April 2024

Amazon Q in QuickSight is now generally available. The Generative BI capabilities of Amazon Q in QuickSight help business analysts and business users easily build and consume insights using natural language.

Today, AWS Security Hub announces the release of the AWS Resource Tagging standard. The standard contains 85 new controls which can be used to identify if any of your AWS Resources are missing tag keys required by your organization. With the release of this standard, Security Hub now offers 386 security controls that automatically check the compliance of your AWS resources against pre-defined security principles and best practices.

Today, Amazon Timestream for LiveAnalytics announces Timestream Compute Unit (TCU), serverless compute capacity, for customers to predict and control query costs. With TCUs, you are charged for the duration of compute units (TCU) used by your queries, and there are no minimum bytes metered for queries.

Amazon EventBridge Pipes now supports event delivery through AWS PrivateLink, allowing you to send events from an event source located in an Amazon Virtual Private Cloud (VPC) to a Pipes target without traversing the public internet. With today’s launch, you can use Pipes to poll from Amazon Managed Streaming for Apache Kafka (MSK), self-managed Kafka, and Amazon MQ sources residing in a private subnet without the need to deploy a NAT gateway, configure firewall rules, or set up proxy servers.

Today, AWS announces general availability of Amazon Q data integration, a new generative AI–powered capability of Amazon Q Developer that enables you to build data integration pipelines using natural language. Amazon Q Developer is the AWS expert to assist you with all of your development tasks. Amazon Q data integration is a new chat experience specifically for AWS Glue, design for authoring and troubleshooting data integration pipelines.

Today, AWS announces the general availability of Amazon Q Developer, a generative AI–powered assistant that reimagines your experience across the entire software development lifecycle (SDLC). Amazon Q Developer includes unique, game-changing capabilities that allow developers to offload time-consuming, manual tasks inside or outside of AWS. Amazon Q Developer capabilities include Q&A and diagnosing common errors in the AWS Management Console, Amazon Q data integration which enables you to build data integration pipelines using natural language, conversational coding and inline code generation in the IDE, and Amazon Q Developer Agent for software development in the IDE and in Amazon CodeCatalyst. Amazon Q Developer also includes Amazon Q Developer Agent for code transformation, a feature that can accelerate your application maintenance, upgrades, and migration in minutes. Additionally, Amazon Q Developer lists and describes resources in your AWS account (preview), and can now help you retrieve and analyze cost data from AWS Cost Explorer (preview).

AWS Launch Wizard now allows you to automate deployment of SAP Web Dispatcher. This launch expands on existing Launch Wizard capabilities that allow you to automate deployment of SAP HANA, SAP NetWeaver based applications on HANA and ASE databases, SAP BW/4HANA, SAP S/4HANA, and SAP S/4HANA foundations using APIs or a console-based approach.

Today, AWS announces the general availability of Amazon Q Business and the preview of Amazon Q Apps, a new Amazon Q Business capability. Amazon Q Business revolutionizes the way that employees interact with organizational knowledge and enterprise systems. It helps users get comprehensive answers to complex questions and take actions in a unified, intuitive web-based chat experience—all using an enterprise’s existing content, data, and systems. Amazon Q Business connects seamlessly to over 40 popular enterprise systems, including Amazon Simple Storage Service (Amazon S3), Microsoft 365, and Salesforce. It ensures that users access content securely with their existing credentials using single sign-on, according to their permissions, and enterprise-level access controls.

Amazon OpenSearch Service now supports Amazon Route 53 alias records for defining custom domain endpoints. Alias records provide better flexibility when configuring routing to AWS resources. For more information about Route 53 alias records, please see documentation.

Starting today, the Amazon CloudWatch metrics for monitoring AWS Config data usage will display only billable usage. With this enhancement, non-billable usage will no longer be displayed in both the Amazon CloudWatch Config metrics and AWS Config console. This allows you to validate AWS Config setup and usage using Amazon CloudWatch metrics and correlate billable usage with associated costs.

We are excited to announce AWS HealthOmics private workflows now support file systems that dynamically scale with your workflow. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data to generate insights to improve health and drive scientific discoveries. With this release, customers can now choose between static and dynamic run storage options.

Today, AWS announces the general availability of RubyGems support in CodeArtifact. Gems, which are used to distribute Ruby libraries, can now be stored in CodeArtifact.

Today, Amazon Q launched a subscription management service enabling customers to manage subscriptions for Amazon Q plans like Amazon Q Business Pro, Amazon Q Business Lite, and Amazon Q Developer Pro. The new subscription management service offers administrators access to dashboards that provide subscription details, including the specific users and groups assigned to each subscription. This centralized visibility enables tracking Amazon Q subscriptions across the entire organization.

Today, AWS AppFabric announces support for three new data sources: Salesforce, Azure Monitor, and Google Analytics. Starting now, IT administrators and security analysts can use AppFabric to quickly integrate with 29 supported SaaS applications, aggregate enriched and normalized SaaS audit logs, and audit end-user access across their SaaS apps. 

We are excited to announce public availability of an enhanced dataset discovery workflow for AWS Mainframe Modernization File Transfer with BMC. This new capability makes it easier for users to discover and select mainframe data sets for conversion and transfer to AWS. Users can now browse the mainframe data set catalog directly from the AWS Mainframe Modernization service console, select data sets from one or multiple mainframe volumes for transfer, view extended data set metadata, and choose data set codepage conversions. The enhanced workflow provides an intuitive and unified mechanism for mainframe data access and transfer.

We are excited to announce AWS HealthOmics now supports the ability to share HealthOmics workflows across AWS accounts. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data, and generate insights to improve health and drive scientific discoveries. With this release, customers can now develop analyses within a single AWS account and share them with other AWS accounts in the same organization or across organizations.

Amazon Redshift now supports Multi-AZ deployment for zero-ETL integration on RA3 clusters, enabling customers to run near real-time analytics on a highly available data warehouse. With a Multi-AZ deployment, your zero-ETL integration can automatically recover from any infrastructure or Availability Zone (AZ) failures ensuring your workloads remain uninterrupted.

Today, AWS announced the opening of a new AWS Direct Connect location within the CyrusOne Aurora data center in Aurora, Illinois. By connecting your network to AWS at the new Illinois location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones. This is the third AWS Direct Connect site within Chicago Metropolitan area and the 43rd site in the United States. 

Amazon RDS for MySQL now supports MySQL Innovation Release 8.3 in the Amazon RDS Database Preview Environment, allowing you to evaluate the latest Innovation Release on Amazon RDS for MySQL. You can deploy MySQL 8.3 in the Amazon RDS Database Preview Environment that has the benefits of a fully managed database, making it simpler to set up, operate, and monitor databases.

Amazon Location Service has released a Places plugin for MapLibre GL JS Geocoder, simplifying the integration of Amazon Location Places Service with MapLibre. Along with the authentication libraries, this plugin provides a frictionless experience to use Amazon Location Places with MapLibre GL JS. 

Amazon DynamoDB now supports an AWS Fault Injection Service action to pause replication for global tables. FIS is a fully managed service for running controlled fault injection experiments to improve an application’s performance, observability, and resilience. Global tables replicate your Amazon DynamoDB tables automatically across your choice of AWS Regions to achieve fast, local read and write performance. Customers can use the new FIS action to observe how their application responds to a pause in regional replication, and tune their monitoring and recovery process to improve resiliency and application availability.

Today, Amazon Transcribe announces the general availability of generative AI-powered call summarization available through the Amazon Transcribe Call Analytics API. Generative call summarization delivers a concise summary of contact center interactions, capturing key components such as why the customer called, how the issue was addressed, and what follow-up actions were identified.

