2023

With zero buffering, customers can deliver data to Amazon S3, Amazon OpenSearch Service, Amazon Redshift, and third-party HTTP destinations within seconds enabling real time use cases the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Elastic Kubernetes Service (EKS) now surfaces cluster-related health issues in the EKS console and API, providing administrators enhanced visibility into the health of their clusters. Cluster health status information helps customers to quickly diagnose, troubleshoot, and remedy issues with their clusters, enabling them to run more up-to-date and secure application environments. Cluster health status information is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports a minor version for Microsoft SQL Server 2022 on the Express, Web, Standard, and Enterprise Editions.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-6.1 and recommends that customers update Synthetics Canaries to the latest runtime version. This update includes security fixes, bug fixes, and UI Canaries stability improvements.  To learn more, see release notes.

Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers to anomalous spend patterns. Starting today, customers can provision anomaly monitors and anomaly alert subscriptions with CloudFormation in both the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Today, Amazon CloudWatch alarms support Amazon Lambda functions as an alarm state change action. Customers can now choose to invoke a Lambda function when a CloudWatch alarm changes to an OK, ALARM or INSUFFICIENT_DATA state. This makes it easier for customers to automate custom actions on alarm state changes.

Today, Amazon CloudTrail announces console support to manage delegated administrators for CloudTrail. Delegated administrator support provides customers with the ability to manage organization trails from an account other than the management account in Amazon Organizations.

Amazon Keyspaces (for Apache Cassandra) is a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service that offers 99.999% availability. Today, Amazon Keyspaces added query auditing support for Keyspaces Data Manipulation Language (DML) events to Amazon CloudTrail.

Starting today, you can enable DNS-over-HTTPS (DoH) on Amazon Route 53 Resolver endpoints in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. With this launch, you can encrypt DNS queries that pass through the endpoints and improve privacy by minimizing the visibility of the information exchanged through the queries. DoH is a protocol that protects DNS traffic by passing the queries through an encrypted HTTPS session. DoH can help enhance privacy and security by protecting DNS queries from eavesdropping and manipulation from unauthorized users.

We are excited to announce the launch of Unified Search, enabling customers to easily search and discover information in the Amazon Web Services Management Console. You can search for services (e.g., EC2) and service features (e.g., Events) from any Console Management page. Unified Search provides search box focus using a keyboard shortcut (alt-s or option-s), autocomplete results using the right arrow key, and navigation to the top search result by pressing the enter key.

Amazon Kinesis Data Firehose now delivers decompressed CloudWatch Logs to S3 and Splunk destinations.Amazon CloudWatch Logs enable customers to aggregate log events from their systems, applications, and services for monitoring purposes. Customers use Amazon CloudWatch Logs subscriptions to deliver log events using Amazon Kinesis Data Firehose to Amazon S3 and Splunk for troubleshooting and monitoring use cases. CloudWatch Logs are delivered as gzip-compressed objects and with the support of decompression for Cloudwatch Logs in Amazon Kinesis Data Firehose, customers can now automatically deliver decompressed logs. This eliminates the need for additional services or post-processing to do decompression and allows customers to use optional Amazon Kinesis Data Firehose features such as Data Format Conversion or Dynamic Partitioning.

Today, Amazon IoT Core—a managed service that connects billions of Internet of Things (IoT) devices to Amazon Web Services Cloud—announces the capability of using your own Certificate Authority (CA) certificates when provisioning fleets with Amazon IoT Core. Using Amazon IoT Core, you can provision your devices with various techniques, such as just-in-time provisioning, just-in-time registration, and fleet provisioning, where each technique serves a dedicated purpose. For example, with fleet provisioning, you can generate and securely deliver X.509 client certificates and private keys to your devices when they connect to Amazon Web Services Cloud for the first time. The updated fleet provisioning capability enables you to issue and customize X.509 client certificates using CAs hosted on external CA services or your own public key infrastructure (PKI).

Today, we launched support for wildcards in the lifecycle policy feature (LCP) of Amazon Elastic Container Registry (ECR). With this launch, customers can now create lifecycle policies using wildcards in their filters. Wildcards can be used to match image tags that contain one or more specific string in any position.

Amazon Simple Notification Service (Amazon SNS) First-In-First-Out (FIFO) topics now support a no-code, in-place option to store and replay your messages, without the need to provision a separate archival resource. This improves the durability of your event-driven applications, and can help you recover from downstream failure scenarios.

Amazon CloudWatch Container Insights launches cross-account observability across Amazon Elastic Kubernetes Service (EKS) to help you monitor and troubleshoot applications that span across multiple Amazon Web Services accounts within an Amazon Web Services Region. Central Operational Teams managing container administration can now monitor and analyze container health and performance across their organization from a consolidated view and maintain the overall application health status to achieve the ideal business results.

Amazon Kinesis Data Streams now supports On-Demand write throughput limit of 2 GB/s, a 2x increase from the current limit of 1 GB/s. Amazon Kinesis Data Streams is a serverless streaming data service that makes it easier to capture, process, and store streaming data at any scale. On-Demand is a capacity mode for Kinesis Data Streams that automates capacity management, so that you never have to provision and manage the scaling of resources. It requires you to pay for throughput consumed rather than for provisioned resources, making it easier to balance costs and performance while providing the same availability, durability, and integrations. You can create a new On-Demand data stream or convert an existing data stream into the On-Demand mode with a single-click without requiring any code changes or downtime for your existing applications.

Amazon Elastic Kubernetes Service (EKS) now supports simplified management of Identity and Access Management (IAM) identity access to Kubernetes clusters, through a new set of APIs that tightly integrates IAM with Kubernetes authentication and authorization controls. 

Amazon CloudWatch announces support for the OpenTelemetry Protocol (OTLP) 1.0.0 specification as a new output format in CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice.

Today, Amazon Simple Queue Service (SQS) announces support for dead-letter queue redrive for FIFO queues. Dead-letter queue redrive is an enhanced capability to improve the dead-letter queue management experience for Amazon SQS customers. Amazon SQS already supports redriving messages from a standard dead-letter queue to a standard source queues or a standard custom destination queue. Now SQS customers can also redrive messages from a FIFO dead-letter queue to FIFO source queues or FIFO custom destination queues.

EC2 Image Builder now allows customers to modify processes in their image pipelines, including build and test phases, to better suit their industry requirements. Customers no longer have to conduct bespoke tasks, such as post-build usability tests, external vulnerability scans, and security approval before distribution, outside their image pipeline automation. With this launch, EC2 Image Builder enables customization to its image creation process, allowing customers to enhance their automation and reduce operational overhead. This feature is available for Amazon Machine Images (AMIs) and Container images.

Amazon Simple Notification Service (Amazon SNS) enables you to log the delivery status of messages sent from your topic to subscribers. Once configured, log entries are sent to Amazon CloudWatch. Logging message delivery status helps you determine whether a message was delivered to an endpoint, what the endpoint response was, and the message dwell time. Now, you can configure your delivery status logging with Amazon CloudFormation for new and existing Amazon SNS topics.

Amazon EventBridge Pipes is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, providing a simpler, consistent, and cost-effective way to create point-to-point integrations between event producers and consumers when building event-driven architectures. You can use Pipes to connect your applications with data from sources including Amazon SQS, Amazon Kinesis Data Streams, and Amazon DynamoDB. EventBridge Pipes supports the same 20+ targets as the EventBridge Event Bus, such as Amazon SQS, Amazon Kinesis Data Streams and Firehose, Amazon Step Functions, Amazon SNS, Amazon ECS, and event buses themselves.

Amazon Systems Manager Fleet Manager now provides a new toolset that aims to streamline on-instance volume management by providing an easy GUI based way to manage EBS volumes in on your Windows instances in Amazon Web Services China Regions. This feature will be available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With this new Fleet Manager capability, customers can readily browse the set of volumes attached to an instance identify volume mount points in the instance file system, view metadata for attached disks and mount as well as format unused EBS volumes.

Amazon EventBridge Pipes now supports logging to Amazon CloudWatch Logs, Amazon Simple Storage Service (Amazon S3), and Amazon Kinesis Data Firehose. You can now more easily determine whether integration issues occurred at the source, target, or the intermediary transformation and enrichment stages, customize the verbosity of your logs by selecting one of three log levels (error, info, and trace), and optionally choose to include event payloads, service requests, and service responses in your logs. Support for logs in Pipes provides improved observability for event-driven architectures, and enables you to troubleshoot issues faster.

Amazon RDS (Relational Database Service) Performance Insights now allows you to export the metrics dashboard for your Amazon RDS instance to Amazon CloudWatch. You can export both the pre-configured and custom metrics dashboards. With this feature, it is now easier to view and set alarms on Amazon RDS Performance Insights metrics from Amazon CloudWatch, and integrate these metrics with other Amazon CloudWatch metrics on the same dashboard with just a few clicks in the console.

Block Public Access for EBS Snapshots provides an additional layer of security for Amazon Elastic Block Store (Amazon EBS) Snapshots and helps prevent unauthorized access and potential misuse of snapshot data. Starting today, you can manage Block Public Access for EBS Snapshots settings for your account using Amazon CloudFormation templates.

Starting today, Amazon EC2 C6gd and R6gd instances are available in Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by Amazon Graviton2 processors and are built on the Amazon Nitro System. The Nitro System is a collection of Amazon Web Services designed hardware and software innovations that enables the delivery of efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. 

Today, Amazon Identity and Access Management (IAM) launched two new global condition keys for IAM policies that enable you to scalably allow Amazon Web Service services to access your resources only on your behalf. With this new IAM capability, you can simplify management of your resource-based policies to require that Amazon Web Service services access your resources only when the request originates from your organization or organizational unit (OU) in Amazon Organizations.

Amazon CloudWatch now supports Metrics Insights in Cross-Account observability allowing customers to query and alarm on metrics at scale from multiple accounts within a region using a central monitoring account.

Starting today, Amazon EC2 Instance Connect, a simple and secure way to connect to your instances using Secure Shell (SSH), will support Red Hat Enterprise Linux (RHEL) and CentOS in addition to Amazon Linux and Ubuntu

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) will support MySQL 8.0.32. In addition to several security enhancements and bug fixes, MySQL 8.0.32 includes several improvements, such as Instant DDL support for drop column operations, support for new language-specific collations, Generated Invisible Primary Keys (GIPKs), and performance schema monitoring enhancements. For more details, refer to the Aurora MySQL 3 and MySQL 8.0.32 release notes.

Starting today, Amazon Aurora MySQL includes optimizations that reduce the database restart time by up to 65% versus without optimizations. These improvements are achieved by deferring portions of the buffer pool initialization and validation process to occur after the database is already online and accepting connections. These optimizations will improve database availability for unplanned events such as unexpected database restarts and planned operations such as minor version upgrades. To learn more about availability benefits, you can refer to our blog titled ‘Reduce downtime with Amazon Aurora MySQL database restart time optimizations’.

Amazon Compute Optimizer now supports the ability to filter your rightsizing recommendations by tags. This includes tag keys, tag key and value pairs, or combinations of both. Tag filtering will be available on these rightsizing recommendations pages: Amazon Elastic Compute Cloud (EC2) instance types, Amazon Elastic Block Store (EBS) volumes, Amazon Lambda functions, and Amazon Elastic Container Service (ECS) services on Amazon Fargate.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports major version 16, starting with PostgreSQL version 16.1. RDS for PostgreSQL 16.1 includes support for logical decoding on read replicas, logical replication from standbys, and over 90 PostgreSQL extensions such as pgactive, pgvector, pg_tle, h3-pg, pg_cron, and rdkit. PostgreSQL 16 introduces a number of performance and visibility improvements including greater query parallelism, SIMD CPU acceleration, and a ‘pg_stat_io’ view that provides statistics on I/O usage. Further, with PostgreSQL 16, developers can now use SQL/JSON constructors and identity functions.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports creating active-active clusters using the Group Replication plugin. You can use the plugin to set up active-active replication between your RDS for MySQL database instances to provide continuous availability for your applications. Writing to two or more database instances in an active-active cluster can help maximize availability and reduce write latency.

Amazon Keyspaces (for Apache Cassandra), is a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service that offers 99.999% availability.

Amazon DocumentDB (with MongoDB compatibility) now supports vector search, a new capability that enables you to store, index, and search millions of vectors with millisecond response times. Vectors are numerical representations of unstructured data, such as text, created from machine learning (ML) models that help capture the semantic meaning of the underlying data. Vector search for Amazon DocumentDB can store vectors from Amazon Web Services ML services such as Amazon SageMaker, third party services, and proprietary models. There are no upfront commitments or additional costs to use vector search, and you only pay for the data you store and compute resources you use.

