2023

Amazon IAM Identity Center is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Starting today, Amazon EC2 Instance Connect is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon EC2 Instance Connect is a simple and secure way to connect to your instances using Secure Shell (SSH). 

Starting today, EC2 Serial Console is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues interactively, by establishing a connection to the serial port of an instance.

Amazon CloudWatch announces support of a new Metric Math function called DB_PERF_INSIGHTS() to create CloudWatch alarms and dashboards on Amazon RDS Performance Insights metrics.

Amazon Cloud Map introduces a new API for retrieving the revision of your services in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows your applications to update the state of your cloud resources only when it has changed, minimizing the discovery traffic and API cost. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resources. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API calls.

Amazon CloudWatch Synthetics announces a new update to Synthetics Python runtime version syn-python-selenium-2.0 and recommends that customers migrate Synthetics canaries to the latest runtime version. Runtime version syn-python-selenium-2.0 includes updates to third-party dependency packages (Selenium v4.10.0 and Chromium v111.0.5563.146).

Amazon RDS (Relational Database Service) Performance Insights supports SQL-level metrics for Amazon RDS for SQL Server so that you can identify high-frequency, long-running, and stuck SQL queries in seconds. SQL level statistics are already available for all other Amazon RDS engines. 

Amazon Step Functions now supports cross-account access for Amazon Web Services services so it’s easier to process data, automate IT and business processes, and build applications across accounts.

Amazon Cloud Map now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now use Amazon PrivateLink to privately access Amazon Cloud Map APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the Amazon PrivateLink pricing page for more information.

You can now subscribe Amazon Simple Queue Service (SQS) Standard queues to Amazon Simple Notification Service (SNS) First-In-First-Out (FIFO) topics. Thus, from a single SNS FIFO topic, you can now deliver messages to SQS Standard queues, which offer best-effort ordering and at-least-once delivery, as well as to SQS FIFO queues, which support strict ordering and exactly-once delivery. This new capability further decouples message publishers from subscribers, as the SNS topic type no longer dictates the SQS queue type that subscribers ought to use.

Amazon Relational Database Service (RDS) announces Amazon RDS Extended Support for Amazon Aurora and Amazon RDS database instances running MySQL 5.7, PostgreSQL 11, and higher major versions beyond the community end of life. Amazon RDS Extended Support allows you to upgrade to a new major version at a pace that meets your business requirements. Extended Support is available for Aurora MySQL-compatible edition, Aurora PostgreSQL-compatible edition, RDS for MySQL and RDS for PostgreSQL.

Amazon EC2 now supports AMI Block Public Access (BPA), an account-wide setting that allows customers to block public sharing of Amazon Machine Images (AMIs) in a region. Customers managing AMIs at-scale now have a simple and proactive way of safeguarding their AMIs from inadvertent access by unauthorized users.

Today, API Gateway announces a console experience refresh with usability improvements to REST and WebSocket API workflows, accessibility enhancements, and dark mode support.

Amazon Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of anomalous spent pattern. Starting today, Cost Anomaly Detection users with a management account will be able to create up to 500 custom cost monitors to monitor spend in their account(s). A custom cost monitor allows a user to track your spend across either linked accounts, cost allocation tags, or cost categories. 

We are introducing the general availability of Amazon SageMaker Asynchronous Inference in Amazon Web Services China (Beijing)Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Asynchronous inference is a new inference option in Amazon SageMaker that queues incoming requests and processes them asynchronously. This option is ideal for inferences with large payload sizes (up to 1GB) and/or long processing times (up to 15 minutes) that need to be processed as requests arrive. Asynchronous inference enables you to save on costs by autoscaling the instance count to zero when there are no requests to process, so you only pay when your endpoint is processing requests.

Today, Amazon Backup announces support for local time zone selection in your backup plan, allowing you to manage your backup schedule according to your local time zone. Amazon Backup is a fully managed service that centralizes and automates data protection across Amazon Web Services services and hybrid workloads. Now, when creating or editing existing backup plans, you can select a backup window time zone, eliminating the need for manual time zone conversions from UTC. 

Amazon Step Functions announces the availability of enhanced error handling capabilities in your Amazon Step Functions workflows to help you find failures faster and provide you with fine-grained control over your retry strategies. Amazon Step Functions is a visual workflow service capable of orchestrating over 10,000 API actions from over 220 Amazon Web Services services to automate business processes and data processing workloads.

Amazon Cognito now offers a new console experience that makes it even easier for customers to manage Amazon Cognito identity pools and add federated sign in for customers’ applications to get access to Amazon Web Services resources. Customers that wish to opt in to the new and streamlined experience can do so by navigating to the Amazon Cognito console. 

Trusted Language Extensions for PostgreSQL now supports building your own custom data types and is available on Amazon Relational Database Service (RDS) for PostgreSQL. You can now use Trusted Language Extensions for PostgreSQL to create a new base (or scalar) data type, specify how it is stored, and define functions that support SQL and index operations for this new data type.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.5,10.6.15, 10.5.22, and 10.4.31. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Managed Workflows for Apache Airflow (MWAA) now supports in-place version upgrades for environments version 2.x and later in Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon EventBridge API Destinations is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD, making event-driven applications more extensible by allowing you to send events to any HTTP APIs for self-managed or Software-as-a-Service (SaaS) applications. Authorization is built in so you don’t have to write or manage additional code to authorize their requests. 

Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) now supports Percona Xtrabackup for completing physical migrations of your existing MySQL 8.x databases running on Amazon EC2 or outside of Amazon Web Services. This capability makes it easier and faster to migrate large MySQL databases with complex schemas into Amazon Aurora MySQL. Percona XtraBackup allows you to perform consistent, non-blocking, online backups of your source MySQL database which can then be migrated to Aurora MySQL with minimal downtime.

Amazon DataSync support for copying data to and from Azure Blob Storage is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Using DataSync, you can move your object data at scale between Azure Blob Storage and Amazon Web Services Storage such as Amazon S3. Amazon DataSync supports writing to Azure block blobs and can read from all blob types within Azure Blob Storage. It can also be used with Azure Data Lake Storage (ADLS) Gen 2.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the h3-pg extension, which provides an API to H3, an open-source hexagonal, hierarchical geospatial indexing system. With this extension, you can perform different kinds of spatial analysis over large datasets, including efficient indexing and lookups, modeling flow through a grid, and applying machine learning models over your geospatial data stored in Amazon RDS for PostgreSQL.

Today, Amazon Backup announces support for Amazon CloudFormation resource exclusion, allowing you to exclude resources from your application backups in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon EC2 C6in instances, powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of up to 3.5 GHz, are available in the Amazon Web Services China (Ningxia) Region, operated by NWCD. C6in are the first x86-based Amazon EC2 compute optimized instances to offer up to 200 Gbps network bandwidth, and are ideal to scale the performance of applications such as network virtual appliances (firewalls, virtual routers, load balancers), Telco 5G User Plane Function (UPF), data analytics, high performance computing (HPC), and CPU based AI/ML workloads.

Amazon Elastic Kubernetes Service (EKS) control plane logs are now classified as Vended Logs in Amazon CloudWatch Logs. Vended Logs are specific Amazon Web Services service logs natively published by the services on behalf of the customer and available at volume discount pricing. 

Amazon Managed Workflows for Apache Airflow (MWAA) has added certification for International Organization for Standardization (ISO). We maintain certifications through extensive audits of its controls to ensure that information security risks that affect the confidentiality, integrity, and availability of company and customer information are appropriately managed. 

Today, we are renaming Amazon Kinesis Data Analytics to Amazon Managed Service for Apache Flink. Amazon Managed Service for Apache Flink makes it easy to transform and analyze streaming data in real time with Apache Flink, an open source framework and engine for processing data streams.

You can now use Amazon SageMaker Model Cards with Amazon Resource Access Manager (Amazon RAM) to securely share model cards from your Amazon Web Services account with a different account, and also view, modify, and export (PDF) model cards shared with your account. Cross-account support of SageMaker Model Cards facilitates governance and collaboration by enabling you to view, track, and audit all available model cards within your organization in your centralized account.

Amazon Step Functions is introducing enhancements to Workflow Studio, a visual workflow designer in the Amazon Web Services console, which includes a streamlined transition between the visual builder and code, making it faster and easier to build workflows. To get started quickly, you can also choose from a collection of starter projects for common use cases and modify them using Workflow Studio.

Starting today, Amazon Relational Database Service (Amazon RDS) for Oracle supports the auto-upgrade of Oracle time zone files for DB instances on the multitenant container database (CDB) architecture running in single-tenant configuration in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The Oracle time zone file auto-upgrade feature provides an automated way to upgrade the daylight savings time (DST) time zone file version in the DB instance.

Amazon S3 now supports multivalue answer (MVA) in response to DNS queries for S3 endpoints. With MVA, customers now get up to eight S3 IP addresses per DNS query. You can use these IP addresses to automatically make multiple concurrent connections to S3 and improve throughput. MVA also makes retries more efficient as applications will automatically try an alternative IP address without having to wait for another DNS query.

You can now route any traffic entering your Amazon VPC from virtual private gateway through a Gateway Load Balancer endpoint before the traffic reaches the destination. You can use Gateway Load Balancer Endpoint to process your VPC traffic through security appliances available on Amazon Web Services Marketplace.

Amazon Transfer Family now offers customers the option to require both public key and password authentication when users attempt to connect to their SFTP server. This new method of authentication allows customers to add an additional level of protection to their data when authorizing users to securely access their files. 

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a trusted procedural language in PostgreSQL major versions 13 and 14, expanding support for Rust from major version 15. This helps you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

Today, the Amazon SDK for SAP ABAP is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon CloudWatch has added CloudWatch Agent support for the collection of Amazon X-Ray and OpenTelemetry traces. Whether you’re already an X-Ray customer, or just getting started with OpenTelemetry, you are now able to collect metrics, logs, and traces with a single agent, simplifying installation, configuration and management of telemetry collection.

Amazon Compute Optimizer now recommends licensing optimization opportunities for Microsoft SQL Server workloads on Amazon EC2. With this launch, you can receive automated SQL Server Edition downgrading recommendations in Amazon Compute Optimizer by enabling Amazon CloudWatch Application Insights to reduce SQL Server licensing cost.

Amazon ElastiCache for Memcached now makes it simpler and faster for you to get started with setting up an ElastiCache for Memcached cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

Amazon FSx for Lustre, a fully managed service that makes it easy and cost effective to launch, run, and scale the world’s popular high-performance file system, now supports the ability to free up storage capacity on an FSx file system that has data synchronized with Amazon S3.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, now enables you to select and update the level of I/O operations per second (IOPS) separately from storage capacity on your file system. This new capability enables you to improve price-performance for IOPS-intensive workloads like SQL Server databases and optimize costs for workloads with IOPS requirements that vary over time like periodic reporting jobs.

Sensitive data detection feature in Amazon Glue can now detect over 250 sensitive entity types in Amazon Web Services China Regions out-of-the-box.

Elastic Throughput is a new throughput mode for Amazon Elastic File System (Amazon EFS) that is designed to provide your applications with as much throughput as they need with pay-as-you-use pricing. Elastic Throughput is designed to further simplify running workloads and applications on Amazon Web Services Cloud by providing file storage that doesn’t require any performance provisioning.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.4, 14.9, 13.12, 12.16, and 11.21. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

We announce the retirement of the old IAM actions for Amazon Billing, Cost Management, and Account consoles. We are replacing them with fine-grained service specific actions. This launch gives customers more control over access to Billing, Cost Management, and Account services. These new permissions will also provide a single set of IAM actions that govern console and programmatic access to these services.

Amazon RDS for MariaDB now supports MariaDB major version 10.11, the latest long-term maintenance release from the MariaDB community. Amazon RDS for MariaDB 10.11 includes performance improvements that enable up to 40% higher transaction throughput than prior versions. You can deploy RDS for MariaDB 10.11 on Optimized Read and Optimized Write enabled instance classes for additional performance gains. MariaDB 10.11 major version also includes improvements to authentication, information schema, system versioning, and the InnoDB storage engine made by the MariaDB community.

Amazon Relational Database Service (RDS) for Oracle now supports the July 2023 Release Update (RU) for the Oracle Database 19c and 21c versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Fargate now supports Process ID (PID) namespace sharing and kernel parameter configuration (sysctl) for applications orchestrated by Amazon ECS in the Amazon Web Services China (Beijing)Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now configure the pidMode and the sysctl parameters in your ECS task definition for tasks running on Fargate. 