Amazon Titan Text Embeddings V2, a new embeddings model in the Amazon Titan family of models, is now generally available in Amazon Bedrock. Using Titan Text Embeddings V2, customers can perform various natural language processing (NLP) tasks by representing text data as numerical vectors, known as embeddings. These embeddings capture the semantic and contextual relationships between words, phrases, or documents in a high-dimensional vector space. This model is optimized for Retrieval-Augmented Generations (RAG) use cases and is also well suited for a variety of other tasks such as information retrieval, question and answer chatbots, classification, and personalized recommendations.

Starting today, AWS WAF is available in the AWS Canada West (Calgary) Region. This is the second Region in Canada where AWS WAF is available, joining the AWS Canada (Central) Region, and giving customers more choice and flexibility.

You can now access Cohere’s newest state-of-the-art enterprise foundation model family, Command R+ and Command R, in Amazon Bedrock. These generative AI models are highly scalable, optimized for long context tasks like advanced retrieval-augmented generation (RAG) with citations to mitigate hallucinations, multi-step tool use to automate complex business tasks, and are multilingual in 10 languages to support global business operations.

Starting today, AWS Firewall Manager allows customers to define policies for centrally creating, deploying and managing Amazon Virtual Private Cloud Network Access Control List (NACL) rules for their VPC subnets across accounts in their AWS Organization. Additionally, NACL policies provide customers with visibility into policy adherence by reporting the compliance status for each policy.

Amazon Q generative SQL in Amazon Redshift Query Editor is available for public preview in AWS Europe (Frankfurt) region. Amazon Q generative SQL is available in Amazon Redshift Query Editor, an out-of-the-box web-based SQL editor for Redshift, to simplify query authoring and increase your productivity by allowing you to express queries in natural language and receive SQL code recommendations. Furthermore, it allows you to get insights faster without extensive knowledge of your organization’s complex database metadata.

Amazon CloudWatch Lambda Insights is now available in AWS GovCloud (US) Regions. Lambda Insights enables you to monitor, troubleshoot, and optimize the performance of AWS Lambda functions. Lambda Insights provides you access to automated dashboards summarizing the performance and health of your Lambda functions that provide visibility into issues such as memory leaks or performance changes caused by new function versions. 

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL versions 16.2, 15.6, 14.11, 13.14, and 12.18. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. These releases also offer improved performance through faster COPY operations (for PostgreSQL 16.2), Query Plan Management enhancements for queries with aggregate operations, and optimizations for further reducing the logical replication lag. 

Today, AWS announces the general availability of AWS Local Zones in Honolulu, Hawaii. You can now use Local Zones in Honolulu to deliver applications that require single-digit millisecond latency or local data processing. In this new Local Zone, you can access Amazon Elastic Block Store (Amazon EBS), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), Application Load Balancer, and AWS Direct Connect to support a broad set of workloads at the edge.

Network Load Balancer (NLB) now supports Resource Map, a tool in the console that displays all your NLB resources and their relationships in a visual format on a single page, providing you a clear understanding of your NLB architecture.

Customers can now create and manage default policies across their entire organization or organizational unit (OU) with AWS CloudFormation StackSets. Default policies work in conjunction with customers’ existing backup mechanisms to only create EBS-backed AMIs and EBS Snapshots of instances and volumes without recent backups. This helps administrators ensure that all member accounts have comprehensive backup protection without creating duplicate backups or increasing management overhead and cost. 

AWS CodePipeline V2 type pipelines now support stage level rollback to help customers to confidently deploy changes to their production environment. When a pipeline execution fails in a stage due to any action(s) failing, customers can quickly get that stage to a known good state by rolling back to a previously successful pipeline execution in that stage. Customers can roll back changes in any stage, whether succeeded or failed, except the Source stage.

You can now restore your Amazon Managed Service for Apache Flink application to the previous running version and application state from the most recent, successful snapshot. This feature will work when your application is running and is most useful when you want to immediately rollback to the previous application version to mitigate downstream impact of an application update. Prior to this launch, you could only rollback applications that were in updating or autoscaling statuses. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL, MySQL, and MariaDB now supports AWS Graviton2-based M6gd database instances in Asia Pacific (Hyderabad), Europe (Spain, Zurich), and Middle East (UAE) regions.

Amazon Relational Database Service (Amazon RDS) for Db2 now supports local time zones. You can now set the time zone for your Amazon RDS for Db2 instances to the local time zone of your choice.

Foundation model evaluations with SageMaker Clarify is now generally available. This capability helps data scientists and machine learning engineers evaluate, compare, and select foundation models based on a variety of criteria across different tasks within minutes.

Amazon VPC announces a network interface setting to dynamically remove and add an auto assigned public IPv4 address on EC2 instances. With this capability, customers that no longer require an auto assigned public IPv4 address on their EC2 instance can remove the public IPv4 address, and if needed attach back a new public IPv4 address, by modifying the public IP setting on the network interface. Before today, once a public IPv4 address was auto assigned to EC2 instance it was not possible to remove it. It remained on the network interface for the lifetime of the EC2 instance.

Starting today, AWS Global Accelerator supports application endpoints in the AWS Canada West (Calgary) Region, expanding the number of supported AWS Regions to twenty-nine. 

Today, AWS AppFabric announces support for SentinelOne Singularity Cloud as data source and compatible security destination. Starting now, IT administrators and security analysts can use AppFabric to quickly integrate with 27 supported SaaS applications, aggregate enriched and normalized SaaS audit logs, and audit end-user access across their SaaS apps. 

NoSQL Workbench for Amazon DynamoDB is a client-side application that provides data modeling and query development features to help you design, create, and work with DynamoDB tables. You can use the NoSQL Workbench operation builder to build and save operations for viewing, updating, and exploring your live datasets. You can even generate code in multiple programming languages. Today, we are pleased to announce quality enhancements to the operation builder to help customers better navigate, run operations, and browse their DynamoDB tables.

AWS DataSync now lets you enable and disable task schedules. Using this new feature, you can temporarily disable scheduled executions of your task to accommodate events such as maintenance on your storage systems. Once the event is complete, you can enable your task schedule to resume execution of your task at the next scheduled interval.

Today, AWS Direct Connect now enables AWS Direct Connect Service Delivery Partners (AWS Direct Connect Partners) to support 25 Gbps hosted connection capacity . 

AWS CodeBuild now supports managed GitHub Action self-hosted runners. Customers can configure their CodeBuild projects to receive GitHub Actions workflow job events and run them on CodeBuild ephemeral hosts. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment.

We are excited to announce that Amazon GameLift now supports containers for building, deploying, and running game server packages. Amazon GameLift is a fully managed service that allows developers to quickly manage and scale dedicated game servers for multiplayer games. With this preview release, GameLift now supports end-to-end development of containerized workloads, including deployment and scaling on-premises, in the cloud, or hybrid configurations.

Agents for Amazon Bedrock enable generative AI applications to automate multi-step tasks across company systems and data sources. Agents removes the undifferentiated lifting of orchestration, infrastructure hosting and management, and we’re making building Agents easier than ever.

Knowledge Bases for Amazon Bedrock allows you to connect foundation models (FMs) to internal company data sources to deliver more relevant, context-specific, and accurate responses. Knowledge Bases (KB) now provides a real-time, zero-setup, and low-cost method to securely chat with single documents. 

Amazon QuickSight now includes cross-sheet filters and controls. This enables authors to create and manage filters and controls across an entire analysis or dashboard.

Knowledge Bases for Amazon Bedrock is a fully managed Retrieval-Augmented Generation (RAG) capability that allows you to connect foundation models (FMs) to internal company data sources to deliver more relevant and accurate responses. Knowledge Bases now supports adding multiple data sources, across accounts.

Today, AWS IoT Core for LoRaWAN announced the expansion of the public network support in the Spain region. With this expansion, Internet of Things (IoT) customers that offer LoRaWAN-based systems and solutions in Spain can seamlessly connect their LoRaWAN-powered devices to AWS over a public network infrastructure. This public infrastructure is provided as a service and supported by Everynet - a global LoRaWAN network operator offering networks in the United States, United Kingdom, and Spain. Thanks to the publicly available network infrastructure, customers in Spain can realize improved savings in time and costs associated with managing a private network infrastructure for LoRaWAN-based solutions. 