Today, we announce the general availability of Amazon ElastiCache Serverless, a new serverless option for Amazon ElastiCache that simplifies cache management and instantly scales to support the most demanding applications. With ElastiCache Serverless, you can create a highly-available and scalable cache in less than a minute, eliminating the need to plan for, provision, and manage cache cluster capacity. ElastiCache Serverless automatically stores data redundantly across multiple Availability Zones and provides a 99.99% availability Service Level Agreement (SLA). With ElastiCache Serverless, you pay for data stored and compute consumed by your workload, with no upfront commitments or additional costs.

Amazon FSx for NetApp ONTAP, a service that provides fully-managed shared storage built on NetApp’s popular ONTAP file system, now allows you to create, manage, and back up FlexGroup volumes using the Amazon Web Services Management Console, FSx CLI, and Amazon SDK, making it even easier to manage and protect your data at-scale.

Amazon FSx for NetApp ONTAP now enables you to create Multi-AZ file systems in Shared VPCs from participant accounts, making it even easier for your organization to decentralize how you administer network and storage resources.

Amazon IoT SiteWise now supports the use of user-defined unique identifiers for asset, asset models, properties and hierarchies. This new feature allows consistency and control using identifiers for assets and asset models in Amazon IoT SiteWise, especially for companies that have modeled their industrial equipment in multiple systems or Amazon IoT SiteWise instances.

Amazon Cloud Map now supports Amazon CloudTrail data events for DiscoverInstances and DiscoverInstancesRevision APIs. With CloudTrail integration for these Amazon Cloud Map APIs, customers can now get a history of APIs calls made for cloud resource discovery. This can help customers enhance governance, compliance, and risk auditing capabilities for the workloads running with Amazon Cloud Map.

Amazon IoT SiteWise is a managed service to collect, store, organize, and monitor data from industrial equipment at scale.

Amazon S3 Storage Lens now provides request metrics for prefixes within an S3 bucket. Prefix-level metrics like total request counts, request counts by status code, bytes downloaded, and more, help you better understand activity for the largest prefixes within a bucket, and identify opportunities to optimize your S3 storage.

Amazon S3 Storage Lens introduces Storage Lens groups, a new way to aggregate metrics using custom filters based on object metadata. Storage Lens groups help you drill-down into characteristics of your data, such as distribution of objects by age, your most common file types, and more. This information helps you better understand and optimize your S3 storage.

Today, we are excited to announce that Apache Flink is now generally available for Amazon EMR on EKS. With Apache Flink for Amazon EMR on EKS, customers can transform and analyze streaming data in real time with Apache Flink, an open-source framework for stateful computations over data streams. Amazon EMR on EKS is a deployment option for Amazon EMR that makes it easy for customers to run their big data applications and data lake analytics workloads on EKS. Customers already using Amazon EKS can run their Apache Flink application along with other types of applications on the same Amazon EKS cluster, helping improve resource utilization and simplify infrastructure management.

Amazon IoT SiteWise now supports Asset model components to help industrial customers create reusable components to derive new asset models and express variations easily. 

We are announcing the private preview launch of Amazon IoT SiteWise warm storage tier. This is a new service-managed storage tier optimized for cost-efficient, long-term storage and analytical queries. This will allow customer to run analytical queries within seconds of ingestion in order to power BI analytics dashboard and applications that need access to recent data. The Amazon IoT SiteWise warm tier keeps data in an optimized schema to facilitate querying over asset metadata and telemetry data for analytics.

Amazon S3 server access logging now supports automatic date-based partitioning for log delivery. Date-based partitioning for log delivery improves performance and cost-efficiency when running analytics on server access logs using services such as Amazon Athena, Amazon EMR, or Amazon Redshift Spectrum. Server access logging supports two date-based partition formats for your particular use case: event time or deliver time partitioning.

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available. With Amazon Redshift Serverless, all users—including data analysts, developers, and data scientists—can now use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity without making any changes to your existing analytics and business intelligence applications.

A new major version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Microsoft SQL Server 2022 CU9 for Express, Web, Standard, and Enterprise Editions. You can now leverage SQL Server 2022 features such as Query Store Enhancements, Parameter Sensitive Plan Optimization, and SQL Server Ledger on your Amazon RDS for SQL Server DB instances.

Customers running applications with more than one containers on Amazon Elastic Container Service (ECS) with Amazon Fargate can now leverage Seekable OCI (SOCI) to lazily load specific container images within the Amazon ECS task definition. This eliminates the need to generate SOCI indexes for smaller container images within the task definition, while still getting the benefits of SOCI with larger container images, improving the overall application deployment and scale-out time.

Amazon S3 now allows you to enable S3 Object Lock on existing buckets. Additionally, you can set up S3 Replication for your S3 Object Lock enabled buckets without contacting Amazon Web Services Support. This can help you roll out an additional layer of data protection with a write once, read many (WORM) model to guard against accidental or malicious deletion.

Amazon RDS for SQL Server expands supports for M6i, R6i, R5d and X2iedn instance types in Amazon Web Services China Regions. M6i, R6i, R5d and X2iedn instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Today, Amazon Simple Queue Service (SQS) announces support for logging data event SQS APIs using Amazon CloudTrail, enabling customers to have greater visibility into SQS activity in their Amazon Web Services account for best practices in security and operational troubleshooting. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon EventBridge EventBus allows customers to audit and monitor the actions in their Amazon Web Services environments through events that are generated by Amazon CloudTrail for API calls. Previously, only mutating API calls (for example: Create, Update, or Delete) were available in EventBridge. With support for read-only API events (for example: List, Get or Describe), customers will be able to receive and process the full suite of CloudTrail events from services that are integrated with EventBridge. 

Today, we are announcing the general availability of Amazon DocumentDB (with MongoDB compatibility) I/O-Optimized in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon DocumentDB I/O-Optimized is a new storage configuration for database clusters that provides improved price performance and predictable pricing for customers with I/O-intensive applications. Amazon DocumentDB I/O-Optimized offers improved performance, increasing throughput and reducing latency for customers’ most demanding workloads. With Amazon DocumentDB I/O-Optimized, there are zero charges for read and write I/O operations—you only pay for your database instances and storage usage, making it easy to predict your database spend up front. Amazon DocumentDB I/O-Optimized offers up to 40% cost savings for I/O-intensive applications where I/O charges exceed 25% of the total Amazon DocumentDB database spend.

You can now run OpenSearch version 2.11 in Amazon OpenSearch Service. With OpenSearch 2.11, we have made several improvements to search, observability, security analytics, and OpenSearch Dashboards. This version includes features that were launched as part of open source OpenSearch versions 2.10 and 2.11. Some of the key improvements include introduction of hybrid query functionality which uses the normalization processors to improve search relevance by combining the relevance scores of lexical queries with natural language-based k-NN vector search queries, multimodal search that allows users to search image and text pairs like product catalog items, a new search comparison tool that lets you compare the results of two different search queries side by side in OpenSearch Dashboards and, introduction of sparse retrieval in addition to existing dense retrieval for semantic search applications.

Amazon Transfer Family now offers expanded limits for logical directory mappings up to 2.1 MB for SFTP, FTPS, and FTP customers, enabling finer grained control over how you present your files to your users. This gives you even more control to configure user access to securely upload and share massive volumes of data seamlessly across different teams, regions, and applications at scale. 

Amazon Transfer Family now supports port 2222 for SFTP servers with VPC-hosted endpoints. This enables you to enhance the security of your servers as well as accommodate your business partners’ port requirements.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.5, 14.10, 13.13, 12.17, and 11.22. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. With this release, RDS for PostgreSQL now supports pgactive extension for PostgreSQL versions 11.22 and higher, 12.17 and higher, 13.13 and higher, 14.10 and higher, and 15.4-R2 and higher.

Amazon CloudFormation launches a parameter called ImportExistingResources for the CreateChangeSet API that streamlines the process of importing resources into stacks. Customers use ChangeSets to preview the resources that CloudFormation will create, update, or delete during a deployment. Customers can execute ChangeSets if they are satisfied with the preview. ChangeSet execution fails if the names of resources in the template conflict with existing resources. With this launch, customers can create ChangeSets that automatically mark existing resources for an import operation instead of a create operation. This eliminates deployment failures due to naming conflicts. Further, this reduces the manual effort of import operations for use-cases such as stack refactoring.

Starting today, Amazon EC2 storage optimized I4i instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Designed for storage I/O intensive workloads, I4i instances are powered by 3rd generation Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz, offer up to 30% better compute price performance over I3 instances, and always-on memory encryption using Intel Total Memory Encryption (TME).

You can now use Elastic Load Balancing (ELB) service-specific condition keys in IAM policies to restrict configurations for Transport Layer Security (TLS) Policy and IP based access. This enhancement enforces users in your account follow standards you have put in place for load balancer configurations.

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C7g, M7g, and R7g instances are available in Amazon Web Services China (Beijing) Region operated by Sinnet and Amazon Web Services China (Ningxia) Region operated by NWCD. These 7th generation instances are powered by Amazon Graviton3 processors and built on the Amazon Nitro System. Amazon Graviton3 processors provide up to 25% better compute performance compared to Amazon Graviton2 processors. The Amazon Nitro System is a collection of Amazon Web Services designed hardware and software innovations that deliver efficient, flexible, and secure cloud services with isolated multi-tenancy, private networking, and fast local storage. C7g, M7g and R7g instances are built for workloads including batch processing, ad serving, video encoding, gaming, scientific modelling, data analytics, and CPU-based artificial intelligence and machine learning (AI/ML) inference.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the Oracle Multitenant configuration on Oracle Database versions 19c and 21c running Oracle Enterprise Edition or Standard Edition 2 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. With this release, the Amazon RDS for Oracle DB instance can operate as a multitenant container database (CDB) hosting one or more pluggable databases (PDBs). A PDB is a set of schemas, schema objects, and non-schema objects that logically appears to a client as a non-CDB.

Amazon Simple Notification Service (Amazon SNS) now supports additional message filtering capabilities, including the ability to match against characters at the end of a value (suffix matching), to ignore case sensitivity (equals-ignore-case matching), and to have a single filter match if any conditions across multiple separate message properties are true (OR matching). You can leverage these new filtering operators to further simplify your messaging architecture by offloading additional message filtering logic from subscribers, as well as message routing logic from publishers.

Amazon ElastiCache for Redis version 7.1 is now generally available. This release contains performance improvements which enable workloads to drive higher throughput and lower operation latencies. ElastiCache customers can achieve over 1 million requests per second per node on r7g.4xlarge or larger. Amazon ElastiCache for Redis version 7.1 can achieve up to 100% more throughput and 50% lower P99 latency, compared to Elasticache for Redis version 7.0.

Today, we are excited to announce that you can enable endpoints for interactive analytics on EMR Serverless applications. This launch allows you to pick EMR Serverless applications as the compute, in addition to EMR on EC2 clusters and EMR on EKS virtual clusters, to run Jupyterlab notebooks from EMR Studio workspaces. Amazon EMR Studio is an integrated development environment (IDE) that makes it simple for data scientists and data engineers to develop, visualize, and debug analytics applications written in PySpark, Python, and Scala. Amazon EMR Serverless is a serverless option for Amazon EMR that makes it simple to run open-source big data analytics frameworks such as Apache Spark without configuring, managing, and scaling clusters or servers. 

Customers can now use default policies to backup all EC2 instances and EBS volumes in their account with a single API call via Amazon Data Lifecycle Manager. Default policies work in conjunction with customers’ existing backup mechanisms to only create EBS-backed AMIs and EBS Snapshots of instances and volumes with no recent backups. This helps ensure customers have comprehensive backup protection without creating duplicate backups or increasing management overhead and cost. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (Amazon RDS) now offers the option to upgrade your MySQL 5.7 snapshots (Minor versions 16 to 43) to MySQL 8.0 (Minor versions 28, 32, 33, 34) using the RDS Console and the ModifyDBSnapshot API or CLI command.  

Amazon Managed Workflows for Apache Airflow (MWAA) now enables you to create environments in a shared, centrally-managed Amazon Virtual Private Cloud (VPC). VPC sharing allows teams, each with their Amazon Web Services accounts, to create resources into a centrally-managed VPC. This reduces the number of VPCs that you need to create and manage, while using separate accounts for billing and access control.

Amazon EventBridge now supports 22 additional Amazon CloudWatch metrics that enable you to monitor the performance of your event buses and proactively identify when you may need to increase your service quotas. Publishing events to an event bus now includes metrics such as API latency, event payload size, as well as number of successful, failed, and throttled events. For invocations, where EventBridge delivers an event to a target, such as Amazon Lambda, new metrics provide visibility into retries, throttling, and end-to-end latency including the time it takes for a target to respond. These metrics provide deeper insight into your event-driven applications, and allow you to quickly identify and resolve issues as they arise.

