (C6g/M6g/R6g) in OpenSearch Service provide up to 30% better price-performance than comparable x86-based (C5/M5/R5) Amazon Elastic Compute Cloud instances.

Starting today, you can use Amazon EMR Studio in the AWS GovCloud (US-East, US-West) Regions to run interactive workloads on EMR.

Starting today, you can use Amazon EMR Studio in the Middle East (UAE) Region to run interactive workloads on EMR.

Amazon Relational Database Service (RDS) Proxy is now available in AWS Europe (Spain) Region. RDS Proxy is a fully managed and a highly available database proxy for RDS and Amazon Aurora databases. RDS Proxy helps improve application scalability, resiliency, and security.

We are excited to announce that AWS Blu Insights, the codebase analysis and transformation capability of AWS Mainframe Modernization Automated Refactor with AWS Blu Age, which has been available in the AWS Region Europe (Paris), is now available in 14 additional AWS Regions.

AWS Elemental MediaLive is a broadcast-grade live video processing service. It lets you create high-quality live video streams for delivery to broadcast televisions and internet-connected multiscreen devices, like connected TVs, tablets, smartphones, and set-top boxes.

Amazon Elastic Container Service (Amazon ECS) has improved deployment monitoring for Amazon ECS services, allowing you to more quickly detect and rollback bad changes your applications deployed as Amazon ECS services. 

Amazon SageMaker Feature Store now supports the ability to provision read and write capacities for the online store. This capability is an alternative to on-demand billing mode and is designed to make it more cost-effective and provide more controls for workloads with predictable throughput requirements.

AWS Marketplace announces the reduction and standardization of seller listing fees:

• Public subscriptions for software-as-a-service (SaaS) and AWS Data Exchange product types are reduced to 3%.
• AWS Marketplace private offer listing fees for software and data are reduced to between 1.5% and 3%. For deals under $1M TCV, there’s a 3% fee, for those equal to $1M and under $10M, a 2% fee, and for those equal or greater than $10M, a 1.5% fee.
• Listing fees associated with the renewal of private offers for software and data are 1.5%.
• Any listing fees not described above remain the same. For example, professional services fees remain at 2.5%, and channel partner private offer (CPPO) transactions continue to have a .5% uplift.

Starting on January 5, 2024, AWS Accounts will no longer support security challenge questions for accounts that have not already enabled them. This will remove the option for customers to add new security challenge questions from the Accounts page in the AWS Management Console.

Amazon Elastic Container Service (Amazon ECS) launches its networking capability called ECS Service Connect in the Asia Pacific (Hyderabad), Asia Pacific (Melbourne) and Europe (Spain) Regions.

Amazon OpenSearch Service adds support for Transport Layer Security (TLS) version 1.3 amongst its transport security options for domain endpoint security. TLS 1.3 offers customers enhanced security and performance as compared to older TLS versions. In addition, we now support perfect forward secrecy, which provides additional safeguards against eavesdropping of encrypted data, through the use of a unique random session key.

Amazon Lightsail now offers a simplified experience to configure your WordPress website on Lightsail. You can set up your website on your Virtual Private Server (VPS) by simply following the workflow that will configure and secure your WordPress application for you.

Application Manager, a capability of AWS Systems Manager that helps DevOps engineers investigate and remediate issues in the context of their applications, now supports AWS Systems Manager Agent (SSM Agent) automatic version updates in the context of an Application.

AWS Systems Manager now supports instances running Ubuntu 23.04, Debian 12, MacOS 14 (Sonoma), and SUSE SP5. Systems Manager customers running these operating systems versions now have access to all AWS Systems Manager Node Management capabilities, including Fleet Manager, Compliance, Inventory, Hybrid Activations, Session Manager, Run Command, State Manager, Patch Manager, and Distributor. For a full list of supported operating systems and machine types for AWS Systems Manager, see the user guide. For a full list of supported operating systems for AWS Systems Manager Patch Manager, see the Patch Manager prerequisites user guide page. 

Amazon Connect now provides granular access controls enabling you to apply resource tags to define who is able to see historical metrics for specific users, queues, and routing profiles in the Amazon Connect UI. For example, you can tag users with Team:Compliance to only enable the Compliance team manager to see historical metrics for these users. To learn more about this feature, see tag based access control for historical metrics.

Amazon Cognito identity pools now enables you to manage quotas for commonly used operations to create and retrieve identities and manage tags for identity pools. This update makes it simple to view your quota usage and to better plan and architect your solution. For example, you now can now see the quotas for APIs such as GetID and TagResource in Service Quotas console. By leveraging AWS Service Quotas, you can quickly understand your applied service quota values for these identity pool APIs.

Starting today, Amazon EC2 Serial console will be available in all AWS Local Zones. Amazon EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues by establishing a connection to the serial port of an instance. It provides a one-click, text-based access to an instances’ serial port as though a monitor and keyboard were attached to it.

Amazon WorkSpaces now supports certificate-based authentication with Windows WorkSpaces on WorkSpaces Streaming Protocol (WSP) bundles using WorkSpaces Web Access.