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) will support MySQL 8.0.28. In addition to several security enhancements and bug fixes, MySQL 8.0.28 includes several improvements, such as Instant DDL support for Rename column operations, support for multi-threaded DDL operations, support for TLS v1.3 protocol, and performance schema monitoring enhancements. For more details, refer to the Aurora MySQL 3 and MySQL 8.0.28 release notes.

Starting today, Local Write Forwarding is generally available for Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility). This new capability makes it simple to scale read workloads which require read after write consistency. Customers can now issue transactions containing both reads and writes on Aurora read replicas and the writes will be automatically forwarded to the single writer instance for execution. Applications requiring read scale can utilize up to 15 Aurora Replicas for scaling reads without the need to maintain complex application logic that separates reads from writes. Check out this blog to find out how local write forwarding can help reduce the complexity of your application code.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-5.0 and recommends that customers migrate Synthetics canaries to the latest runtime version. Runtime version syn-nodejs-puppeteer-5.0 includes updates to third-party dependency packages (Puppeteer v19.7.0 and Chromium v111.0.5563.146).

Amazon RDS (Relational Database Service) Performance Insights now provides an enhanced console experience to view performance monitoring metrics for Amazon RDS databases. It consolidates information from Amazon CloudWatch and Amazon RDS Performance Insights to provide a comprehensive view of your database’s health. This removes the need for you to gather data from multiple sources and speeds up the diagnosis of database performance issues. 

Amazon MQ now supports the ability for customers to create and apply configurations to their RabbitMQ broker on Amazon MQ. This feature allows you to define the RabbitMQ delivery acknowledgement timeout (consumer_timeout) value and enable operator policies using the RabbitMQ configuration format (Cuttlefish). You can now exert greater control over your RabbitMQ broker and fine tune the performance of your consumer applications or enable and manage high availability operator policies directly through configuration. You can configure your RabbitMQ brokers on Amazon MQ using the console, Command Line Interface (CLI), or Cloud Development Kit (CDK).

Today, we announce Fleet Manager, a capability in Amazon Systems Manager that helps you streamline and scale your remote server management processes, is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Fleet Manager provides you with visual tools to manage your Windows, Linux, and MacOS servers, so you can easily perform common administrator tasks for your fleet running on Amazon Web Services and on premise, without needing to remotely connect to these servers.

We announce the launch of primary IPv6 address in a Virtual Private Cloud (VPC), enabling customer to make the first IPv6 address associated with their elastic network interface (ENI) immutable. Once the first IPv6 address is made primary on the ENI, the IPv6 address cannot be removed as long as the ENI is attached to an instance or until the instance is terminated, effectively making the address immutable.

Amazon Relational Database Service (Amazon RDS) now supports a progress indicator for improved visibility into the storage optimization process. With the progress indicator, you get better visibility into the progress of storage optimization process such as scaling up of storage sizes and changing the storage volumes.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.34 and 5.7.43. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Starting today, Amazon Aurora MySQL-Compatible Edition 2 (with MySQL 5.7 compatibility) will support MySQL 5.7.40. In addition to several security enhancements and bug fixes, this release is fully compatible with MySQL 5.7.40. Previous Aurora MySQL 2.x versions were compatible with MySQL 5.7.12. For more details, refer to the Aurora MySQL 2 and MySQL 5.7.40 release notes.

Starting today, Amazon Relational Database Service (RDS) for Oracle supports read and mounted replicas for instances on the multitenant container database (CDB) architecture running in single-tenant configuration in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon RDS for Oracle replicas fully manage the configuration of Oracle Data Guard to create and maintain replicas in the same or different Amazon Web Services Region as the primary DB instance.

You can now create Apache Airflow version 2.6 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.6 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Amazon Relational Database Service (Amazon RDS) Multi-AZ Deployments with two readable standbys now supports logical replication. With logical replication, you can stream data changes from Amazon RDS for PostgreSQL to other databases for use cases such as data consolidation for analytical applications, change data capture (CDC), replicating select tables rather than the entire database, or for replicating the data between different major versions of PostgreSQL.

Amazon Network Load Balancers (NLB) now supports security groups, enabling you to filter the traffic that your NLB accepts and forwards to your application. Using security groups, you can configure rules to help ensure that your NLB only accepts traffic from trusted IP addresses, and centrally enforce access control policies. This improves your application's security posture and simplifies operations.

The Amazon EventBridge Schema Registry and Schema Discovery features are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, allowing you to discover and store event structure - or schema - in a shared, central location. You can download code bindings for those schemas for Java, Python, Typescript, and Golang so it’s easier to use events as objects in your code.

Cross-account sharing version 3 in Amazon Lake Formation is now available. Version 3 includes features to improve ease of use in granting cross-account permissions using Lake Formation. You can now share Amazon Glue Data Catalog resources such as, databases and tables, from one account directly to another account’s IAM principals, namely, IAM roles and IAM users. Version 3 eliminates the additional manual step of writing Data Catalog resource policies while using LF-tags based cross-account sharing. Finally, you can share Data Catalog resources with an Amazon Organization/Org unit using LF-tags based sharing.

Amazon S3 Glacier Flexible Retrieval­ improves data restore time by up to 85%, at no additional cost. Faster data restores automatically apply to the Standard retrieval tier when using Amazon S3 Batch Operations. These restores begin to return objects within minutes, so you can process restored data faster. Now, whether you are transcoding media, restoring operational backups, training machine learning models, or analyzing historical data, you can cost-effectively speed up your data restores from archive.

Amazon Route 53 Application Recovery Controller zonal shift helps you quickly recover from an impairment in an Availability Zone (AZ). You can use a single action to shift application traffic away from an AZ for an Application Load Balancer or Network Load Balancer. This can help you quickly recover an application in an impaired AZ, and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures.

Amazon ElastiCache for Redis now supports online migration from self-managed Redis clusters to ElastiCache for Redis clusters running in cluster mode. Online migration simplifies moving data from self-managed Redis clusters to ElastiCache with minimal application disruption. During the migration, ElastiCache replicates cache data from each self-managed Redis source shard to the target ElastiCache cluster. Once initial replication is complete, the two clusters will be kept in sync until you are ready to update your application configuration to use ElastiCache.

Today, we announces expanded Amazon CloudFormation support for Amazon Security Hub in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This new feature allows you to use CloudFormation to deploy Security Hub and manage its standards and controls. Using the updated Hub resource, you can now enable Security Hub, decide if it should be provisioned with default standards (the Amazon Foundational Security Best Practices and CIS Foundations Benchmark version 1.2), and opt into its Consolidated Control Findings capability. You can also use the new Standard resource to enable specific security standards such as NIST 800-53 or PCI DSS and manage individual controls in them.

Amazon CodeBuild customers can now use GitHub Actions during the building and testing of software packages. Amazon CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces ready-to-deploy software packages. Customers’ CodeBuild projects are now able to leverage many of the pre-built actions available in GitHub’s marketplace. GitHub Actions are open source applications for the GitHub Actions platform that perform a complex but frequently repeated task.

Starting today, the Amazon Relational Database Service (Amazon RDS) for SQL Server now supports secondary host metrics in Enhanced Monitoring in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can now view essential metrics associated on the secondary host of a Multi-AZ DB instance, such as free storage, free memory, Read/Write IOPS, Read/Write Throughput, CPU utilization, and etc.

Serverless application developers can now build AppSync powered applications in Serverless Application Model (SAM) with the new GraphQLApi resource, now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Simple Queue Service (SQS) announces an increased default quota for a high throughput mode for FIFO queues, allowing you to process up to 2,400 transactions per second, per API action in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports a minor version for Microsoft SQL Server 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon Transfer Family launches Secure File Transfer Protocol (SFTP) connectors, a fully-managed and low code capability that securely and reliably copy files at scale between remote SFTP servers and Amazon S3. Files transferred using SFTP Connectors are stored in Amazon S3, enabling you to unlock value from data using analytics, data lakes or AI/ML services in Amazon Web Services Cloud.

Amazon Aurora PostgreSQL-Compatible Edition now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

Amazon Relational Database Service (RDS) for Oracle now supports version 23.1 of Oracle Application Express (APEX) for the 19c and 21c Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Starting today, you can use Amazon CloudWatch alarms to trigger an instance refresh rollback. EC2 Auto Scaling’s instance refresh allows you to perform a rolling replacement of instances in an Auto Scaling group, and instance refresh rollback can undo changes an instance refresh made if the instance refresh cannot complete as desired. With this launch, you can configure Auto Scaling to monitor CloudWatch alarms during an instance refresh, and automatically revert any changes made if the alarms are triggered.

Amazon GuardDuty expands threat detection coverage in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, to continuously monitor network activity logs, starting with VPC Flow Logs, generated from the execution of Amazon Lambda functions to detect threats to Lambda such as functions maliciously repurposed for unauthorized cryptocurrency mining, or compromised Lambda functions that are communicating with known threat actor servers. GuardDuty Lambda Protection can be enabled with a few steps in the GuardDuty console, and using Amazon Organizations, can be centrally-enabled for all existing and new accounts in an organization.

Today, Amazon Simple Queue Service (SQS) announces support for JSON protocol, enabling lower latency and improved performance for SQS customers. Based on performance tests conducted by Amazon Web Services for a 5KB message payload, JSON protocol for Amazon Simple Queue Service reduces end-to-end message processing latency by up to 23% and reduces application client-side CPU and memory usage. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This release contains product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. This release also contains new features and improvements for Babelfish for Aurora PostgreSQL version 3.2 and improved support for Amazon Database Migration Service version 3.5.1 Aurora PostgreSQL target endpoint Babelfish data types. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024. 

Customers running applications on Amazon Elastic Container Service (ECS) with Amazon Fargate can now leverage Seekable OCI (SOCI), a technology that helps applications deploy and scale out faster by enabling the containers to start without waiting for the entire container image to be downloaded.

Effective February 1, 2024 you will be charged ¥ 0.033 per hour for each public IPv4 address that you allocate, whether it is attached to a service or not (we already charge for IPv4 addresses that you allocate but don’t attach to an EC2 instance).

Amazon IoT Device Defender Rules Detect now supports a new disconnect duration metric to monitor the duration of disconnect of each device. With this additional metric, you can track how long a device has been disconnected to learn whether it is operating as expected. You can also configure alarms at predefined threshold levels and be alerted in the case of persistent device connectivity issues.

Amazon DocumentDB launches index improvements enabling faster index builds on collections and the ability to view index build statuses. Amazon DocumentDB index builds can now be sped by up to 14X when using parallel workers compared to using a single worker. The index creation process now uses two workers by default, and you can configure the number of workers on Amazon DocumentDB 4.0 and 5.0 instance-based clusters.

Public IP Insights is an Amazon VPC IP Address Manager (IPAM) feature that provides a unified view of all public IPv4 addresses, making it easier for you to monitor, analyze and audit public IPv4 addresses used across services, in your Amazon Web Services account.

Amazon CloudFormation announces looping capabilities with Fn::ForEach intrinsic function. With Fn::ForEach, you can replicate parts of your templates with minimal lines of code. You can use Fn::ForEach to simplify your template layout and make it easier and faster for you and your peers to review your code. Fn::ForEach helps reduce human errors such as updating wrong properties or missing out on updating multiple target properties in your template.

Amazon Lambda event source mappings now support additional filtering capabilities including the ability to match against characters at the end of a value (suffix filtering), to ignore case sensitivity (equals-ignore-case), and to have a single rule match if any conditions across multiple separate fields are true (OR matching). We are also increasing the bounds supported for numeric values to -5e9 to 5e9 from -1e9 to 1e9. With these new enhanced capabilities, you can now write complex rules that provide additional filtering options when building event-driven applications.

Amazon DocumentDB (with MongoDB compatibility) now supports document compression using the LZ4 compression algorithm. Compressed documents in Amazon DocumentDB are up to 7x smaller than uncompressed documents. Compressed documents require less storage space and IO operations during database reads and writes, leading to lower storage and IO costs.

Today, Amazon CloudFormation StackSets launches a new API ListStackInstanceResourceDrifts, and adds a new filter in ListStackInstances to improve access to resource and stack instance drift information. A resource or stack instance is considered drifted when it’s actual configuration differs from its expected configuration. You can now use ListStackInstanceResourceDrifts to list and filter resources in a stack instance according to drift status. Similarly, you can use the drift status filter in ListStackInstances to check for stack instance drift in a stack set. With this launch, you can access these aggregated drift information through your management or delegated administrator Amazon Web Services account.

Amazon Aurora MySQL-Compatible Edition now supports a new, enhanced binary log (binlog). The enhanced binlog reduces the compute performance overhead caused by enabling binlog, which, in certain cases, can reach up to 50%, down to 13%. The enhanced binlog also improves database recovery time by up to 99% after restarts and failovers, as compared to when native MySQL binlog is enabled.