Amazon Step Functions now allows you to easily restart workflows from their point of failure, so you can recover from failure faster, increase efficiency, and pay only for what you need. Amazon Step Functions is a visual workflow service capable of orchestrating Amazon Web Services services to automate business processes and data processing workloads.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports an enhanced version of Apache Kafka 3.6.0 that offers generally available Tiered Storage. Apache Kafka’s version 3.6.0 includes several bug fixes and new features, including early access for Tiered Storage. This enhanced version supports production-ready Tiered Storage, similar to previously launched Amazon MSK version 2.8.2, so customers can use it for mission-critical workloads. Tiered Storage makes storage management of your MSK Provisioned clusters easier by offering an elastically scalable and virtually unlimited remote storage tier in addition to the high-performance local storage tier. It also makes it more cost effective to store data for longer durations in Apache Kafka clusters. Learn more about Tiered Storage in Amazon MSK Developer Guide.

Amazon Relational Database Service (RDS) for Oracle now supports the October 2023 Release Update (RU) for the Oracle Database 19c and 21c versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon IoT Core, a managed cloud service that lets customers securely connect Internet of Things (IoT) devices the cloud and manage them at scale, announces support for Transport Layer Security (TLS) 1.3 through Configurable Endpoints. TLS 1.3 provides two major improvements in security and performance - it removes legacy features and older cipher suites in previous versions of TLS, and offers better performance through a simplified handshake process.

Amazon IoT Device Management expands the capability of Fleet Indexing to support indexing and querying an IoT device’s last reported location. Amazon IoT Device Management is a fully managed cloud service that you can use to remotely monitor and manage your IoT devices at scale. With the Fleet Indexing feature, you can easily query and group devices based on any combination of device attribute, state, and connectivity data stored across various IoT data sources. With this update, you can use geoqueries to narrow your search and retrieve devices in desired geographic boundaries for more targeted insights, such as detecting location specific device connectivity issues. These insights can then further enable you to take targeted device management actions.

Today, we announce the general availability of Amazon Database Migration Service (DMS) Serverless, which automatically provisions and scales resources to make database migrations simpler. With Amazon DMS Serverless, you can replicate data across a wide variety of popular database and analytics engines and services, such as PostgreSQL, MySQL, Oracle, Amazon Redshift, Amazon DynamoDB, Amazon Aurora, and more. Amazon DMS Serverless manages the undifferentiated database migration work, minimizing the need for you to manually estimate, provision, monitor, and scale resources. You can now start your migrations within hours and save money by paying only for the data migration resources you use.

Today, Amazon Elastic Block Store (EBS) announced the availability of EBS Snapshot Lock, a new security feature that helps customers comply with their data retention policies and add another layer of protection against inadvertent or malicious deletions of data. Customers use EBS Snapshots to back up their EBS volumes for disaster recovery, data migration and compliance purposes. Customers can set up multiple layers of data protection for EBS Snapshots, including copying them across multiple Amazon Web Services regions and accounts, setting up IAM access policies as well as enabling Recycle Bin. With Snapshot Lock, customers can configure locks on individual snapshots so that they cannot be deleted by anyone, including the account owner, for a specified period of time. Customers have the flexibility of either granting certain users access to modify snapshot lock configurations per their data governance guidelines or implementing stricter controls by ensuring that the lock configuration cannot be modified by anyone, including privileged users. Customers can also rely on this feature to store EBS Snapshots in a WORM (Write-Once-Read-Many) compliant format. 

Today, Amazon IoT Device Defender announces the capability to export cloud-side and device-side metrics to your own data lake running on Amazon Web Services or outside. Amazon IoT Device Defender continuously monitors device fleets to detect any abnormal device behavior, alerts about security issues, and provides built-in mitigation actions. Using Detect feature, you can evaluate device and cloud-side metrics against a pre-defined threshold and receive alerts when deviations are detected. With the new export capability, you can easily transfer Detect metrics including number of messages received, network signal strength, CPU and memory usage, to other Amazon Web Services and third-party services for further analytics.

Amazon Elastic Container Service (Amazon ECS) now supports idempotency for task launches, allowing you to safely retry task launches without side effects. This feature helps ensure that timeouts or connection errors do not result in the launch of more instances than you originally intended, saving you time and money.

Starting now, Amazon EC2 adds service quotas for Amazon Machine Images (AMIs) in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You will see three new quotas in the EC2 section on the Service Quotas console page. The first quota is for the total number of AMIs within your Amazon Web Services account, the second quota is for the total number of public AMIs within your Amazon Web Services account, and the third quota is on the number of shares you can have for each AMI. These quotas are added by default for all Amazon Web Services accounts and do not require any action from you. Each quota is per Amazon Web Services account per Amazon Web Services Region.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 5.7.44. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the MySQL community.

Customers can now use Amazon Data Lifecycle Manager to automate pre-scripts and post-scripts on their Amazon EC2 instances to protect their workloads with application-consistent Amazon Elastic Block Store (EBS) Snapshots. This capability works in conjunction with Amazon Systems Manager Agent and Amazon Systems Manager Documents (SSM documents) and comes with provided templates to make it easy for customers to automate the creation of application-consistent EBS Snapshots, including for self-managed databases. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (Amazon RDS) Blue/Green Deployments now supports safer, simpler, and faster updates to your Amazon Aurora PostgreSQL-Compatible Edition and Amazon RDS for PostgreSQL databases. Blue/Green Deployments create a fully managed staging environment using PostgreSQL community logical replication, that allows you to deploy and test production changes, keeping your current production database safer. With a few clicks, you can promote the staging environment to be the new production system in as fast as a minute, with no data loss and no changes to your application to switch database endpoints.

Today, we launch video source replacement for AWS Elemental MediaConvert, allowing you to frame-accurately replace sections of source video with alternative content versions.

Amazon Relational Database Service (Amazon RDS) for MySQL now delivers up to 3X higher write throughput at no additional charge, starting with RDS for MySQL version 8.0.35.  If you're running RDS for MySQL version 8.0.34 or lower, you can upgrade to RDS for MySQL version 8.0.35 to benefit from this performance improvement. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon Relational Database Service (Amazon RDS) Optimized Writes now supports R5d, M5d, M5, R5, and M6g database (DB) instances. With Amazon RDS Optimized Writes you can improve the write throughput for Amazon RDS for MySQL and MariaDB workloads by up to 2x at no additional cost. This is especially useful for write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2014, 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.

NICE DCV version 2023.1 introduces new features and enhancements, such as a new Windows display driver which optimizes the graphics pipeline and reduces the overall CPU usage. NICE DCV is a high-performance remote display protocol that is designed to help customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon CloudFormation StackSets announces a new capability ConcurrencyMode that provides customers a faster deployment experience while balancing deployment safety. Customers control speed and safety of their stack set deployments with concurrency and failure tolerance. Customers define these parameters along with ConcurrencyMode as a part of their StackSetOperationPreferences prior to running a stack set operation. StackSetsOperationPreferences is available with the following six APIs: create-stack-instances, delete-stack-instances, detect-stack-set-drift, import-stacks-to-stack-set, update-stack-set and update-stack-instances. With the ConcurrencyMode parameter, customers can modify existing deployment behavior of stack set operations for faster deployments that decouples concurrency from failure tolerance.

Amazon Elastic Block Store (EBS) now supports Block Public Access for EBS Snapshots, an account-wide security setting that allows customers to block public sharing of EBS Snapshots in a Region. Customers managing EBS Snapshots at-scale now have a simple and proactive way of safeguarding their data from inadvertent access by unauthorized users.

Amazon Simple Notification Service (Amazon SNS) First-In-First-Out (FIFO) topics now support 3000 messages per second, per topic. All existing and future FIFO topics now have this new quota by default with no action required.

Amazon RDS Proxy is a fully managed and a highly available database proxy for Amazon Aurora and RDS databases. RDS Proxy allows customers to gracefully scale applications by efficiently reusing database connections. For application using PostgreSQL Extended Query Protocol, RDS Proxy can now reuse database connections, resulting in efficient use of database resources. 

Amazon Aurora PostgreSQL-Compatible Edition now supports the mysql_fdw extension which allows your PostgreSQL database to connect and retrieve data stored in Amazon Aurora MySQL-compatible, RDS MySQL, and self-managed MySQL and MariaDB databases.

Amazon CloudWatch Container Insights now delivers enhanced observability for Amazon Elastic Kubernetes Service (EKS) with out-of-the-box detailed health and performance metrics, including container level EKS performance metrics, Kube-state metrics and EKS control plane metrics for faster problem isolation and troubleshooting.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 15.4, 14.9, 13.12, 12.16, and 11.21 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. This release also contains new features and improvements such as Babelfish for Aurora PostgreSQL version 3.3. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11,  you must upgrade to a newer major version by February 29, 2024. 

Amazon Transfer Family now supports the option to include username and password credentials, termed as Basic authentication, when sending Applicability Statement 2 (AS2) messages over HTTPS. This enables you to be compatible with your trading partner’s AS2 implementations and comply with their security requirements.

Now Amazon Elastic Cloud Compute (EC2) instances supports multi-Virtual Private Cloud (VPC) elastic network interface (ENI) attachments. With this capability, customers can now launch an instance with a primary ENI in one VPC and attach a secondary ENI from another VPC. With multi-VPC ENI attachments, customers do not have to sacrifice VPC level segregation between networks, while allowing select network virtual functions to communicate between them.

Today, we announce the ability for customers to enable Windows Amazon Machine Images (AMIs) to launch faster when the images are shared with them from another account. Prior to this, faster launching for Windows AMIs could only be enabled by the AMI owner, but now the recipient of the shared AMI can enable it as well and customize the parameters based on their need with a few simple actions. This feature is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now create Apache Airflow version 2.7 environments and execute deferrable operators on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.7 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Amazon Fargate now supports Amazon Graviton2 Processors in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This launch adds even more choice to help you optimize performance and cost for running your containerized workloads on Amazon ECS with Amazon Fargate.

Amazon Aurora now supports Amazon Aurora Global Database Failover, a fully managed experience for performing a cross-Region database failover to respond to unplanned events such as a regional outage. With Global Database Failover, you can convert a secondary region into the new primary region in typically a minute and also maintain the multi-region Global Database configuration. To learn more about Global Database Failover, see this blog. 

Today, Amazon DynamoDB announces the general availability of incremental export to S3, which allows you to export only the data that has changed within a specified time interval. With incremental exports, you can now export data that was inserted, updated or deleted, in small increments. You can export changed data ranging from a few megabytes to terabytes with a few clicks in the Amazon Web Services Management Console, an API call, or the Amazon Command Line Interface. Choose a DynamoDB table that has point-in-time-recovery enabled, specify an export time period for which you want incremental data, choose your target Amazon S3 bucket, and export.

Customers can now create Amazon FSx for NetApp ONTAP file systems in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (Amazon RDS) now supports a Dedicated Log Volume for PostgreSQL, MySQL, and MariaDB databases. An Amazon RDS Dedicated Log Volume allows customers to select a configuration where the most latency sensitive components of their database, the transaction logs, are stored in a separate, dedicated volume. Dedicated Log Volumes work with Provisioned IOPS storage and are recommended for databases with 5,000 GiB or more of allocated storage.

Amazon S3 Object Lambda now integrates with Amazon Athena, allowing you to automatically modify S3 data as it is being queried. With S3 Object Lambda, you can add your own code to S3 GET, HEAD, and LIST API requests to modify data as it is returned to your application. For example, you can use a Lambda function to automatically mask sensitive data columns when running queries in Amazon Athena. When you use S3 Object Lambda with Amazon Athena, you can more easily customize your data for different applications, without having to maintain multiple derivative copies of source data in Amazon S3.

Starting today, long-term support (LTS) will be provided on Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) on the Aurora MySQL 3.04 (compatible with MySQL 8.0.28) minor version. Database clusters that use LTS releases can stay on the same minor version for at least three years. During the lifetime of an Aurora MySQL LTS release, new patches introduce fixes to critical matters such as security issues. These patches don't include any new features. 

Search Pipelines, a new feature in OpenSearch 2.9, make it easy to build query and result processing pipelines. This lets you build search query and result processing as a composition of modular processing steps without complicating your application software.

Amazon OpenSearch Service now offers customers the option to use Internet Protocol version 6 (IPv6) addresses for their new and existing domains. Customers moving to IPv6 can simplify their network stack by running their OpenSearch Service domains on a network that supports both IPv4 and IPv6.

Starting today, you can upgrade Aurora Serverless v1 to Amazon Aurora Serverless v2 with minimal downtime by converting the Aurora Serverless v1 DB cluster to Aurora provisioned DB cluster in place using the Amazon SDK or CLI.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports a minor version for Microsoft SQL Server 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon Simple Notification Service (SNS) First-In-First-Out (FIFO) topics now support a no-code option to store your FIFO topics messages, which improves the durability of your message-driven applications and offers your developers a simple way to replay past messages. Your developers can use these new capabilities to recover your applications from errors in their code, and to seamlessly expand their current applications to additional features by delivering stored messages to new subscribing systems.