Amazon RDS for Oracle now supports external authentication of database users using Kerberos and Microsoft Active Directory in additional regions. This feature provides the benefits of single sign-on and centralized authentication of Oracle Database users. Keeping all of your user credentials in the same Active Directory will save you time and effort as you will now have a centralized place for storing and managing them for multiple DB instances.

Amazon Titan Image Generator's new watermark detection feature is now generally available in Amazon Bedrock. All Amazon Titan-generated images contain an invisible watermark, by default. The watermark detection mechanism allows you to identify images generated by Amazon Titan Image Generator, a foundation model that allows users to create realistic, studio-quality images in large volumes and at low cost, using natural language prompts.

Amazon RDS (Relational Database Service) Performance Insights now collects the query execution plans of the resource-intensive SQL queries in Amazon RDS for SQL Server, and stores them over time. It helps you identify if a change in the query execution plan is the cause of performance degradation or stalled query.

AWS Transfer Family customers can now use SFTP connectors to list files stored in remote SFTP servers, enabling visibility into the contents of directories in remote SFTP file systems and transfer files when file names are not known in advance.

Agents for Amazon Bedrock enable developers to create generative AI-based applications that can complete complex tasks for a wide range of use cases and deliver answers based on company knowledge sources. In order to complete complex tasks, with high accuracy, reasoning capabilities of the underlying foundational model (FM) play a critical role.

Today, we are announcing the general availability of Guardrails for Amazon Bedrock that enables customers to implement safeguards across large language models (LLMs) based on their use cases and responsible AI policies. Customers can create multiple guardrails tailored to different use cases and apply them on multiple LLMs, providing a consistent user experience and standardizing safety controls across generative AI applications.

Amazon Elastic Container Service (Amazon ECS) now lets you add automated safeguards for rolling updates of Amazon ECS services in the AWS GovCloud (US) Regions. You can now monitor and automatically react to changes during an Amazon ECS rolling update by using Amazon CloudWatch alarms. This allows you to more easily automate discovery and remediation for failed deployments and minimize the impact of a bad change.

Model Evaluation on Amazon Bedrock allows you to evaluate, compare, and select the best foundation models for your use case. Amazon Bedrock offers a choice of automatic evaluation and human evaluation. You can use automatic evaluation with predefined algorithms for metrics such as accuracy, robustness, and toxicity. Additionally, for those metrics or subjective and custom metrics, such as friendliness, style, and alignment to brand voice, you can set up a human evaluation workflow with a few clicks. Human evaluation workflows can leverage your own employees or an AWS-managed team as reviewers. Model evaluation provides built-in curated datasets or you can bring your own datasets.

We are excited to announce the preview of Custom Model Import for Amazon Bedrock. Now you can import customized models into Amazon Bedrock to accelerate your generative AI application development. This new feature allows you to leverage your prior model customization investments within Amazon Bedrock and consume them in the same fully-managed manner as Bedrock’s existing models. For supported architectures such as Llama, Mistral, or Flan T5, you can now import models customized anywhere and access them on-demand.

Today, AWS AppFabric announces support for 1Password. Starting now, IT administrators and security analysts can use AppFabric to quickly integrate with 26 supported SaaS applications, aggregate enriched and normalized SaaS audit logs, and audit end-user access across their SaaS apps. 

Amazon Titan Image Generator enables content creators with rapid ideation and iteration resulting in high efficiency image generation. The Amazon Titan Image Generator model is now generally available in Amazon Bedrock, helping you easily build and scale generative AI applications with new image generation and image editing capabilities.

You can now access Meta’s Llama 3 models, Llama 3 8B and Llama 3 70B, in Amazon Bedrock. Meta Llama 3 is designed for you to build, experiment, and responsibly scale your generative artificial intelligence applications. You can now use these two new Llama 3 models in Amazon Bedrock enabling you to easily experiment with and evaluate even more top foundation models for your use case.

Today, myApplications in the AWS Management Console has expanded the ability to create and manage your applications to 9 additional AWS Regions: Africa (Cape Town), Middle East (UAE), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Milan), Israel (Tel Aviv), Europe (Spain), and Europe (Zurich).

Amazon CloudWatch RUM, which enables customers to monitor their web applications by collecting client side performance and error data in real time, is generally available in the following 5 AWS Regions starting today: Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich), and Middle East (UAE).

Amazon OpenSearch Service adds support for Hebrew and HanLP (Chinese NLP) language analyzer plugins. These are now available as optional plugins that you can associate with your Amazon OpenSearch Service clusters.

Today, we're excited to announce the availability of a new capability of Amazon Q to analyze issues for complexity and propose splitting the work into separate tasks.

Amazon CloudWatch Container Insights with Enhanced Observability for EKS now auto-discovers critical health metrics from your AWS accelerators Trainium and Inferentia, and AWS high performance network adapters (Elastic Fabric Adapters) as well as NVIDIA GPUs. You can visualize these out-of-the-box metrics in curated Container Insights dashboards to help monitor your accelerated infrastructure and optimize your AI workloads for operational excellence. 

Amazon Inspector now offers continuous monitoring of your Amazon EC2 instances for software vulnerabilities without installing an agent or additional software. Currently, Inspector leverages the widely deployed AWS Systems Manager (SSM) agent to assess your EC2 instances for third-party software vulnerabilities. With this expansion, Inspector now offers two scan modes for EC2 scanning, hybrid scan mode and agent-based scan mode. In hybrid scan mode, Inspector relies on SSM agents to collect information from instances to perform vulnerability assessments and automatically switches to agentless scanning for instances that do not have SSM agents installed or configured. For agentless scanning, Inspector takes snapshots of EBS volumes to collect software application inventory from the instances to perform vulnerability assessments. For agent-based scan mode, Inspector only scans instances that have a SSM agent installed and configured. New customers enabling EC2 scanning are configured in hybrid mode by default, while existing customers can migrate to hybrid mode by simply visiting the EC2 settings page within the Inspector console. Once enabled, Inspector automatically discovers all your EC2 instances and starts evaluating them for software vulnerabilities.

The Amazon Time Sync Service now supports clock synchronization within microseconds of UTC on 87 additional Amazon Elastic Compute Cloud (Amazon EC2) instance types in supported regions, including all C7i, M7i, R7i, C7a, M7a, R7a, and M7g instances.

Today Amazon CodeCatalyst announces support for approval gates within a workflow. Workflows provide an automated procedure for building, testing, and deploying code as part of a continuous integration and continuous delivery (CI/CD) system. Approval gates pause the workflow run at the gate so that a user can validate whether it should be allowed to proceed.

Today, AWS announced Amazon Route 53 Profiles, a new offering that allows you to define a standard DNS configuration, in the form of a Profile, that may include Route 53 private hosted zone (PHZ) associations, Route 53 Resolver forwarding rules, and Route 53 Resolver DNS Firewall rule groups, and apply this configuration to multiple VPCs in the same AWS Region. You can also share Profiles across AWS accounts using AWS Resource Access Manager (RAM).

Today, AWS End User Computing services announced availability of two larger, more powerful instance types for Amazon WorkSpaces Web. These new instance types provide higher performance options to help customers run demanding workloads, helping to deliver significant performance improvements for use cases like streaming audio or video, real-time collaboration, screen sharing, video conferencing, or processing large files. With this launch, WorkSpaces Web now offers a total of 3 different instance types: standard.regular, standard.large, and standard.xlarge.

