2023

Amazon Aurora PostgreSQL-compatible edition now maintains read availability through writer node restarts in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With today’s launch, reader nodes will continue to serve read requests during a writer node restart, improving read availability in the cluster. 

May 31, 2023 - Amazon DocumentDB 5.0 already supports Amazon EC2 R6G instances, and starting today, extends instance support to Amazon EC2 T3 and R5 type instances. You can now use Amazon DocumentDB 5.0 during free trial using T3.medium instance and up to 96 vCPUs and 768 GiB RAM with R5 type instances. Please refer to supported instance specifications to learn more.

Amazon CloudFormation StackSets is updating the deployment experience for CREATE, UPDATE, DELETE, IMPORT TO STACKSET, and DRIFT stack set operations with a new status code SKIPPED_SUSPENDED_ACCOUNT for stack instances. to skip suspended Amazon Web Services accounts during deployments. With this launch, StackSets will skip target Amazon Web Services accounts that are suspended, and flag skippedthe corresponding stack instances as  SKIPPED_SUSPENDED_ACCOUNT instead of FAILED. This feature will help customers target Amazon Web Services accounts, Amazon Organizations or Organizational Units (OUs) without worrying about the number of suspended accounts in the target sample. Additionally, this feature helps to improves. Customers suspend their Amazon Web Services accounts for reasons such as reducing usage of cloud resources for non-production environments during periods of low demand. This feature enhances deployment speed of stack set operations, and reduces the number of FAILED stack set operations.

We are excited to announce updates to Amazon GameLift FleetIQ’s ClaimGameServer operation in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift FleetIQ optimizes the use of low-cost Amazon Elastic Compute Cloud (Amazon EC2) Spot Instances for cloud-based game hosting. With this release, customers using Amazon GameLift FleetIQ can better handle game session placement decisions for their multiplayer games.

Today, Amazon Simple Queue Service (SQS) announces support for dead-letter queue redrive via Amazon SDK or Command Line Interface (CLI). Dead-letter queue redrive is an enhanced capability to improve the dead-letter queue management experience for Amazon SQS customers. Amazon SQS already supports dead-letter queue redrive to source queues or a custom destination queue using the Amazon SQS console. Now customers can move the messages from the dead-letter queue using Amazon SDK or CLI to programmatically manage the lifecycle of their unconsumed messages stored in the dead-letter queue at scale. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the use of IN operator in SELECT queries of Cassandra Query Language (CQL).

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports Amazon X-Ray active tracing with Amazon SNS FIFO topics. You can now view traces that flow through Amazon SNS FIFO topics to Amazon Simple Queue Service (Amazon SQS) FIFO queues, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. You can use Amazon SNS FIFO topics, in combination with Amazon SQS FIFO queues, to build applications that require messages to be sent and processed in a strict sequence and without duplicates. You can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API, the Amazon SNS Management Console, or via Amazon CloudFormation.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the HypoPG extension for creating hypothetical indexes, which lets you test the performance impact of an index on query plans before you build it.

Today, Amazon CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe Amazon Organization trust access needed to get started with service-managed StackSets. You can use service-managed StackSets to centrally manage stack deployments to Amazon Web Services accounts in one or more organizational units (OUs). With this launch, you can programmatically manage trust access for your management or delegated administrator accounts. Activating trust access provides the necessary permissions for your management or delegated administrator accounts to create and manage service-managed stack sets for your Amazon Organizations. In addition to providing this trust access in Amazon CloudFormation via Amazon Web Services Management Console, you can now choose to manage trust access with these newly launched APIs.

Amazon Elastic Kubernetes Service (EKS) launches managed node groups for Windows containers to automate the provisioning and lifecycle management of Windows nodes (running on Amazon EC2 instances) for EKS Kubernetes clusters. With this launch, Windows-based applications will automatically provision and register the Amazon EC2 instances that provide compute capacity. Now customers can create, automatically update, or terminate the Windows nodes for their cluster with a single operation.

Today, Amazon CloudTrail announces the support for Amazon Organizations. You can now create, manage, and deploy CloudTrail trails across your organization from your management account or delegated administrator account. Through integration with Amazon Organizations, an organization trail lets you define a uniform event logging strategy at an organization level, that is applied automatically to each member account in the organization. Users in member accounts are able to see these trails, but they can’t modify them. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL and for MySQL now supports a new Multi-AZ deployment option with one primary and two readable standby database (DB) instances across three Availability Zones (AZs). This deployment option is optimized for write transactions and is ideal when your workloads require lower write latency, automated failovers, and more read capacity.

Amazon Glue has upgraded its serverless Python Shell jobs to add Python 3.9 support and an updated bundle of pre-loaded libraries. These jobs allow you to write complex data integration and analytics jobs in pure Python.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning that enables data scientists and developers to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. SageMaker Studio comes with built-in integration with Amazon EMR so that data scientists can interactively prepare data at petabyte scale using open source frameworks such as Apache Spark, Hive, and Presto right from within Studio notebooks. Very often data is stored in data lakes managed by Amazon Lake Formation, enabling you to apply fine-grained access control through a simple grant or revoke mechanism. We’re excited to announce that SageMaker Studio now supports applying this fine-grained data access control with Amazon Lake Formation when accessing data through Amazon EMR.

Amazon Glue now offers 3 new features: custom visual transforms, which let customers define, reuse, and share business-specific ETL logic among their teams, three open-source data lake storage frameworks, which read and write data in Amazon Simple Storage Service (Amazon S3) in a transactionally consistent manner, and new connectors. Amazon Glue is a serverless, scalable data integration service that makes it easier to discover, prepare, move, and integrate data from many sources. With these new features, data engineers can write reusable transforms for the Amazon Glue visual job editor, write data into open data lake format standards, and connect to more native data stores.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

You can now share your Amazon Machine Images (AMIs) with Amazon Organizations and Organizational Units (OUs). Previously, you could share AMIs only with specific Amazon Web Services account IDs. To share AMIs with Amazon Organizations, you had to explicitly manage sharing of AMIs with Amazon Web Services accounts that were added to or removed from Amazon Organizations. With this new feature, you no longer have to update your AMI permissions because of organizational changes. AMI sharing will be automatically synced when organizational changes occur. This feature helps you centrally manage and govern your AMIs as you grow and scale your Amazon Web Services accounts.

You can now update your Amazon ElastiCache for Redis cluster configuration to enable cluster mode without needing to rebuild you cluster, migrate data, or affect application availability. Cluster mode allows you to scale beyond the performance limitations of a single shard Redis cluster. For more information about cluster mode in ElastiCache for Redis, see the documentation.

Amazon GuardDuty Malware Protection is now available, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD to help detect malicious files residing on an instance or container workload running on Amazon Elastic Compute Cloud (Amazon EC2) without deploying security software or agents. Amazon GuardDuty Malware Protection adds file scanning for workloads utilizing Amazon Elastic Block Store (EBS) volumes to detect malware that can be used to compromise resources, modify access permissions, and exfiltrate data. Malicious files that contain trojans, worms, crypto miners, rootkits, bots, and the like can be used to compromise workloads, repurpose resources for malicious use, and gain unauthorized access to data. Existing customers can enable the GuardDuty Malware Protection feature with a single click in the GuardDuty console or through the GuardDuty API. When threats are detected, GuardDuty Malware Protection automatically sends security findings to Amazon Security Hub and Amazon EventBridge. These integrations help you centralize your security monitoring for Amazon Web Services and partner services, automate responses to malware findings, and perform security investigations from the GuardDuty console. With the launch of Amazon GuardDuty Malware Protection there are eight new threat detections:

Using Amazon EC2 Capacity Reservation Fleet, you can easily migrate your reserved Amazon EC2 capacity to new generation instance types. Capacity Reservations allow you to reserve capacity for your immediate use in a specific instance type and Availability Zone and can be cancelled by you at any time. With Capacity Reservation Fleet, you can reserve capacity across a prioritized list of instance types. When your reservations for lower priority instance types are unused, it will automatically convert them to Capacity Reservations for higher priority instance types.