Today, Amazon IoT Core, a fully managed cloud service that lets you connect billions of devices and process trillions of messages, supports headers in Rules Engine’s Kafka Action. You can use Kafka headers to send additional metadata from IoT devices to a self-managed Apache Kafka cluster or Amazon Managed Streaming for Apache Kafka (Amazon MSK), without modifying the original IoT message payload. 

Today, Amazon IoT Core, a fully managed cloud service that lets you connect billions of devices and process trillions of messages, announces a new inline Rule function that enables you to extract the source IP address of the publisher of an IoT message. Once you extract the source IP address, you can send it to other Amazon Web Services and third-party services for further analytics based on your business needs. For example, you can use the source IP address with location solvers to determine the approximate location of an IoT device and build location-based applications, such as asset tracking and video content delivery.

Starting today, we are launching new options for credit sharing. The Billing preferences page of the Billing Console now allows you to manage credit sharing preferences for your organization at a more granular level by selecting which accounts from your organization to share your credits with and exclude others from sharing. This new experience is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon ElastiCache for Redis now supports auto scaling in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. With auto scaling, ElastiCache for Redis automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. You can automatically scale your cluster horizontally by adding or removing shards or replica nodes. ElastiCache for Redis uses Application Auto Scaling to manage scaling and Amazon CloudWatch metrics to determine when it is time to scale up or down.

Amazon Backup announces support for Amazon S3, making it easier for you to centrally automate backup and restore of your application data stored in Amazon S3 along with other Amazon Web Services services for compute, storage, and database. Using Amazon Backup’s seamless integration with Amazon Organizations, you can centrally create and manage immutable backups of S3 data across all your accounts, protect your data from inadvertent or malicious actions, and restore the data to your specified point-in-time with a few simple clicks. 

Amazon DataSync introduces task reports, a new feature that provides detailed reports of data transfer operations for each task execution. Using task reports, you can track and audit your data transfers, monitor the chain of custody of your files, and troubleshoot transfer errors.

Amazon Web Services Network Load Balancer (NLB) now supports Availability Zone DNS affinity, disable connection termination for unhealthy targets, and UDP connection termination by default. 

Amazon WorkSpaces now offers new bundles powered by Windows Server 2022. With these bundles, customers can launch Windows Server 2022 WorkSpaces and take advantage of the latest Windows server operating systems features. It also enables customers to run applications that require recent Windows versions.

Amazon OpenSearch Service now supports new administrative options that provide more granular control over troubleshooting potential issues with your cluster. These options include the ability to restart the OpenSearch process on a node, and the ability to restart a data node.

Amazon Kinesis Data Firehose now integrates with Amazon MSK to offer a fully managed solution that simplifies the processing and delivery of streaming data from Amazon MSK Apache Kafka clusters into Amazon S3 data lake. With just few clicks, Amazon MSK customers can continuously load data from their desired Apache Kafka clusters to their Amazon S3 bucket, eliminating the need to develop or run their own connector applications. 

Amazon Relational Database Service (Amazon RDS Optimized Writes can now be enabled for your current RDS for MySQL and RDS for MariaDB database instances and promoted to production in as fast as a minute using RDS Blue/Green deployments. RDS Optimized Writes can improve up to 2x write throughout for your databases.

Amazon CloudWatch announces a new quick setup experience for Amazon Web Services Partner destinations in the CloudWatch Metric Streams console. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new simplified getting-started experience you can create a Metric Stream to an Amazon Web Services Partner destination in a single step.

Amazon OpenSearch Service adds support for four new language analyzer plugins- Pinyin (Chinese), STConvert Analysis (Chinese), Nori (Korean), and Sudachi (Japanese) plugins. These are available as optional plugins that you can associate with your OpenSearch Service clusters.

Starting today, Amazon Web Services-managed prefix lists can be used for Amazon Route 53 health checks to simplify the process of limiting inbound traffic to only the IP addresses associated with Route 53 health check servers. These prefix lists are maintained by Route 53 and contain up-to-date IP ranges for Route 53 health check servers.

Starting today, customers can disable their unused or obsolete Amazon Machine Images (AMIs; pronounced ah-mee). Disabling an AMI changes its state to disabled, makes the AMI private if it was previously shared, and prevents any new EC2 instance launches from that disabled AMI. Customers creating, managing, and consuming AMIs at-scale can now simplify and streamline their workflows with this new capability.

Amazon Step Functions announces an Optimized Integration for Amazon EMR Serverless, adding support for the Run a Job (.sync) integration pattern with 6 EMR Serverless API Actions (CreateApplication, StartApplication, StopApplication, DeleteApplication, StartJobRun, and CancelJobRun).

September 20, 2023 - Amazon DocumentDB now supports schema validation with $jsonSchema operator. You can now attach schema validation rules to a DocumentDB collection that are validated during inserts and updates to the collection.

Starting today, we are introducing a new Amazon CloudWatch metric called Attached EBS Status Check to monitor if one or more Amazon EBS volumes attached to your EC2 instances are reachable and able to complete I/O operations.  With this new metric, you can now quickly detect and respond to any EBS impairments that may potentially be impacting the performance of your applications running on Amazon EC2 instances. 

We are excited to announce that the Amazon OpenSearch Service has expanded its geospatial capacities. With new aggregation support in version 2.9, you can do more statistical analysis on your data, making it simpler to draw conclusions and interpret them.

Today, Amazon IoT Device Management, a fully managed cloud service that helps you register, organize, monitor, and remotely manage IoT devices at scale, announces the general availability of the Software Package Catalog feature. With this new feature, you can now easily track and monitor software package versions across fleet, gain valuable insights from a central dashboard, and perform targeted updates on devices running on a specific software version.

Starting today, you can use Service Control Policies (SCPs) to set permission guardrails with the fine-grained controls used in Amazon Identity and Access Management (IAM) policies in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. This makes it easier to meet the specific requirements of your organization’s governance rules. The policy editor in the Amazon Organizations console makes it easy to author SCPs by guiding you to add actions, resources, and conditions.

Today, Amazon WorkSpaces announces the general availability of a new feature that provides administrators increased flexibility to manage applications on WorkSpaces instances while retaining the end user's data and configurations. It provides administrators with an easier way to add or remove application bundles on existing WorkSpaces, including upgrading them to the latest version.

Amazon Relational Database Service (RDS) for PostgreSQL now supports v0.5.0 of the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. This version of the extension introduces pgvector introduces HNSW indexing support, parallelization of ivfflat index builds, and improves performance of its distance functions.

Application Load Balancer (ALB) and Network Load Balancer (NLB) now support registering instances as targets when addressed by Internet Protocol Version 6 (IPv6) to simplify load balancer configuration. This launch enables you to directly register instances using IPv6 addresses as targets, removing the need to track individual IP addresses. The feature also enables the use of EC2 auto scaling groups with your target groups, which provides automatic registration of targets based on the scaling needs of your application.

We are excited to launch Unified Settings in the Amazon Web Services Management Console. With Unified Settings, settings will persist across devices, browsers, and services. At launch, Unified Settings supports default language, default Region, visual mode, and favorite service display. Default language displays your preferred language across the Management Console, default Region sets the Amazon Web Services Region each time you sign in or visit a service console, visual mode lets you toggle between the default light mode or dark mode, and favorite service display will show services in the favorites bar with either the service icon and full name or only the service icon.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.5.1 for new and existing clusters. Apache Kafka 3.5.1 includes several bug fixes and new features that improve performance. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.5.1.

Amazon S3 now provides the Last-Modified time of delete markers in the response headers of S3 Head and Get APIs. For buckets that use S3 Versioning, when a customer issues a delete request without a versionId specified, S3 adds a delete marker on the latest version of the object to protect data from accidental deletions. With Last-Modified information added to S3 Head and Get API response headers for delete markers, customers can more easily track changes in their buckets.

Amazon CloudFormation launches a deletion policy RetainExceptOnCreate that retains resources during stack deletions but does not retain resources during rollbacks of stack operations. CloudFormation rolls back a stack to the last-known stable state if it encounters provisioning failures, such as breaches of Amazon Web Services account limits, during stack operations. During rollbacks, CloudFormation deletes resources that were created in the stack operation before the failure. RetainExceptOnCreate only preserves resources that customers delete in a stack operation. It does not preserve resources that CloudFormation deletes during rollbacks. This allows customers to protect resources against accidental stack deletions while reducing manual intervention during stack operations.

You can now run OpenSearch version 2.9 in Amazon OpenSearch Service. With OpenSearch 2.9, we have made several improvements to Search, Observability, Security analytics, and Machine Learning (ML) capabilities in OpenSearch Service.

Amazon Lambda now supports Python 3.11 as a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. We will automatically apply updates to the Python 3.11 managed runtime and to the Amazon-provided Python 3.11 base image, as they become available. Powertools for Amazon Lambda, a developer toolkit to implement serverless best practices and increase developer velocity, also supports Python 3.11.

Amazon Simple Notification Service (Amazon SNS) now supports Amazon CloudTrail logging for the Publish and PublishBatch API actions. By logging these data events, you can get details on when and who made API calls to Amazon SNS, thereby enhancing data visibility for security and operations teams, enabling governance, compliance, and operational auditing.

Customers in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can now hibernate Amazon EC2 instances running the Microsoft Windows Server 2022, Red Hat Enterprise Linux 9, and Amazon Linux 2023 operating systems. Hibernation is an Amazon EC2 feature that helps lower costs and achieve faster startup times by enabling customers to pause and resume their running instances at scale. Customers are not billed for compute time while instances are suspended, and your applications will resume from right where they left off.

Prototyping your application’s data model with Amazon DynamoDB has just gotten simpler with sample data generation using NoSQL Workbench for Amazon DynamoDB. The ability to generate sample data enables you to create realistic demos and test your application access patterns under conditions that closely simulate a production environment. You can use NoSQL Workbench to generate sample data to help visualize if your data model design and item collections can fulfill your application’s access patterns. During application development you will also want to test that your application can function and handle use cases with enough data. NoSQL Workbench helps you generate the volume and variety of data that you will need to test your code. You can directly deploy your data models with sample data to Amazon DynamoDB and DynamoDB local, or download the sample data as a CSV file for later use.

Amazon DocumentDB (with MongoDB compatibility) now supports an in-place major version upgrade (MVU) from Amazon DocumentDB versions 3.6 and 4.0 to version 5.0. Instead of backing up and restoring the database to the new version or relying on database migration tools, you can perform an in-place major version upgrade with a few clicks using the Amazon Web Services console, the latest Amazon Software Development Kit (SDK), or Command Line Interface (CLI). With in-place MVU, no new clusters are created in the process and you can continue using the existing cluster endpoints for your applications.

Amazon OpenSearch Service now provides new Auto-Tune metrics and improved Auto-Tune events that give you better visibility into the cluster performance optimizations made by Auto-Tune.

Starting today, customers can easily understand and validate their Savings Plans recommendations through new visual graphs. The new hourly graphs show On-Demand spend alongside the recommended Savings Plans commitment, providing insight into estimated savings, Savings Plans coverage, and Savings Plans utilization. This helps customers understand how their Savings Plans apply to each hour of spend without having to invest time and resources in building models to analyze their spend.

Amazon Simple Notification Service (Amazon SNS) message data protection is a set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data. Now, you can de-identify outbound message data within a payload in real-time via data redaction, or masking. Thus, each endpoint subscribed to your Amazon SNS topic may receive a different payload from the topic, with different sensitive data de-identified, according to their data access permissions.

You can now use Amazon SageMaker Model Monitor to run a single execution of a monitoring job, enabling you to get results for your machine learning and data performance on demand. Running a monitoring job on-demand provides you the flexibility to monitor specific aspects of your ML as required and allows adaptability for situations with irregular monitoring needs, such as troubleshooting.

Amazon IAM Identity Center is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Starting today, Amazon EC2 Instance Connect is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon EC2 Instance Connect is a simple and secure way to connect to your instances using Secure Shell (SSH). 

Starting today, EC2 Serial Console is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. EC2 Serial Console provides a simple and secure way to troubleshoot boot and network connectivity issues interactively, by establishing a connection to the serial port of an instance.

Amazon Cloud Map introduces a new API for retrieving the revision of your services in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows your applications to update the state of your cloud resources only when it has changed, minimizing the discovery traffic and API cost. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resources. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API calls.

Amazon Glue Interactive Sessions now supports 4 new notebook kernel magics: assume_role, tags, session_type and matplot. These magics are available in Glue Interactive Sessions kernel 1.0 or later. Additionally, Glue Interactive Sessions now supports IAM Conditionals.

Amazon CloudWatch announces support of a new Metric Math function called DB_PERF_INSIGHTS() to create CloudWatch alarms and dashboards on Amazon RDS Performance Insights metrics.

Amazon Step Functions now supports cross-account access for Amazon Web Services services so it’s easier to process data, automate IT and business processes, and build applications across accounts.