Amazon SageMaker enables SageMaker Projects in the updated SageMaker Studio experience. Prior to this SageMaker Projects were available only in SageMaker Studio classic.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R6gd instances are available in the Europe (Zurich) Region. These instances are powered by AWS Graviton2 processors and are built on the AWS Nitro System. The Nitro System is a collection of AWS designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. R6gd instances provide local SSD storage and are ideal for memory-intensive workloads such as open-source databases, in-memory caches, and real time big data analytics that need access to high-speed, low latency storage. These instances offer up to 25 Gbps of network bandwidth, up to 19 Gbps of bandwidth to the Amazon Elastic Block Store (Amazon EBS), up to 512 GiB RAM, and up to 3.8TB of NVMe SSD local instance storage.

Amazon Personalize is excited to announce automatic training for solutions. With automatic training, developers can set a cadence for their Personalize solutions to automatically retrain using the latest data from their dataset group. This process creates a newly trained machine learning (ML) model, also known as a solution version, and maintains the relevance of Amazon Personalize recommendations for end users. 

AWS Identity and Access Management (IAM) Roles Anywhere now provides the capability to define a set of mapping rules, allowing you to specify which data is extracted from your X.509 end-entity certificates. The data that is mapped is referred to as attributes and used as session tags in the IAM policy condition in order to allow or deny permissions. These attributes can be in one of the subject, issuer, or subject alternative name (SAN) fields of the X.509 certificate.

Amazon Simple Email Service (Amazon SES) is now available in the AWS GovCloud (US-East) Region, giving government customers and their partners the benefits of Amazon SES.

Today, AWS Elastic Disaster Recovery (AWS DRS) announces support of AWS Outposts racks. With this launch, you can now set your data replication and recovery destinations to AWS Outposts racks, in addition to using AWS Regions and Availability Zones where AWS DRS is available.

AWS Resilience Hub is now a HIPAA eligible service, enabling healthcare and life sciences organizations to now use AWS Resilience Hub to run sensitive workloads regulated under the U.S. Health Insurance Portability and Accountability Act (HIPAA). AWS maintains a standards-based risk management program to ensure that the HIPAA-eligible services specifically support HIPAA administrative, technical, and physical safeguards. 

AWS Glue Studio Notebooks provides interactive job authoring in AWS Glue, which helps simplify the process of developing data integration jobs. Studio Notebooks is generally available in the following 6 AWS regions starting today: Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Israel (Tel Aviv), Europe (Spain) and Europe (Zurich).

You can now create Amazon S3 Access Grants in the Middle East (UAE), Asia Pacific (Melbourne), Hyderabad, and Spain Regions. 

Today, we are excited to announce that customers will now be able to use Apache Livy to submit their Apache Spark jobs to Amazon EMR on EKS, in addition to using StartJobRun API, Spark Operator, Spark Submit and Interactive Endpoints. With this launch, customers will be able to use a REST interface to easily submit Spark jobs or snippets of Spark code, retrieve results synchronously or asynchronously while continuing to get all of the Amazon EMR on EKS benefits such as EMR optimized Spark runtime, SSL secured Livy endpoint, programmatic set-up experience etc.

Starting today, the next generation of the Meta Llama models, Llama 3, is now available via Amazon SageMaker JumpStart, a machine learning (ML) hub that offers pretrained models, built-in algorithms, and pre-built solutions to help you quickly get started with ML. You can deploy and use Llama 3 foundation models with a few clicks in SageMaker Studio or programmatically through the SageMaker Python SDK.

Today, AWS announces the release of Neuron 2.18, introducing stable support (out of beta) for PyTorch 2.1, adding continuous batching with vLLM support, and adding support for speculative decoding with Llama-2-70B sample in Transformers NeuronX library.

AWS Partner Central has enhanced the user management experience in AWS Partner Central with a modernized look and feel and more customized capabilities. Now, alliance leads and alliance team users can assign specific user roles with distinctive permission sets and seamlessly invite new users to register via email, specifying a role assignment upon registration. These updates simplify and provide efficient user management through bulk actions and personalized role assignments.

AWS Partners with services solutions will now have additional guidance available through the tasks feature in AWS Partner Central to help expedite their self-service journey with AWS. With this release, partners in the early stages of their engagement with the AWS Partner Network (APN) will be provided with a series of personalized tasks guiding them toward achieving AWS Select Tier status. Achieving this tier unlocks additional benefits, including access to funding and programs. 

Today, Amazon Simple Queue Service (SQS) announces support for dead-letter queue redrive for FIFO queues in the AWS GovCloud (US) Regions. Dead-letter queue redrive is an enhanced capability to improve the dead-letter queue management experience for Amazon SQS customers. Amazon SQS already supports redriving messages from a standard dead-letter queue to a standard source queues or a standard custom destination queue. Now SQS customers can also redrive messages from a FIFO dead-letter queue to FIFO source queues or FIFO custom destination queues. 

Trusted Language Extensions for PostgreSQL (pg_tle) now supports client authentication hook that lets you run additional checks over the existing authentication process, allowing you to enhance the security posture of your databases. A hook is an internal callback mechanism available to developers for extending PostgreSQL's core functionality. By using hooks, developers can implement their own functions or procedures for use during various database operations.

Amazon WorkSpaces now offers APIs to link your AWS accounts, within the same region, so that these accounts can use the same underlying dedicated infrastructure. AWS enables you to run your Bring Your Own License (BYOL) WorkSpaces on infrastructure that is dedicated to you in the AWS Cloud, and these new APIs make it easier for the you to use your dedicated infrastructure efficiently. 

Today, we are announcing the availability of the Amazon Neptune connector for Nodestream, the Parquet input file format for Nodestream, and the Nodestream Security Bill Of Material (SBOM) plug-in for CycloneDX and SPDX file formats.

Starting today, Partners can leverage the AWS Partner CRM Connector for Salesforce to create offers for future dated agreements and agreement based offers, providing greater flexibility and control over offer management and integration within AWS Marketplace. Future dated agreements allows you to schedule service start dates to begin in the future. Partners can also access their agreements and create agreement-based offers for SaaS Contract products, with or without consumption, across multiple seller accounts, enabling buyers to replace existing agreements when they accept the offer.

AWS Storage Gateway expands availability to the AWS Canada West (Calgary) Region enabling customers to deploy and manage hybrid cloud storage for their on-premises workloads.

Amazon Data Firehose (Firehose) now offers direct integration with Snowflake Snowpipe Streaming. Firehose enables customers to reliably capture, transform, and deliver data streams into Amazon S3, Amazon Redshift, Splunk, and other destinations for analytics. With this new feature, customers can stream clickstream, application, and AWS service logs from multiple sources, including Kinesis Data Streams, to Snowflake. With a few clicks, customers can setup a Firehose stream to deliver data to Snowflake. Firehose automatically scales to stream gigabytes of data, and records are available in Snowflake within seconds.

Accessibility Conformance Reports (ACRs) for AWS products and services are now available on AWS Artifact, a self-service portal for AWS compliance-related information. ACRs are documents that demonstrate the accessibility of AWS services.

AWS Config supports 35 new resource types in advanced queries. Advanced queries within AWS Config is a feature that allows you to search the current configuration metadata and compliance state of your AWS resources based on their configuration properties.

Starting today, customers can receive granular cost visibility for Amazon Elastic Kubernetes Service (Amazon EKS) in the AWS Cost and Usage Reports (CUR), enabling you to analyze, optimize, and chargeback cost and usage for your Kubernetes applications. With AWS Split Cost Allocation Data for Amazon EKS, customers can now allocate application costs to individual business units and teams based on how Kubernetes applications consume shared EC2 CPU and memory resources.

We are excited to announce that AWS Mainframe Modernization service is now available with greater control of managed runtime environments that run modernized mainframe applications.

We’re excited to announce the release of the SimSpace Weaver app SDK v1.17.0. This release reorganizes the app SDK distributable package to simplify onboarding for new users and contains ready-to-use samples that you can use as templates for your projects.

Amazon SageMaker Studio’s JupyterLab notebooks now come with a built-in SQL extension with which data scientists can seamlessly discover, explore, and transform data from multiple data sources using SQL and Python right from the notebooks.