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics NodeJS runtime version 4.0. With this update, runtime version of Amazon Lambda, executing the canaries, is updated to NodeJS 16.x.

Amazon Relational Database Service (RDS) for Oracle now supports the April 2023 Release Updates (RUs) for Oracle Database 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a new trusted procedural language. This allows you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

Metrics Insights is a fast, flexible, SQL-based query engine which enables developers, operators and systems engineers to identify trends and patterns across millions of operational metrics in real time. With Metrics Insights, operators can gain better visibility on their infrastructure and large scale application performance with flexible querying, on-the-fly metric aggregations and dynamic alarms that monitor fast moving environments.

AWS Elemental MediaConvert now supports video pass-through for mezzanine video formats. You can now run MediaConvert jobs that preserve the original video essence without re-encoding for intra-frame-only video formats like AVC Intra, Apple ProRes, VC3, and JPEG2000.

Amazon Athena has expanded its support for inbound connections via Internet Protocol Version 6 (IPv6) endpoints to include Amazon PrivateLink. Starting today, you can now connect to Athena securely and privately using PrivateLink from your Amazon Virtual Private Cloud (VPC), in addition to the public IPv6 endpoints that were previously available.

Amazon Managed Workflows for Apache Airflow (MWAA) is now available in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Cost Categories has added a new dimension “Usage Type” to its rules. You can now use seven types of dimensions: “Linked Account”, “Charge Type”, “Service”, "Usage Type", “Cost Allocation Tags”, “Region”, and other “Cost Category” while creating cost categories rules.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports Amazon RDS Optimized Reads for up to two times faster query processing compared to previous generation instances. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to two times faster with Optimized Reads on RDS for PostgreSQL. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by PostgreSQL on the local NVMe-based SSD block-level storage, thereby reducing your traffic to Elastic Block Storage (EBS) over the network. Refer to recent blog post to learn more about performance improvements using local disk based database instances for workloads that have highly concurrent read/write processing.

Amazon CloudFormation now supports Amazon IoT Core thing group, thing type and billing group resources. Amazon CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage Amazon Web Services and third-party resources. You can now use an Amazon CloudFormation template to pre-configure and deploy Amazon IoT Core registry resources for your targeted Internet of Things (IoT) solution in a secure, efficient, and repeatable way.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 15(15.2). New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. PostgreSQL 15 release also adds support for server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Aurora PostgreSQL version 3.0. Please refer to Amazon Aurora PostgreSQL updates for more information.

Following the open source community announcement of updates to the PostgreSQL database, we updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.7, 13.10, 12.14, and 11.19. These releases contain bug fixes and improvements by the PostgreSQL community. Refer to the Aurora version policy to help you decide how often and how to plan your upgrade. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024.

Amazon App Mesh now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now use Amazon PrivateLink to privately access Amazon App Mesh APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the Amazon PrivateLink pricing page for more information.

Amazon EMR Serverless is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon MemoryDB for Redis now supports Amazon Identity and Access Management (IAM) authentication access to its clusters. With this launch, you can associate IAM users and roles with MemoryDB users and manage their cluster access.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

Amazon Step Functions expands support for iterating and processing large sets of data such as images, logs and financial data in Amazon Simple Storage Service (Amazon S3), a cloud object storage service.

 Amazon MemoryDB for Redis now supports Redis 7. This release brings several new features to MemoryDB:

Amazon Key Management Service (Amazon KMS) lets you create KMS keys that can be used to generate and verify Hash-Based Message Authentication Code (HMACs). HMACs are a powerful cryptographic building block that incorporates secret key material within a hash function to create a unique keyed message authentication code. HMAC KMS keys can only be generated and used within government-approved hardware security modules (HSMs). This architecture can minimize the risk of these secret keys being compromised, in contrast to using plaintext HMAC keys in local application software.

Amazon Managed Streaming for Apache Kafka (MSK) now offers two new features: mult-VPC private connectivity and cluster policy support for Amazon MSK clusters that simplify connectivity and access between your Apache Kafka clients hosted in different VPCs and Amazon Web Services accounts and your Amazon MSK clusters.

Amazon Redshift Data Sharing is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon CloudWatch announces support for filtering by metric name on CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new capability you can now select the specific metrics you want to stream, providing additional filtering controls.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.4.0 for new and existing clusters. Apache Kafka 3.4.0 includes several bug fixes and new features that improve performance. Key features include a fix to improve stability to fetch from the closest replica. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.4.0.

Amazon Simple Notification Service (Amazon SNS) now supports payload-based message filtering, expanding the feature set that already supported attribute-based message filtering. With this release, you can apply subscription filter policies to filter out messages based on their contents, unlocking a variety of workloads. You may use this new capability to filter events from 60+ Amazon Web Services services that publish events to Amazon SNS, including Amazon S3, Amazon EC2, Amazon CloudFront, and Amazon CloudWatch. You may also use payload-based message filtering for your cross-account workloads, where subscribers may not be able to influence a given publisher to have its messages published with attributes to Amazon SNS.

Today, Amazon OpenSearch Service announces Multi-AZ with Standby, a new deployment option that enables 99.99% availability and consistent performance for business-critical workloads. With Multi-AZ with Standby, OpenSearch Service domains are resilient to potential infrastructure failures, such as a node or an Availability Zone (AZ) failure, while assuring no impact to performance or availability. Multi-AZ with Standby also ensures OpenSearch Service domains follow recommended best practices, simplifying configuration and management.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Update (RU) Release 2 for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The January 2023 RU Release 2 provides updated daylight savings time definitions provided by Oracle after the January 2023 RU was delivered.

Amazon S3 now automatically enables S3 Block Public Access and disables S3 access control lists (ACLs) for all new S3 buckets in all Amazon Web Services Regions, including the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. This change was first announced on December 14, 2022, began deploying on April 5, 2023, and is now applied to all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide.

We are excited to announce the unified Amazon Health Dashboard, a new destination that brings together the Service Health Dashboard and Personal Health Dashboard into a single connected experience. This new home is designed to provide a more responsive and accurate view, improved usability, and greater operational resilience.

Today we launched new observability features including log patterns, metrics analytics and support for Jaeger traces with OpenSearch 2.5 in Amazon OpenSearch Service.

Amazon Resource Access Manager (Amazon RAM) now supports customer managed permissions so you can author and administer fine-grained resource access controls for supported resource types. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), and with Amazon Identity and Access Management (IAM) roles and users. With customer managed permissions, you can apply the principles of least privilege, or the minimum permissions required to perform a task.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service.

Amazon Relational Database Service (Amazon RDS) for MySQL and MariaDB now support Optimized Reads for up to 2X faster query processing compared to previous generation instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by the MySQL and MariaDB server on the NVMe SSD-based block-level instance storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 2X faster with Optimized Reads on RDS for MySQL and MariaDB.

Amazon Relational Database Service (Amazon RDS) now supports integration with Amazon Secrets Manager to streamline how you manage your master user password for your Amazon RDS database instances. With this feature, Amazon RDS fully manages the master user password and stores it in Amazon Secrets Manager whenever your Amazon RDS database instances are created, modified, or restored. The new feature supports the entire lifecycle maintenance for your Amazon RDS master user password including regular and automatic password rotations; removing the need for you to manage rotations using custom Lambda functions.