We are excited to announce the launch of the updated Amazon GameLift console experience to help customers manage and scale their game servers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed service that allows you to deploy and scale dedicated game servers for session-based multiplayer games. 

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics Python runtime version 1.1, 1.2 and 1.3. This update includes the following new features and bug fixes

• Core dependencies upgraded
       o Python 3.8
       o Selenium 3.141.0
       o Chromium 92.0.4512.0
• Supports custom canary handler name
• Supports custom launch arguments to Chromium including ability to open browser in incognito mode.
• Supports storing your canary run artifacts, including log files, screenshots, and HAR files, in an Amazon Simple Storage Service (S3) bucket in another Region
• Improved precision of start and stop time
• Supports deletion of underlying canary resources along with the canary deletion. When you delete a canary, you can choose whether to also delete related resources created by the canary, thus making canary resources management easier and efficient.
 

Today, we are announcing the general availability of Amazon Aurora I/O-Optimized in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Aurora I/O-Optimized is a new configuration that provides improved price performance and predictable pricing for customers with I/O-intensive applications. With Aurora I/O-Optimized, there are zero charges for read and write I/O operations—you only pay for your database instances and storage usage, making it easy to predict your database spend up front.

With Amazon S3 Inventory, you can now easily review your access control lists (ACLs) on all of your objects to simplify review of access permissions. ACLs were the original way to manage object access when S3 launched in 2006. Now, when migrating to IAM-based bucket policies for access control, you can easily review all of the object ACLs in your buckets before enabling S3 Object Ownership.

Amazon Elastic Container Service (ECS) announces domainless Group Managed Service Account (gMSA) support for Linux and Windows containers running on Amazon EC2. This integration allows applications hosted on Amazon ECS (on EC2) to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. With this launch, customers can run containers that require AD authentication without joining the ECS nodes to the domain, even during autoscaling events.

Today, Amazon Backup is announcing support for restoring resources with tags copied from protected resources. Amazon Backup is a fully managed service that centralizes and automates data protection activities across services in Amazon Web Services Cloud and hybrid workloads. This launch allows you to seamlessly extend using tag-based policies for access, cost allocation, compliance, and automation workflows for your restored resources.

Amazon Elastic Kubernetes Service (EKS) now allows running more pods per windows node through the support for IPv4 prefix delegation mode for Windows containers. Prefix delegation mode expands the number of secondary IPv4 addresses which could be assigned to the Elastic Network Interface (ENI) by up to 16x. With this feature, customers can run up to 250 pods on a single Windows Server node, depending upon the chosen instance type.

Today we are announcing the launch of Savings Plans in Amazon Web Services China Regions. Savings Plan is a flexible pricing model that allows customers to save up to 84% on Amazon EC2, Amazon Fargate and Amazon Lambda in exchange for a commitment to a consistent amount of compute usage (e.g. CNY 10/hour) for a one- or three-year period. With a Savings Plan, usage up to the commitment will be charged at the discounted Savings Plan rates and any usage beyond the commitment will be charged at regular On Demand rates. Savings Plans offer significant savings over On-Demand, just like Reserved Instance, but with greater flexibility and automatically reduce customers’ bills within a China region even as usage changes. This provides customers the flexibility to use the compute option that best suits their needs and continue to save money, all without having to perform exchanges or modifications. 

You can now run OpenSearch and OpenSearch Dashboards version 2.7 in Amazon OpenSearch Service. With OpenSearch 2.7, we have made several improvements to observability, security analytics, index management, and geospatial capabilities in OpenSearch Service.

Today, Amazon DynamoDB local, a local downloadable version of Amazon DynamoDB, has migrated to use the jakarta.* namespace. This latest version allows Java developers to use DynamoDB local to work with Spring Boot 3 and frameworks such as Spring Framework 6 and Micronaut Framework 4 to build modernized, simplified, and lightweight cloud native applications.

Amazon Simple Notification Service (Amazon SNS) now supports message data protection, a set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data.

Amazon Lambda now supports Amazon DocumentDB change streams as an event source. The change streams feature in Amazon DocumentDB (with MongoDB compatibility) provides a time-ordered sequence of change events that occur within your cluster’s collections. Customers can now consume these events in their serverless applications built on Lambda. 

Amazon S3 now provides the status of objects stored in Amazon S3 Glacier Flexible Retrieval and Amazon S3 Glacier Deep Archive using the S3 LIST API. This new information in S3 LIST API responses can be integrated into your applications, helping you identify and access restored objects from S3 Glacier. For example, S3 Glacier restore status is now integrated into Amazon Athena, so you can run queries against your restored data from low-cost S3 Glacier storage classes.

Amazon Transfer Family has earned the official Drummond Group AS2 Cloud Certification Seal. Drummond Group is an independent provider of testing and certification services for various industry standards and protocols. This certification verifies that Amazon Transfer Family’s Applicability Statement 2 (AS2) capabilities are compatible and interoperable with fourteen third-party AS2 vendors commonly used for business-to-business (B2B) communication.

Amazon OpenSearch Service now lets you provision up to 16,000 IOPS and 1000 MiB/s throughput for every 3 TiB gp3 volume size provisioned per data node, enabling you to achieve better search and indexing performance.

Amazon CloudWatch now supports Service Quotas in Cross-Account observability allowing customers to track and visualise resource utilisation and limits across multiple Amazon Web Services services from multiple accounts within a region using a central monitoring account.

Today, we are excited to announce the integration of Amazon SageMaker Model Cards and Amazon SageMaker Model Registry. This integration allows you to associate a SageMaker Model Card with a specific model version in SageMaker Model Registry, so you can easily track and audit your models.

Amazon DynamoDB now simplifies and lowers the cost of handling failed conditional writes by providing a copy of the item as it was during the failed write attempt. This lets you easily determine the cause of the condition error and then respond to failed conditional writes without having to perform a separate read operation to retrieve the item.

Amazon Elastic Container Service (Amazon ECS) now enables faster task launches on container instances that have tasks with prolonged shutdown. This enables customers to scale their workloads faster and improve infrastructure utilization.

Amazon Database Migration Service (DMS) has expanded the functionality of premigration assessments. A premigration assessment evaluates the source and target databases of a database migration task to help identify any problems that might prevent a migration from running as expected. By identifying and fixing issues before a migration starts, you can avoid delays in completing the database migration. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2014, 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.14, 10.5.21, and 10.4.30. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Security Hub, a cloud security posture management service that performs security best practice checks, aggregates alerts, and facilitates automated remediation, now features a capability to automatically update or suppress findings in near-real time. You can now use automation rules to automatically update various fields in findings, suppress findings, update finding severity and workflow status, add notes, and more. 

Starting today, you can target EC2 Capacity Reservations within an Amazon Web Services Resource Group using the Resource Group ARN. With this feature, you can now use Capacity Reservations seamlessly for workloads that span Availability Zones and multiple instance types. This feature integrates seamlessly with EC2 Auto Scaling and EC2 Fleet.  

We are excited to launch delegated administrator for Amazon Organizations to help you delegate the management of your Amazon Organizations policies, enabling you to govern your organization and member accounts with increased agility and decentralization. You can now allow member accounts to manage policy types specific to their needs. By specifying fine-grained permissions, you can balance flexibility with limiting access to your highly privileged management accounts.

Amazon Step Functions expands its SDK integrations with support for additional services including Amazon EMR Serverless.

Amazon OpenSearch Service now lets you update cluster manager (master node) instance type or instance count without requiring a blue/green deployment, helping you complete the updates faster with the least potential disruption to your cluster operations and without involving any data movement.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports physical data migration via Oracle Recovery Manager cross-platform Transportable Tablespaces (RMAN XTTS) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. As of today, you can migrate sets of tablespaces to RDS for Oracle using Oracle RMAN XTTS to simplify movement of large amounts of data and reduce application downtime for a physical data migration.

Starting today, customers can receive cost data for Amazon Elastic Container Service (Amazon ECS) tasks and Amazon Batch jobs in the Amazon Cost and Usage Reports (CUR), enabling you to analyze, optimize, and chargeback cost and usage for your containerized applications. With Amazon Split Cost Allocation Data, customers can now allocate application costs to individual business units and teams based on how containerized applications consume shared compute and memory resources.

Amazon Relational Database Service (RDS) for Oracle now supports the April 2023 Release Update (RU) for the Oracle Database 21c version in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Transfer Family now delivers logs in a structured JSON format across all resources – including servers, connectors, and workflows – and all protocols – including SFTP, FTPS, FTP, and AS2. The new format allows you to easily parse and query your logs using CloudWatch Log Insights, which automatically discovers JSON formatted fields. You’ll also benefit from improved monitoring with support for CloudWatch Contributor Insights, which requires a structured log format to track top users, total number of unique users, and their ongoing usage.

Starting today, the Amazon Web Services Account page has a new user experience. The Account page allows you to change account settings, including your contact and alternate contact information, and to close your Amazon Web Services account. This new user experience is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Step Functions announces the availability of Versioning and Aliasing, improving resiliency for deployments of serverless workflows. Step Functions is a visual workflow service capable of orchestrating over 10,000 API actions from over 220 Amazon Web Services services to automate business processes and data processing workloads.

Amazon Relational Database Service (RDS) for Oracle now supports converting existing Oracle Database 19c instances from the non-multitenant to the multitenant database architecture in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. DB instances using the multitenant architecture consist of a container database (CDB) with a single pluggable database (PDB). A PDB is a set of schemas, schema objects, and non-schema objects that logically appears to a client as a non-CDB.

Amazon Lambda now supports Java 17 as a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Java 17 can take advantage of new language features including Java records, sealed classes and multi-line strings. The Lambda Java 17 runtime also has numerous performance improvements. For more information on Lambda’s support for Java 17, see our product documentation.

Amazon Lambda now supports Python 3.10 as a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Python 3.10 can take advantage of numerous Python language enhancements to make code more readable and maintainable. These include pattern matching for data structures, parenthesized context managers to simplify managing resources such as file handles or database connections, and better error handling. For more information on Lambda’s support for Python 3.10, see our product documentation.

Today, we announce the general availability of bandwidth reduction filtering for the AVC and HEVC encoders in AWS Elemental MediaConvert. The bandwidth reduction filter is a perceptual input preprocessing filter which removes temporal noise from video sources while minimizing impact on visual quality. The filter uses human vision system models to reduce imperceptible signals and temporal noise, which often originate from camera sensors.

Amazon Lambda now supports Ruby 3.2 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Ruby 3.2 can take advantage of new features such as endless methods, a new Data class, improved pattern matching, and performance improvements. For more information on Lambda’s support for Ruby 3.2, see our product documentation.

Amazon CloudFormation now allows customers to configure the clean-up or rollback actions that CloudFormation will take when execution of a ChangeSet fails. ChangeSets are a feature of CloudFormation that allow you to preview the impact of proposed changes to a stack on running resources. CloudFormation makes changes to your stack only when you decide to execute a ChangeSet. Today, CloudFormation rolls back a stack to the last known stable state if ChangeSets execution is unsuccessful. With this launch, you can pass an optional parameter called OnStackFailure to the CreateChangeSet API and CLI commands. You can set the new parameter to the following values: ROLLBACK, DO_NOTHING, or DELETE. 

Amazon Redshift already supports role-based access control, row-level security, and column-level security to enable organizations to enforce fine-grained security on Redshift data. Amazon Redshift now extends these security features by supporting Dynamic Data Masking (DDM) that allows you to simplify the process of protecting sensitive data in your Amazon Redshift data warehouse. With Dynamic data masking, you control access to your data through SQL based masking policies that determine how Redshift returns sensitive data to the user at query time.

Amazon Athena has updated its data source connectors with new optimizations that can improve performance and reduce cost when querying data that does not reside in Amazon S3. Available today, the updated connectors use dynamic filtering and new predicate push down optimizations to perform more operations in the underlying data source, rather than in Athena, which can reduce query processing time and reduce data scanned.

Customers can now apply two independent layers of server-side encryption to objects in Amazon S3. Dual-layer server-side encryption with keys stored in the Amazon Key Management Service (DSSE-KMS) is designed to meet CNSSP 15 and Data-at-Rest Capability Package (DAR CP) Version 5.0 guidance for two layers of encryption. As of the publish date of this post, S3 is the only cloud object storage service where customers can apply two layers of encryption at the object level and control the data keys used for both layers. Amazon S3 features such as DSSE-KMS are vetted and accepted for use on top-secret workloads, which benefits all customers.

