May 2024

Knowledge Bases for Amazon Bedrock (KB) securely connects foundation models (FMs) to internal company data sources for Retrieval Augmented Generation (RAG), to deliver more relevant and accurate responses. We are excited to announce Guardrails for Amazon Bedrock is integrated with Knowledge Bases. Guardrails allow you to instrument safeguards customized to your RAG application requirements, and responsible AI policies, leading to a better end user experience.

Amazon Relational Database Service (RDS) for MySQL announces Amazon RDS Extended Support minor version 5.7.44-RDS.20240408. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of MySQL. Learn more about upgrading your database instances, including minor and major version upgrades, in the Amazon RDS User Guide.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports removing brokers from MSK provisioned clusters. Administrators can optimize costs of their Amazon MSK clusters by reducing broker count to meet the changing needs of their streaming workloads, while maintaining cluster performance, availability, and data durability.

We are excited to announce that Knowledge Bases for Amazon Bedrock (KB) now lets you configure inference parameters to have greater control over personalizing the responses generated by a foundation model (FM). 

Today, AWS has announced that Bottlerocket, the Linux-based operating system purpose-built for containers, now supports NVIDIA Fabric Manager, enabling users to harness the power of multi-GPU configurations for their AI and machine learning workloads. With this integration, Bottlerocket users can now seamlessly leverage their connected GPUs as a high-performance compute fabric, enabling efficient and low-latency communication between all the GPUs in each of their P4/P5 instances.

AWS HealthImaging now supports retrieval of DICOM Part 10 data, enabling customers to download instance-level binaries. The retrieve DICOM instance API is built in conformance to the DICOMweb WADO-RS standard for web-based medical imaging. With this feature launch, customers taking advantage of HealthImaging’s cloud-native interfaces can better interoperate with systems that utilize DICOM Part 10 binaries.

Amazon Managed Workflows for Apache Airflow (MWAA) is now available in five new AWS Regions: Europe (Milan), Africa (Cape Town), US West (N. California), Asia Pacific (Hong Kong), and Middle East (Bahrain).

Amazon Managed Service for Prometheus now supports inline editing of rules and alert manager configuration directly from the AWS console. Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor and alarm on operational metrics at scale. Prometheus is a popular Cloud Native Computing Foundation open-source project for monitoring and alerting on metrics from compute environments such as Amazon Elastic Kubernetes Service.

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available in additional AWS region South America (São Paulo). With Amazon Redshift Serverless, all users including data analysts, developers, and data scientists, can use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity without making any changes to your existing analytics and business intelligence applications.

Amazon DocumentDB zero-ETL integration with Amazon OpenSearch Service provides customers advanced search capabilities, such as fuzzy search, cross-collection search and multilingual search, on their Amazon DocumentDB documents using the OpenSearch API. With a few clicks in the AWS Console, customers can now seamlessly synchronize their data from Amazon DocumentDB to Amazon OpenSearch Service, eliminating the need to write any custom code to extract, transform, and load the data. This integration extends the existing text search and vector search capabilities in Amazon DocumentDB, providing customers greater flexibility for searching their JSON-based documents.

Amazon WorkSpaces Core now offers new bundles powered by Windows Server 2019 and Windows Server 2022. With these bundles, customers and partners can take advantage of the latest license included Windows Server instances. This new feature will allow customers to minimize getting started time by providing staged images. In addition, this feature enables customers and partners to run multi-session VDI workloads on WorkSpaces Core desktops.

Amazon Managed Workflows for Apache Airflow (MWAA) now supports the Airflow REST API along with web server auto scaling, allowing customers to programmatically monitor and manage their Apache Airflow environments at scale. 

Amazon OpenSearch Ingestion now offers a new user interface that enables searching for blueprints using full-text search in the AWS Console, helping you easily discover all the sources that you can ingest data from into Amazon OpenSearch Service. Blueprints are pre-filled OpenSearch Ingestion configuration files that help you quickly get started with ingesting data from popular sources like Amazon S3, DynamoDB and Security Lake. The new interface now also offers visual tiles with icons for all your favorite blueprints, providing you a bird’s-eye view to all the sources and sinks supported by Amazon OpenSearch Ingestion.

You can now configure rules to automatically create a task, send an email, or generate an Amazon Eventbridge event whenever a Flows and Flow Modules metrics breaches the threshold you define. For example, you can create a rule to assign a task to a contact center administrator whenever the dropped rate (i.e. percentage of contacts that dropped from a flow) for your inbound welcome flow exceeds 10% over a trailing 4 hour window. 