We are excited to announce that Amazon GameLift now supports per-second billing for both Linux and Windows instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. With this update, customers will only pay for Amazon GameLift usage in one second increments, with a minimum of 1 minute. 

Today, Amazon Fargate for Amazon ECS Windows containers is available in the Amazon Web Services China (Beijing) region, operated by Sinnet and the Amazon Web Services China (Ningxia) region, operated by NWCD. This feature simplifies the adoption of modern container technology for Amazon ECS customers by making it even easier to run their Windows containers on Amazon Web Services.

Amazon Aurora Serverless v1 now allows you to select a specific window for scheduling a maintenance event in Amazon Web Services China (Ningxia) Region, operated by NWCD. You can use the maintenance window to specify, for example, when your PostgreSQL 10 cluster gets upgraded to PostgreSQL 11. You can set the maintenance window with just a few clicks in the Amazon Web Services Management Console or using the latest Amazon SDK or CLI. Review the Aurora documentation to learn more. 

Amazon IoT Device Management Jobs add the capability for customer to schedule their remote actions within a maintenance window. Job scheduling allowed customers to define the start and end time of a job rollout. Following today's launch, Customers can configure the maintenance window recurrence on daily, weekly or monthly schedule (e.g. “Monday-Wednesday-Friday”) or define a customized recurrence for Continuous Jobs. Devices that are added to target groups receive job execution notifications only within the pre-configured maintenance window duration without requiring any changes on device-side software. Customers with devices located in different time zones can also utilize this feature in combination with Dynamic Thing Groups and Device Shadow to schedule Job executions according to the local time of their devices (see this blog). With Maintenance Window configuration, customers can automate device software updates to their enterprise or industrial assets based on devices' software deployment cycles.

We are excited to announce support for Amazon EC2 C6i instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed service that allows you to deploy and scale dedicated game servers for session-based multiplayer games. 

Amazon Relational Database Service (Amazon RDS) events now include tags in the message body, which provide metadata about the resource that was affected by the service event. The message receiver can use these tags to do payload-based parsing with rule matching, enabling workflows such as routing, filtering, and down stream automation.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Amazon DynamoDB now supports up to 50 concurrent table restores per account. The default service quota for table restores increased from 4 to 50, and is applicable to restores performed using point-in-time recovery and on-demand backups managed by DynamoDB and Amazon Backup.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Amazon Relational Database Service (RDS) for Oracle now supports version 22.2 of Oracle Application Express (APEX) for all supported Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Today, we announce media metrics for AWS Elemental MediaConvert, increasing the information available for transcoding events and associated media assets. Now you can view and act on a broader set of data both during and after transcoding jobs complete. You can use the information available through media metrics to build dashboards with Amazon CloudWatch and to programmatically integrate actions into your workflows via Amazon EventBridge.

Starting today, the Amazon Web Services Billing Preferences page has a re-designed user experience, to help you manage your Amazon Web Services Billing Preferences. The Billing preferences page provides a user-friendly experience to manage your invoice delivery, usage and billing alerts as well as credit sharing preferences. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Lambda now supports Node.js 18 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Node.js 18 can take advantage of new features such as an upgrade of the bundled SDK for JavaScript to v3 and improved support for deploying ES Modules using Lambda layers. This release also provides access to Node.js 18 language enhancements, including the experimental ‘fetch’ API. For more information on Lambda’s support for Node.js 18, see our product documentation.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports Amazon RDS Optimized Writes enabling up to 2x higher write throughput at no additional cost. This is especially useful for RDS for MariaDB customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon IoT Core, a managed cloud service that lets customers connect millions of Internet of Things (IoT) devices and routes trillions of messages to Amazon Web Services services, announces support for Shared Subscriptions to its MQTT-based messaging broker service. MQTT is a device-to-device messaging communication standard widely used in IoT applications for device to cloud message delivery. Amazon IoT Core supports both MQTT3.1.1 and the newer MQTT5 industry specifications allowing clients with either version to take advantage of this new feature seamlessly.

Amazon Elastic Container Service (Amazon ECS) now provides contextual failure reasons that make it easier to troubleshoot task launch failures when customers use capacity providers for auto scaling the compute capacity in their cluster.

Amazon S3 adds a new Amazon CloudWatch metric to quickly diagnose and correct S3 Replication configuration issues. The OperationFailedReplication metric, available in both the S3 console and in Amazon CloudWatch, gives you per-minute visibility into the number of objects that did not replicate to the destination bucket for each of your replication rules.

We are pleased to announce that as of today, new Cost Explorer users in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will automatically receive the benefit of Cost Anomaly Detection. Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of unexpected cost increases. The default configuration allows new Cost Explorer users to quickly improve cost controls with zero effort.

Amazon EventBridge now supports Event Replay, which makes event-driven applications more durable and extensible by providing developers an easy way to replay past events. Event replay enables developers using Amazon EventBridge to build applications with the confidence that they can quickly recover from errors in their code, and the ability to easily extend their existing applications to add new functionality.

With Amazon Athena, you can use your SQL knowledge to query nearly 30 data stores - in addition to data stored in an Amazon S3 data lake - all without learning a new language, developing scripts to extract and duplicate data, or managing infrastructure. Starting today, you can now create and query views on these data sources, which include relational databases, streaming sources, and cloud object stores, for use cases such as interactive analysis and business intelligence reporting.

Amazon ElastiCache for Redis now makes it simpler and faster for you to get started with setting up an ElastiCache for Redis cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

As announced on December 14, Amazon S3 is now deploying two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide (S3 Block Public Access – S3 Object Ownership).

Amazon Elastic File System (Amazon EFS) has increased the maximum number of Access Points per file system from 120 to 1,000, enabling you to control file system access permissions across a larger number of applications in multi-tenant environments.

Amazon Lambda now supports setting Maximum Concurrency to the Amazon SQS event source, which allows customers to control the maximum concurrent invokes by the Amazon SQS event source. When multiple Amazon SQS event sources are configured to a function, customers can control the maximum concurrent invokes of an individual SQS event source. 

Amazon Redshift announces GA of Automated Materialized View (AutoMV) that helps you to lower query latency for repeatable workloads. AutoMV minimizes your effort for manually creating and managing materialized views and provides you the same performance benefits of user-created materialized views. Dashboard queries used to provide quick views of key performance indicators (KPIs), events, trends, and other metrics are some examples of workloads that can benefit from AutoMV. Reporting queries scheduled at various frequencies may also benefit from AutoMV.

Amazon Lake Formation is a service that makes it simple to set up a secure data lake in days. A data lake is a centralized, curated, and secure repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better decisions.

Customers can now track the build status and image build steps for their image pipelines directly in EC2 Image Builder. This capability makes it easier for you to track image builds, troubleshoot the build failures, and collect logs for audit purposes. Customers can also experience faster image build speeds as a result of workflow optimizations, with internal tests showing up to 35% improvements.

Cross-account observability across Amazon CloudWatch is launched to help you monitor and troubleshoot applications that span multiple Amazon Web Services accounts within an Amazon Web Services Region. With cross-account observability in CloudWatch, you can seamlessly search, visualize, and analyze your metrics, logs, and traces without any account boundaries. Centralized security, operations, platform teams, and service owners deploying applications across multiple accounts can aggregate and correlate cross-account telemetry data in Amazon CloudWatch. They can use resulting trends and insights to efficiently monitor and troubleshoot issues affecting the health of their applications. Cross-account observability is an addition to CloudWatch’s unified observability capability.

Starting today you will receive notifications for your On-Demand Capacity Reservations that are utilizing less than 20% of Amazon EC2 instances in the reservation. These alerts will be delivered to you through Amazon Health Dashboard, Cloudwatch Events and email, without any action required from your side and at no additional cost to you. 