Amazon Transfer Family now supports quantum-safe public-key exchange for SFTP file transfers. Quantum-safe public-key exchange protects your file transfers from threats such as “harvest now, decrypt later” attacks that record present day traffic for decrypting once cryptographically relevant quantum computers become available.

Amazon Lambda now supports three new CloudWatch metrics AsyncEventsReceived, AsyncEventAge and AsyncEventsDropped, to monitor the performance of asynchronous event processing. Until now, Lambda customers had limited visibility into the processing of asynchronous requests, and had to rely on Lambda service teams to resolve any processing delays leading to inefficiencies in asynchronous event processing. With these new metrics, customers gain better visibility into their asynchronous invocations and can track the events sent to Lambda, monitor delays in event processing and take corrective actions if required.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.13, 10.5.20, 10.4.29 and 10.3.39. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon OpenSearch Service now supports setting ‘skip unavailable’ for cross cluster search connections. Cross-cluster search enables you to perform searches and aggregations across multiple domains with a single query or from a single OpenSearch Dashboard interface.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.33 and 5.7.42. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Starting today, Amazon Elastic Container Registry (ECR) basic scanning feature will use Common Vulnerability Scoring System (CVSS) version 3 information when determining the severity for new Common Vulnerabilities and Exposures (CVEs). This enables customers to get the most recent severity information for vulnerabilities in their ECR container images. We use CVSS information to determine the severity of a vulnerability when the upstream distribution source does not have this information.

Starting today, you can enable a new Amazon Managed Domain List on Amazon Route 53 Resolver DNS Firewall, to block domains identified as low-reputation or that are known or suspected to be malicious by Amazon GuardDuty’s threat intelligence. This means that customers using GuardDuty can now block domains using the same GuardDuty threat intelligence used to monitor and alert you on potential DNS threats for your Amazon Web Services accounts today.

EC2 announces the general availability of Ubuntu Pro on Amazon EC2 in a subscription-included model. You can now easily deploy on-demand subscription included Ubuntu Pro instances from the Amazon EC2 console. You will be charged on a per-second basis for Ubuntu Pro subscription-included instances. For any new Ubuntu Pro deployments, you will now see Ubuntu Pro charges in the Elastic Cloud Compute section of your Amazon Web Services bill.

Amazon Aurora PostgreSQL-compatible edition now maintains read availability through writer node restarts in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With today’s launch, reader nodes will continue to serve read requests during a writer node restart, improving read availability in the cluster. 

May 31, 2023 - Amazon DocumentDB 5.0 already supports Amazon EC2 R6G instances, and starting today, extends instance support to Amazon EC2 T3 and R5 type instances. You can now use Amazon DocumentDB 5.0 during free trial using T3.medium instance and up to 96 vCPUs and 768 GiB RAM with R5 type instances. Please refer to supported instance specifications to learn more.

Amazon CloudFormation StackSets is updating the deployment experience for CREATE, UPDATE, DELETE, IMPORT TO STACKSET, and DRIFT stack set operations with a new status code SKIPPED_SUSPENDED_ACCOUNT for stack instances. to skip suspended Amazon Web Services accounts during deployments. With this launch, StackSets will skip target Amazon Web Services accounts that are suspended, and flag skippedthe corresponding stack instances as  SKIPPED_SUSPENDED_ACCOUNT instead of FAILED. This feature will help customers target Amazon Web Services accounts, Amazon Organizations or Organizational Units (OUs) without worrying about the number of suspended accounts in the target sample. Additionally, this feature helps to improves. Customers suspend their Amazon Web Services accounts for reasons such as reducing usage of cloud resources for non-production environments during periods of low demand. This feature enhances deployment speed of stack set operations, and reduces the number of FAILED stack set operations.

We are excited to announce updates to Amazon GameLift FleetIQ’s ClaimGameServer operation in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift FleetIQ optimizes the use of low-cost Amazon Elastic Compute Cloud (Amazon EC2) Spot Instances for cloud-based game hosting. With this release, customers using Amazon GameLift FleetIQ can better handle game session placement decisions for their multiplayer games.

Today, Amazon Simple Queue Service (SQS) announces support for dead-letter queue redrive via Amazon SDK or Command Line Interface (CLI). Dead-letter queue redrive is an enhanced capability to improve the dead-letter queue management experience for Amazon SQS customers. Amazon SQS already supports dead-letter queue redrive to source queues or a custom destination queue using the Amazon SQS console. Now customers can move the messages from the dead-letter queue using Amazon SDK or CLI to programmatically manage the lifecycle of their unconsumed messages stored in the dead-letter queue at scale. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the use of IN operator in SELECT queries of Cassandra Query Language (CQL).

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports Amazon X-Ray active tracing with Amazon SNS FIFO topics. You can now view traces that flow through Amazon SNS FIFO topics to Amazon Simple Queue Service (Amazon SQS) FIFO queues, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. You can use Amazon SNS FIFO topics, in combination with Amazon SQS FIFO queues, to build applications that require messages to be sent and processed in a strict sequence and without duplicates. You can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API, the Amazon SNS Management Console, or via Amazon CloudFormation.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the HypoPG extension for creating hypothetical indexes, which lets you test the performance impact of an index on query plans before you build it.

Today, Amazon CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe Amazon Organization trust access needed to get started with service-managed StackSets. You can use service-managed StackSets to centrally manage stack deployments to Amazon Web Services accounts in one or more organizational units (OUs). With this launch, you can programmatically manage trust access for your management or delegated administrator accounts. Activating trust access provides the necessary permissions for your management or delegated administrator accounts to create and manage service-managed stack sets for your Amazon Organizations. In addition to providing this trust access in Amazon CloudFormation via Amazon Web Services Management Console, you can now choose to manage trust access with these newly launched APIs.

Amazon Elastic Kubernetes Service (EKS) launches managed node groups for Windows containers to automate the provisioning and lifecycle management of Windows nodes (running on Amazon EC2 instances) for EKS Kubernetes clusters. With this launch, Windows-based applications will automatically provision and register the Amazon EC2 instances that provide compute capacity. Now customers can create, automatically update, or terminate the Windows nodes for their cluster with a single operation.

Today, Amazon CloudTrail announces the support for Amazon Organizations. You can now create, manage, and deploy CloudTrail trails across your organization from your management account or delegated administrator account. Through integration with Amazon Organizations, an organization trail lets you define a uniform event logging strategy at an organization level, that is applied automatically to each member account in the organization. Users in member accounts are able to see these trails, but they can’t modify them. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL and for MySQL now supports a new Multi-AZ deployment option with one primary and two readable standby database (DB) instances across three Availability Zones (AZs). This deployment option is optimized for write transactions and is ideal when your workloads require lower write latency, automated failovers, and more read capacity.

Amazon Glue has upgraded its serverless Python Shell jobs to add Python 3.9 support and an updated bundle of pre-loaded libraries. These jobs allow you to write complex data integration and analytics jobs in pure Python.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning that enables data scientists and developers to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. SageMaker Studio comes with built-in integration with Amazon EMR so that data scientists can interactively prepare data at petabyte scale using open source frameworks such as Apache Spark, Hive, and Presto right from within Studio notebooks. Very often data is stored in data lakes managed by Amazon Lake Formation, enabling you to apply fine-grained access control through a simple grant or revoke mechanism. We’re excited to announce that SageMaker Studio now supports applying this fine-grained data access control with Amazon Lake Formation when accessing data through Amazon EMR.

Amazon Glue now offers 3 new features: custom visual transforms, which let customers define, reuse, and share business-specific ETL logic among their teams, three open-source data lake storage frameworks, which read and write data in Amazon Simple Storage Service (Amazon S3) in a transactionally consistent manner, and new connectors. Amazon Glue is a serverless, scalable data integration service that makes it easier to discover, prepare, move, and integrate data from many sources. With these new features, data engineers can write reusable transforms for the Amazon Glue visual job editor, write data into open data lake format standards, and connect to more native data stores.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

You can now share your Amazon Machine Images (AMIs) with Amazon Organizations and Organizational Units (OUs). Previously, you could share AMIs only with specific Amazon Web Services account IDs. To share AMIs with Amazon Organizations, you had to explicitly manage sharing of AMIs with Amazon Web Services accounts that were added to or removed from Amazon Organizations. With this new feature, you no longer have to update your AMI permissions because of organizational changes. AMI sharing will be automatically synced when organizational changes occur. This feature helps you centrally manage and govern your AMIs as you grow and scale your Amazon Web Services accounts.

You can now update your Amazon ElastiCache for Redis cluster configuration to enable cluster mode without needing to rebuild you cluster, migrate data, or affect application availability. Cluster mode allows you to scale beyond the performance limitations of a single shard Redis cluster. For more information about cluster mode in ElastiCache for Redis, see the documentation.

Amazon GuardDuty Malware Protection is now available, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD to help detect malicious files residing on an instance or container workload running on Amazon Elastic Compute Cloud (Amazon EC2) without deploying security software or agents. Amazon GuardDuty Malware Protection adds file scanning for workloads utilizing Amazon Elastic Block Store (EBS) volumes to detect malware that can be used to compromise resources, modify access permissions, and exfiltrate data. Malicious files that contain trojans, worms, crypto miners, rootkits, bots, and the like can be used to compromise workloads, repurpose resources for malicious use, and gain unauthorized access to data. Existing customers can enable the GuardDuty Malware Protection feature with a single click in the GuardDuty console or through the GuardDuty API. When threats are detected, GuardDuty Malware Protection automatically sends security findings to Amazon Security Hub and Amazon EventBridge. These integrations help you centralize your security monitoring for Amazon Web Services and partner services, automate responses to malware findings, and perform security investigations from the GuardDuty console. With the launch of Amazon GuardDuty Malware Protection there are eight new threat detections:

Using Amazon EC2 Capacity Reservation Fleet, you can easily migrate your reserved Amazon EC2 capacity to new generation instance types. Capacity Reservations allow you to reserve capacity for your immediate use in a specific instance type and Availability Zone and can be cancelled by you at any time. With Capacity Reservation Fleet, you can reserve capacity across a prioritized list of instance types. When your reservations for lower priority instance types are unused, it will automatically convert them to Capacity Reservations for higher priority instance types.

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics NodeJS runtime version 4.0. With this update, runtime version of Amazon Lambda, executing the canaries, is updated to NodeJS 16.x.

Amazon Relational Database Service (RDS) for Oracle now supports the April 2023 Release Updates (RUs) for Oracle Database 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a new trusted procedural language. This allows you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

Metrics Insights is a fast, flexible, SQL-based query engine which enables developers, operators and systems engineers to identify trends and patterns across millions of operational metrics in real time. With Metrics Insights, operators can gain better visibility on their infrastructure and large scale application performance with flexible querying, on-the-fly metric aggregations and dynamic alarms that monitor fast moving environments.

AWS Elemental MediaConvert now supports video pass-through for mezzanine video formats. You can now run MediaConvert jobs that preserve the original video essence without re-encoding for intra-frame-only video formats like AVC Intra, Apple ProRes, VC3, and JPEG2000.

Amazon Athena has expanded its support for inbound connections via Internet Protocol Version 6 (IPv6) endpoints to include Amazon PrivateLink. Starting today, you can now connect to Athena securely and privately using PrivateLink from your Amazon Virtual Private Cloud (VPC), in addition to the public IPv6 endpoints that were previously available.

Amazon Managed Workflows for Apache Airflow (MWAA) is now available in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Cost Categories has added a new dimension “Usage Type” to its rules. You can now use seven types of dimensions: “Linked Account”, “Charge Type”, “Service”, "Usage Type", “Cost Allocation Tags”, “Region”, and other “Cost Category” while creating cost categories rules.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports Amazon RDS Optimized Reads for up to two times faster query processing compared to previous generation instances. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to two times faster with Optimized Reads on RDS for PostgreSQL. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by PostgreSQL on the local NVMe-based SSD block-level storage, thereby reducing your traffic to Elastic Block Storage (EBS) over the network. Refer to recent blog post to learn more about performance improvements using local disk based database instances for workloads that have highly concurrent read/write processing.

Amazon CloudFormation now supports Amazon IoT Core thing group, thing type and billing group resources. Amazon CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage Amazon Web Services and third-party resources. You can now use an Amazon CloudFormation template to pre-configure and deploy Amazon IoT Core registry resources for your targeted Internet of Things (IoT) solution in a secure, efficient, and repeatable way.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 15(15.2). New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. PostgreSQL 15 release also adds support for server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Aurora PostgreSQL version 3.0. Please refer to Amazon Aurora PostgreSQL updates for more information.