We are excited to announce the availability of Amazon OpenSearchServerless in the Europe West (London) and Asia Pacific South (Mumbai) regions. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple to run search and analytics workloads without the complexities of infrastructure management. OpenSearch Serverless automatically provisions and scales resources to provide consistently fast data ingestion rates and millisecond response times during changing usage patterns and application demand. 

Application Load Balancer (ALB) now allows customers to provision load balancers without IPv4s for clients that can connect using just IPv6s. To connect, clients can resolve AAAA DNS records that are assigned to ALB. The ALB is still dual stack for communication between the load balancer and targets. With this new capability, you have the flexibility to use both IPv4s or IPv6s for your application targets, while avoiding IPv4 charges for clients that don’t require it.

AWS HealthImaging now supports cross-account and cross-region import jobs. With this release, customers can directly import DICOM data from any S3 bucket owned by their organization, owned by collaborators, or from publicly available sources like the Registry of Open Data on AWS (RODA). Customers can import data from an S3 bucket in a different region than their data stores as long as that bucket is in a region where HealthImaging is available.

Starting today, you can use AWS Shield Advanced in the AWS Canada West (Calgary) Region. AWS Shield Advanced is a managed application security service that safeguards applications running on AWS from distributed denial of service (DDoS) attacks. Shield Advanced provides always-on detection and automatic inline mitigations that minimize application downtime and latency. Also, it provides protections against more sophisticated and larger attacks for your applications running on Amazon Elastic Compute Cloud (EC2), Amazon Elastic Load Balancing (ELB), Amazon CloudFront, AWS Global Accelerator, and Amazon Route 53. To learn more visit, the AWS Shield Advanced product page.

Today, AWS announces the general availability of TLS Passthrough for Amazon VPC Lattice, which allows customers to enable end-to-end authentication and encryption using their existing TLS/mTLS implementations. Prior to this launch, VPC Lattice supported HTTP and HTTPS listener protocols only, which terminates TLS and performs request level routing and load balancing based on information in HTTP headers.

Amazon Detective now supports retrieving Amazon Elastic Kubernetes Service (Amazon EKS) audit logs from Amazon Security Lake. With this launch, Detective customers leveraging the Security Lake integration can query and analyze Amazon EKS audit logs in addition to AWS CloudTrail and Amazon VPC Flow Logs. This enhancement enables more comprehensive investigations into potential security issues involving Amazon EKS workloads.

Customers can now run Amazon Managed Grafana workspaces with Grafana version 10.4. This release includes features that were launched as a part of open source Grafana versions 9.5 to 10.4, including Correlations, Subfolders, and new visualization panels such as Data Grid, XY chart and Trend panel. This release also introduces new configuration APIs to manage service accounts and tokens for Amazon Managed Grafana workspaces. Service Accounts, replace API keys as the primary way to authenticate applications with Grafana APIs using Service Account Tokens. These new APIs eliminate the need to manually create Service accounts, enabling customers to fully automate their provisioning workflows.

Today, AWS announces general availability of CoreDNS autoscaling capabilities for Amazon EKS clusters. This feature allows you to scale capacity of DNS server instances to meet the ever-changing capacity needs of your services without the overhead of managing custom solutions.

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor version 11.22-RDS.20240418. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of PostgreSQL.

AWS CodeBuild now supports connecting your fleet of reserved Linux hosts to your Amazon VPC. Reserved capacity allows you to provision a fleet of CodeBuild hosts that persist your build environment. These hosts remain available to receive subsequent build requests, which reduces build start-up latencies.

Amazon Connect Contact Lens now offers analytics for Flows and Flow Modules, enabling you to identify emergent issues (e.g., a spike in contacts unexpectedly dropping from a flow), monitor usage patterns (e.g., most used flows or modules, an increasing trend in duration), and measure the impact of configuration changes across your customer or agent experiences including guides and task automation. From the Flows performance dashboard, you can view and compare real-time and historical aggregated performance, trends, and insights over custom-defined time periods (e.g., week over week), helping you answer questions such as “how many contacts dropped out of my contact center before reaching a queue?” or “how long does it take for contacts to navigate through my end-customer self-service voice flow?” These metrics are also available programmatically via the existing GetMetricsDataV2 API.