Amazon Cloud Map enables service editing capability in the Amazon Web Services Console in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Today, Amazon CloudFormation has expanded the availability of StackSets to the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, customers can deploy their stack sets to and from these newly supported Amazon Web Services Regions.

Amazon SWF now supports Amazon PrivateLink allowing you to run workflows from your Virtual Private Cloud (VPC) without traversing the public internet.

NICE DCV version 2023.0 introduces multiple enhancements and features, such as support for Red Hat Enterprise Linux 9 and monitor selection for a full-screen remote session on Linux and macOS clients. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Compute Optimizer now provides cost and performance optimization recommendations for 37 new EC2 instances types, including bare metal instances (m6g.metal) and compute optimized instances . Additionally, Amazon Compute Optimizer now analyzes the “Available Mbytes”, “Available Kbytes”, and “Available Bytes” metrics to deliver more accurate EC2 instance recommendations for EC2 Windows instances.

Amazon Compute Optimizer now delivers recommendations to help customers identify optimal Amazon Elastic Container Service (Amazon ECS) task CPU and memory configurations for Amazon ECS services running on Amazon Fargate.

Amazon Compute Optimizer now supports 66 more Amazon Elastic Compute Cloud (Amazon EC2) instance types. Newly supported instance types include the latest generation general purpose instance families from both Intel and AMD (M6i), compute optimized instance families (C6i), memory optimized instance family (R6i), and storage optimized instance families. These additions to Compute Optimizer allow customers to ensure they are always sized to an optimal EC2 instance type by delivering recommendations that ensure high performance at low cost.

Amazon Elastic Kubernetes Service (EKS) announces domainless Group Managed Service Account (gMSA) support for Windows containers. This helps customers to easily authenticate applications hosted on Amazon EKS with Microsoft Active Directory (AD) using a portable user identity and using a plug-in mechanism to retrieve the gMSA credentials for their Windows containers. With the latest offering, customers can run containers without joining the Amazon EKS nodes or underlying instances to the domain and they don’t need to rejoin the node to a domain in rolling update or auto scale events.

Today, Amazon Compute Optimizer launches a new capability that makes it easier for customers to optimize their EC2 instances by leveraging multiple CPU architectures.

Amazon Athena has expanded its encryption settings to improve the security of your query results. With today’s launch, you can now ensure all query results are encrypted at or above a level of encryption that you specify.

Amazon Simple Notification Service (Amazon SNS) now supports setting content-type request headers for HTTP/S notifications. This enables your topic subscribers to create a DeliveryPolicy that specifies the content-type value that Amazon SNS assigns to their HTTP/S notifications, such as application/json, application/xml, or text/plain. With this launch, applications can receive their notifications in a more predictable format.

Amazon CloudFormation has expanded the availability of language Transform called ‘AWS::LanguageExtensions' to the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. When declared in a template, the transform enables extensions to the template language in Amazon CloudFormation. The language extensions transform expands the functionality of the base CloudFormation JSON/YAML template language.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.3.2 for new and existing clusters. Apache Kafka 3.3.2 includes several bug fixes and new features that improve performance. Some of the key features include enhancements to fetch from the closest replica and metrics. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.3.2.

Amazon MQ now supports the Amazon Key Management Service to create and manage keys for at-rest encryption of customer data for RabbitMQ brokers. Amazon MQ handles the encryption and decryption seamlessly, so you don’t have to change your applications to access your data. When you create a broker, you can now select the KMS key used to encrypt your data from the following three options: a KMS key in the Amazon MQ service account, a KMS key in your account that Amazon MQ creates and manages, or a KMS key in your account that you create and manage. In addition to encryption at rest, all data transferred between Amazon MQ and client applications is securely transmitted using TLS/SSL.

Application Load Balancer (ALB) now supports version 1.3 of the Transport Layer Security (TLS) protocol, enabling you to optimize the performance of your backend application servers while helping to keep your workloads secure. TLS 1.3 on ALB works by offloading encryption and decryption of TLS traffic from your application servers to the load balancer. TLS 1.3 is optimized for performance and security by using one round trip (1-RTT) TLS handshakes, and only supporting ciphers that provide perfect forward secrecy.

Amazon Organizations tag policies are now available in both the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services (Ningxia) Region, operated by NWCD. The tag policies feature is available to customers through the Amazon Web Services Console, Amazon Command Line Interface (CLI), or Amazon SDKs. 

Today, we are announcing the general availability of Amazon Linux 2023 (AL2023), our new Linux-based operating system for Amazon Web Services that is designed to provide a secure, stable, high-performance environment to develop and run your cloud applications. AL2023 provides seamless integration with various Amazon Web Services services and development tools and offers optimized performance for Amazon Elastic Compute Cloud (EC2) Graviton-based instances and Amazon Web Services Support at no additional licensing cost. Starting with AL2023, a new Amazon Linux major release will be available every 2 years. This cadence provides you with a more predictable release cycle and up to 5 years of support, making it easier for you to plan your upgrades.

Amazon Database Migration Service (Amazon DMS) now supports validation to ensure that data is migrated accurately to S3.

Using Amazon S3 Object Lambda, you can add your own code to S3 GET, HEAD, and LIST API requests to modify data as it is returned to an application. You can now use an S3 Object Lambda Access Point alias as an origin for your Amazon CloudFront distribution to tailor or customize data to end users. For example, you can resize an image depending on the device that an end user is visiting from.

Amazon CloudWatch Logs now supports ingesting enriched metadata introduced in Amazon Virtual Private Cloud (Amazon VPC) flow logs as part of versions 3 to 5 additional to the default fields. This launch includes metadata fields that provide more insights about the network interface, traffic type, and the path of egress traffic to the destination.

Amazon Database Migration Service (Amazon DMS) has expanded support of Amazon Simple Storage Service (Amazon S3) as a target by adding the ability to create an Amazon Glue Data Catalog from the Amazon S3 data files generated by Amazon DMS. With this integration, you no longer need to run a crawler or additional ETL jobs to create the catalog, and the Amazon S3 data is ready to be queried through other Amazon Web Services services such as Amazon Athena. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) supports MySQL 8.0.26. In addition to several security enhancements and bug fixes, MySQL 8.0.26 includes several changes, such as enhanced tablespace file segment page configuration and new aliases for certain identifier names. For more details, please review Aurora MySQL 3 and MySQL 8.0.26 release notes.

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in Amazon Web Services China (Beijing) Region operated by Sinnet, and Amazon Web Services China (Ningxia) Region operated by NWCD.

Amazon Relational Database Service (RDS) Proxy is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.. Amazon RDS Proxy is a fully managed and a highly available database proxy for Amazon Aurora and RDS databases. Amazon RDS Proxy can help improve application scalability, resiliency, and security.

Amazon S3 Access Points simplify data access for any Amazon Web Services service or customer application that stores data in S3 buckets. With S3 Access Points, you create unique access control policies for each access point to more easily control access to shared datasets. Now, bucket owners are able to authorize access via access points created in other accounts. In doing so, bucket owners always retain ultimate control over data access, but can delegate responsibility for more specific IAM-based access control decisions to the access point owner. This allows you to securely and easily share datasets with thousands of applications and users, and at no additional cost.

Amazon OpenSearch Service announces security analytics that provides new threat monitoring, detection, and alerting features. These capabilities help you to detect and investigate potential security threats that may disrupt your processes or pose a threat to sensitive organizational data.