Following the open source community announcement of updates to the PostgreSQL database, we updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.7, 13.10, 12.14, and 11.19. These releases contain bug fixes and improvements by the PostgreSQL community. Refer to the Aurora version policy to help you decide how often and how to plan your upgrade. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024.

Amazon App Mesh now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now use Amazon PrivateLink to privately access Amazon App Mesh APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the Amazon PrivateLink pricing page for more information.

Amazon EMR Serverless is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon MemoryDB for Redis now supports Amazon Identity and Access Management (IAM) authentication access to its clusters. With this launch, you can associate IAM users and roles with MemoryDB users and manage their cluster access.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

Amazon Step Functions expands support for iterating and processing large sets of data such as images, logs and financial data in Amazon Simple Storage Service (Amazon S3), a cloud object storage service.

 Amazon MemoryDB for Redis now supports Redis 7. This release brings several new features to MemoryDB:

Amazon Key Management Service (Amazon KMS) lets you create KMS keys that can be used to generate and verify Hash-Based Message Authentication Code (HMACs). HMACs are a powerful cryptographic building block that incorporates secret key material within a hash function to create a unique keyed message authentication code. HMAC KMS keys can only be generated and used within government-approved hardware security modules (HSMs). This architecture can minimize the risk of these secret keys being compromised, in contrast to using plaintext HMAC keys in local application software.

Amazon Managed Streaming for Apache Kafka (MSK) now offers two new features: mult-VPC private connectivity and cluster policy support for Amazon MSK clusters that simplify connectivity and access between your Apache Kafka clients hosted in different VPCs and Amazon Web Services accounts and your Amazon MSK clusters.

Amazon Redshift Data Sharing is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon CloudWatch announces support for filtering by metric name on CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new capability you can now select the specific metrics you want to stream, providing additional filtering controls.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.4.0 for new and existing clusters. Apache Kafka 3.4.0 includes several bug fixes and new features that improve performance. Key features include a fix to improve stability to fetch from the closest replica. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.4.0.

Amazon Simple Notification Service (Amazon SNS) now supports payload-based message filtering, expanding the feature set that already supported attribute-based message filtering. With this release, you can apply subscription filter policies to filter out messages based on their contents, unlocking a variety of workloads. You may use this new capability to filter events from 60+ Amazon Web Services services that publish events to Amazon SNS, including Amazon S3, Amazon EC2, Amazon CloudFront, and Amazon CloudWatch. You may also use payload-based message filtering for your cross-account workloads, where subscribers may not be able to influence a given publisher to have its messages published with attributes to Amazon SNS.

Today, Amazon OpenSearch Service announces Multi-AZ with Standby, a new deployment option that enables 99.99% availability and consistent performance for business-critical workloads. With Multi-AZ with Standby, OpenSearch Service domains are resilient to potential infrastructure failures, such as a node or an Availability Zone (AZ) failure, while assuring no impact to performance or availability. Multi-AZ with Standby also ensures OpenSearch Service domains follow recommended best practices, simplifying configuration and management.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Update (RU) Release 2 for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The January 2023 RU Release 2 provides updated daylight savings time definitions provided by Oracle after the January 2023 RU was delivered.

Amazon S3 now automatically enables S3 Block Public Access and disables S3 access control lists (ACLs) for all new S3 buckets in all Amazon Web Services Regions, including the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. This change was first announced on December 14, 2022, began deploying on April 5, 2023, and is now applied to all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide.

We are excited to announce the unified Amazon Health Dashboard, a new destination that brings together the Service Health Dashboard and Personal Health Dashboard into a single connected experience. This new home is designed to provide a more responsive and accurate view, improved usability, and greater operational resilience.

Today we launched new observability features including log patterns, metrics analytics and support for Jaeger traces with OpenSearch 2.5 in Amazon OpenSearch Service.

Amazon Resource Access Manager (Amazon RAM) now supports customer managed permissions so you can author and administer fine-grained resource access controls for supported resource types. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), and with Amazon Identity and Access Management (IAM) roles and users. With customer managed permissions, you can apply the principles of least privilege, or the minimum permissions required to perform a task.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service.

Amazon Relational Database Service (Amazon RDS) for MySQL and MariaDB now support Optimized Reads for up to 2X faster query processing compared to previous generation instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by the MySQL and MariaDB server on the NVMe SSD-based block-level instance storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 2X faster with Optimized Reads on RDS for MySQL and MariaDB.

Amazon Relational Database Service (Amazon RDS) now supports integration with Amazon Secrets Manager to streamline how you manage your master user password for your Amazon RDS database instances. With this feature, Amazon RDS fully manages the master user password and stores it in Amazon Secrets Manager whenever your Amazon RDS database instances are created, modified, or restored. The new feature supports the entire lifecycle maintenance for your Amazon RDS master user password including regular and automatic password rotations; removing the need for you to manage rotations using custom Lambda functions.

We are excited to announce that Amazon GameLift now supports per-second billing for both Linux and Windows instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. With this update, customers will only pay for Amazon GameLift usage in one second increments, with a minimum of 1 minute. 

Today, Amazon Fargate for Amazon ECS Windows containers is available in the Amazon Web Services China (Beijing) region, operated by Sinnet and the Amazon Web Services China (Ningxia) region, operated by NWCD. This feature simplifies the adoption of modern container technology for Amazon ECS customers by making it even easier to run their Windows containers on Amazon Web Services.

Amazon Aurora Serverless v1 now allows you to select a specific window for scheduling a maintenance event in Amazon Web Services China (Ningxia) Region, operated by NWCD. You can use the maintenance window to specify, for example, when your PostgreSQL 10 cluster gets upgraded to PostgreSQL 11. You can set the maintenance window with just a few clicks in the Amazon Web Services Management Console or using the latest Amazon SDK or CLI. Review the Aurora documentation to learn more. 

Amazon IoT Device Management Jobs add the capability for customer to schedule their remote actions within a maintenance window. Job scheduling allowed customers to define the start and end time of a job rollout. Following today's launch, Customers can configure the maintenance window recurrence on daily, weekly or monthly schedule (e.g. “Monday-Wednesday-Friday”) or define a customized recurrence for Continuous Jobs. Devices that are added to target groups receive job execution notifications only within the pre-configured maintenance window duration without requiring any changes on device-side software. Customers with devices located in different time zones can also utilize this feature in combination with Dynamic Thing Groups and Device Shadow to schedule Job executions according to the local time of their devices (see this blog). With Maintenance Window configuration, customers can automate device software updates to their enterprise or industrial assets based on devices' software deployment cycles.

We are excited to announce support for Amazon EC2 C6i instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed service that allows you to deploy and scale dedicated game servers for session-based multiplayer games. 

Amazon Relational Database Service (Amazon RDS) events now include tags in the message body, which provide metadata about the resource that was affected by the service event. The message receiver can use these tags to do payload-based parsing with rule matching, enabling workflows such as routing, filtering, and down stream automation.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Amazon DynamoDB now supports up to 50 concurrent table restores per account. The default service quota for table restores increased from 4 to 50, and is applicable to restores performed using point-in-time recovery and on-demand backups managed by DynamoDB and Amazon Backup.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Amazon Relational Database Service (RDS) for Oracle now supports version 22.2 of Oracle Application Express (APEX) for all supported Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Today, we announce media metrics for AWS Elemental MediaConvert, increasing the information available for transcoding events and associated media assets. Now you can view and act on a broader set of data both during and after transcoding jobs complete. You can use the information available through media metrics to build dashboards with Amazon CloudWatch and to programmatically integrate actions into your workflows via Amazon EventBridge.

Starting today, the Amazon Web Services Billing Preferences page has a re-designed user experience, to help you manage your Amazon Web Services Billing Preferences. The Billing preferences page provides a user-friendly experience to manage your invoice delivery, usage and billing alerts as well as credit sharing preferences. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Lambda now supports Node.js 18 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Node.js 18 can take advantage of new features such as an upgrade of the bundled SDK for JavaScript to v3 and improved support for deploying ES Modules using Lambda layers. This release also provides access to Node.js 18 language enhancements, including the experimental ‘fetch’ API. For more information on Lambda’s support for Node.js 18, see our product documentation.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports Amazon RDS Optimized Writes enabling up to 2x higher write throughput at no additional cost. This is especially useful for RDS for MariaDB customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon IoT Core, a managed cloud service that lets customers connect millions of Internet of Things (IoT) devices and routes trillions of messages to Amazon Web Services services, announces support for Shared Subscriptions to its MQTT-based messaging broker service. MQTT is a device-to-device messaging communication standard widely used in IoT applications for device to cloud message delivery. Amazon IoT Core supports both MQTT3.1.1 and the newer MQTT5 industry specifications allowing clients with either version to take advantage of this new feature seamlessly.

Amazon Elastic Container Service (Amazon ECS) now provides contextual failure reasons that make it easier to troubleshoot task launch failures when customers use capacity providers for auto scaling the compute capacity in their cluster.

Amazon S3 adds a new Amazon CloudWatch metric to quickly diagnose and correct S3 Replication configuration issues. The OperationFailedReplication metric, available in both the S3 console and in Amazon CloudWatch, gives you per-minute visibility into the number of objects that did not replicate to the destination bucket for each of your replication rules.

We are pleased to announce that as of today, new Cost Explorer users in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will automatically receive the benefit of Cost Anomaly Detection. Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of unexpected cost increases. The default configuration allows new Cost Explorer users to quickly improve cost controls with zero effort.

Amazon EventBridge now supports Event Replay, which makes event-driven applications more durable and extensible by providing developers an easy way to replay past events. Event replay enables developers using Amazon EventBridge to build applications with the confidence that they can quickly recover from errors in their code, and the ability to easily extend their existing applications to add new functionality.

With Amazon Athena, you can use your SQL knowledge to query nearly 30 data stores - in addition to data stored in an Amazon S3 data lake - all without learning a new language, developing scripts to extract and duplicate data, or managing infrastructure. Starting today, you can now create and query views on these data sources, which include relational databases, streaming sources, and cloud object stores, for use cases such as interactive analysis and business intelligence reporting.

Amazon ElastiCache for Redis now makes it simpler and faster for you to get started with setting up an ElastiCache for Redis cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

As announced on December 14, Amazon S3 is now deploying two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide (S3 Block Public Access – S3 Object Ownership).

Amazon Elastic File System (Amazon EFS) has increased the maximum number of Access Points per file system from 120 to 1,000, enabling you to control file system access permissions across a larger number of applications in multi-tenant environments.

Amazon Lambda now supports setting Maximum Concurrency to the Amazon SQS event source, which allows customers to control the maximum concurrent invokes by the Amazon SQS event source. When multiple Amazon SQS event sources are configured to a function, customers can control the maximum concurrent invokes of an individual SQS event source. 

Amazon Redshift announces GA of Automated Materialized View (AutoMV) that helps you to lower query latency for repeatable workloads. AutoMV minimizes your effort for manually creating and managing materialized views and provides you the same performance benefits of user-created materialized views. Dashboard queries used to provide quick views of key performance indicators (KPIs), events, trends, and other metrics are some examples of workloads that can benefit from AutoMV. Reporting queries scheduled at various frequencies may also benefit from AutoMV.

Amazon Lake Formation is a service that makes it simple to set up a secure data lake in days. A data lake is a centralized, curated, and secure repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better decisions.

Customers can now track the build status and image build steps for their image pipelines directly in EC2 Image Builder. This capability makes it easier for you to track image builds, troubleshoot the build failures, and collect logs for audit purposes. Customers can also experience faster image build speeds as a result of workflow optimizations, with internal tests showing up to 35% improvements.

Cross-account observability across Amazon CloudWatch is launched to help you monitor and troubleshoot applications that span multiple Amazon Web Services accounts within an Amazon Web Services Region. With cross-account observability in CloudWatch, you can seamlessly search, visualize, and analyze your metrics, logs, and traces without any account boundaries. Centralized security, operations, platform teams, and service owners deploying applications across multiple accounts can aggregate and correlate cross-account telemetry data in Amazon CloudWatch. They can use resulting trends and insights to efficiently monitor and troubleshoot issues affecting the health of their applications. Cross-account observability is an addition to CloudWatch’s unified observability capability.

Starting today you will receive notifications for your On-Demand Capacity Reservations that are utilizing less than 20% of Amazon EC2 instances in the reservation. These alerts will be delivered to you through Amazon Health Dashboard, Cloudwatch Events and email, without any action required from your side and at no additional cost to you. 

Amazon Cloud Map enables service editing capability in the Amazon Web Services Console in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Today, Amazon CloudFormation has expanded the availability of StackSets to the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, customers can deploy their stack sets to and from these newly supported Amazon Web Services Regions.