Amazon CloudWatch Synthetics announces a new update to Synthetics Python runtime version syn-python-selenium-2.0 and recommends that customers migrate Synthetics canaries to the latest runtime version. Runtime version syn-python-selenium-2.0 includes updates to third-party dependency packages (Selenium v4.10.0 and Chromium v111.0.5563.146).

Amazon RDS (Relational Database Service) Performance Insights supports SQL-level metrics for Amazon RDS for SQL Server so that you can identify high-frequency, long-running, and stuck SQL queries in seconds. SQL level statistics are already available for all other Amazon RDS engines. 

Amazon Cloud Map now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now use Amazon PrivateLink to privately access Amazon Cloud Map APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the Amazon PrivateLink pricing page for more information.

You can now subscribe Amazon Simple Queue Service (SQS) Standard queues to Amazon Simple Notification Service (SNS) First-In-First-Out (FIFO) topics. Thus, from a single SNS FIFO topic, you can now deliver messages to SQS Standard queues, which offer best-effort ordering and at-least-once delivery, as well as to SQS FIFO queues, which support strict ordering and exactly-once delivery. This new capability further decouples message publishers from subscribers, as the SNS topic type no longer dictates the SQS queue type that subscribers ought to use.

Amazon Relational Database Service (RDS) announces Amazon RDS Extended Support for Amazon Aurora and Amazon RDS database instances running MySQL 5.7, PostgreSQL 11, and higher major versions beyond the community end of life. Amazon RDS Extended Support allows you to upgrade to a new major version at a pace that meets your business requirements. Extended Support is available for Aurora MySQL-compatible edition, Aurora PostgreSQL-compatible edition, RDS for MySQL and RDS for PostgreSQL.

Today, API Gateway announces a console experience refresh with usability improvements to REST and WebSocket API workflows, accessibility enhancements, and dark mode support.

Amazon Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of anomalous spent pattern. Starting today, Cost Anomaly Detection users with a management account will be able to create up to 500 custom cost monitors to monitor spend in their account(s). A custom cost monitor allows a user to track your spend across either linked accounts, cost allocation tags, or cost categories. 

Amazon EC2 now supports AMI Block Public Access (BPA), an account-wide setting that allows customers to block public sharing of Amazon Machine Images (AMIs) in a region. Customers managing AMIs at-scale now have a simple and proactive way of safeguarding their AMIs from inadvertent access by unauthorized users.

Amazon Step Functions announces the availability of enhanced error handling capabilities in your Amazon Step Functions workflows to help you find failures faster and provide you with fine-grained control over your retry strategies. Amazon Step Functions is a visual workflow service capable of orchestrating over 10,000 API actions from over 220 Amazon Web Services services to automate business processes and data processing workloads.

We are introducing the general availability of Amazon SageMaker Asynchronous Inference in Amazon Web Services China (Beijing)Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Asynchronous inference is a new inference option in Amazon SageMaker that queues incoming requests and processes them asynchronously. This option is ideal for inferences with large payload sizes (up to 1GB) and/or long processing times (up to 15 minutes) that need to be processed as requests arrive. Asynchronous inference enables you to save on costs by autoscaling the instance count to zero when there are no requests to process, so you only pay when your endpoint is processing requests.

Today, Amazon Backup announces support for local time zone selection in your backup plan, allowing you to manage your backup schedule according to your local time zone. Amazon Backup is a fully managed service that centralizes and automates data protection across Amazon Web Services services and hybrid workloads. Now, when creating or editing existing backup plans, you can select a backup window time zone, eliminating the need for manual time zone conversions from UTC. 

Trusted Language Extensions for PostgreSQL now supports building your own custom data types and is available on Amazon Relational Database Service (RDS) for PostgreSQL. You can now use Trusted Language Extensions for PostgreSQL to create a new base (or scalar) data type, specify how it is stored, and define functions that support SQL and index operations for this new data type.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.5,10.6.15, 10.5.22, and 10.4.31. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Managed Workflows for Apache Airflow (MWAA) now supports in-place version upgrades for environments version 2.x and later in Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Cognito now offers a new console experience that makes it even easier for customers to manage Amazon Cognito identity pools and add federated sign in for customers’ applications to get access to Amazon Web Services resources. Customers that wish to opt in to the new and streamlined experience can do so by navigating to the Amazon Cognito console. 

Amazon EventBridge API Destinations is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD, making event-driven applications more extensible by allowing you to send events to any HTTP APIs for self-managed or Software-as-a-Service (SaaS) applications. Authorization is built in so you don’t have to write or manage additional code to authorize their requests. 

Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) now supports Percona Xtrabackup for completing physical migrations of your existing MySQL 8.x databases running on Amazon EC2 or outside of Amazon Web Services. This capability makes it easier and faster to migrate large MySQL databases with complex schemas into Amazon Aurora MySQL. Percona XtraBackup allows you to perform consistent, non-blocking, online backups of your source MySQL database which can then be migrated to Aurora MySQL with minimal downtime.

Amazon DataSync support for copying data to and from Azure Blob Storage is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Using DataSync, you can move your object data at scale between Azure Blob Storage and Amazon Web Services Storage such as Amazon S3. Amazon DataSync supports writing to Azure block blobs and can read from all blob types within Azure Blob Storage. It can also be used with Azure Data Lake Storage (ADLS) Gen 2.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the h3-pg extension, which provides an API to H3, an open-source hexagonal, hierarchical geospatial indexing system. With this extension, you can perform different kinds of spatial analysis over large datasets, including efficient indexing and lookups, modeling flow through a grid, and applying machine learning models over your geospatial data stored in Amazon RDS for PostgreSQL.

Today, Amazon Backup announces support for Amazon CloudFormation resource exclusion, allowing you to exclude resources from your application backups in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon EC2 C6in instances, powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of up to 3.5 GHz, are available in the Amazon Web Services China (Ningxia) Region, operated by NWCD. C6in are the first x86-based Amazon EC2 compute optimized instances to offer up to 200 Gbps network bandwidth, and are ideal to scale the performance of applications such as network virtual appliances (firewalls, virtual routers, load balancers), Telco 5G User Plane Function (UPF), data analytics, high performance computing (HPC), and CPU based AI/ML workloads.

Amazon Elastic Kubernetes Service (EKS) control plane logs are now classified as Vended Logs in Amazon CloudWatch Logs. Vended Logs are specific Amazon Web Services service logs natively published by the services on behalf of the customer and available at volume discount pricing. 

Amazon Managed Workflows for Apache Airflow (MWAA) has added certification for International Organization for Standardization (ISO). We maintain certifications through extensive audits of its controls to ensure that information security risks that affect the confidentiality, integrity, and availability of company and customer information are appropriately managed. 

Today, we are renaming Amazon Kinesis Data Analytics to Amazon Managed Service for Apache Flink. Amazon Managed Service for Apache Flink makes it easy to transform and analyze streaming data in real time with Apache Flink, an open source framework and engine for processing data streams.

You can now use Amazon SageMaker Model Cards with Amazon Resource Access Manager (Amazon RAM) to securely share model cards from your Amazon Web Services account with a different account, and also view, modify, and export (PDF) model cards shared with your account. Cross-account support of SageMaker Model Cards facilitates governance and collaboration by enabling you to view, track, and audit all available model cards within your organization in your centralized account.

Amazon Step Functions is introducing enhancements to Workflow Studio, a visual workflow designer in the Amazon Web Services console, which includes a streamlined transition between the visual builder and code, making it faster and easier to build workflows. To get started quickly, you can also choose from a collection of starter projects for common use cases and modify them using Workflow Studio.

Amazon S3 now supports multivalue answer (MVA) in response to DNS queries for S3 endpoints. With MVA, customers now get up to eight S3 IP addresses per DNS query. You can use these IP addresses to automatically make multiple concurrent connections to S3 and improve throughput. MVA also makes retries more efficient as applications will automatically try an alternative IP address without having to wait for another DNS query.

You can now route any traffic entering your Amazon VPC from virtual private gateway through a Gateway Load Balancer endpoint before the traffic reaches the destination. You can use Gateway Load Balancer Endpoint to process your VPC traffic through security appliances available on Amazon Web Services Marketplace.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a trusted procedural language in PostgreSQL major versions 13 and 14, expanding support for Rust from major version 15. This helps you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

Today, the Amazon SDK for SAP ABAP is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon Relational Database Service (Amazon RDS) for Oracle supports the auto-upgrade of Oracle time zone files for DB instances on the multitenant container database (CDB) architecture running in single-tenant configuration in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The Oracle time zone file auto-upgrade feature provides an automated way to upgrade the daylight savings time (DST) time zone file version in the DB instance.

Amazon Transfer Family now offers customers the option to require both public key and password authentication when users attempt to connect to their SFTP server. This new method of authentication allows customers to add an additional level of protection to their data when authorizing users to securely access their files. 

Amazon CloudWatch has added CloudWatch Agent support for the collection of Amazon X-Ray and OpenTelemetry traces. Whether you’re already an X-Ray customer, or just getting started with OpenTelemetry, you are now able to collect metrics, logs, and traces with a single agent, simplifying installation, configuration and management of telemetry collection.

Amazon ElastiCache for Memcached now makes it simpler and faster for you to get started with setting up an ElastiCache for Memcached cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

Amazon FSx for Lustre, a fully managed service that makes it easy and cost effective to launch, run, and scale the world’s popular high-performance file system, now supports the ability to free up storage capacity on an FSx file system that has data synchronized with Amazon S3.

Amazon Compute Optimizer now recommends licensing optimization opportunities for Microsoft SQL Server workloads on Amazon EC2. With this launch, you can receive automated SQL Server Edition downgrading recommendations in Amazon Compute Optimizer by enabling Amazon CloudWatch Application Insights to reduce SQL Server licensing cost.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, now enables you to select and update the level of I/O operations per second (IOPS) separately from storage capacity on your file system. This new capability enables you to improve price-performance for IOPS-intensive workloads like SQL Server databases and optimize costs for workloads with IOPS requirements that vary over time like periodic reporting jobs.

Sensitive data detection feature in Amazon Glue can now detect over 250 sensitive entity types in Amazon Web Services China Regions out-of-the-box.

Elastic Throughput is a new throughput mode for Amazon Elastic File System (Amazon EFS) that is designed to provide your applications with as much throughput as they need with pay-as-you-use pricing. Elastic Throughput is designed to further simplify running workloads and applications on Amazon Web Services Cloud by providing file storage that doesn’t require any performance provisioning.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.4, 14.9, 13.12, 12.16, and 11.21. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

We announce the retirement of the old IAM actions for Amazon Billing, Cost Management, and Account consoles. We are replacing them with fine-grained service specific actions. This launch gives customers more control over access to Billing, Cost Management, and Account services. These new permissions will also provide a single set of IAM actions that govern console and programmatic access to these services.

Amazon Relational Database Service (RDS) for Oracle now supports the July 2023 Release Update (RU) for the Oracle Database 19c and 21c versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon RDS for MariaDB now supports MariaDB major version 10.11, the latest long-term maintenance release from the MariaDB community. Amazon RDS for MariaDB 10.11 includes performance improvements that enable up to 40% higher transaction throughput than prior versions. You can deploy RDS for MariaDB 10.11 on Optimized Read and Optimized Write enabled instance classes for additional performance gains. MariaDB 10.11 major version also includes improvements to authentication, information schema, system versioning, and the InnoDB storage engine made by the MariaDB community.

Amazon Fargate now supports Process ID (PID) namespace sharing and kernel parameter configuration (sysctl) for applications orchestrated by Amazon ECS in the Amazon Web Services China (Beijing)Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now configure the pidMode and the sysctl parameters in your ECS task definition for tasks running on Fargate. 

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) will support MySQL 8.0.28. In addition to several security enhancements and bug fixes, MySQL 8.0.28 includes several improvements, such as Instant DDL support for Rename column operations, support for multi-threaded DDL operations, support for TLS v1.3 protocol, and performance schema monitoring enhancements. For more details, refer to the Aurora MySQL 3 and MySQL 8.0.28 release notes.

Starting today, Local Write Forwarding is generally available for Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility). This new capability makes it simple to scale read workloads which require read after write consistency. Customers can now issue transactions containing both reads and writes on Aurora read replicas and the writes will be automatically forwarded to the single writer instance for execution. Applications requiring read scale can utilize up to 15 Aurora Replicas for scaling reads without the need to maintain complex application logic that separates reads from writes. Check out this blog to find out how local write forwarding can help reduce the complexity of your application code.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-5.0 and recommends that customers migrate Synthetics canaries to the latest runtime version. Runtime version syn-nodejs-puppeteer-5.0 includes updates to third-party dependency packages (Puppeteer v19.7.0 and Chromium v111.0.5563.146).

Amazon RDS (Relational Database Service) Performance Insights now provides an enhanced console experience to view performance monitoring metrics for Amazon RDS databases. It consolidates information from Amazon CloudWatch and Amazon RDS Performance Insights to provide a comprehensive view of your database’s health. This removes the need for you to gather data from multiple sources and speeds up the diagnosis of database performance issues. 