Application Auto Scaling customers can now use Amazon CloudWatch Metric Math to customize the metrics they use with Target Tracking policy without actually publishing and paying for the customized metrics separately. Customers can use both arithmetic operators (such as +, -, /, and *) and mathematical functions (such as Sum and Average) to easily create custom metrics based on existing CloudWatch metrics. Application Auto Scaling offers support to automatically scale capacity of 13 supported services, including Amazon Elastic Container Service (ECS) services. Specifically, Target Tracking works like a thermostat - it continuously changes the capacity of the scaled resource to maintain the specified metric at a customer-defined target level. Today’s release makes it easier and cheaper to configure Target Tracking with custom metrics.

You can now run OpenSearch and OpenSearch Dashboards version 2.5 in Amazon OpenSearch Service. With OpenSearch 2.5, OpenSearch Service adds several new features and enhancements such as support for Security Analytics, support for Point in Time Search, improvements to observability and geospatial functionality. 

Virtual Private Cloud (VPC) interface endpoints for Amazon S3 now offer private DNS options that can help you more easily route S3 requests to lower-cost endpoints in your VPC. With private DNS for S3, your on-premises applications can use Amazon PrivateLink to access S3 over an interface endpoint, while requests from your in-VPC applications access S3 using gateway endpoints. Routing requests in this way helps you to take advantage of lower-cost private network paths without having to make code or configuration changes to your clients.

Amazon Route 53 Resolver endpoints now supports IPv6, allowing you to forward traffic to and resolve traffic from on-premises Domain Name System (DNS) resolvers with IPv6 addresses.

Today, Amazon Neptune adds support for Slow Query Logs to help identify queries that need performance tuning. You can now identify slow-running queries and log runtime details for these queries’ key performance indicators such as query execution time, and response codes to Amazon CloudWatch Logs.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL 14.6, 13.9, 12.13, and 11.18 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process.

Starting today, Amazon Neptune supports R6i instances powered by 3rd generation Xeon Scalable processors. R6i instances are the 6th generation of Amazon EC2 memory optimized instances, designed for memory-intensive workloads. R6i instances provide up to 50 Gbps of networking speed, 2x that of R5 instances, and up to 20% higher memory bandwidth per vCPU compared to R5 instances.

Amazon Neptune now supports graph summary API to help you understand important metadata about your property graphs (PG) and Resource Description Framework (RDF) graphs. Starting with engine version 1.2.1.0, you can use the graph summary API to retrieve estimated counts for your nodes, edges, and properties or incorporate the API into your graph applications for fast access to summary data about your graph.

Deletion protection is now available for Amazon DynamoDB tables in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. DynamoDB now makes it possible for you to protect your tables from accidental deletion when performing regular table management operations. When creating new tables or managing existing tables, authorized administrators can set the deletion protection property for each table, which will govern whether a table can be deleted. The default setting for the deletion protection property is disabled. When the deletion protection property is enabled for a table, the table cannot be deleted, irrespective of whether any Amazon Web Services Identity and Access Management (IAM) permissions policies allow deletion of the table. When deletion protection is disabled for a table, authorized administrators can delete the table if allowed by IAM permissions policies. The deletion protection property can be set through the Amazon Web Services Management Console, API, CLI, SDK, or Amazon Web Services CloudFormation.

Amazon RDS for SQL Server now supports Cross Region Read Replica in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Cross Region Read Replica enables managed disaster recovery capability for mission critical databases by allowing a read replica in another region be "promoted" as a new standalone production database. This feature also supports data proximity by enabling replicas be placed closer to the application users of a given region to reduce read latencies. Additionally, this feature allows Amazon RDS for SQL Server customers to offload their read workload from the primary DB Instance, and also scale out read workloads over a farm of up to fifteen read replicas that can reside in any China region. To get started, visit the Amazon RDS SQL Server User Guide.

Amazon Cognito identity pools now publishes data events to Amazon CloudTrail logs. Customers now have greater visibility into access-related activities for both guest and authenticated users of their applications. Administrators can now configure Amazon CloudWatch Alarms to monitor specific activity on Amazon Cognito identity pools and react based on automated workflows. Customers can record data events in Amazon CloudTrail and gain better insight into the identity providers leveraged by users to access to Amazon Web Services resources with Amazon Cognito identity pools. Amazon CloudTrail may charge for recording data events.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.2, 14.7, 13.10, 12.14, and 11.19. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon Identity and Access Management (IAM) now enables workloads that run outside of Amazon Web Services Cloud to access Amazon Web Services resources using IAM Roles Anywhere. IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary Amazon Web Services credentials and use the same IAM roles and policies that you have configured for your Amazon Web Services workloads to access Amazon Web Services resources.

We’re pleased to announce the launch of Amazon Glue version 4.0, a new version of Amazon Glue that accelerates data integration workloads in Amazon. Amazon Glue 4.0 upgrades the Spark engines to Apache Spark 3.3.0 and Python 3.10. Glue 4.0 gives customers the latest Spark and Python releases so they can develop, run, and scale their data integration workloads and get insights faster.

AWS Elemental MediaConvert now has enhanced color processing features along with support for new color formats. As High Dynamic Range (HDR) content becomes more common, the ability to convert between Standard Dynamic Range (SDR) and HDR has also become important. While high-value content is commonly created using HDR color, most legacy, user-generated, and mass-produced content is created in SDR. Demand for format normalization continues to grow as users look to combine SDR and HDR content for editing, distribution, and monetization.

You can now create a single AMI that can boot on both Unified Extensible Firmware Interface (UEFI) and Legacy BIOS.

You can now use new Credential Control Properties to more easily restrict the usage of your IAM Roles for EC2.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.12, 10.5.19, 10.4.28 and 10.3.38. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Transfer Family now allows you to send Applicability Statement 2 (AS2) messages using HTTPS. AS2 offers security features like encryption and non-repudiation by default. With the ability to send AS2 messages over HTTPS, you can now benefit from an additional layer of in-transit encryption for your most sensitive EDI payloads and further compatibility with trading partners that require SSL/TLS communications.

Amazon Relational Database Service (RDS) for SQL Server now supports Cross Region Automated Backups with encryption in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The Amazon RDS Cross-Region Automated Backups feature enables disaster recovery capability for mission-critical databases by providing you the ability to restore your database to a specific point in time within your backup retention period. This allows you to quickly resume operations in the event that the primary Amazon Web Services Region becomes unavailable. If you've enabled encryption on the source RDS for SQL Server DB instance, you can use this feature to copy encrypted DB snapshots to regions outside of the primary Amazon Web Services Region.

You can now use Amazon CloudFormation templates to create and manage Amazon Transfer Family resources for AS2 including servers, connectors, partner profiles, and certificates. Amazon CloudFormation makes it easy to configure the entire stack of AS2 resources required to initiate and test an end-to-end AS2 message exchange. Additionally, you can now access Amazon CloudWatch metrics for AS2, such as number of successful and failed AS2 messages, in the Amazon Transfer Family Management Console. These metrics enable you to more effectively monitor your AS2 activity using a centralized dashboard.

February 07, 2023 - Amazon DocumentDB (with MongoDB compatibility) continues to increase compatibility with MongoDB, and now offers added support for MongoDB API version 5.0 drivers with Amazon DocumentDB 5.0. Amazon DocumentDB is a fast, scalable, highly available, and fully managed document database service that supports MongoDB API based workloads. Amazon DocumentDB makes it easy and intuitive to store, index, and query JSON data.

Amazon Elastic Container Service (Amazon ECS) now enables customers to delete inactive task definition revisions programmatically or via the Amazon ECS console. With this new capability, customers can permanently delete task definition revisions that are no longer needed or contain undesirable configurations, simplifying their resource management and improving security posture.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-3.9 and recommends customers to migrate Synthetics canaries to the latest runtime version. Runtime version syn-nodejs-puppeteer-3.9 includes updates to third-party dependency packages. Please refer to the runtime support policy for additional details. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest major version PostgreSQL 15. New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. The PostgreSQL 15 release also adds support for new extension pg_walinspect and server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release.