AWS announces the general availability of Amazon EC2 C7i-flex instances that deliver up to 19% better price performance compared to C6i instances. C7i-flex instances expand the EC2 Flex instances portfolio to provide the easiest way for you to get price performance benefits for a majority of compute intensive workloads. The new instances are powered by the 4th generation Intel Xeon Scalable custom processors (Sapphire Rapids) that are available only on AWS, and offer 5% lower prices compared to C7i.

Amazon EventBridge announces support for Amazon Key Management Service (KMS) Customer Managed Keys (CMK) on Event Buses. This capability allows you to encrypt your events using your own keys instead of an AWS owned key (which is used by default). With support for CMK, you now have more fine grained security control over your events, satisfying your company’s security requirements and governance policies.

You can now turn on Amazon Virtual Private Cloud (VPC) Flow Logs for your Amazon Elastic Container Service (ECS) workloads running on both Amazon EC2 and AWS Fargate to export detailed telemetry information for all network flows.

Starting today, customers can use AWS Fault Injection Service (FIS) in Europe (Spain) Region. FIS is a fully managed service for running fault injection experiments to improve an application’s performance, observability, and resilience. FIS simplifies the process of setting up and running controlled fault injection experiments across a range of AWS services, so teams can build confidence in their application behavior.

Amazon Elastic Block Store (EBS) direct APIs now support Virtual Private Cloud (VPC) endpoint policies in all AWS Regions. This newly supported capability provides a granular access control to your EBS resources for improved data protection and security posture. Previously, customers have full access to EBS direct APIs through an interface VPC endpoint, powered by AWS PrivateLink. With this newly supported capability, customers can attach a VPC endpoint policy to an interface VPC endpoint and manage which EBS direct APIs actions (GetSnapshotBlock, ListSnapshotBlocks, ListChangedBlocks, PutSnapshotBlock) may be performed, the principal that may perform the actions, and the resources on which the actions may be performed.

Starting today, Amazon EC2 M6id instances are available in AWS Region Europe (London). These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. 

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) M7gd instances with up to 3.8 TB of local NVMe-based SSD block-level storage are available in South America (Sao Paulo) region.

Amazon S3 will make a change so unauthorized requests that customers did not initiate are free of charge. With this change, bucket owners will never incur request or bandwidth charges for requests that return an HTTP 403 (Access Denied) error response if initiated from outside their individual AWS account or AWS Organization. To see the full list of error codes that are free of charge, visit Billing for Amazon S3 error responses. This billing change requires no changes to customer applications and applies to all S3 buckets.

Amazon EMR is the industry-leading cloud big data solution for petabyte-scale data processing, interactive analytics, and machine learning using open-source frameworks such as Apache Spark, Apache Hive, and Presto. Today, we are excited to announce that Amazon EMR 7.1 release is now generally available and includes the latest versions of popular open-source software.

Today, AWS Security Hub announces support for version 3.0 of the Center for Internet Security (CIS) AWS Foundations Benchmark. The CIS v3.0 standard contains 37 security controls, including 7 new controls which are unique to this standard. Security Hub has satisfied the requirements of the CIS Security Software Certification and has been awarded the certification for levels 1 and 2 of version 3.0 of the CIS AWS Foundations Benchmark.

Amazon EMR 7.1 introduces the capability to configure Amazon CloudWatch Agent to publish additional metrics for Apache Hadoop, YARN, and Apache HBase applications running on your Amazon EMR on EC2 clusters. This feature provides comprehensive monitoring capabilities, allowing you to track the performance and health of your cluster more effectively. 

AWS IAM Identity Center now supports OAuth 2.0 authorization code flows using the Proof Key for Code Exchange (PKCE) standard. This provides AWS applications, such as Amazon Q Developer Pro, a simple and safe way to authenticate users and obtain their consent to access AWS resources from desktops and mobile devices with web browsers. 

Amazon Relational Database Service (RDS) for PostgreSQL now supports pgvector 0.7.0, an open-source extension for PostgreSQL for storing vector embeddings in your database, letting you use retrieval-augemented generation (RAG) when building your generative AI applications. This release of pgvector includes features that increase the number of dimensions of vectors you can index, reduce index size, and includes additional support for using CPU SIMD in distance computations.