Today, AWS announces the AWS Project Development Kit (PDK) blueprints in Amazon CodeCatalyst. The AWS PDK provides building blocks for common patterns along with development tools to manage and build your projects. You can now use the AWS PDK in CodeCatalyst through the PDK blueprints, enabling you to compose one or more such blueprints together to create an application comprising of a React website, Smithy API, and the supporting CDK infrastructure to deploy the application to AWS. You can get started by creating a PDK backed project in CodeCatalyst. For more information, see the Blueprints documentation and PDK tutorial.

AWS CloudFormation enhances ChangeSets to  provide a detailed preview of the actions that CloudFormation will take in a deployment. This launch helps improve your ability to assess whether a deployment will cause unintended changes to running resources.

Today, AWS Well-Architected introduces a new connector for Jira, which helps you create a closed-loop mechanism to efficiently manage and track your risks over time. You can now configure the Well-Architected Tool to generate Jira tickets and send updates directly to the Well-Architected Tool as tickets are resolved.

All AWS customers who navigate to Amazon CloudWatch Internet Monitor console can now view the internet weather map, at no charge, which shares a 24-hour global snapshot of internet latency and availability outages. The map lets you see, at a glance, recent internet issues across the world, including specific cities and service providers.

Amazon Cognito is now available in Asia Pacific (Hyderabad) Region. Amazon Cognito makes it easy to add authentication, authorization, and user management to your web and mobile apps. Amazon Cognito scales to millions of users and supports sign-in with social identity providers such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via standards such as SAML 2.0 and OpenID Connect.

Amazon Cognito is now available in Europe (Spain) Region. Amazon Cognito makes it easy to add authentication, authorization, and user management to your web and mobile apps. Amazon Cognito scales to millions of users and supports sign-in with social identity providers such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via standards such as SAML 2.0 and OpenID Connect.

Amazon Managed Workflows for Apache Airflow (MWAA) now offers larger environment sizes, giving customers of the managed service the ability to define a greater number of workflows in each Apache Airflow environment, supporting more complex tasks that can utilize increased resources. 

Starting today, AWS Network Manager is available in the AWS Israel (Tel Aviv) Region. AWS Network Manager reduces the operational complexity of managing global networks across AWS and on-premises locations. It provides a single global view of your private network. You can visualize your global network in a topology diagram and monitor your network using CloudWatch Metrics and Events for network topology changes, routing updates, and connection status updates. 

Anthropic’s Claude 3 Opus foundation model, the most advanced and intelligent model in the Claude 3 Family, is now available on Amazon Bedrock. The Claude 3 family of models (Claude 3 Opus, Claude 3 Sonnet, and Claude 3 Haiku) is the next generation of state-of-the-art models from Anthropic. Amazon Bedrock is a fully managed service that offers a choice of high-performing foundation models from leading AI companies, like Anthropic, along with a broad set of capabilities that provide you with the easiest way to build and scale generative AI applications.

On April 16, 2024 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) and Feature Release (FR) versions of OpenJDK. Corretto 22.0.1, 21.0.3, 17.0.11, 11.0.23, 8u412 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK. 

Today, Amazon Athena announced federated query pass-through, a new feature that allows entire queries to be executed directly on the underlying data source. Federated query pass-through allows you to take advantage of the unique functions, query language, and performance capabilities of different data sources, and can result in faster query execution and less data processed by Athena.

Amazon Relational Database Service (RDS) for Oracle now supports version 23.2 of Oracle Application Express (APEX) for 19c and 21c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser.

Amazon Relational Database Service (Amazon RDS) Custom for Oracle, a managed database service for legacy, custom, and packaged applications that require access to the underlying operating system and database environment, now supports Oracle Database Standard Edition 2 (SE2).

Amazon RDS for Oracle now supports additional regions for Oracle Data Guard Switchover and Automated Backups of replica instances (read-only and mounted) deployed within an Availability Zone, or in separate Availability Zones of a given Region, or in separate AWS Regions.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports the latest minor version of SQL Server 2022 across the Express, Web, Standard, and Enterprise editions.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in Canada West(Calgary) Region. Amazon MSK is a fully managed service for Apache Kafka and Kafka Connect that makes it easier for you to build and run applications that use Apache Kafka as a data store. Amazon MSK is fully compatible with Apache Kafka, which enables you to more quickly migrate your existing Apache Kafka workloads to Amazon MSK with confidence or build new ones from scratch. With Amazon MSK, you spend more time building innovative streaming applications and less time managing Kafka clusters. 

Amazon Relational Database Service (Amazon RDS) for Oracle now offers memory optimized X2iedn instances in Asia Pacific (Hyderabad, Jakarta and Osaka), Europe (Milan and Paris), US West (N. California), AWS GovCloud (US-East) and AWS GovCloud (US-West).

AWS PrivateLink now supports Amazon QuickSight, providing private connectivity between the QuickSight website, virtual private clouds (VPCs) or on-premises networks without exposing traffic to the public internet. With this integration, administrators can also use VPC endpoint policies to restrict access to QuickSight accounts that are not authorized on their network. 

Amazon QuickSight now supports account instances of IAM Identity Center when creating a new subscription to QuickSight. Administrators can sign up for QuickSight and choose an account instance of IAM Identity Center that exists in the same AWS account as their QuickSight subscription. Account instances support isolated deployments of applications in a single AWS account, leveraging IAM Identity Center workforce identity and access portal features. Account instances are bound to a single AWS account and are used only to manage user and group access for applications in the same account and AWS region.

We are excited to announce AWS HealthOmics now supports reading sequence store objects using Amazon S3 APIs. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data, and generate insights to improve health and drive scientific discoveries. With this release, customers can more easily integrate HealthOmics data stores into their bioinformatics ecosystem while benefiting from the domain-specific metadata, cost-savings, and scalability.

Today, AWS Resource Explorer has expanded the availability of resource search and discovery to 10 additional AWS Regions: Africa (Cape Town), Middle East (UAE), Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Milan), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), and Europe (Zurich). With this launch, customers can turn on Resource Explorer to search for and discover resources across all commercial AWS Regions.

Today, AWS Key Management Service (AWS KMS) announces new flexibility, visibility, and pricing for automatic key rotation. You can now customize the frequency of rotation period between 90 days to 7 years (2560 days) as well as invoke key rotation on demand for customer managed KMS keys. Lastly, you can now see the history of all previous rotations for any KMS key that has been rotated. 

Starting today, AWS Elemental MediaTailor now supports HLS Interstitials for video-on-demand (VOD) streams. This feature, which you can enable as an option, automatically conditions manifests so ad break pods are decoupled from the main content stream. By separating the ad content from the main video stream, HLS Interstitials provides more efficient ad payload delivery reducing video start-up time when compared to traditional Server-Side Ad Insertion and reduced buffering or errors during ad breaks compared to Client-Side Ad Insertion.

AWS Transfer Family now provides you with the option to import and use a trading partner’s public, self-signed TLS certificate for sending Applicability Statement 2 (AS2) messages to their server over HTTPS. Additionally, you can now choose to encrypt messages sent to your partner’s server using the 3DES cipher. By default, AS2 connectors will encrypt messages with the AES128 cipher unless you select 3DES for purposes of backwards compatibility with your partner’s existing AS2 implementation. These capabilities add to AWS Transfer Family’s existing list of AS2 interoperability features and enable you to reliably connect with trading partners that require these specific security configurations.

AWS Step Functions announces an optimized integration for AWS Elemental MediaConvert, enabling video transcode jobs in your workflow. With this integration, customers can easily build automated, resilient media workflows using the visual authoring and operator experience of Step Functions. With the new Run a Job (.sync) integration pattern for the MediaConvert CreateJob API, Step Functions will wait for asynchronous MediaConvert transcoding jobs to complete before progressing to the next step, simplifying the orchestration of multi-step media processing pipelines.