Amazon SWF now supports Amazon PrivateLink allowing you to run workflows from your Virtual Private Cloud (VPC) without traversing the public internet.

NICE DCV version 2023.0 introduces multiple enhancements and features, such as support for Red Hat Enterprise Linux 9 and monitor selection for a full-screen remote session on Linux and macOS clients. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Compute Optimizer now provides cost and performance optimization recommendations for 37 new EC2 instances types, including bare metal instances (m6g.metal) and compute optimized instances . Additionally, Amazon Compute Optimizer now analyzes the “Available Mbytes”, “Available Kbytes”, and “Available Bytes” metrics to deliver more accurate EC2 instance recommendations for EC2 Windows instances.

Amazon Compute Optimizer now delivers recommendations to help customers identify optimal Amazon Elastic Container Service (Amazon ECS) task CPU and memory configurations for Amazon ECS services running on Amazon Fargate.

Amazon Compute Optimizer now supports 66 more Amazon Elastic Compute Cloud (Amazon EC2) instance types. Newly supported instance types include the latest generation general purpose instance families from both Intel and AMD (M6i), compute optimized instance families (C6i), memory optimized instance family (R6i), and storage optimized instance families. These additions to Compute Optimizer allow customers to ensure they are always sized to an optimal EC2 instance type by delivering recommendations that ensure high performance at low cost.

Amazon Elastic Kubernetes Service (EKS) announces domainless Group Managed Service Account (gMSA) support for Windows containers. This helps customers to easily authenticate applications hosted on Amazon EKS with Microsoft Active Directory (AD) using a portable user identity and using a plug-in mechanism to retrieve the gMSA credentials for their Windows containers. With the latest offering, customers can run containers without joining the Amazon EKS nodes or underlying instances to the domain and they don’t need to rejoin the node to a domain in rolling update or auto scale events.

Today, Amazon Compute Optimizer launches a new capability that makes it easier for customers to optimize their EC2 instances by leveraging multiple CPU architectures.

Amazon Athena has expanded its encryption settings to improve the security of your query results. With today’s launch, you can now ensure all query results are encrypted at or above a level of encryption that you specify.

Amazon Simple Notification Service (Amazon SNS) now supports setting content-type request headers for HTTP/S notifications. This enables your topic subscribers to create a DeliveryPolicy that specifies the content-type value that Amazon SNS assigns to their HTTP/S notifications, such as application/json, application/xml, or text/plain. With this launch, applications can receive their notifications in a more predictable format.

Amazon CloudFormation has expanded the availability of language Transform called ‘AWS::LanguageExtensions' to the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. When declared in a template, the transform enables extensions to the template language in Amazon CloudFormation. The language extensions transform expands the functionality of the base CloudFormation JSON/YAML template language.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.3.2 for new and existing clusters. Apache Kafka 3.3.2 includes several bug fixes and new features that improve performance. Some of the key features include enhancements to fetch from the closest replica and metrics. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.3.2.

Amazon MQ now supports the Amazon Key Management Service to create and manage keys for at-rest encryption of customer data for RabbitMQ brokers. Amazon MQ handles the encryption and decryption seamlessly, so you don’t have to change your applications to access your data. When you create a broker, you can now select the KMS key used to encrypt your data from the following three options: a KMS key in the Amazon MQ service account, a KMS key in your account that Amazon MQ creates and manages, or a KMS key in your account that you create and manage. In addition to encryption at rest, all data transferred between Amazon MQ and client applications is securely transmitted using TLS/SSL.

Application Load Balancer (ALB) now supports version 1.3 of the Transport Layer Security (TLS) protocol, enabling you to optimize the performance of your backend application servers while helping to keep your workloads secure. TLS 1.3 on ALB works by offloading encryption and decryption of TLS traffic from your application servers to the load balancer. TLS 1.3 is optimized for performance and security by using one round trip (1-RTT) TLS handshakes, and only supporting ciphers that provide perfect forward secrecy.

Amazon Organizations tag policies are now available in both the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services (Ningxia) Region, operated by NWCD. The tag policies feature is available to customers through the Amazon Web Services Console, Amazon Command Line Interface (CLI), or Amazon SDKs. 

Today, we are announcing the general availability of Amazon Linux 2023 (AL2023), our new Linux-based operating system for Amazon Web Services that is designed to provide a secure, stable, high-performance environment to develop and run your cloud applications. AL2023 provides seamless integration with various Amazon Web Services services and development tools and offers optimized performance for Amazon Elastic Compute Cloud (EC2) Graviton-based instances and Amazon Web Services Support at no additional licensing cost. Starting with AL2023, a new Amazon Linux major release will be available every 2 years. This cadence provides you with a more predictable release cycle and up to 5 years of support, making it easier for you to plan your upgrades.

Amazon Database Migration Service (Amazon DMS) now supports validation to ensure that data is migrated accurately to S3.

Using Amazon S3 Object Lambda, you can add your own code to S3 GET, HEAD, and LIST API requests to modify data as it is returned to an application. You can now use an S3 Object Lambda Access Point alias as an origin for your Amazon CloudFront distribution to tailor or customize data to end users. For example, you can resize an image depending on the device that an end user is visiting from.

Amazon CloudWatch Logs now supports ingesting enriched metadata introduced in Amazon Virtual Private Cloud (Amazon VPC) flow logs as part of versions 3 to 5 additional to the default fields. This launch includes metadata fields that provide more insights about the network interface, traffic type, and the path of egress traffic to the destination.

Amazon Database Migration Service (Amazon DMS) has expanded support of Amazon Simple Storage Service (Amazon S3) as a target by adding the ability to create an Amazon Glue Data Catalog from the Amazon S3 data files generated by Amazon DMS. With this integration, you no longer need to run a crawler or additional ETL jobs to create the catalog, and the Amazon S3 data is ready to be queried through other Amazon Web Services services such as Amazon Athena. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) supports MySQL 8.0.26. In addition to several security enhancements and bug fixes, MySQL 8.0.26 includes several changes, such as enhanced tablespace file segment page configuration and new aliases for certain identifier names. For more details, please review Aurora MySQL 3 and MySQL 8.0.26 release notes.

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in Amazon Web Services China (Beijing) Region operated by Sinnet, and Amazon Web Services China (Ningxia) Region operated by NWCD.

Amazon Relational Database Service (RDS) Proxy is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.. Amazon RDS Proxy is a fully managed and a highly available database proxy for Amazon Aurora and RDS databases. Amazon RDS Proxy can help improve application scalability, resiliency, and security.

Amazon S3 Access Points simplify data access for any Amazon Web Services service or customer application that stores data in S3 buckets. With S3 Access Points, you create unique access control policies for each access point to more easily control access to shared datasets. Now, bucket owners are able to authorize access via access points created in other accounts. In doing so, bucket owners always retain ultimate control over data access, but can delegate responsibility for more specific IAM-based access control decisions to the access point owner. This allows you to securely and easily share datasets with thousands of applications and users, and at no additional cost.

Amazon OpenSearch Service announces security analytics that provides new threat monitoring, detection, and alerting features. These capabilities help you to detect and investigate potential security threats that may disrupt your processes or pose a threat to sensitive organizational data.

Application Auto Scaling customers can now use Amazon CloudWatch Metric Math to customize the metrics they use with Target Tracking policy without actually publishing and paying for the customized metrics separately. Customers can use both arithmetic operators (such as +, -, /, and *) and mathematical functions (such as Sum and Average) to easily create custom metrics based on existing CloudWatch metrics. Application Auto Scaling offers support to automatically scale capacity of 13 supported services, including Amazon Elastic Container Service (ECS) services. Specifically, Target Tracking works like a thermostat - it continuously changes the capacity of the scaled resource to maintain the specified metric at a customer-defined target level. Today’s release makes it easier and cheaper to configure Target Tracking with custom metrics.

You can now run OpenSearch and OpenSearch Dashboards version 2.5 in Amazon OpenSearch Service. With OpenSearch 2.5, OpenSearch Service adds several new features and enhancements such as support for Security Analytics, support for Point in Time Search, improvements to observability and geospatial functionality. 

Virtual Private Cloud (VPC) interface endpoints for Amazon S3 now offer private DNS options that can help you more easily route S3 requests to lower-cost endpoints in your VPC. With private DNS for S3, your on-premises applications can use Amazon PrivateLink to access S3 over an interface endpoint, while requests from your in-VPC applications access S3 using gateway endpoints. Routing requests in this way helps you to take advantage of lower-cost private network paths without having to make code or configuration changes to your clients.

Amazon Route 53 Resolver endpoints now supports IPv6, allowing you to forward traffic to and resolve traffic from on-premises Domain Name System (DNS) resolvers with IPv6 addresses.

Today, Amazon Neptune adds support for Slow Query Logs to help identify queries that need performance tuning. You can now identify slow-running queries and log runtime details for these queries’ key performance indicators such as query execution time, and response codes to Amazon CloudWatch Logs.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL 14.6, 13.9, 12.13, and 11.18 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process.

Starting today, Amazon Neptune supports R6i instances powered by 3rd generation Xeon Scalable processors. R6i instances are the 6th generation of Amazon EC2 memory optimized instances, designed for memory-intensive workloads. R6i instances provide up to 50 Gbps of networking speed, 2x that of R5 instances, and up to 20% higher memory bandwidth per vCPU compared to R5 instances.

Amazon Neptune now supports graph summary API to help you understand important metadata about your property graphs (PG) and Resource Description Framework (RDF) graphs. Starting with engine version 1.2.1.0, you can use the graph summary API to retrieve estimated counts for your nodes, edges, and properties or incorporate the API into your graph applications for fast access to summary data about your graph.

Deletion protection is now available for Amazon DynamoDB tables in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. DynamoDB now makes it possible for you to protect your tables from accidental deletion when performing regular table management operations. When creating new tables or managing existing tables, authorized administrators can set the deletion protection property for each table, which will govern whether a table can be deleted. The default setting for the deletion protection property is disabled. When the deletion protection property is enabled for a table, the table cannot be deleted, irrespective of whether any Amazon Web Services Identity and Access Management (IAM) permissions policies allow deletion of the table. When deletion protection is disabled for a table, authorized administrators can delete the table if allowed by IAM permissions policies. The deletion protection property can be set through the Amazon Web Services Management Console, API, CLI, SDK, or Amazon Web Services CloudFormation.

Amazon RDS for SQL Server now supports Cross Region Read Replica in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Cross Region Read Replica enables managed disaster recovery capability for mission critical databases by allowing a read replica in another region be "promoted" as a new standalone production database. This feature also supports data proximity by enabling replicas be placed closer to the application users of a given region to reduce read latencies. Additionally, this feature allows Amazon RDS for SQL Server customers to offload their read workload from the primary DB Instance, and also scale out read workloads over a farm of up to fifteen read replicas that can reside in any China region. To get started, visit the Amazon RDS SQL Server User Guide.

Amazon Cognito identity pools now publishes data events to Amazon CloudTrail logs. Customers now have greater visibility into access-related activities for both guest and authenticated users of their applications. Administrators can now configure Amazon CloudWatch Alarms to monitor specific activity on Amazon Cognito identity pools and react based on automated workflows. Customers can record data events in Amazon CloudTrail and gain better insight into the identity providers leveraged by users to access to Amazon Web Services resources with Amazon Cognito identity pools. Amazon CloudTrail may charge for recording data events.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.2, 14.7, 13.10, 12.14, and 11.19. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon Identity and Access Management (IAM) now enables workloads that run outside of Amazon Web Services Cloud to access Amazon Web Services resources using IAM Roles Anywhere. IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary Amazon Web Services credentials and use the same IAM roles and policies that you have configured for your Amazon Web Services workloads to access Amazon Web Services resources.

We’re pleased to announce the launch of Amazon Glue version 4.0, a new version of Amazon Glue that accelerates data integration workloads in Amazon. Amazon Glue 4.0 upgrades the Spark engines to Apache Spark 3.3.0 and Python 3.10. Glue 4.0 gives customers the latest Spark and Python releases so they can develop, run, and scale their data integration workloads and get insights faster.

AWS Elemental MediaConvert now has enhanced color processing features along with support for new color formats. As High Dynamic Range (HDR) content becomes more common, the ability to convert between Standard Dynamic Range (SDR) and HDR has also become important. While high-value content is commonly created using HDR color, most legacy, user-generated, and mass-produced content is created in SDR. Demand for format normalization continues to grow as users look to combine SDR and HDR content for editing, distribution, and monetization.

You can now create a single AMI that can boot on both Unified Extensible Firmware Interface (UEFI) and Legacy BIOS.