Today, FLAC audio and animated GIF video input sources for AWS Elemental MediaConvert is available in Amazon Web Services China (Ningxia) Region, operated by NWCD. These new input formats are compatible with all MediaConvert outputs. For example, you can convert lossless FLAC files into compressed audio formats like AAC, MP3, and Ogg Vorbis, or use FLAC files as sidecar audio sources to be joined with video files. Animated GIF inputs can be converted into higher-efficiency video streaming codecs like AVC and HEVC and distributed as standalone MP4 files or adaptive-bitrate streaming packages such as HLS or DASH.

Amazon Managed Streaming for Apache Kafka (MSK) now offers Tiered storage that brings a virtually unlimited and low-cost storage tier. Tiered Storage lets you store and process data using the same Kafka APIs and clients , while saving your storage costs by 50% or more over existing MSK storage options . Tiered Storage makes it easy and cost-effective when you need a longer safety buffer to handle unexpected processing delays or build new stream processing applications. You can now scale your compute and storage independently, simplifying operations.

You can now use Service Quotas in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, to view and manage your service quotas at scale as your Amazon Web Services workloads grow.

Amazon OpenSearch Service now lets you schedule service software and auto-tune updates during off-peak hours, helping you plan deployments to your domain better. In addition, with improved notifications through EventBridge events, and notifications on the OpenSearch Service console, you have better visibility of scheduled updates, when the updates start, and complete.

Starting today Amazon Relational Database Service (Amazon RDS) for MySQL supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Relational Database Service (RDS) for Oracle now supports early notifications of Auto minor Version Upgrades (AmVU) via Pending Maintenance Actions (PMA) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet., thereby improving usability of AmVU.

Starting today Amazon RDS for MariaDB supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Kinesis Data Streams for Amazon DynamoDB now supports Amazon CloudFormation for DynamoDB global tables, which means you can enable streaming to an Amazon Kinesis data stream on your DynamoDB global tables with CloudFormation templates. By streaming your DynamoDB data changes to a Kinesis data stream, you can build advanced streaming applications with Amazon Kinesis services. For example, Amazon Kinesis Data Analytics reduces the complexity of building, managing, and integrating with Apache Flink and provides built-in functions to filter, aggregate, and transform streaming data for advanced analytics. You also can use Amazon Kinesis Data Firehose to take advantage of managed streaming delivery of DynamoDB table data to other Amazon Web Services services such as Amazon OpenSearch Service, Amazon Redshift, and Amazon S3.

Amazon Elastic Container Service (Amazon ECS) has increased the “Tasks in PROVISIONING state per cluster“ service quota to deliver a faster Cluster Auto Scaling experience. Customers who need to launch a large number of tasks (>300) in their Amazon ECS clusters will now see their cluster infrastructure scale faster.

Today, Amazon Systems Manager announces adding CloudWatch Alarms to control tasks. Now customers can choose to stop a task or an action in Systems Manager services when a CloudWatch alarm is activated. This allows customers to use the broad range of monitoring metrics supported by CloudWatch, ranging from resource utilization to application performance, to control tasks. If the specified CloudWatch alarm is activated during a task, Automation will stop the task, RunCommand will cancel the commands, State Manager and Maintenance Windows will skip dispatch. It's easy to get started, customers can add a CloudWatch alarm, while setting up a task in Systems Manager’s Automation, Run Command, State Manager, and Maintenance Windows services. Once setup, users can view the attached alarm in the task's details page. 

 Glue launches G.025X, a new quarter DPU worker type for streaming extract, transform, and load (ETL) jobs. This smaller worker type is suitable to process low volume and sporadic data streams. 

Torn Write Prevention (TWP) is a feature that ensures 16KiB write operations are not torn in the event of operating system crashes or power loss during write transactions. This feature is now available for customers in Amazon Web Services China Regions in Amazon Elastic Block Store (EBS), a block storage service, when attached to all EC2 Nitro-based instances.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Writes. With Optimized Writes you can improve write throughout by up to 2x at no additional cost. This is especially useful for RDS for MySQL customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Trusted Advisor fault tolerance checks for ElastiCache for Redis and MemoryDB for Redis are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, the Trusted Advisor fault tolerance checks for ElastiCache for Redis are now available in all Amazon Web Services regions. Amazon Trusted Advisor evaluates your Amazon Web Services account with automated best practice checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, and monitor service quotas.

Amazon Resource Access Manager (Amazon RAM) now supports higher default quotas to help you scale your resource sharing. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), or with Amazon Identity and Access Management (IAM) roles and users for supported resource types. For each Amazon Web Services Region in an account, you can now share up to 25,000 resources and share resources with up to 25,000 principals. Additionally, you can create up to 25,000 resource shares per Amazon Web Services Region in an account. For each individual resource share, you can share up to 5,000 resources and share resources with up to 5,000 principals.

Amazon ElastiCache for Redis 7 now includes enhanced I/O multiplexing, which delivers significant improvements to throughput and latency at scale. Enhanced I/O multiplexing is ideal for throughput-bound workloads with multiple client connections, and its benefits scale with the level of workload concurrency. As an example, when using r6g.xlarge node and running 5200 concurrent clients, you can achieve up to 72% increased throughput (read and write operations per second) and up to 71% decreased P99 latency, compared with ElastiCache for Redis 6.

Amazon Gateway Load Balancer (GWLB) and Gateway Load Balancer Endpoint (GWLBE) now support end-to-end connectivity using Internet Protocol version 6 (IPv6). Customers can now send IPv6 traffic through Gateway Load Balancers and its endpoints to distribute traffic flows to dual stack appliance targets. 

Starting today, the Amazon Web Services Bills page has a re-designed user experience, making it easier to understand your Amazon Web Services spend. The Bills page provides an overview of your charges and the ability to drill into key details; the re-design provides a refreshed user interface, new views of your savings and taxes, and enhanced sorting and filtering capabilities. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now connect over IPv6 to your services hosted in Amazon Web Services using Amazon PrivateLink. Amazon PrivateLink is a highly available, scalable technology that enables you to privately connect your VPC to supported Amazon Web Services services, services hosted by other Amazon Web Services accounts (VPC Endpoint Services), third-party SaaS services and supported Amazon Web Services Marketplace partner services.

Amazon Lambda now allows you to create or update your functions with container images stored in an Amazon ECR repository in a different Amazon Web Services account than that of your Lambda function. Previously, you could only access container images stored in an Amazon ECR repository in the same account as your Lambda functions. If you used a centralized account for your Amazon ECR repositories, you needed to copy your container images into an Amazon ECR repository in the same account as your Lambda function. You can now simplify this workflow by accessing the container image stored in an Amazon ECR repository in a different account. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the tcn extension which provides a trigger function that allows you to asynchronously notify listeners of changes to a table.

Amazon Elastic Container Service (Amazon ECS) has improved the accuracy of Elastic Load Balancing (ELB) for Amazon ECS services. Load balancing on Amazon ECS now more accurately routes traffic to running tasks as tasks will be deregistered from the ELB before they enter a stopped state. Furthermore, with these improvements, Amazon ECS also helps your services running on the Fargate Spot capacity provider be more resilient to Spot termination notices.

Amazon Identity and Access Management now supports the ability to refine permissions policies based on the organizational unit (OU) or organization ID in Amazon Organizations of the principal or resource. With these new IAM capabilities, you now can author IAM policies to enable your principals to access only resources inside specific OUs, or organizations.