Amazon Detective, a managed security service that helps analysts investigate potential security issues across AWS, has introduced a new feature to support investigating threats detected by Amazon GuardDuty's EC2 Runtime Monitoring capability. This expansion enhances Detective's ability to provide visualizations and context for investigating runtime threats targeting EC2 instances.

AWS HealthImaging has upgraded its search functionality so that customers can more easily find and access their medical imaging data in the cloud. These enhancements simplify finding any patient exam, for use as a clinical prior, to inform a clinical workflow, or for processing by medical imaging AI/ML models.

Amazon Braket now provides access to three new experimental capabilities via Braket Direct, offering increased flexibility and control when programming on QuEra’s Aquila device. With today’s launch, you can get access to local detuning, taller geometries, and tighter geometries - opening up new research opportunities, such as advanced combinatorial optimization problems that are relevant for various industry applications.

Today, AWS announces the release of Neuron 2.18, introducing stable support (out of beta) for PyTorch 2.1 and adding support for speculative decoding with Llama-2-70B sample in Transformers NeuronX library.

Today, AWS announces the release of workflow monitor for live video, a media-centric tool to simplify and elevate the monitoring of your video workloads. Accessible via the AWS Elemental MediaLive console and API, workflow monitor discovers and visualizes resources. It creates signal maps showing video across AWS Elemental MediaConnect, MediaLive, and MediaPackage along with Amazon S3 and Amazon CloudFront to provide end-to-end visibility. With the workflow monitor, you can create your own alarm templates or start from a set of recommended alarms, and build custom templates for alarm notifications.

AWS Lambda functions can now scale up to 12x faster than before in response to unpredictable traffic in the AWS GovCloud (US) Regions. With this improvement each function can scale up to a rate of 1,000 concurrent executions every 10 seconds, up to your account concurrency limit.

Starting today, customers can protect their AWS Elemental MediaPackage origins by using CloudFront Origin Access Control (OAC) to only allow access from designated CloudFront distributions.

We are excited to announce that Amazon EMR on EKS simplified the authentication and authorization user experience by integrating with Amazon EKS's improved cluster access management controls. With this launch, Amazon EMR on EKS will use EKS access management controls to automatically obtain the necessary permissions to run Amazon EMR applications on the EKS cluster.

Starting today, customers can protect their AWS Lambda URL origins by using CloudFront Origin Access Control (OAC) to only allow access from designated CloudFront distributions. 

Amazon CloudWatch Container Insights now offers observability for Windows containers running on Amazon Elastic Kubernetes Service (EKS), and helps customers collect, aggregate, and summarize metrics and logs from their Windows container infrastructure. With this support, customers can monitor utilization of resources such as CPU, memory, disk, and network, as well as get enhanced observability such as container-level EKS performance metrics, Kube-state metrics and EKS control plane metrics for Windows containers. CloudWatch also provides diagnostic information, such as container restart failures, for faster problem isolation and troubleshooting for Windows containers running on EKS.

Users of AWS IAM Identity Center can now take advantage of a streamlined AWS access portal and time-saving shortcut links to navigate directly to destinations in the AWS Management Console in accordance with their permissions. 

Amazon Verified Permissions is now available in the AWS GovCloud (US-East) and (US-West) Regions, Israel (Tel Aviv), and Canada West (Calgary). The service provides fine-grained authorization for the applications that you build, allowing you to implement permissions as policies rather than application code. Applications calls Verified Permissions to authorize access to APIs and resources managed by the application.

Today, AWS announces the general availability of AWS Clean Rooms Differential Privacy, a new capability that helps you protect the privacy of your users with mathematically-backed and intuitive controls in just a few steps. As a fully managed capability, no prior differential privacy experience is needed to help you protect the privacy of your users.

Starting today, you can enable Common Media Client Data (CMCD) fields in your CloudFront real-time logs. You can select key client-side performance parameters and CloudFront delivery performance parameters in the same log record. This can help you correlate variations in Quality of Experience (QoE) for your viewers to CloudFront performance at the granularity of single viewer sessions, simplifying the troubleshooting of QoE issues that impact your viewers engagement.

Amazon Route 53 offers domain name registration services and provides easy integration with other AWS services. We are excited to announce the recent addition of 18 additional Top-Level Domains (TLDs) to the existing 351 that we already supported before this launch. You can now register domains with: .beer, .bid, .bio, .christmas, .contact, .design, .fan, .fun, .law, .llc, .ltd, .pw, .shopping, .ski, .software, .stream, .vote and .work. Common use cases for some of these new TLDs include the following:

Amazon Location Service has released the Tracking SDK for iOS and Android platforms. Developers can now easily add location tracking capabilities into their mobile applications to support customer engagement, geo-targeting, and delivery use cases.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports rds_superuser_role to simplify implementation of role-based privileges on MySQL 8.0. The rds_superuser_role is granted by default to the primary administrative user, and has privileges including, CREATE ROLE, CREATE USER, and DROP ROLE, for all database objects. For a complete list of rds_superuser_role privileges, refer to the Amazon RDS User Guide.

Starting today, customers can use Amazon Bedrock in the Asia Pacific (Sydney) Region to easily build and scale generative AI applications using a variety of foundation models (FMs) as well as powerful tools to build generative AI applications.

You can now configure and operate AWS Elemental MediaTailor through the AWS Management Console or API endpoints in the Asia Pacific (Hyderabad) and Middle East (UAE) AWS Regions.

Knowledge Bases for Amazon Bedrock securely connects foundation models (FMs) to internal company data sources for Retrieval Augmented Generation (RAG) to deliver more relevant and accurate responses. Anthropic’s Claude 3 Haiku foundation model is now generally available on Knowledge Bases. We recently also announced support for Claude 3 Sonnet. 

AWS AppSync is a fully managed service that enables developers to build digital experiences based on multiple data sources. With AppSync, you create GraphQL APIs that your applications interact with over the internet (public APIs) or inside your VPC (private APIs). A method of authorization is always required to access your AppSync API. Developers can chose from several authorization modes to authorize their requests based on their business requirements, including calling an AWS Lambda function to implement custom authorization. 

Amazon OpenSearch Service is now extending the ability to update the number of data nodes without requiring a blue/green deployment for clusters without dedicated cluster manager (master) nodes. This change will allow you to make node count changes faster. Clusters with dedicated cluster manager nodes already supported updating the data node count without a blue/green deployment.

Amazon CloudWatch RUM, which enables customers to monitor their web applications by collecting client side performance and error data in real time, is generally available in the following 11 AWS Regions starting today: Africa (Cape Town), Asia Pacific (Jakarta), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Canada (Central), Europe (Milan), Europe (Paris), Middle East (Bahrain), South America (Sao Paulo), and US West (N. California).

You can now use AWS Elemental MediaLive to deliver a CMAF Ingest (Interface-1) output group from a channel.

AWS India customers can now pay their invoices using UPI (Unified Payments Interface) payment method, in addition to credit cards, debit cards, and netbanking.

AWS Outposts can be shipped and installed at customer datacenters and on-premises locations in the Kingdom of Saudi Arabia.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in Europe (Paris). C7i instances supported by custom Intel processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

AWS Lambda now supports Amazon Managed Streaming for Apache Kafka (MSK) and self-managed Apache Kafka as event sources in the Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Spain), Europe (Zurich) Regions, enabling customers to build serverless applications that process streaming data from Kafka event sources.

Knowledge Bases for Amazon Bedrock is a fully managed Retrieval-Augmented Generation (RAG) capability that allows you to connect foundation models (FMs) to internal company data sources to deliver relevant and accurate responses. We are excited to add new capabilities for building enterprise-ready RAG. Knowledge Bases now supports AWS CloudFormation and Service Quotas.

You can now create or associate a monitor for a distribution directly from the Amazon CloudFront console. By adding your distribution to a monitor, you can gain improved visibility into your application's internet performance and availability using Amazon CloudWatch Internet Monitor. You can create a monitor for the distribution, or add the distribution to an existing monitor, directly from the distribution metrics dashboard on the CloudFront console.