Amazon MQ now supports the ability for customers to create and apply configurations to their RabbitMQ broker on Amazon MQ. This feature allows you to define the RabbitMQ delivery acknowledgement timeout (consumer_timeout) value and enable operator policies using the RabbitMQ configuration format (Cuttlefish). You can now exert greater control over your RabbitMQ broker and fine tune the performance of your consumer applications or enable and manage high availability operator policies directly through configuration. You can configure your RabbitMQ brokers on Amazon MQ using the console, Command Line Interface (CLI), or Cloud Development Kit (CDK).

Today, we announce Fleet Manager, a capability in Amazon Systems Manager that helps you streamline and scale your remote server management processes, is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Fleet Manager provides you with visual tools to manage your Windows, Linux, and MacOS servers, so you can easily perform common administrator tasks for your fleet running on Amazon Web Services and on premise, without needing to remotely connect to these servers.

We announce the launch of primary IPv6 address in a Virtual Private Cloud (VPC), enabling customer to make the first IPv6 address associated with their elastic network interface (ENI) immutable. Once the first IPv6 address is made primary on the ENI, the IPv6 address cannot be removed as long as the ENI is attached to an instance or until the instance is terminated, effectively making the address immutable.

Amazon Relational Database Service (Amazon RDS) now supports a progress indicator for improved visibility into the storage optimization process. With the progress indicator, you get better visibility into the progress of storage optimization process such as scaling up of storage sizes and changing the storage volumes.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.34 and 5.7.43. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Starting today, Amazon Aurora MySQL-Compatible Edition 2 (with MySQL 5.7 compatibility) will support MySQL 5.7.40. In addition to several security enhancements and bug fixes, this release is fully compatible with MySQL 5.7.40. Previous Aurora MySQL 2.x versions were compatible with MySQL 5.7.12. For more details, refer to the Aurora MySQL 2 and MySQL 5.7.40 release notes.

You can now create Apache Airflow version 2.6 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.6 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Starting today, Amazon Relational Database Service (RDS) for Oracle supports read and mounted replicas for instances on the multitenant container database (CDB) architecture running in single-tenant configuration in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon RDS for Oracle replicas fully manage the configuration of Oracle Data Guard to create and maintain replicas in the same or different Amazon Web Services Region as the primary DB instance.

Amazon Relational Database Service (Amazon RDS) Multi-AZ Deployments with two readable standbys now supports logical replication. With logical replication, you can stream data changes from Amazon RDS for PostgreSQL to other databases for use cases such as data consolidation for analytical applications, change data capture (CDC), replicating select tables rather than the entire database, or for replicating the data between different major versions of PostgreSQL.

Amazon Network Load Balancers (NLB) now supports security groups, enabling you to filter the traffic that your NLB accepts and forwards to your application. Using security groups, you can configure rules to help ensure that your NLB only accepts traffic from trusted IP addresses, and centrally enforce access control policies. This improves your application's security posture and simplifies operations.

The Amazon EventBridge Schema Registry and Schema Discovery features are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, allowing you to discover and store event structure - or schema - in a shared, central location. You can download code bindings for those schemas for Java, Python, Typescript, and Golang so it’s easier to use events as objects in your code.

Cross-account sharing version 3 in Amazon Lake Formation is now available. Version 3 includes features to improve ease of use in granting cross-account permissions using Lake Formation. You can now share Amazon Glue Data Catalog resources such as, databases and tables, from one account directly to another account’s IAM principals, namely, IAM roles and IAM users. Version 3 eliminates the additional manual step of writing Data Catalog resource policies while using LF-tags based cross-account sharing. Finally, you can share Data Catalog resources with an Amazon Organization/Org unit using LF-tags based sharing.

Amazon Route 53 Application Recovery Controller zonal shift helps you quickly recover from an impairment in an Availability Zone (AZ). You can use a single action to shift application traffic away from an AZ for an Application Load Balancer or Network Load Balancer. This can help you quickly recover an application in an impaired AZ, and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures.

Amazon S3 Glacier Flexible Retrieval­ improves data restore time by up to 85%, at no additional cost. Faster data restores automatically apply to the Standard retrieval tier when using Amazon S3 Batch Operations. These restores begin to return objects within minutes, so you can process restored data faster. Now, whether you are transcoding media, restoring operational backups, training machine learning models, or analyzing historical data, you can cost-effectively speed up your data restores from archive.

Amazon ElastiCache for Redis now supports online migration from self-managed Redis clusters to ElastiCache for Redis clusters running in cluster mode. Online migration simplifies moving data from self-managed Redis clusters to ElastiCache with minimal application disruption. During the migration, ElastiCache replicates cache data from each self-managed Redis source shard to the target ElastiCache cluster. Once initial replication is complete, the two clusters will be kept in sync until you are ready to update your application configuration to use ElastiCache.

Today, we announces expanded Amazon CloudFormation support for Amazon Security Hub in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This new feature allows you to use CloudFormation to deploy Security Hub and manage its standards and controls. Using the updated Hub resource, you can now enable Security Hub, decide if it should be provisioned with default standards (the Amazon Foundational Security Best Practices and CIS Foundations Benchmark version 1.2), and opt into its Consolidated Control Findings capability. You can also use the new Standard resource to enable specific security standards such as NIST 800-53 or PCI DSS and manage individual controls in them.

Amazon CodeBuild customers can now use GitHub Actions during the building and testing of software packages. Amazon CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces ready-to-deploy software packages. Customers’ CodeBuild projects are now able to leverage many of the pre-built actions available in GitHub’s marketplace. GitHub Actions are open source applications for the GitHub Actions platform that perform a complex but frequently repeated task.

Starting today, the Amazon Relational Database Service (Amazon RDS) for SQL Server now supports secondary host metrics in Enhanced Monitoring in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can now view essential metrics associated on the secondary host of a Multi-AZ DB instance, such as free storage, free memory, Read/Write IOPS, Read/Write Throughput, CPU utilization, and etc.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports a minor version for Microsoft SQL Server 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon Transfer Family launches Secure File Transfer Protocol (SFTP) connectors, a fully-managed and low code capability that securely and reliably copy files at scale between remote SFTP servers and Amazon S3. Files transferred using SFTP Connectors are stored in Amazon S3, enabling you to unlock value from data using analytics, data lakes or AI/ML services in Amazon Web Services Cloud.

Serverless application developers can now build AppSync powered applications in Serverless Application Model (SAM) with the new GraphQLApi resource, now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Simple Queue Service (SQS) announces an increased default quota for a high throughput mode for FIFO queues, allowing you to process up to 2,400 transactions per second, per API action in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Aurora PostgreSQL-Compatible Edition now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

Amazon GuardDuty expands threat detection coverage in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, to continuously monitor network activity logs, starting with VPC Flow Logs, generated from the execution of Amazon Lambda functions to detect threats to Lambda such as functions maliciously repurposed for unauthorized cryptocurrency mining, or compromised Lambda functions that are communicating with known threat actor servers. GuardDuty Lambda Protection can be enabled with a few steps in the GuardDuty console, and using Amazon Organizations, can be centrally-enabled for all existing and new accounts in an organization.

Amazon Relational Database Service (RDS) for Oracle now supports version 23.1 of Oracle Application Express (APEX) for the 19c and 21c Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Starting today, you can use Amazon CloudWatch alarms to trigger an instance refresh rollback. EC2 Auto Scaling’s instance refresh allows you to perform a rolling replacement of instances in an Auto Scaling group, and instance refresh rollback can undo changes an instance refresh made if the instance refresh cannot complete as desired. With this launch, you can configure Auto Scaling to monitor CloudWatch alarms during an instance refresh, and automatically revert any changes made if the alarms are triggered.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This release contains product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. This release also contains new features and improvements for Babelfish for Aurora PostgreSQL version 3.2 and improved support for Amazon Database Migration Service version 3.5.1 Aurora PostgreSQL target endpoint Babelfish data types. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024. 

Effective February 1, 2024 you will be charged ¥ 0.033 per hour for each public IPv4 address that you allocate, whether it is attached to a service or not (we already charge for IPv4 addresses that you allocate but don’t attach to an EC2 instance).

Amazon IoT Device Defender Rules Detect now supports a new disconnect duration metric to monitor the duration of disconnect of each device. With this additional metric, you can track how long a device has been disconnected to learn whether it is operating as expected. You can also configure alarms at predefined threshold levels and be alerted in the case of persistent device connectivity issues.

Amazon DocumentDB launches index improvements enabling faster index builds on collections and the ability to view index build statuses. Amazon DocumentDB index builds can now be sped by up to 14X when using parallel workers compared to using a single worker. The index creation process now uses two workers by default, and you can configure the number of workers on Amazon DocumentDB 4.0 and 5.0 instance-based clusters.

Today, Amazon Simple Queue Service (SQS) announces support for JSON protocol, enabling lower latency and improved performance for SQS customers. Based on performance tests conducted by Amazon Web Services for a 5KB message payload, JSON protocol for Amazon Simple Queue Service reduces end-to-end message processing latency by up to 23% and reduces application client-side CPU and memory usage. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Customers running applications on Amazon Elastic Container Service (ECS) with Amazon Fargate can now leverage Seekable OCI (SOCI), a technology that helps applications deploy and scale out faster by enabling the containers to start without waiting for the entire container image to be downloaded.

Public IP Insights is an Amazon VPC IP Address Manager (IPAM) feature that provides a unified view of all public IPv4 addresses, making it easier for you to monitor, analyze and audit public IPv4 addresses used across services, in your Amazon Web Services account.

Amazon CloudFormation announces looping capabilities with Fn::ForEach intrinsic function. With Fn::ForEach, you can replicate parts of your templates with minimal lines of code. You can use Fn::ForEach to simplify your template layout and make it easier and faster for you and your peers to review your code. Fn::ForEach helps reduce human errors such as updating wrong properties or missing out on updating multiple target properties in your template.

Amazon Lambda event source mappings now support additional filtering capabilities including the ability to match against characters at the end of a value (suffix filtering), to ignore case sensitivity (equals-ignore-case), and to have a single rule match if any conditions across multiple separate fields are true (OR matching). We are also increasing the bounds supported for numeric values to -5e9 to 5e9 from -1e9 to 1e9. With these new enhanced capabilities, you can now write complex rules that provide additional filtering options when building event-driven applications.

Amazon DocumentDB (with MongoDB compatibility) now supports document compression using the LZ4 compression algorithm. Compressed documents in Amazon DocumentDB are up to 7x smaller than uncompressed documents. Compressed documents require less storage space and IO operations during database reads and writes, leading to lower storage and IO costs.

Today, Amazon CloudFormation StackSets launches a new API ListStackInstanceResourceDrifts, and adds a new filter in ListStackInstances to improve access to resource and stack instance drift information. A resource or stack instance is considered drifted when it’s actual configuration differs from its expected configuration. You can now use ListStackInstanceResourceDrifts to list and filter resources in a stack instance according to drift status. Similarly, you can use the drift status filter in ListStackInstances to check for stack instance drift in a stack set. With this launch, you can access these aggregated drift information through your management or delegated administrator Amazon Web Services account.

Amazon Aurora MySQL-Compatible Edition now supports a new, enhanced binary log (binlog). The enhanced binlog reduces the compute performance overhead caused by enabling binlog, which, in certain cases, can reach up to 50%, down to 13%. The enhanced binlog also improves database recovery time by up to 99% after restarts and failovers, as compared to when native MySQL binlog is enabled.

We are excited to announce the launch of the updated Amazon GameLift console experience to help customers manage and scale their game servers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed service that allows you to deploy and scale dedicated game servers for session-based multiplayer games. 

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics Python runtime version 1.1, 1.2 and 1.3. This update includes the following new features and bug fixes

• Core dependencies upgraded
       o Python 3.8
       o Selenium 3.141.0
       o Chromium 92.0.4512.0
• Supports custom canary handler name
• Supports custom launch arguments to Chromium including ability to open browser in incognito mode.
• Supports storing your canary run artifacts, including log files, screenshots, and HAR files, in an Amazon Simple Storage Service (S3) bucket in another Region
• Improved precision of start and stop time
• Supports deletion of underlying canary resources along with the canary deletion. When you delete a canary, you can choose whether to also delete related resources created by the canary, thus making canary resources management easier and efficient.
 

With Amazon S3 Inventory, you can now easily review your access control lists (ACLs) on all of your objects to simplify review of access permissions. ACLs were the original way to manage object access when S3 launched in 2006. Now, when migrating to IAM-based bucket policies for access control, you can easily review all of the object ACLs in your buckets before enabling S3 Object Ownership.

Today, we are announcing the general availability of Amazon Aurora I/O-Optimized in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Aurora I/O-Optimized is a new configuration that provides improved price performance and predictable pricing for customers with I/O-intensive applications. With Aurora I/O-Optimized, there are zero charges for read and write I/O operations—you only pay for your database instances and storage usage, making it easy to predict your database spend up front.