Today, we are excited to announce the expansion of instance refresh to support instances on standby or protected from scale in. For instances on standby, you now have the options to terminate them, ignore them altogether, as well as the current option to wait until they return to in service. For protected instances, you now have the options to refresh them, ignore them altogether, as well as the current option to wait for them until you remove scale-in protection.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.32 and 5.7.41. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Today, we are excited to announce the ability to roll back an Auto Scaling instance refresh. EC2 Auto Scaling’s instance refresh feature allows you to replace instances in an Auto Scaling group on a rolling basis. With today’s launch you can use a rollback to undo changes an instance refresh made when it fails.

Amazon Cloud Map increases default limit of service instances that can be registered in a namespace with API calls discovery from 2,000 to 6,000 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports active tracing with Amazon X-Ray. Customers can now view traces that flow through Amazon SNS topics to destination services, such as Amazon Simple Queue Service, Amazon Lambda, and Amazon Kinesis Data Firehose, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. Customers can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API or the Amazon SNS Management Console.

Amazon Elasticache for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, ElastiCache for Redis offered an SLA of 99.9% for Multi-AZ configurations. With this launch, ElastiCache for Redis has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon MemoryDB for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, MemoryDB offered an SLA of 99.9% for Multi-AZ configurations. With this launch, MemoryDB has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon Pricing Calculator is a free, web-based planning tool that helps you to estimate the cost of your use cases in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows you to explore the price points of services based on your architectural designs or common use cases, and review calculations behind your estimates. You can estimate cost of an individual or multiple services based on your needs.

Announcing Amazon CloudWatch Metric Streams - a new feature that enables customers to create a continuous, near real-time stream of metrics to a destination of their choice.

Amazon Database Migration Service (Amazon DMS) now supports Amazon EC2 C6i and R6i instance types in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of 3.5 GHz, offering up to 15% better compute price performance over comparable Generation5 instances for a wide variety of workloads, and always-on memory encryption using Intel Total Memory Encryption (TME).

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge), 9TiB of memory (u-9tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Today, Amazon CloudFormation adds Spotlight tab on the Amazon Web Services Management Console for CloudFormation to give quick access to curated articles on CloudFormation. You can now find Amazon CloudFormation articles from multiple official Amazon Web Services channels at a single location. You can use this feature to discover the editor’s choice articles on CloudFormation. With this launch, you can find the latest information on CloudFormation features, blogs, and workshops.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the seg extension which provides the "seg" data type for representing line segments or floating point intervals.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports additional cipher suites that can be used with the OEM Agent and SSL options in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can make use of these new cipher suites as they provide stronger security for the RDS for Oracle database instance(s) connections, thereby increasing the security posture of their infrastructure.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.6, 13.9, 12.13, 11.18, and 10.23. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release. 

Amazon OpenSearch Service now supports enabling Security Assertion Markup Language (SAML) authentication for OpenSearch Dashboards during domain creation. SAML authentication for OpenSearch Dashboards enables users to integrate directly with third-party identity providers (IDP) such as Okta, Ping Identity, OneLogin, Auth0, Active Directory Federation Services (ADFS) and Azure Active Directory.

Starting today, you can configure your NAT Gateway to support up to 440,000 concurrent connections to a single destination by adding multiple IP addresses to same NAT Gateway.

Customers in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can now hibernate Amazon EC2 I3en, M6i and C6i instances. Hibernation provides you with the convenience of pausing your workloads and resuming them later from the saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off. By using hibernation, you can maintain a fleet of pre-warmed instances that can get to a productive state faster without modifying your existing applications.

Starting today, Amazon EC2 Launch Templates support Amazon Systems Manager parameters for Amazon Machine Images (AMIs). This simplifies automation and reduces misconfiguration likelihood by eliminating the need to create a new launch template version for every AMI update. 

Today, Amazon CloudFormation StackSets adds a new parameter in DescribeStackSet API to improve visibility to the list of Regions where a given stack set is deployed. You can now access the list of Regions directly through your management or delegated administrator Amazon Web Services account.

Amazon OpenSearch Service adds a new connection mode for cross-cluster connection, simplifying the setup required to remote reindex between a local domain and a remote VPC domains. Remote reindex enables you to migrate data from a source domain to a target domain. Remote reindex is also useful when you have to upgrade your domains across multiple major versions.

Amazon Glue Studio Job Notebooks are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. They provide interactive, notebook-based job authoring for Amazon Glue to simplify the process of developing data integration jobs. Job Notebooks act as a serverless, built-in interface for Amazon Glue Interactive Sessions, a new feature that allows customers to run interactive Apache Spark workloads on demand.

Today, Amazon Neptune announces support for JupyterLab 3 on Neptune notebooks to boost the productivity of developers and data scientists using the Neptune Workbench. With this update, you can now launch Neptune notebooks in the Amazon Web Services Management console using JupyterLab to access a modern interactive development environment (IDE) complete with developer tools for code authoring, debugging, and support for the latest open source JupyterLab extensions. 

Amazon Backup announces support for Amazon Redshift, making it easier for you to centrally manage data protection of your Amazon Redshift data warehouse. You can now use Amazon Backup to schedule and restore Redshift manual snapshots. Further, your backups can provide enhanced data protection with immutability, improved security with separate backup access policies, and better governance by centralizing backup and recovery.

Amazon Redshift Concurrency Scaling is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (RDS) for MariaDB supports encrypted SSL/TLS connections to the database instances. Starting today, you can enforce SSL/TLS client connections to your Amazon RDS for MariaDB database instance for enhanced transport layer security. To enforce SSL/TLS, enable the require_secure_transport parameter (disabled by default) through the Amazon RDS Management Console, the CLI or the API. When the require_secure_transport parameter is enabled, a database client will be able to connect to the RDS for MariaDB instance only if it can establish an encrypted connection.

Amazon EMR now supports Amazon EC2 R6GD, C6I, M6I, R6I, G4DN, C5A AND X1 Instances in Amazon Web Services China (Ningxia) Region, operated by NWCD, and Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Amazon OpenSearch Service now lets you validate the configuration changes before applying them via the console, SDK or the APIs. With this new option, Amazon OpenSearch Service performs detailed validation of the desired changes and provides a report. The option also reports if the change will require a blue/green deployment to help you plan your changes better.

Amazon Launch Wizard is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Launch Wizard offers a guided way of sizing, configuring, and deploying Amazon Web Services resources for third party applications, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual Amazon Web Services resources. 

Amazon Elastic File System (Amazon EFS) now supports a 1-day Lifecycle Management Policy that allows you to automatically move files that haven’t been accessed in 1 day to the Amazon EFS Infrequent Access (EFS IA) storage class. You can configure this new policy option for your file system, or you can use one of the existing policy options: 7, 14, 30, 60, or 90 days.

Amazon ElastiCache for Memcached has added support for Memcached version 1.6.17. This version is a cumulative update and contains all changes and improvements from version 1.6.12 to 1.6.17. 

Amazon Simple Notification Service (SNS) now supports a higher default quota for subscription filter policies. With the increased quota, you can now have up to 10,000 subscription filter policies per account, and can apply up to 200 subscription filter policies per topic. By default, topic subscribers receive every message published to a topic. With subscription filter policies, subscribers can filter out unwanted messages, simplifying their architecture and optimizing the utilization of their resources.

Amazon CloudFormation announces support for CloudFormation Linter (cfn-lint) in Amazon Serverless Application Model Command Line Interface ( SAM CLI). The cfn-lint tool validates your JSON/YAML template against CloudFormation-based rules, and returns diagnostic error messages. With this launch, you can use an optional parameter --lint in sam validate command to run cfn-lint validations on your JSON/YAML templates.