You can now use new Credential Control Properties to more easily restrict the usage of your IAM Roles for EC2.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.12, 10.5.19, 10.4.28 and 10.3.38. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Transfer Family now allows you to send Applicability Statement 2 (AS2) messages using HTTPS. AS2 offers security features like encryption and non-repudiation by default. With the ability to send AS2 messages over HTTPS, you can now benefit from an additional layer of in-transit encryption for your most sensitive EDI payloads and further compatibility with trading partners that require SSL/TLS communications.

Amazon Relational Database Service (RDS) for SQL Server now supports Cross Region Automated Backups with encryption in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The Amazon RDS Cross-Region Automated Backups feature enables disaster recovery capability for mission-critical databases by providing you the ability to restore your database to a specific point in time within your backup retention period. This allows you to quickly resume operations in the event that the primary Amazon Web Services Region becomes unavailable. If you've enabled encryption on the source RDS for SQL Server DB instance, you can use this feature to copy encrypted DB snapshots to regions outside of the primary Amazon Web Services Region.

You can now use Amazon CloudFormation templates to create and manage Amazon Transfer Family resources for AS2 including servers, connectors, partner profiles, and certificates. Amazon CloudFormation makes it easy to configure the entire stack of AS2 resources required to initiate and test an end-to-end AS2 message exchange. Additionally, you can now access Amazon CloudWatch metrics for AS2, such as number of successful and failed AS2 messages, in the Amazon Transfer Family Management Console. These metrics enable you to more effectively monitor your AS2 activity using a centralized dashboard.

February 07, 2023 - Amazon DocumentDB (with MongoDB compatibility) continues to increase compatibility with MongoDB, and now offers added support for MongoDB API version 5.0 drivers with Amazon DocumentDB 5.0. Amazon DocumentDB is a fast, scalable, highly available, and fully managed document database service that supports MongoDB API based workloads. Amazon DocumentDB makes it easy and intuitive to store, index, and query JSON data.

Amazon Elastic Container Service (Amazon ECS) now enables customers to delete inactive task definition revisions programmatically or via the Amazon ECS console. With this new capability, customers can permanently delete task definition revisions that are no longer needed or contain undesirable configurations, simplifying their resource management and improving security posture.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-3.9 and recommends customers to migrate Synthetics canaries to the latest runtime version. Runtime version syn-nodejs-puppeteer-3.9 includes updates to third-party dependency packages. Please refer to the runtime support policy for additional details. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest major version PostgreSQL 15. New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. The PostgreSQL 15 release also adds support for new extension pg_walinspect and server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release.

Today, FLAC audio and animated GIF video input sources for AWS Elemental MediaConvert is available in Amazon Web Services China (Ningxia) Region, operated by NWCD. These new input formats are compatible with all MediaConvert outputs. For example, you can convert lossless FLAC files into compressed audio formats like AAC, MP3, and Ogg Vorbis, or use FLAC files as sidecar audio sources to be joined with video files. Animated GIF inputs can be converted into higher-efficiency video streaming codecs like AVC and HEVC and distributed as standalone MP4 files or adaptive-bitrate streaming packages such as HLS or DASH.

Amazon Managed Streaming for Apache Kafka (MSK) now offers Tiered storage that brings a virtually unlimited and low-cost storage tier. Tiered Storage lets you store and process data using the same Kafka APIs and clients , while saving your storage costs by 50% or more over existing MSK storage options . Tiered Storage makes it easy and cost-effective when you need a longer safety buffer to handle unexpected processing delays or build new stream processing applications. You can now scale your compute and storage independently, simplifying operations.

You can now use Service Quotas in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, to view and manage your service quotas at scale as your Amazon Web Services workloads grow.

Amazon OpenSearch Service now lets you schedule service software and auto-tune updates during off-peak hours, helping you plan deployments to your domain better. In addition, with improved notifications through EventBridge events, and notifications on the OpenSearch Service console, you have better visibility of scheduled updates, when the updates start, and complete.

Starting today Amazon Relational Database Service (Amazon RDS) for MySQL supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Relational Database Service (RDS) for Oracle now supports early notifications of Auto minor Version Upgrades (AmVU) via Pending Maintenance Actions (PMA) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet., thereby improving usability of AmVU.

Starting today Amazon RDS for MariaDB supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Kinesis Data Streams for Amazon DynamoDB now supports Amazon CloudFormation for DynamoDB global tables, which means you can enable streaming to an Amazon Kinesis data stream on your DynamoDB global tables with CloudFormation templates. By streaming your DynamoDB data changes to a Kinesis data stream, you can build advanced streaming applications with Amazon Kinesis services. For example, Amazon Kinesis Data Analytics reduces the complexity of building, managing, and integrating with Apache Flink and provides built-in functions to filter, aggregate, and transform streaming data for advanced analytics. You also can use Amazon Kinesis Data Firehose to take advantage of managed streaming delivery of DynamoDB table data to other Amazon Web Services services such as Amazon OpenSearch Service, Amazon Redshift, and Amazon S3.

Amazon Elastic Container Service (Amazon ECS) has increased the “Tasks in PROVISIONING state per cluster“ service quota to deliver a faster Cluster Auto Scaling experience. Customers who need to launch a large number of tasks (>300) in their Amazon ECS clusters will now see their cluster infrastructure scale faster.

Today, Amazon Systems Manager announces adding CloudWatch Alarms to control tasks. Now customers can choose to stop a task or an action in Systems Manager services when a CloudWatch alarm is activated. This allows customers to use the broad range of monitoring metrics supported by CloudWatch, ranging from resource utilization to application performance, to control tasks. If the specified CloudWatch alarm is activated during a task, Automation will stop the task, RunCommand will cancel the commands, State Manager and Maintenance Windows will skip dispatch. It's easy to get started, customers can add a CloudWatch alarm, while setting up a task in Systems Manager’s Automation, Run Command, State Manager, and Maintenance Windows services. Once setup, users can view the attached alarm in the task's details page. 

 Glue launches G.025X, a new quarter DPU worker type for streaming extract, transform, and load (ETL) jobs. This smaller worker type is suitable to process low volume and sporadic data streams. 

Torn Write Prevention (TWP) is a feature that ensures 16KiB write operations are not torn in the event of operating system crashes or power loss during write transactions. This feature is now available for customers in Amazon Web Services China Regions in Amazon Elastic Block Store (EBS), a block storage service, when attached to all EC2 Nitro-based instances.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Writes. With Optimized Writes you can improve write throughout by up to 2x at no additional cost. This is especially useful for RDS for MySQL customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Trusted Advisor fault tolerance checks for ElastiCache for Redis and MemoryDB for Redis are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, the Trusted Advisor fault tolerance checks for ElastiCache for Redis are now available in all Amazon Web Services regions. Amazon Trusted Advisor evaluates your Amazon Web Services account with automated best practice checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, and monitor service quotas.

Amazon Resource Access Manager (Amazon RAM) now supports higher default quotas to help you scale your resource sharing. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), or with Amazon Identity and Access Management (IAM) roles and users for supported resource types. For each Amazon Web Services Region in an account, you can now share up to 25,000 resources and share resources with up to 25,000 principals. Additionally, you can create up to 25,000 resource shares per Amazon Web Services Region in an account. For each individual resource share, you can share up to 5,000 resources and share resources with up to 5,000 principals.

Amazon ElastiCache for Redis 7 now includes enhanced I/O multiplexing, which delivers significant improvements to throughput and latency at scale. Enhanced I/O multiplexing is ideal for throughput-bound workloads with multiple client connections, and its benefits scale with the level of workload concurrency. As an example, when using r6g.xlarge node and running 5200 concurrent clients, you can achieve up to 72% increased throughput (read and write operations per second) and up to 71% decreased P99 latency, compared with ElastiCache for Redis 6.

Amazon Gateway Load Balancer (GWLB) and Gateway Load Balancer Endpoint (GWLBE) now support end-to-end connectivity using Internet Protocol version 6 (IPv6). Customers can now send IPv6 traffic through Gateway Load Balancers and its endpoints to distribute traffic flows to dual stack appliance targets. 

Starting today, the Amazon Web Services Bills page has a re-designed user experience, making it easier to understand your Amazon Web Services spend. The Bills page provides an overview of your charges and the ability to drill into key details; the re-design provides a refreshed user interface, new views of your savings and taxes, and enhanced sorting and filtering capabilities. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now connect over IPv6 to your services hosted in Amazon Web Services using Amazon PrivateLink. Amazon PrivateLink is a highly available, scalable technology that enables you to privately connect your VPC to supported Amazon Web Services services, services hosted by other Amazon Web Services accounts (VPC Endpoint Services), third-party SaaS services and supported Amazon Web Services Marketplace partner services.

Amazon Lambda now allows you to create or update your functions with container images stored in an Amazon ECR repository in a different Amazon Web Services account than that of your Lambda function. Previously, you could only access container images stored in an Amazon ECR repository in the same account as your Lambda functions. If you used a centralized account for your Amazon ECR repositories, you needed to copy your container images into an Amazon ECR repository in the same account as your Lambda function. You can now simplify this workflow by accessing the container image stored in an Amazon ECR repository in a different account. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the tcn extension which provides a trigger function that allows you to asynchronously notify listeners of changes to a table.

Amazon Elastic Container Service (Amazon ECS) has improved the accuracy of Elastic Load Balancing (ELB) for Amazon ECS services. Load balancing on Amazon ECS now more accurately routes traffic to running tasks as tasks will be deregistered from the ELB before they enter a stopped state. Furthermore, with these improvements, Amazon ECS also helps your services running on the Fargate Spot capacity provider be more resilient to Spot termination notices.

Amazon Identity and Access Management now supports the ability to refine permissions policies based on the organizational unit (OU) or organization ID in Amazon Organizations of the principal or resource. With these new IAM capabilities, you now can author IAM policies to enable your principals to access only resources inside specific OUs, or organizations.

Today, we are excited to announce the expansion of instance refresh to support instances on standby or protected from scale in. For instances on standby, you now have the options to terminate them, ignore them altogether, as well as the current option to wait until they return to in service. For protected instances, you now have the options to refresh them, ignore them altogether, as well as the current option to wait for them until you remove scale-in protection.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.32 and 5.7.41. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Today, we are excited to announce the ability to roll back an Auto Scaling instance refresh. EC2 Auto Scaling’s instance refresh feature allows you to replace instances in an Auto Scaling group on a rolling basis. With today’s launch you can use a rollback to undo changes an instance refresh made when it fails.

Amazon Cloud Map increases default limit of service instances that can be registered in a namespace with API calls discovery from 2,000 to 6,000 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports active tracing with Amazon X-Ray. Customers can now view traces that flow through Amazon SNS topics to destination services, such as Amazon Simple Queue Service, Amazon Lambda, and Amazon Kinesis Data Firehose, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. Customers can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API or the Amazon SNS Management Console.

Amazon Elasticache for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, ElastiCache for Redis offered an SLA of 99.9% for Multi-AZ configurations. With this launch, ElastiCache for Redis has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon MemoryDB for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, MemoryDB offered an SLA of 99.9% for Multi-AZ configurations. With this launch, MemoryDB has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon Pricing Calculator is a free, web-based planning tool that helps you to estimate the cost of your use cases in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows you to explore the price points of services based on your architectural designs or common use cases, and review calculations behind your estimates. You can estimate cost of an individual or multiple services based on your needs.

Announcing Amazon CloudWatch Metric Streams - a new feature that enables customers to create a continuous, near real-time stream of metrics to a destination of their choice.

Amazon Database Migration Service (Amazon DMS) now supports Amazon EC2 C6i and R6i instance types in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of 3.5 GHz, offering up to 15% better compute price performance over comparable Generation5 instances for a wide variety of workloads, and always-on memory encryption using Intel Total Memory Encryption (TME).

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge), 9TiB of memory (u-9tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Today, Amazon CloudFormation adds Spotlight tab on the Amazon Web Services Management Console for CloudFormation to give quick access to curated articles on CloudFormation. You can now find Amazon CloudFormation articles from multiple official Amazon Web Services channels at a single location. You can use this feature to discover the editor’s choice articles on CloudFormation. With this launch, you can find the latest information on CloudFormation features, blogs, and workshops.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the seg extension which provides the "seg" data type for representing line segments or floating point intervals.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports additional cipher suites that can be used with the OEM Agent and SSL options in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can make use of these new cipher suites as they provide stronger security for the RDS for Oracle database instance(s) connections, thereby increasing the security posture of their infrastructure.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.6, 13.9, 12.13, 11.18, and 10.23. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release. 