Amazon Managed Service for Prometheus collector, a fully-managed agentless collector for Prometheus metrics now integrates with the Amazon EKS access management controls. Starting today, the collector utilizes the EKS access management controls to create a managed access policy that allows the collector to discover and collect Prometheus metrics.

We are pleased to announce general availability of Amazon EC2 G6 instances on SageMaker notebooks.

Amazon Cognito introduces pricing for machine-to-machine (M2M) authentication to better support continued growth and expand capabilities. There is no change to Amazon Cognito's user based pricing (monthly active users or MAUs). Customer accounts currently using Amazon Cognito for M2M use cases will be exempt from pricing for 12 months. M2M pricing is based on the number of application clients configured for M2M authentication and the number of tokens requested for them. You can find details on our pricing page.

Amazon MQ now provides support for RabbitMQ version 3.12.13, which includes several fixes and performance improvements to the previous versions of RabbitMQ supported by Amazon MQ. Starting from RabbitMQ 3.12.13, all Classic Queues on Amazon MQ brokers are upgraded to Classic Queues version 2 (CQv2) automatically. All queues on RabbitMQ 3.12 now behave similarly to lazy queues. These changes provide a significant improvement to throughput and lower memory usage for most use cases. 

Amazon QuickSight is excited to announce the launch of SPICE capacity auto-purchase API. Previously, customers were required to manually turn on SPICE auto-purchase via the console UI. Now with this API enhancement, QuickSight users can programmatically turn on the SPICE capacity auto-purchase, seamlessly integrating it into their adoption and migration pipeline. Once turned on, users don’t need to estimate SPICE usage and manually purchase capacity each time. Instead, they can seamlessly ingest data and use SPICE worry free, as QuickSight will automatically acquire the necessary capacity to meet their usage requirements. For further details, visit here.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 16.3, 15.7, 14.12, 13.15, and 12.19. This release of RDS for PostgreSQL also includes support for pgvector 0.7.0, which lets you index vectors larger than 2,000 dimensions and adds support for scalar and binary quantization through expression indexes. 

Amazon Elastic Container Registry (ECR) now includes GitLab Container Registry as a supported upstream registry for ECR’s pull through cache feature. With today’s release, customers using GitLab’s software-as-a-subscription offering, GitLab.com, can automatically sync images from the newly supported upstream registry to their private ECR repositories.

Amazon Connect now provides AWS CloudTrail support for flow management pages on the Connect admin website. When you add, update, or delete a flow from a flow management page, a record of that activity is available in AWS CloudTrail for visibility, reporting, and compliance, helping you answer questions such as, “who last updated this flow?” or “when was this flow last saved?”

Today we are updating the minimum supported TLS version to 1.2 on Amazon ElastiCache compatible with open-source Redis version 6 and above, across all regions. This update is designed to help you meet security, compliance, and regulatory requirements.

Amazon SageMaker now integrates with Amazon DataZone making it easier for customers to access machine learning (ML) infrastructure, data and ML assets. This integration will unify data governance across data and ML workflows.

Amazon Connect now provides enhanced search capabilities for flows and flow modules on the Connect admin website and programmatically using APIs. You can now search for flows and flow modules by name, description, type, status, and tags, making it easy to filter and identify a specific flow when managing your Connect instances. For example, you can now search for all flows tagged with the Department:Help_Desk key value pair to filter your set of flows down to the specific ones you are looking for.

We are excited to announce that Amazon OpenSearch Serverless is expanding availability to the Europe West (Paris) EU-West-3 region. OpenSearch Serverless is a serverless deployment option for Amazon OpenSearch Service that makes it simple to run search and analytics workloads without the complexities of infrastructure management. OpenSearch Serverless’ compute capacity used for data ingestion, search, and query is measured in OpenSearch Compute Units (OCUs).

Starting today, the Amazon Elastic Compute Cloud (Amazon EC2) Inf2 instances are generally available in the Asia Pacific (Sydney), Europe (London), Europe (Paris), Europe (Stockholm), South America (Sao Paulo) regions. These instances deliver high performance at the lowest cost in Amazon EC2 for generative AI models. 

AWS Resilience Hub has expanded its drift detection capabilities by introducing a new type of drift detection — application resource drift. Following last year’s release of application resilience drift detection, this new enhancement detects changes, such as the addition or deletion of resources within the application's input sources.

Amazon Connect now provides granular access controls using resource tags to define who can access specific flows and flow modules from the Connect admin website. For example, you can now tag flows with Department:Support from the flow designer UI, restricting access to only administrators from your support line of business.