Starting today, Amazon EC2 X2idn and X2iedn instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. X2idn and X2iedn instances are designed for memory-intensive workloads and deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These new instances are powered by 3rd generation Intel Xeon Scalable Processors (Ice Lake) and deliver up to 50% higher compute price performance than comparable X1 instances. X2idn has a 16:1 ratio of memory to vCPU and X2iedn has a 32:1 ratio, making these instances a great fit for workloads such as in-memory databases and analytics, big data processing engines, and Electronic Design Automation (EDA) workloads.  

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these new High Memory instances with On Demand and Reserved Instance purchase options.

Amazon EC2 Console introduces the new and improved launch experience - a quicker and easier way to launch an instance. The new design provides a single page layout allowing you to view all your settings in one location. You no longer need to navigate back and forth between steps to ensure your configuration is correct. The new design also introduces a summary panel, that provides an overview and helps navigate the page.  

Today, Amazon CloudFormation updates the language extension transform to supports default values and additional intrinsic functions in Fn::FindInMap. Customers can use these features to minimize the length of their CloudFormation templates, and improve their readability. The language transform enables extensions to the CloudFormation template language with functions such as Fn::Length, Fn::JsonToString, etc. Customers can modularize their templates into groups with different attributes in Parameters and Mappings, and use Fn::FindInMap to refer to attributes of these groups. For example, you can use Fn::FindInMap for EC2 resource type with a Mappings section containing a single map, RegionMap, that associates AMIs with Amazon Web Services Regions to your EC2 instances. With these language enhancements, you can use intrinsic functions such as Fn::Split, Fn::Select, and others within Fn::FindInMap. Previously, Fn::FindInMap only supported Fn::FindInMap and Ref intrinsic functions. Additionally, you can define string or list type default values in Fn::FindInMap. To see the list of supported intrinsic functions and learn about Fn:FindInMap, refer to the user guide.

Amazon Backup now offers you the ability to create legal holds on your protected data beyond your defined retention policies, for legal and auditing purposes. Legal holds prevent your backups from being deleted after the expiration of their retention period, until your backups are explicitly released from legal hold. With this feature, Amazon Backup allows you to manage legal hold requests at scale and help prove compliance to outside counsel, auditors, and related third-parties.

Trusted Language Extensions for PostgreSQL is a new open source development kit to help you build high performance extensions that run safely on PostgreSQL. With Trusted Language Extensions, developers can install extensions written in a trusted language on Amazon Aurora PostgreSQL-Compatible Edition and Amazon Relational Database Service (RDS) for PostgreSQL.

Amazon S3 Storage Lens now offers lower pricing tiers for customers with 25 billion or more objects, making continuous monitoring of large storage footprints more cost effective. Customers with hundreds of billions of objects will now see progressively lower prices, saving up to 40% on organization-wide storage monitoring.

Today, Amazon Backup is announcing application-aware data protection that enables you to add Amazon CloudFormation stacks to backup policies, making it easier for you to back up and restore your entire applications. Amazon Backup automates the data protection of applications that are defined using Amazon CloudFormation stacks to create immutable application-level backups using Amazon Backup Vault Lock.

Amazon S3 now automatically applies S3 managed server-side encryption (SSE-S3) as a base level of encryption to all new objects added to S3, at no additional cost and with no impact on performance. SSE-S3 uses 256-bit Advanced Encryption Standard and is already applied to trillions of objects. This new base level of encryption helps customers meet their encryption requirements, with no changes to applications. Additionally, customers can still choose to encrypt their objects using customer-provided encryption keys (SSE-C), Amazon Key Management Service keys (SSE-KMS), or a client library such as the Amazon S3 Encryption Client.  

Amazon Kinesis Video Streams is now available in the Amazon Web Services China (Beijing) Region operated by Sinnet. Amazon Kinesis Video Streams makes it easy to securely stream video from connected devices to Amazon Web Services for analytics, machine learning (ML), playback, and other processing. Kinesis Video Streams automatically provisions and elastically scales all the infrastructure needed to ingest streaming video data from millions of devices. It durably stores, encrypts, and indexes video data in your streams, and allows you to access your data through easy-to-use APIs. Kinesis Video Streams enables you to playback video for live and on-demand viewing, and quickly build applications that take advantage of computer vision and video analytics.

Amazon Relational Database Service (Amazon RDS) now supports Blue/Green Deployments to help you with safer, simpler, and faster updates to your Amazon Aurora and Amazon RDS databases. Amazon RDS Blue/Green Deployments create a fully managed staging environment that allows you to deploy and test production changes, keeping your current production database safe. With a single click, you can promote the staging environment to be the new production system in as fast as under a minute, with no changes to your application and no data loss.

Today, we are introducing a new price and capacity optimized allocation strategy for Amazon EC2 Spot Instances in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD to help you optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. The price and capacity optimized allocation strategy makes Spot allocation decisions based on both spare capacity availability and Spot Instance price. The price and capacity optimized allocation strategy is the best choice for most Spot applications such as big data, containerized workloads, CI/CD, web servers, image and media rendering, machine learning, and high performance computing (HPC).

Amazon Transfer Family announces built-in support for PGP decryption of files uploaded over SFTP, FTPS or FTP to Amazon S3 or Amazon EFS. Customers can now configure and automate decryption of files that are encrypted using PGP keys by their users before upload, which can help them meet their data protection and compliance requirements when exchanging sensitive data with third parties.

Amazon RDS for Oracle now supports copying option groups during in-region cross-account snapshot copy requests using the API, CLI, or Amazon Backup. Amazon RDS uses option groups to enable and configure features that make it easier to manage your databases. Copying the option groups with the snapshot on cross account copy allows you to restore that snapshot in the target account with the same options as the source snapshot without needing to reconfigure the option groups. 

Amazon CloudFormation now supports AllowedValues and AllowedPattern properties for CommaDelimitedList parameter type. You can use the CommaDelimitedList parameter type to specify multiple string values in a single parameter. For example, you can create three different subnets with their own VPC CIDR blocks, and use CommaDelimitedList to specify three different CIDR blocks. With these language enhancement, you can add validation checks to your CommaDelimitedList, and reduce input errors to your CommaDelimitedList while updating your stacks and/or stack sets.

We are excited to announce the availability of Reserved nodes for Amazon MemoryDB for Redis in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Reserved nodes allow you to save up to 55% over On-Demand node prices in exchange for a usage commitment over a one- or three-year term. Reserved nodes are complementary to MemoryDB On-Demand nodes and give businesses flexibility to reduce costs. Reserved nodes can be reserved for one-year or three-year terms with No Upfront, Partial Upfront and All Upfront payment options. 

Application Auto Scaling now offers customers more visibility about the scaling decision it takes for an auto scaled resource. Application Auto Scaling (AAS) is a service that offers standardized auto scaling experience across 13 different Amazon services beyond Amazon EC2, for example Amazon DynamoDB provisioned read and write capacity, and Amazon Elastic Container Service (ECS) services. Application Auto Scaling takes scaling actions based on the customer-defined scaling policies that act as a guideline for scaling decisions. Until now, customers only got details about successful and not about deferred scaling actions. With this feature, customers get more insights about scaling decisions that do not lead to a scaling action in both descriptive and machine-readable format.

Starting today, Amazon Managed Domain Lists for Route 53 Resolver DNS Firewall is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) region, operated by NWCD, making it easier for customers to quickly get started with managed protections against DNS threats. In addition, Route 53 now sources threat intelligence from Recorded Future for DNS Firewall, expanding the breadth of DNS threats you can block using Amazon Managed Domain Lists, with new domains continuously added as DNS threats emerge and are identified by Recorded Future’s threat intelligence systems.

Amazon ElastiCache for Redis now supports updates to encryption in transit on existing cluster resources. You can change the TLS configuration of your Redis clusters without re-building or re-provisioning them or impacting application availability. When enabling encryption in transit, your overall solution can remain connected to Redis clusters.