Starting today, customers can use Amazon Cognito in Asia Pacific (Melbourne) Region. Amazon Cognito makes it easy to add authentication, authorization, and user management to your web and mobile apps. Amazon Cognito scales to millions of users and supports sign-in with social identity providers such as Apple, Facebook, Google, and Amazon, and enterprise identity providers via standards such as SAML 2.0 and OpenID Connect.

You can now leverage tag-based subnet discovery capability of Amazon VPC CNI to scale Amazon Elastic Kubernetes Service (EKS) clusters in IPv4 address space without adding operational complexity. In this new default mode, Kubernetes Pod IP addresses are allocated from all tagged and available subnets in your Amazon Virtual Private Cloud(VPC).

AWS has launched a feature for Amazon Cognito customers to reduce the time spent securing Amazon API Gateway APIs with fine-grained access control, from weeks to days. The feature leverages Amazon Verified Permissions to manage and evaluate granular security policies that reference user attributes and groups. With a few clicks, you can enforce that only users in authorized Amazon Cognito groups have access to the application’s APIs. For example, say you are building a loan processing application, you can secure your application by restricting access to the “approve_loan” API to users in the “loan_officers” group. You can implement more fine-grained authorization, without making any code changes, by updating the underlying Cedar policy, so that only “loan_officers” above “Director” level can approve loans.

Today we’re excited to announce the release of Research and Engineering Studio (RES) on AWS Version 2024.04. This latest release brings new customization options for RES virtual desktops along with new options for shared storage and virtual desktop infrastructure (VDI) streaming.

Amazon CloudWatch now supports using AWS CloudFormation to manage tags when you create, update, or delete alarms.

Today, AWS announces that CodeCatalyst Issues now support breaking down issues into smaller units called tasks. CodeCatalyst customers can now add up to 100 tasks within a single issue to further organize and plan out the work involved. Tasks can be added when creating a new issue or later added to existing issues and can be assigned to any of the project members. You can also reorder, mark as complete, or remove tasks on an issue. 

Starting today, you can use the Secure Reliable Transport (SRT) protocol to broadcast to your Amazon Interactive Video Service (Amazon IVS) channels. This new protocol, in addition to RTMPS, expands options for live streaming and helps to maintain video quality when sent across varying network conditions.

AWS Transfer Family now provides an interactive workshop for building file transfer solutions using Secure File Transfer Protocol (SFTP). With this workshop in AWS Workshop Studio, you can learn how to build secure and automated business-to-business file transfer workflows in AWS, and integrate data from remote business partners in your applications and data lakes.

Today we are announcing the general availability of Amazon EC2 G6 instances powered by NVIDIA L4 Tensor Core GPUs. G6 instances can be used for a wide range of graphics-intensive and machine learning use cases. G6 instances deliver up to 2x higher performance for deep learning inference and graphics workloads compared to Amazon EC2 G4dn instances.

You can now deploy AWS IAM Identity Center in the Europe (Spain) and Asia Pacific (Hyderabad) AWS Regions. With the addition of these AWS Regions, IAM Identity Center is now available in 32 AWS Regions globally.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL, MySQL, and MariaDB now supports AWS Graviton2-based M6gd database instances in Asia Pacific (Hong Kong, Melbourne, Seoul), Canada (Central), Europe (Milan), and Middle East (Bahrain) regions.

AWS Lambda now supports creating serverless applications using Ruby 3.3. Developers can use Ruby 3.3 as both a managed runtime and a container base image, and AWS will automatically apply updates to the managed runtime and base image as they become available.

Amazon OpenSearch Ingestion now enables you to enrich events with geographical location data from an IP address, allowing you to add additional context to your observability and security data in realtime. Additionally, you can configure mapping templates in Amazon OpenSearch clusters to automatically display these enriched events on a geographical map using OpenSearch Dashboards.

You can now set up cross-account observability for Amazon CloudWatch Internet Monitor, so that you can get read-only access to monitors from multiple accounts within an AWS Region. Deploying applications by using resources in separate accounts is a good practice, to establish security and billing boundaries between teams and reduce the impact of operational events. For example, when you set up cross-account observability for Internet Monitor, you can access and view performance and availability measurements generated by monitors in different AWS accounts.

Today, AWS announces the availability of Amazon ElastiCache Serverless in the AWS Canada West (Calgary) region. ElastiCache Serverless simplifies cache management and scales to support the most demanding applications. With ElastiCache Serverless, you can create a highly available and scalable cache in less than a minute, eliminating the need to plan for, provision, and manage cache cluster capacity. ElastiCache Serverless automatically stores data redundantly across multiple Availability Zones (AZs) and provides a 99.99% availability Service Level Agreement (SLA). With ElastiCache Serverless, you pay for data stored and compute consumed by your workload, with no upfront commitments or additional costs.

AWS B2B Data Interchange is now a Health Insurance Portability and Accountability Act of 1996 (HIPAA) eligible service and supports X12 version 5010 HIPAA transaction sets, extending the service’s fully automated, event-driven EDI transformation capabilities to healthcare use cases.

Today, we are enabling Machine Learning (ML) teams’ using Code Editor, our SageMaker Studio integrated development environment (IDE) based on Code-OSS (VS Code open source), to use custom built IDE images. With this new feature, you can boost your ML development team’s productivity by providing them with customized development environments that provide the frameworks, libraries and IDE extensions they need, thus reducing their time-to-code.

We are pleased to announce general availability of Amazon EC2 P5, C6i, C7i, M6i, M7i, R6i, and R7i instances on SageMaker notebooks.

OR1, the OpenSearch Optimized Instance family, now doubles the max allowed storage per instance. OR1 also expands availability to four additional regions- Canada Central, EU (London), and Asia Pacific (Hyderabad, Seoul). OR1 delivers up to 30% price-performance improvement over existing instances (based on internal benchmarks), and uses Amazon S3 to provide 11 9s of durability. The new OR1 instances are best suited for indexing-heavy workloads, and offers better indexing performance compared to the existing memory optimized instances available on OpenSearch Service. 

Starting today, you can use AWS Application Migration Service (AWS MGN) to migrate Linux servers with UEFI boot mode.

Today, AWS announces the general availability of AWS Clean Rooms ML, which helps companies apply machine learning (ML) to generate predictive insights in a data collaboration without sharing their raw data with their partners. This capability launches with an ML model that helps companies create lookalike segments. With AWS Clean Rooms ML lookalike modeling, you can train your own custom model using your data and invite your partners to bring a small sample of their records to a collaboration to generate an expanded set of similar records while protecting the underlying data with purpose-built privacy controls. AWS Clean Rooms ML enables collaborative ML use cases including those for healthcare, financial services, and travel and hospitality.

AWS Transfer Family’s predefined security policies for SFTP connectors gives you the flexibility to control cryptographic algorithms used for establishing connections with remote SFTP servers, enabling compatibility with a wider range of remote server configurations.

Amazon DataZone is used by customers to catalog, discover, analyze, share, and govern data at scale across organizational boundaries with governance and access controls. Today, Amazon DataZone has introduced an integration with AWS Lake Formation hybrid mode. This integration enables customers to easily publish and share their AWS Glue tables through Amazon DataZone, without the need to register them in AWS Lake Formation first. Hybrid mode allows customers to start managing permissions on their AWS Glue tables through AWS Lake Formation, while continuing to maintain any existing IAM permissions on these tables.

Amazon CloudWatch now supports Anomaly Detection on metrics shared across your accounts. CloudWatch Anomaly Detection now lets you track unexpected changes in metric behavior across multiple accounts from a single monitoring account through CloudWatch cross-account observability.