Today, we are excited to announce the general availability of the highly expressive generative engine with the three English Amazon Polly voices: two American English voices, Ruth and Matthew, and one British English voice Amy. 

AWS Budgets now supports resource and tag-based access controls for easy management and access. You can now add tags to your AWS Budgets resources and define AWS Identity and Access Management (IAM) policies to specify fine-grained permissions for AWS Budgets resources based on their resource names and tags, improving governance and information security through these two granular access control features.

AWS Global Accelerator now supports traffic through a new AWS edge location in Istanbul in Türkiye. With the addition of the edge location, Global Accelerator is now available through 117 Points of Presence globally and supports application endpoints in 29 AWS Regions.

Amazon Titan Text Premier, the latest addition to the Amazon Titan family of large language models (LLMs), is now generally available in Amazon Bedrock. Amazon Titan Text Premier is an advanced, high-performance, and cost-effective LLM engineered to deliver superior performance for enterprise-grade text generation applications, including optimized performance for retrieval-augmented generation (RAG) and Agents. The model incorporates safe, secure, and trustworthy responsible AI practices and excels in delivering exceptional generative AI text capabilities at scale.

Two new minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2019 and 2022 across the Express, Web, Standard, and Enterprise editions.

Starting today, AWS Cost Anomaly Detection will detect cost anomalies up to 30% faster. Customers can now identify and respond to spending changes more quickly. Cost Anomaly Detection leverages advanced machine learning to identify unusual changes in spend, enabling customers to quickly take action to avoid unexpected costs.

Today, Amazon MemoryDB launched two new condition keys for IAM policies that enable you to control user authentication and encryption in transit settings during cluster creation. The new condition keys let you create IAM policies or Service Control Policies (SCPs) to enhance security and meet compliance requirements.

Today, we are announcing the preview launch of Amazon Bedrock Studio, an SSO-enabled web interface that provides the easiest way for developers across an organization to collaborate and build generative AI applications. Developers can login to Bedrock Studio using their company credentials to build, evaluate, and share generative AI apps. Bedrock Studio offers a rapid prototyping environment and streamlines access to multiple Foundation Models (FMs) in and tools like Knowledge Bases, Agents, and Guardrails.

Amazon Lightsail now offers a larger instance bundle with 16 vCPUs and 64 GB memory. The new instance bundle is available with Linux operating system (OS) and application blueprints, for both IPv6-only and dual-stack networking types. You can create instances using the new bundle with pre-configured Linux OS and application blueprints including WordPress, Drupal, Magento, MEAN, LAMP, Node.js, Amazon Linux, Ubuntu, CentOS Stream, and AlmaLinux. 

Agents for Amazon Bedrock enable developers to create generative AI-based applications that can complete complex tasks for a wide range of use cases and deliver answers based on company knowledge sources. As agentic applications scale, they require higher input and output model throughput compared to on-demand limits.

Amazon RDS (Relational Database Service) Performance Insights now supports the Oracle Multitenant configuration on Amazon RDS for Oracle. An Amazon RDS for Oracle Multitenant instance operates as a container database (CDB) hosting one or more pluggable databases (PDBs). 

AWS Firewall Manager is now available in the AWS Canada West (Calgary) region, enabling customers to create policies for AWS WAF and manage web application security for applications running in this region. Support for other policy types will be available in the coming months. Firewall Manager is now available in a total of 31 AWS commercial regions, 2 GovCloud regions, and all Amazon CloudFront edge locations.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. Today, we are excited to announce detailed performance monitoring of Apache Spark jobs with Amazon Managed Service for Prometheus, allowing you to analyze, monitor, and optimize your jobs using job-specific engine metrics and information about Spark event timelines, stages, tasks, and executors.

Amazon Connect Cases now provides APIs that make it easy to upload files, check file details, and delete files from cases. Contact center administrators can use these APIs to automate the attachment of files to cases. In addition, these APIs also enable you to use case attachments in a custom agent desktop.

AWS IoT TwinMaker makes it easier to create digital twins of real-world systems such as buildings, factories, industrial equipment, and production lines. Today, AWS announced enhancements to AWS IoT TwinMaker Knowledge Graph that enable faster and more flexible entity metadata query capabilities for industrial customers. These optimizations provide faster entity-metadata queries using full-text search and wildcard search, addressing the data engineering needs of customers requiring efficient entity metadata access.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in AWS GovCloud (US-East) region. These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers.