Amazon OpenSearch Service now supports enabling Security Assertion Markup Language (SAML) authentication for OpenSearch Dashboards during domain creation. SAML authentication for OpenSearch Dashboards enables users to integrate directly with third-party identity providers (IDP) such as Okta, Ping Identity, OneLogin, Auth0, Active Directory Federation Services (ADFS) and Azure Active Directory.

Starting today, you can configure your NAT Gateway to support up to 440,000 concurrent connections to a single destination by adding multiple IP addresses to same NAT Gateway.

Customers in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can now hibernate Amazon EC2 I3en, M6i and C6i instances. Hibernation provides you with the convenience of pausing your workloads and resuming them later from the saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off. By using hibernation, you can maintain a fleet of pre-warmed instances that can get to a productive state faster without modifying your existing applications.

Starting today, Amazon EC2 Launch Templates support Amazon Systems Manager parameters for Amazon Machine Images (AMIs). This simplifies automation and reduces misconfiguration likelihood by eliminating the need to create a new launch template version for every AMI update. 

Today, Amazon CloudFormation StackSets adds a new parameter in DescribeStackSet API to improve visibility to the list of Regions where a given stack set is deployed. You can now access the list of Regions directly through your management or delegated administrator Amazon Web Services account.

Amazon OpenSearch Service adds a new connection mode for cross-cluster connection, simplifying the setup required to remote reindex between a local domain and a remote VPC domains. Remote reindex enables you to migrate data from a source domain to a target domain. Remote reindex is also useful when you have to upgrade your domains across multiple major versions.

Amazon Glue Studio Job Notebooks are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. They provide interactive, notebook-based job authoring for Amazon Glue to simplify the process of developing data integration jobs. Job Notebooks act as a serverless, built-in interface for Amazon Glue Interactive Sessions, a new feature that allows customers to run interactive Apache Spark workloads on demand.

Today, Amazon Neptune announces support for JupyterLab 3 on Neptune notebooks to boost the productivity of developers and data scientists using the Neptune Workbench. With this update, you can now launch Neptune notebooks in the Amazon Web Services Management console using JupyterLab to access a modern interactive development environment (IDE) complete with developer tools for code authoring, debugging, and support for the latest open source JupyterLab extensions. 

Amazon Backup announces support for Amazon Redshift, making it easier for you to centrally manage data protection of your Amazon Redshift data warehouse. You can now use Amazon Backup to schedule and restore Redshift manual snapshots. Further, your backups can provide enhanced data protection with immutability, improved security with separate backup access policies, and better governance by centralizing backup and recovery.

Amazon Redshift Concurrency Scaling is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (RDS) for MariaDB supports encrypted SSL/TLS connections to the database instances. Starting today, you can enforce SSL/TLS client connections to your Amazon RDS for MariaDB database instance for enhanced transport layer security. To enforce SSL/TLS, enable the require_secure_transport parameter (disabled by default) through the Amazon RDS Management Console, the CLI or the API. When the require_secure_transport parameter is enabled, a database client will be able to connect to the RDS for MariaDB instance only if it can establish an encrypted connection.

Amazon EMR now supports Amazon EC2 R6GD, C6I, M6I, R6I, G4DN, C5A AND X1 Instances in Amazon Web Services China (Ningxia) Region, operated by NWCD, and Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Amazon OpenSearch Service now lets you validate the configuration changes before applying them via the console, SDK or the APIs. With this new option, Amazon OpenSearch Service performs detailed validation of the desired changes and provides a report. The option also reports if the change will require a blue/green deployment to help you plan your changes better.

Amazon Launch Wizard is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Launch Wizard offers a guided way of sizing, configuring, and deploying Amazon Web Services resources for third party applications, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual Amazon Web Services resources. 

Amazon Elastic File System (Amazon EFS) now supports a 1-day Lifecycle Management Policy that allows you to automatically move files that haven’t been accessed in 1 day to the Amazon EFS Infrequent Access (EFS IA) storage class. You can configure this new policy option for your file system, or you can use one of the existing policy options: 7, 14, 30, 60, or 90 days.

Amazon ElastiCache for Memcached has added support for Memcached version 1.6.17. This version is a cumulative update and contains all changes and improvements from version 1.6.12 to 1.6.17. 

Amazon Simple Notification Service (SNS) now supports a higher default quota for subscription filter policies. With the increased quota, you can now have up to 10,000 subscription filter policies per account, and can apply up to 200 subscription filter policies per topic. By default, topic subscribers receive every message published to a topic. With subscription filter policies, subscribers can filter out unwanted messages, simplifying their architecture and optimizing the utilization of their resources.

Amazon CloudFormation announces support for CloudFormation Linter (cfn-lint) in Amazon Serverless Application Model Command Line Interface ( SAM CLI). The cfn-lint tool validates your JSON/YAML template against CloudFormation-based rules, and returns diagnostic error messages. With this launch, you can use an optional parameter --lint in sam validate command to run cfn-lint validations on your JSON/YAML templates.

Starting today, Amazon EC2 X2idn and X2iedn instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. X2idn and X2iedn instances are designed for memory-intensive workloads and deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These new instances are powered by 3rd generation Intel Xeon Scalable Processors (Ice Lake) and deliver up to 50% higher compute price performance than comparable X1 instances. X2idn has a 16:1 ratio of memory to vCPU and X2iedn has a 32:1 ratio, making these instances a great fit for workloads such as in-memory databases and analytics, big data processing engines, and Electronic Design Automation (EDA) workloads.  

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these new High Memory instances with On Demand and Reserved Instance purchase options.

Amazon EC2 Console introduces the new and improved launch experience - a quicker and easier way to launch an instance. The new design provides a single page layout allowing you to view all your settings in one location. You no longer need to navigate back and forth between steps to ensure your configuration is correct. The new design also introduces a summary panel, that provides an overview and helps navigate the page.  

Today, Amazon CloudFormation updates the language extension transform to supports default values and additional intrinsic functions in Fn::FindInMap. Customers can use these features to minimize the length of their CloudFormation templates, and improve their readability. The language transform enables extensions to the CloudFormation template language with functions such as Fn::Length, Fn::JsonToString, etc. Customers can modularize their templates into groups with different attributes in Parameters and Mappings, and use Fn::FindInMap to refer to attributes of these groups. For example, you can use Fn::FindInMap for EC2 resource type with a Mappings section containing a single map, RegionMap, that associates AMIs with Amazon Web Services Regions to your EC2 instances. With these language enhancements, you can use intrinsic functions such as Fn::Split, Fn::Select, and others within Fn::FindInMap. Previously, Fn::FindInMap only supported Fn::FindInMap and Ref intrinsic functions. Additionally, you can define string or list type default values in Fn::FindInMap. To see the list of supported intrinsic functions and learn about Fn:FindInMap, refer to the user guide.

Amazon Backup now offers you the ability to create legal holds on your protected data beyond your defined retention policies, for legal and auditing purposes. Legal holds prevent your backups from being deleted after the expiration of their retention period, until your backups are explicitly released from legal hold. With this feature, Amazon Backup allows you to manage legal hold requests at scale and help prove compliance to outside counsel, auditors, and related third-parties.

Trusted Language Extensions for PostgreSQL is a new open source development kit to help you build high performance extensions that run safely on PostgreSQL. With Trusted Language Extensions, developers can install extensions written in a trusted language on Amazon Aurora PostgreSQL-Compatible Edition and Amazon Relational Database Service (RDS) for PostgreSQL.

Amazon S3 Storage Lens now offers lower pricing tiers for customers with 25 billion or more objects, making continuous monitoring of large storage footprints more cost effective. Customers with hundreds of billions of objects will now see progressively lower prices, saving up to 40% on organization-wide storage monitoring.

Today, Amazon Backup is announcing application-aware data protection that enables you to add Amazon CloudFormation stacks to backup policies, making it easier for you to back up and restore your entire applications. Amazon Backup automates the data protection of applications that are defined using Amazon CloudFormation stacks to create immutable application-level backups using Amazon Backup Vault Lock.

Amazon S3 now automatically applies S3 managed server-side encryption (SSE-S3) as a base level of encryption to all new objects added to S3, at no additional cost and with no impact on performance. SSE-S3 uses 256-bit Advanced Encryption Standard and is already applied to trillions of objects. This new base level of encryption helps customers meet their encryption requirements, with no changes to applications. Additionally, customers can still choose to encrypt their objects using customer-provided encryption keys (SSE-C), Amazon Key Management Service keys (SSE-KMS), or a client library such as the Amazon S3 Encryption Client.  

Amazon Kinesis Video Streams is now available in the Amazon Web Services China (Beijing) Region operated by Sinnet. Amazon Kinesis Video Streams makes it easy to securely stream video from connected devices to Amazon Web Services for analytics, machine learning (ML), playback, and other processing. Kinesis Video Streams automatically provisions and elastically scales all the infrastructure needed to ingest streaming video data from millions of devices. It durably stores, encrypts, and indexes video data in your streams, and allows you to access your data through easy-to-use APIs. Kinesis Video Streams enables you to playback video for live and on-demand viewing, and quickly build applications that take advantage of computer vision and video analytics.

Amazon Relational Database Service (Amazon RDS) now supports Blue/Green Deployments to help you with safer, simpler, and faster updates to your Amazon Aurora and Amazon RDS databases. Amazon RDS Blue/Green Deployments create a fully managed staging environment that allows you to deploy and test production changes, keeping your current production database safe. With a single click, you can promote the staging environment to be the new production system in as fast as under a minute, with no changes to your application and no data loss.

Today, we are introducing a new price and capacity optimized allocation strategy for Amazon EC2 Spot Instances in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD to help you optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. The price and capacity optimized allocation strategy makes Spot allocation decisions based on both spare capacity availability and Spot Instance price. The price and capacity optimized allocation strategy is the best choice for most Spot applications such as big data, containerized workloads, CI/CD, web servers, image and media rendering, machine learning, and high performance computing (HPC).

Amazon Transfer Family announces built-in support for PGP decryption of files uploaded over SFTP, FTPS or FTP to Amazon S3 or Amazon EFS. Customers can now configure and automate decryption of files that are encrypted using PGP keys by their users before upload, which can help them meet their data protection and compliance requirements when exchanging sensitive data with third parties.

Amazon RDS for Oracle now supports copying option groups during in-region cross-account snapshot copy requests using the API, CLI, or Amazon Backup. Amazon RDS uses option groups to enable and configure features that make it easier to manage your databases. Copying the option groups with the snapshot on cross account copy allows you to restore that snapshot in the target account with the same options as the source snapshot without needing to reconfigure the option groups. 

Amazon CloudFormation now supports AllowedValues and AllowedPattern properties for CommaDelimitedList parameter type. You can use the CommaDelimitedList parameter type to specify multiple string values in a single parameter. For example, you can create three different subnets with their own VPC CIDR blocks, and use CommaDelimitedList to specify three different CIDR blocks. With these language enhancement, you can add validation checks to your CommaDelimitedList, and reduce input errors to your CommaDelimitedList while updating your stacks and/or stack sets.

We are excited to announce the availability of Reserved nodes for Amazon MemoryDB for Redis in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Reserved nodes allow you to save up to 55% over On-Demand node prices in exchange for a usage commitment over a one- or three-year term. Reserved nodes are complementary to MemoryDB On-Demand nodes and give businesses flexibility to reduce costs. Reserved nodes can be reserved for one-year or three-year terms with No Upfront, Partial Upfront and All Upfront payment options. 

Application Auto Scaling now offers customers more visibility about the scaling decision it takes for an auto scaled resource. Application Auto Scaling (AAS) is a service that offers standardized auto scaling experience across 13 different Amazon services beyond Amazon EC2, for example Amazon DynamoDB provisioned read and write capacity, and Amazon Elastic Container Service (ECS) services. Application Auto Scaling takes scaling actions based on the customer-defined scaling policies that act as a guideline for scaling decisions. Until now, customers only got details about successful and not about deferred scaling actions. With this feature, customers get more insights about scaling decisions that do not lead to a scaling action in both descriptive and machine-readable format.

Starting today, Amazon Managed Domain Lists for Route 53 Resolver DNS Firewall is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) region, operated by NWCD, making it easier for customers to quickly get started with managed protections against DNS threats. In addition, Route 53 now sources threat intelligence from Recorded Future for DNS Firewall, expanding the breadth of DNS threats you can block using Amazon Managed Domain Lists, with new domains continuously added as DNS threats emerge and are identified by Recorded Future’s threat intelligence systems.

Amazon ElastiCache for Redis now supports updates to encryption in transit on existing cluster resources. You can change the TLS configuration of your Redis clusters without re-building or re-provisioning them or impacting application availability. When enabling encryption in transit, your overall solution can remain connected to Redis clusters.