Mistral Large, Mistral AI’s flagship cutting-edge text generation model is now generally available on Amazon Bedrock. Mistral Large is widely known for its top-tier reasoning capabilities, specific instruction following, and multilingual translation abilities. It excels in coding and mathematical tasks and is natively fluent in English, French, Spanish, German, and Italian, with a nuanced understanding of grammar and cultural context. Mistral Large performs well on retrieval augmented generation (RAG) use cases, its 32K token context window facilitates precise information retrieval from lengthy documents.

Starting today, customers can use Amazon Bedrock in the AWS Europe (Paris) Region to easily build and scale AI applications using a variety of foundation models and generative AI tools. 

Amazon DocumentDB (with MongoDB compatibility) is now available in the Middle East (UAE) region adding to the list of available regions where you can use Amazon DocumentDB.

Amazon DataZone is used by customers to catalog, discover, analyze, share, and govern data at scale across organizational boundaries with governance and access controls. Today, Amazon DataZone launches integration with AWS Glue Data Quality and offers APIs to integrate data quality metrics from third party data quality solutions. This integration helps Amazon DataZone customers gain trust in their data and make confident business decisions.

Today, AWS announces the availability of Amazon ElastiCache Serverless in the AWS GovCloud (US) Regions. ElastiCache Serverless simplifies cache management and scales to support the most demanding applications. With ElastiCache Serverless, you can create a highly available and scalable cache in less than a minute, eliminating the need to plan for, provision, and manage cache cluster capacity. ElastiCache Serverless automatically stores data redundantly across multiple Availability Zones (AZs) and provides a 99.99% availability Service Level Agreement (SLA). With ElastiCache Serverless, you pay for data stored and compute consumed by your workload, with no upfront commitments or additional costs.

Starting today, you can now use Amazon Timestream for LiveAnalytics with workloads that require the FedRAMP High categorization level in the AWS GovCloud (US-West) Region.

Today, AWS announces AWS Deadline Cloud, a fully managed service that simplifies render management for teams creating 2D and 3D visual assets for films, TV shows, commercials, games, and industrial design. Deadline Cloud makes it easy to build a cloud-based render farm in minutes that scales from zero to thousands of compute instances, without needing to manage infrastructure. Deadline Cloud includes built-in integrations, including Autodesk Arnold, Autodesk Maya, Foundry Nuke, Luxion KeyShot, and SideFX Houdini, and a broad set of customization tools, so you can reduce the time required to build integrations with the team’s preferred software and tailor your render pipeline to your own needs.

AWS Marketplace now gives customers the ability to request product demos and private offers directly from sellers' product listing pages. This helps customers accelerate product evaluations and further reduce their procurement cycle times.

AWS AppSync is a fully managed service that allows customers to connect applications to data and enable real-time experiences with GraphQL APIs.

AWS customers can now view real-time and historical data visualizations of their critical resource and application metrics in a mobile-friendly format using CloudWatch custom dashboards in the AWS Console Mobile App. Now AWS customers have convenient access to customized views of their resource and application's health and performance metrics while on-the-go.

Amazon Aurora MySQL zero-ETL integration with Amazon Redshift is now supported in 11 additional regions, enabling near real-time analytics and machine learning (ML) using Amazon Redshift. Based on your analytics needs, you can include or exclude specific databases and tables from an existing or a new zero-ETL integration and selectively bring data into Amazon Redshift.

Today, AWS Systems Manager introduces the ability to run Chef 11-18 recipes on Windows Amazon Elastic Compute Cloud (Amazon EC2) and on-premises instances. These capabilities, previously available only to Linux instances, enable customers to combine the power of Chef recipes with the control and safety benefits from AWS Systems Manager, regardless of whether their instances are running on Linux or Windows operating systems.

Starting today, Amazon Virtual Private Cloud (Amazon VPC) Traffic Mirroring is available in seven new regions, including AWS Asia Pacific (Jakarta), AWS Asia Pacific (Melbourne), AWS Middle East (UAE), AWS Canada West (Calgary), AWS Europe (Spain), AWS Israel (Tel Aviv), and AWS Europe (Zurich).

The AWS Partner Analytics Dashboard is now known as Analytics and Insights, covering more insights for your AWS Marketplace and APN businesses than ever. We’ve streamlined the interface and added several new features to help you better understand how to grow with AWS:

1. The new Training and Certifications tab gives you self-service access to commonly requested data on your teams’ Training and Certification achievements. These insights help you better understand your teams' strengths and identify areas needing training investment to better serve customers.
2. We expanded the Solution Provider and Distributor tab to also highlight opportunity and AWS account details for Public Sector, Partner-Originated, and Partner Growth Discounts.
3. New ACE Co-Sell features are now integrated into the Opportunities tab to help you better understand and manage your pipeline.

Knowledge Bases for Amazon Bedrock is a fully managed Retrieval-Augmented Generation (RAG) capability that allows you to connect foundation models (FMs) to internal company data sources to deliver more relevant, context-specific, and accurate responses. We are excited to announce that Knowledge Bases now supports private network policies for Amazon OpenSearch Serverless (OSS).

Starting today, you can now deploy AWS Management Console Private Access in US West (N. California), Africa (Cape Town), Asia Pacific (Hong Kong), Asia Pacific (Jakarta), Asia Pacific (Melbourne), Asia Pacific (Osaka), Canada (West), Europe (Frankfurt), Europe (Stockholm), Europe (Paris), Europe (Spain), Europe (Milan), Europe (Zurich), Middle East (Bahrain), Middle East (UAE), and South America (São Paulo). With this launch, AWS Management Console Private Access is now available in all commercial AWS Regions.

We are excited to introduce a new Amazon EMR on EC2 feature that enables automatic graceful replacement of unhealthy core nodes to ensure continued optimal cluster operations and prevent data loss. Additionally, EMR on EC2 will publish CloudWatch events to provide visibility into node health and recovery actions. These improvements are available for all Amazon EMR releases.

Amazon EventBridge announces improvements to the Learn page in the console that make it easier for you to learn and get started with event-driven architectures. With this new page, you can now learn the basics of event-driven architectures, explore EventBridge capabilities, and understand how best to use Event Buses, Pipes, and Scheduler in your applications.

AWS Resilience Hub has expanded support for AWS Trusted Advisor, adding an additional check for unrecoverable application components. In addition, Resilience Hub has expanded support to assess applications that include Amazon FSx for Windows File Server. Resilience Hub provides a single place to define, validate, and track the resilience of your applications so that you can avoid unnecessary downtime caused by software, infrastructure, or operational disruptions.

Amazon AppStream 2.0 now supports launching the client application for Windows from an Identity Provider (IdP)-initiated SAML 2.0 sign-in flow. This feature allows your end-users to sign in to SAML 2.0 IdPs using their system's default web browser before transitioning into the streaming session in the Windows client.

Today, we are excited to announce Amazon Transcribe’s support for Personally Identifiable Information (PII) identification and redaction for Spanish (US) audio transcription, in addition to the existing support for English audio. Amazon Transcribe uses state-of-the-art machine learning technology to help identify sensitive information such as Social Security number, credit card/bank account information, and contact information (i.e. name, email address, phone number and mailing address).

Amazon RDS for SQL Server now supports Single-AZ Read-Replicas using Always On Availability Groups (AOAG) for Enterprise Edition. This provides customer the option to create up to 15 number of read replicas from a Single-AZ Enterprise Edition source instance in the same region, or cross regions.

Today, Amazon EKS announces general availability of extended support for Kubernetes versions. You can run EKS clusters using any Kubernetes version for up to 26 months from the time the version becomes available on EKS. Extended support for Kubernetes versions is available for Kubernetes versions 1.21 and higher. For a full list of versions and support dates, see here.

Effective April 1, 2024, AWS has extended per-second billing to Red Hat Enterprise Linux (RHEL)-based instances running on Amazon EC2. Customers will pay for RHEL-based instances that are launched in On-Demand, Reserved, and Spot form in one second increments, with a minimum of one minute.