AWS Amplify Gen 2, the code-first developer experience for building full-stack apps using TypeScript, is now generally available. Amplify Gen 2 enables developers to express app requirements like the data models, business logic, and authorization rules in TypeScript. The necessary cloud infrastructure is then automatically provisioned, without needing explicit infrastructure definitions. This streamlined approach accelerates full-stack development for teams of all sizes. 

Starting today, you can use Amazon EMR Studio in the Asia Pacific (Melbourne) and Israel (Tel Aviv) regions to run interactive workloads on EMR.

Customers can now create Amazon FSx for Windows File Server file systems in the AWS Canada West (Calgary) Region.

Customers can now create Amazon FSx for OpenZFS file systems in the AWS Canada West (Calgary) Region.

Amazon Connect Contact Lens now provides support for personally identifiable information (PII) redaction in the Spanish (US) language, enabling contact centers to help identify and redact sensitive information on contact transcripts such as social security numbers, credit card details, bank account information, and personal contact information (i.e. name, email address, phone number, and mailing address). 

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2024 Release Update (RU) for Oracle Database versions 19c and 21c.

Customers can now create Amazon FSx for NetApp ONTAP file systems in the AWS Canada West (Calgary) Region.

Customers can now create Amazon FSx for Lustre file systems in the AWS Canada West (Calgary) Region.

Amazon DynamoDB on-demand is a serverless, pay-per-request billing option that can serve thousands of requests per second without capacity planning. Previously, the on-demand request rate was only limited by the default throughput quota (40K read request units and 40K write request units), which uniformly applied to all tables within the account, and could not be customized or tailored for diverse workloads and differing requirements. Since on-demand mode scales instantly to accommodate varying traffic patterns, a piece of hastily written or unoptimized code could rapidly scale up and consume resources, making it difficult to keep costs and usage bounded.

Amazon CloudWatch Internet Monitor, an internet traffic monitoring service for AWS applications that gives you a global view of traffic patterns and health events, now displays IPv4 prefixes in its console dashboard. Using this data in Internet Monitor, you can get more details about your application traffic and health events. For example, you can do the following:

• View the IPv4 prefixes associated with a client location that is impacted by a health event
• View IPv4 prefixes associated with a client location
• Filter and search traffic data by the network associated with an IPv4 prefix or IPv4 address

Customers in AWS Canada West (Calgary) Region can now use AWS Transfer Family.

Amazon Personalize now makes it easier than ever to remove users from your datasets with a new deletion API. Amazon Personalize uses datasets provided by customers to train custom personalization models on their behalf. This new capability allows you to delete records about users from your datasets including user metadata and user interactions. This helps to maintain data for your compliance programs and keep your data current as your user base changes. Once the deletion is complete, Personalize will no longer store information about the deleted users and therefore will not consider the user for model training. 

Starting today, you can use Amazon Route 53 Resolver DNS Firewall in the Canada West (Calgary) Region.

Amazon RDS for SQL Server now supports SQL Server Analysis Services (SSAS) in Multidimensional mode for SQL Server 2019. There is no additional cost to install SSAS directly on your Amazon RDS for SQL Server DB instance.

Amazon Pinpoint now offers country rules, a new feature that allows developers to control the specific countries they send SMS and voice messages to. This enhancement helps organizations align their message sending activities to the precise list of countries where they operate.

Today, AWS introduces a new EC2 API to retrieve the public endorsement key (EkPub) for the Nitro Trusted Platform Module (NitroTPM) of an Amazon EC2 instance.

Starting today, customers can use AWS Control Tower in the AWS Canada West (Calgary) Region. With this launch, AWS Control Tower is available in 29 AWS Regions and the AWS GovCloud (US) Regions. AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It simplifies AWS experiences by orchestrating multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. You can set up a multi-account AWS environment within 30 minutes or less, govern new or existing account configurations, gain visibility into compliance status, and enforce controls at scale.

Amazon Chime SDK Voice Connector audio streaming now supports G.711 A-law encoded audio. With this update, companies can stream audio to AWS from their phone systems using session initiation protocol recording (SIPREC) with G.711 A-law encoded audio.