Amazon Elastic Container Service (ECS) announces domainless Group Managed Service Account (gMSA) support for Linux and Windows containers running on Amazon EC2. This integration allows applications hosted on Amazon ECS (on EC2) to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. With this launch, customers can run containers that require AD authentication without joining the ECS nodes to the domain, even during autoscaling events.

Today, Amazon Backup is announcing support for restoring resources with tags copied from protected resources. Amazon Backup is a fully managed service that centralizes and automates data protection activities across services in Amazon Web Services Cloud and hybrid workloads. This launch allows you to seamlessly extend using tag-based policies for access, cost allocation, compliance, and automation workflows for your restored resources.

Amazon Elastic Kubernetes Service (EKS) now allows running more pods per windows node through the support for IPv4 prefix delegation mode for Windows containers. Prefix delegation mode expands the number of secondary IPv4 addresses which could be assigned to the Elastic Network Interface (ENI) by up to 16x. With this feature, customers can run up to 250 pods on a single Windows Server node, depending upon the chosen instance type.

You can now run OpenSearch and OpenSearch Dashboards version 2.7 in Amazon OpenSearch Service. With OpenSearch 2.7, we have made several improvements to observability, security analytics, index management, and geospatial capabilities in OpenSearch Service.

Today we are announcing the launch of Savings Plans in Amazon Web Services China Regions. Savings Plan is a flexible pricing model that allows customers to save up to 84% on Amazon EC2, Amazon Fargate and Amazon Lambda in exchange for a commitment to a consistent amount of compute usage (e.g. CNY 10/hour) for a one- or three-year period. With a Savings Plan, usage up to the commitment will be charged at the discounted Savings Plan rates and any usage beyond the commitment will be charged at regular On Demand rates. Savings Plans offer significant savings over On-Demand, just like Reserved Instance, but with greater flexibility and automatically reduce customers’ bills within a China region even as usage changes. This provides customers the flexibility to use the compute option that best suits their needs and continue to save money, all without having to perform exchanges or modifications. 

Today, Amazon DynamoDB local, a local downloadable version of Amazon DynamoDB, has migrated to use the jakarta.* namespace. This latest version allows Java developers to use DynamoDB local to work with Spring Boot 3 and frameworks such as Spring Framework 6 and Micronaut Framework 4 to build modernized, simplified, and lightweight cloud native applications.

Amazon Lambda now supports Amazon DocumentDB change streams as an event source. The change streams feature in Amazon DocumentDB (with MongoDB compatibility) provides a time-ordered sequence of change events that occur within your cluster’s collections. Customers can now consume these events in their serverless applications built on Lambda. 

Amazon Simple Notification Service (Amazon SNS) now supports message data protection, a set of capabilities that leverage pattern matching, machine learning models, and content policies to help security and engineering teams facilitate real-time data protection in their applications that use Amazon SNS to exchange high volumes of data.

Amazon Transfer Family has earned the official Drummond Group AS2 Cloud Certification Seal. Drummond Group is an independent provider of testing and certification services for various industry standards and protocols. This certification verifies that Amazon Transfer Family’s Applicability Statement 2 (AS2) capabilities are compatible and interoperable with fourteen third-party AS2 vendors commonly used for business-to-business (B2B) communication.

Amazon S3 now provides the status of objects stored in Amazon S3 Glacier Flexible Retrieval and Amazon S3 Glacier Deep Archive using the S3 LIST API. This new information in S3 LIST API responses can be integrated into your applications, helping you identify and access restored objects from S3 Glacier. For example, S3 Glacier restore status is now integrated into Amazon Athena, so you can run queries against your restored data from low-cost S3 Glacier storage classes.

Amazon OpenSearch Service now lets you provision up to 16,000 IOPS and 1000 MiB/s throughput for every 3 TiB gp3 volume size provisioned per data node, enabling you to achieve better search and indexing performance.

Amazon CloudWatch now supports Service Quotas in Cross-Account observability allowing customers to track and visualise resource utilisation and limits across multiple Amazon Web Services services from multiple accounts within a region using a central monitoring account.

Today, we are excited to announce the integration of Amazon SageMaker Model Cards and Amazon SageMaker Model Registry. This integration allows you to associate a SageMaker Model Card with a specific model version in SageMaker Model Registry, so you can easily track and audit your models.

Amazon DynamoDB now simplifies and lowers the cost of handling failed conditional writes by providing a copy of the item as it was during the failed write attempt. This lets you easily determine the cause of the condition error and then respond to failed conditional writes without having to perform a separate read operation to retrieve the item.

Amazon Elastic Container Service (Amazon ECS) now enables faster task launches on container instances that have tasks with prolonged shutdown. This enables customers to scale their workloads faster and improve infrastructure utilization.

Amazon Database Migration Service (DMS) has expanded the functionality of premigration assessments. A premigration assessment evaluates the source and target databases of a database migration task to help identify any problems that might prevent a migration from running as expected. By identifying and fixing issues before a migration starts, you can avoid delays in completing the database migration. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2014, 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon Security Hub, a cloud security posture management service that performs security best practice checks, aggregates alerts, and facilitates automated remediation, now features a capability to automatically update or suppress findings in near-real time. You can now use automation rules to automatically update various fields in findings, suppress findings, update finding severity and workflow status, add notes, and more. 

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.14, 10.5.21, and 10.4.30. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Starting today, you can target EC2 Capacity Reservations within an Amazon Web Services Resource Group using the Resource Group ARN. With this feature, you can now use Capacity Reservations seamlessly for workloads that span Availability Zones and multiple instance types. This feature integrates seamlessly with EC2 Auto Scaling and EC2 Fleet.  

We are excited to launch delegated administrator for Amazon Organizations to help you delegate the management of your Amazon Organizations policies, enabling you to govern your organization and member accounts with increased agility and decentralization. You can now allow member accounts to manage policy types specific to their needs. By specifying fine-grained permissions, you can balance flexibility with limiting access to your highly privileged management accounts.

Amazon Step Functions expands its SDK integrations with support for additional services including Amazon EMR Serverless.

Amazon OpenSearch Service now lets you update cluster manager (master node) instance type or instance count without requiring a blue/green deployment, helping you complete the updates faster with the least potential disruption to your cluster operations and without involving any data movement.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports physical data migration via Oracle Recovery Manager cross-platform Transportable Tablespaces (RMAN XTTS) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. As of today, you can migrate sets of tablespaces to RDS for Oracle using Oracle RMAN XTTS to simplify movement of large amounts of data and reduce application downtime for a physical data migration.

Amazon Relational Database Service (RDS) for Oracle now supports the April 2023 Release Update (RU) for the Oracle Database 21c version in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Transfer Family now delivers logs in a structured JSON format across all resources – including servers, connectors, and workflows – and all protocols – including SFTP, FTPS, FTP, and AS2. The new format allows you to easily parse and query your logs using CloudWatch Log Insights, which automatically discovers JSON formatted fields. You’ll also benefit from improved monitoring with support for CloudWatch Contributor Insights, which requires a structured log format to track top users, total number of unique users, and their ongoing usage.

Starting today, customers can receive cost data for Amazon Elastic Container Service (Amazon ECS) tasks and Amazon Batch jobs in the Amazon Cost and Usage Reports (CUR), enabling you to analyze, optimize, and chargeback cost and usage for your containerized applications. With Amazon Split Cost Allocation Data, customers can now allocate application costs to individual business units and teams based on how containerized applications consume shared compute and memory resources.

Starting today, the Amazon Web Services Account page has a new user experience. The Account page allows you to change account settings, including your contact and alternate contact information, and to close your Amazon Web Services account. This new user experience is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (RDS) for Oracle now supports converting existing Oracle Database 19c instances from the non-multitenant to the multitenant database architecture in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. DB instances using the multitenant architecture consist of a container database (CDB) with a single pluggable database (PDB). A PDB is a set of schemas, schema objects, and non-schema objects that logically appears to a client as a non-CDB.

Amazon Lambda now supports Java 17 as a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Java 17 can take advantage of new language features including Java records, sealed classes and multi-line strings. The Lambda Java 17 runtime also has numerous performance improvements. For more information on Lambda’s support for Java 17, see our product documentation.

Today, we announce the general availability of bandwidth reduction filtering for the AVC and HEVC encoders in AWS Elemental MediaConvert. The bandwidth reduction filter is a perceptual input preprocessing filter which removes temporal noise from video sources while minimizing impact on visual quality. The filter uses human vision system models to reduce imperceptible signals and temporal noise, which often originate from camera sensors.

Amazon Step Functions announces the availability of Versioning and Aliasing, improving resiliency for deployments of serverless workflows. Step Functions is a visual workflow service capable of orchestrating over 10,000 API actions from over 220 Amazon Web Services services to automate business processes and data processing workloads.

Amazon Lambda now supports Python 3.10 as a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Python 3.10 can take advantage of numerous Python language enhancements to make code more readable and maintainable. These include pattern matching for data structures, parenthesized context managers to simplify managing resources such as file handles or database connections, and better error handling. For more information on Lambda’s support for Python 3.10, see our product documentation.

Amazon Lambda now supports Ruby 3.2 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Ruby 3.2 can take advantage of new features such as endless methods, a new Data class, improved pattern matching, and performance improvements. For more information on Lambda’s support for Ruby 3.2, see our product documentation.

Amazon CloudFormation now allows customers to configure the clean-up or rollback actions that CloudFormation will take when execution of a ChangeSet fails. ChangeSets are a feature of CloudFormation that allow you to preview the impact of proposed changes to a stack on running resources. CloudFormation makes changes to your stack only when you decide to execute a ChangeSet. Today, CloudFormation rolls back a stack to the last known stable state if ChangeSets execution is unsuccessful. With this launch, you can pass an optional parameter called OnStackFailure to the CreateChangeSet API and CLI commands. You can set the new parameter to the following values: ROLLBACK, DO_NOTHING, or DELETE. 

Amazon Redshift already supports role-based access control, row-level security, and column-level security to enable organizations to enforce fine-grained security on Redshift data. Amazon Redshift now extends these security features by supporting Dynamic Data Masking (DDM) that allows you to simplify the process of protecting sensitive data in your Amazon Redshift data warehouse. With Dynamic data masking, you control access to your data through SQL based masking policies that determine how Redshift returns sensitive data to the user at query time.

Amazon Athena has updated its data source connectors with new optimizations that can improve performance and reduce cost when querying data that does not reside in Amazon S3. Available today, the updated connectors use dynamic filtering and new predicate push down optimizations to perform more operations in the underlying data source, rather than in Athena, which can reduce query processing time and reduce data scanned.

Customers can now apply two independent layers of server-side encryption to objects in Amazon S3. Dual-layer server-side encryption with keys stored in the Amazon Key Management Service (DSSE-KMS) is designed to meet CNSSP 15 and Data-at-Rest Capability Package (DAR CP) Version 5.0 guidance for two layers of encryption. As of the publish date of this post, S3 is the only cloud object storage service where customers can apply two layers of encryption at the object level and control the data keys used for both layers. Amazon S3 features such as DSSE-KMS are vetted and accepted for use on top-secret workloads, which benefits all customers.

Amazon Transfer Family now supports quantum-safe public-key exchange for SFTP file transfers. Quantum-safe public-key exchange protects your file transfers from threats such as “harvest now, decrypt later” attacks that record present day traffic for decrypting once cryptographically relevant quantum computers become available.

Amazon Lambda now supports three new CloudWatch metrics AsyncEventsReceived, AsyncEventAge and AsyncEventsDropped, to monitor the performance of asynchronous event processing. Until now, Lambda customers had limited visibility into the processing of asynchronous requests, and had to rely on Lambda service teams to resolve any processing delays leading to inefficiencies in asynchronous event processing. With these new metrics, customers gain better visibility into their asynchronous invocations and can track the events sent to Lambda, monitor delays in event processing and take corrective actions if required.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.13, 10.5.20, 10.4.29 and 10.3.39. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.33 and 5.7.42. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon OpenSearch Service now supports setting ‘skip unavailable’ for cross cluster search connections. Cross-cluster search enables you to perform searches and aggregations across multiple domains with a single query or from a single OpenSearch Dashboard interface.

Starting today, Amazon Elastic Container Registry (ECR) basic scanning feature will use Common Vulnerability Scoring System (CVSS) version 3 information when determining the severity for new Common Vulnerabilities and Exposures (CVEs). This enables customers to get the most recent severity information for vulnerabilities in their ECR container images. We use CVSS information to determine the severity of a vulnerability when the upstream distribution source does not have this information.

Starting today, you can enable a new Amazon Managed Domain List on Amazon Route 53 Resolver DNS Firewall, to block domains identified as low-reputation or that are known or suspected to be malicious by Amazon GuardDuty’s threat intelligence. This means that customers using GuardDuty can now block domains using the same GuardDuty threat intelligence used to monitor and alert you on potential DNS threats for your Amazon Web Services accounts today.