AWS B2B Data Interchange now automatically generates 997 functional acknowledgements and TA1 interchange acknowledgements in response to all relevant inbound X12 electronic data interchange (EDI) transactions. These acknowledgements are used to confirm receipt of individual transactions and to report errors. With this launch, you can now automate delivery of 997 and TA1 acknowledgements to trading partners that require them.

Amazon Connect Contact Lens now provides managers with generative AI-powered recommendations for answers to questions in agent evaluation forms, enabling them to perform evaluations faster and more accurately. Managers now receive additional agent behavioral insights (e.g., did the agent show empathy while delivering bad news?) and will get context and justification for the recommended answers (reference points from the transcript that were used to provide answers).

Beginning today, customers can use Amazon Bedrock in the Asia Pacific (Mumbai) region to easily build and scale generative AI applications using a variety of foundation models (FMs) as well as powerful tools to build generative AI applications.

Today, Amazon Personalize announces the general availability of two new recipes, User-Personalization-v2 and Personalized-Ranking-v2 (v2 recipes). Built on Transformers architecture, these new recipes support catalogs with up to 5 million items with lower inference latency. Amazon Personalize testing showed that v2 recipes improved recommendation accuracy by up to 9% and recommendation coverage by up to 1.8x compared to previous versions. A higher coverage means Amazon Personalize recommends more of your catalog. These new recipes also support item metadata like genres and descriptions in inference responses, allowing customers to easily enrich recommendations in their user interfaces.

Today, AWS announces the general availability of file commit history in Amazon CodeCatalyst. Customers can now view the file git commit history in the CodeCatalyst’s console. Amazon CodeCatalyst helps teams plan, code, build, test, and deploy applications on AWS. Viewing the history of commits, pertaining to a file, is a way to reduce the effort for developers when trying to understand the history of changes for a codebase.

AWS Trusted Advisor introduces new API to enable you to programmatically exclude resources from recommendations associated with Trusted Advisor best practice checks. On Nov 17 2023, Trusted Advisor announced the launch of new APIs available to Business, Enterprise On-Ramp, or Enterprise Support customers. This launch adds the BatchUpdateRecommendationResourceExclusions API to this suite of APIs to allow users to exclude specific resources from specific checks programmatically. This capability is only available to via AWS Trusted Advisor APIs, and not available through AWS Support API (SAPI). 

Knowledge Bases for Amazon Bedrock securely connects foundation models (FMs) to internal company data sources for Retrieval Augmented Generation (RAG), to deliver more relevant and accurate responses. Today, we are announcing vector storage support for MongoDB Atlas in Knowledge Bases (KB) for Amazon Bedrock. 

Starting today, you can check when your Amazon Machine Images (AMIs) were last used to launch EC2 instances by simply describing your AMIs, enabling you to efficiently filter and track your active AMIs.

Starting today, you can prevent Amazon Machine Images (AMIs) from accidental deregistration by marking them as protected. A protected AMI cannot be deregistered until you explicitly disable deregistration protection.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. An EMR Serverless application uses workers to execute workloads, allowing users to configure ephemeral storage per worker based on the workload's needs. Today, we are excited to introduce Shuffle-optimized disks on Amazon EMR Serverless, offering increased storage capacity (up to 2TB) and higher IOPS delivering better performance for I/O-intensive Spark and Hive workloads.

You can now enable agent screen recording when your VDI environment is configured to allow multiple agents to connect concurrently to the same Windows instance (multi-session VDI). This makes it even easier and more cost effective for you to help agents improve their performance when using Amazon Connect in a multi-session VDI environment.

Today, Amazon Pinpoint announces support for outbound multimedia messaging service (MMS) within the United States and Canada. The addition of MMS allows Amazon Pinpoint users to enhance their customer communication experiences with the ability to combine traditional text-only messaging with rich media content such as images, audio, and video files. 

Starting today, you can enable Route 53 Resolver DNS Firewall to automatically skip the inspection of domains included in a domain redirection chain, such as Canonical Name (CNAME) and Delegation Name (DNAME), thus avoiding the need to explicitly specify each domain from the chain in your Route 53 DNS Firewall rules when allow-listing domains.

Amazon CloudWatch is excited to announce a resource filtering capability for cross-account observability, providing customers with the flexibility to share a subset of their logs or metrics across multiple AWS accounts using configurable filters.

Amazon EFS file systems now support up to 1.5 GiB/s of throughput per client, a 3x increase over the previous limit of 500 MiB/s. With this launch, you now have a simpler way to run throughput-intensive file workloads on AWS.