EC2 announces the general availability of Ubuntu Pro on Amazon EC2 in a subscription-included model. You can now easily deploy on-demand subscription included Ubuntu Pro instances from the Amazon EC2 console. You will be charged on a per-second basis for Ubuntu Pro subscription-included instances. For any new Ubuntu Pro deployments, you will now see Ubuntu Pro charges in the Elastic Cloud Compute section of your Amazon Web Services bill.

Amazon Aurora PostgreSQL-compatible edition now maintains read availability through writer node restarts in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With today’s launch, reader nodes will continue to serve read requests during a writer node restart, improving read availability in the cluster. 

May 31, 2023 - Amazon DocumentDB 5.0 already supports Amazon EC2 R6G instances, and starting today, extends instance support to Amazon EC2 T3 and R5 type instances. You can now use Amazon DocumentDB 5.0 during free trial using T3.medium instance and up to 96 vCPUs and 768 GiB RAM with R5 type instances. Please refer to supported instance specifications to learn more.

We are excited to announce updates to Amazon GameLift FleetIQ’s ClaimGameServer operation in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift FleetIQ optimizes the use of low-cost Amazon Elastic Compute Cloud (Amazon EC2) Spot Instances for cloud-based game hosting. With this release, customers using Amazon GameLift FleetIQ can better handle game session placement decisions for their multiplayer games.

Amazon CloudFormation StackSets is updating the deployment experience for CREATE, UPDATE, DELETE, IMPORT TO STACKSET, and DRIFT stack set operations with a new status code SKIPPED_SUSPENDED_ACCOUNT for stack instances. to skip suspended Amazon Web Services accounts during deployments. With this launch, StackSets will skip target Amazon Web Services accounts that are suspended, and flag skippedthe corresponding stack instances as  SKIPPED_SUSPENDED_ACCOUNT instead of FAILED. This feature will help customers target Amazon Web Services accounts, Amazon Organizations or Organizational Units (OUs) without worrying about the number of suspended accounts in the target sample. Additionally, this feature helps to improves. Customers suspend their Amazon Web Services accounts for reasons such as reducing usage of cloud resources for non-production environments during periods of low demand. This feature enhances deployment speed of stack set operations, and reduces the number of FAILED stack set operations.

Today, Amazon Simple Queue Service (SQS) announces support for dead-letter queue redrive via Amazon SDK or Command Line Interface (CLI). Dead-letter queue redrive is an enhanced capability to improve the dead-letter queue management experience for Amazon SQS customers. Amazon SQS already supports dead-letter queue redrive to source queues or a custom destination queue using the Amazon SQS console. Now customers can move the messages from the dead-letter queue using Amazon SDK or CLI to programmatically manage the lifecycle of their unconsumed messages stored in the dead-letter queue at scale. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the use of IN operator in SELECT queries of Cassandra Query Language (CQL).

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports Amazon X-Ray active tracing with Amazon SNS FIFO topics. You can now view traces that flow through Amazon SNS FIFO topics to Amazon Simple Queue Service (Amazon SQS) FIFO queues, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. You can use Amazon SNS FIFO topics, in combination with Amazon SQS FIFO queues, to build applications that require messages to be sent and processed in a strict sequence and without duplicates. You can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API, the Amazon SNS Management Console, or via Amazon CloudFormation.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the HypoPG extension for creating hypothetical indexes, which lets you test the performance impact of an index on query plans before you build it.

Today, Amazon CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe Amazon Organization trust access needed to get started with service-managed StackSets. You can use service-managed StackSets to centrally manage stack deployments to Amazon Web Services accounts in one or more organizational units (OUs). With this launch, you can programmatically manage trust access for your management or delegated administrator accounts. Activating trust access provides the necessary permissions for your management or delegated administrator accounts to create and manage service-managed stack sets for your Amazon Organizations. In addition to providing this trust access in Amazon CloudFormation via Amazon Web Services Management Console, you can now choose to manage trust access with these newly launched APIs.

Amazon Elastic Kubernetes Service (EKS) launches managed node groups for Windows containers to automate the provisioning and lifecycle management of Windows nodes (running on Amazon EC2 instances) for EKS Kubernetes clusters. With this launch, Windows-based applications will automatically provision and register the Amazon EC2 instances that provide compute capacity. Now customers can create, automatically update, or terminate the Windows nodes for their cluster with a single operation.

Today, Amazon CloudTrail announces the support for Amazon Organizations. You can now create, manage, and deploy CloudTrail trails across your organization from your management account or delegated administrator account. Through integration with Amazon Organizations, an organization trail lets you define a uniform event logging strategy at an organization level, that is applied automatically to each member account in the organization. Users in member accounts are able to see these trails, but they can’t modify them. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL and for MySQL now supports a new Multi-AZ deployment option with one primary and two readable standby database (DB) instances across three Availability Zones (AZs). This deployment option is optimized for write transactions and is ideal when your workloads require lower write latency, automated failovers, and more read capacity.

Amazon Glue has upgraded its serverless Python Shell jobs to add Python 3.9 support and an updated bundle of pre-loaded libraries. These jobs allow you to write complex data integration and analytics jobs in pure Python.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning that enables data scientists and developers to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. SageMaker Studio comes with built-in integration with Amazon EMR so that data scientists can interactively prepare data at petabyte scale using open source frameworks such as Apache Spark, Hive, and Presto right from within Studio notebooks. Very often data is stored in data lakes managed by Amazon Lake Formation, enabling you to apply fine-grained access control through a simple grant or revoke mechanism. We’re excited to announce that SageMaker Studio now supports applying this fine-grained data access control with Amazon Lake Formation when accessing data through Amazon EMR.

Amazon Glue now offers 3 new features: custom visual transforms, which let customers define, reuse, and share business-specific ETL logic among their teams, three open-source data lake storage frameworks, which read and write data in Amazon Simple Storage Service (Amazon S3) in a transactionally consistent manner, and new connectors. Amazon Glue is a serverless, scalable data integration service that makes it easier to discover, prepare, move, and integrate data from many sources. With these new features, data engineers can write reusable transforms for the Amazon Glue visual job editor, write data into open data lake format standards, and connect to more native data stores.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.3, 14.8, 13.11, 12.15, and 11.20. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

You can now share your Amazon Machine Images (AMIs) with Amazon Organizations and Organizational Units (OUs). Previously, you could share AMIs only with specific Amazon Web Services account IDs. To share AMIs with Amazon Organizations, you had to explicitly manage sharing of AMIs with Amazon Web Services accounts that were added to or removed from Amazon Organizations. With this new feature, you no longer have to update your AMI permissions because of organizational changes. AMI sharing will be automatically synced when organizational changes occur. This feature helps you centrally manage and govern your AMIs as you grow and scale your Amazon Web Services accounts.

You can now update your Amazon ElastiCache for Redis cluster configuration to enable cluster mode without needing to rebuild you cluster, migrate data, or affect application availability. Cluster mode allows you to scale beyond the performance limitations of a single shard Redis cluster. For more information about cluster mode in ElastiCache for Redis, see the documentation.

Amazon GuardDuty Malware Protection is now available, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD to help detect malicious files residing on an instance or container workload running on Amazon Elastic Compute Cloud (Amazon EC2) without deploying security software or agents. Amazon GuardDuty Malware Protection adds file scanning for workloads utilizing Amazon Elastic Block Store (EBS) volumes to detect malware that can be used to compromise resources, modify access permissions, and exfiltrate data. Malicious files that contain trojans, worms, crypto miners, rootkits, bots, and the like can be used to compromise workloads, repurpose resources for malicious use, and gain unauthorized access to data. Existing customers can enable the GuardDuty Malware Protection feature with a single click in the GuardDuty console or through the GuardDuty API. When threats are detected, GuardDuty Malware Protection automatically sends security findings to Amazon Security Hub and Amazon EventBridge. These integrations help you centralize your security monitoring for Amazon Web Services and partner services, automate responses to malware findings, and perform security investigations from the GuardDuty console. With the launch of Amazon GuardDuty Malware Protection there are eight new threat detections:

Using Amazon EC2 Capacity Reservation Fleet, you can easily migrate your reserved Amazon EC2 capacity to new generation instance types. Capacity Reservations allow you to reserve capacity for your immediate use in a specific instance type and Availability Zone and can be cancelled by you at any time. With Capacity Reservation Fleet, you can reserve capacity across a prioritized list of instance types. When your reservations for lower priority instance types are unused, it will automatically convert them to Capacity Reservations for higher priority instance types.

Today, we are announcing an update for Amazon CloudWatch Synthetics canaries to use the Synthetics NodeJS runtime version 4.0. With this update, runtime version of Amazon Lambda, executing the canaries, is updated to NodeJS 16.x.

Amazon Relational Database Service (RDS) for Oracle now supports the April 2023 Release Updates (RUs) for Oracle Database 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the Rust programming language as a new trusted procedural language. This allows you to build high performance user defined functions to extend PostgreSQL for compute-intensive data processing.

AWS Elemental MediaConvert now supports video pass-through for mezzanine video formats. You can now run MediaConvert jobs that preserve the original video essence without re-encoding for intra-frame-only video formats like AVC Intra, Apple ProRes, VC3, and JPEG2000.

Metrics Insights is a fast, flexible, SQL-based query engine which enables developers, operators and systems engineers to identify trends and patterns across millions of operational metrics in real time. With Metrics Insights, operators can gain better visibility on their infrastructure and large scale application performance with flexible querying, on-the-fly metric aggregations and dynamic alarms that monitor fast moving environments.

Amazon Athena has expanded its support for inbound connections via Internet Protocol Version 6 (IPv6) endpoints to include Amazon PrivateLink. Starting today, you can now connect to Athena securely and privately using PrivateLink from your Amazon Virtual Private Cloud (VPC), in addition to the public IPv6 endpoints that were previously available.

Amazon Managed Workflows for Apache Airflow (MWAA) is now available in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Cost Categories has added a new dimension “Usage Type” to its rules. You can now use seven types of dimensions: “Linked Account”, “Charge Type”, “Service”, "Usage Type", “Cost Allocation Tags”, “Region”, and other “Cost Category” while creating cost categories rules.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports Amazon RDS Optimized Reads for up to two times faster query processing compared to previous generation instances. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to two times faster with Optimized Reads on RDS for PostgreSQL. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by PostgreSQL on the local NVMe-based SSD block-level storage, thereby reducing your traffic to Elastic Block Storage (EBS) over the network. Refer to recent blog post to learn more about performance improvements using local disk based database instances for workloads that have highly concurrent read/write processing.

Amazon CloudFormation now supports Amazon IoT Core thing group, thing type and billing group resources. Amazon CloudFormation is an infrastructure as code (IaC) service that allows you to easily model, provision, and manage Amazon Web Services and third-party resources. You can now use an Amazon CloudFormation template to pre-configure and deploy Amazon IoT Core registry resources for your targeted Internet of Things (IoT) solution in a secure, efficient, and repeatable way.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 15(15.2). New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. PostgreSQL 15 release also adds support for server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Aurora PostgreSQL version 3.0. Please refer to Amazon Aurora PostgreSQL updates for more information.

Following the open source community announcement of updates to the PostgreSQL database, we updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.7, 13.10, 12.14, and 11.19. These releases contain bug fixes and improvements by the PostgreSQL community. Refer to the Aurora version policy to help you decide how often and how to plan your upgrade. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 11, you must upgrade to a newer major version by January 31, 2024.

Amazon App Mesh now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now use Amazon PrivateLink to privately access Amazon App Mesh APIs from your Amazon Virtual Private Cloud (VPC) without exposing your data through public internet. Creating VPC Endpoints incurs charges. See the Amazon PrivateLink pricing page for more information.

Amazon Step Functions expands support for iterating and processing large sets of data such as images, logs and financial data in Amazon Simple Storage Service (Amazon S3), a cloud object storage service.

Amazon EMR Serverless is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon MemoryDB for Redis now supports Amazon Identity and Access Management (IAM) authentication access to its clusters. With this launch, you can associate IAM users and roles with MemoryDB users and manage their cluster access.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the pgvector extension to store embeddings from machine learning (ML) models in your database and to perform efficient similarity searches. Embeddings are numerical representations (vectors) created from generative AI that capture the semantic meaning of text input into a large language model (LLM). pgvector can store and search embeddings from Amazon Bedrock, Amazon SageMaker, and more.

 Amazon MemoryDB for Redis now supports Redis 7. This release brings several new features to MemoryDB:

Amazon Key Management Service (Amazon KMS) lets you create KMS keys that can be used to generate and verify Hash-Based Message Authentication Code (HMACs). HMACs are a powerful cryptographic building block that incorporates secret key material within a hash function to create a unique keyed message authentication code. HMAC KMS keys can only be generated and used within government-approved hardware security modules (HSMs). This architecture can minimize the risk of these secret keys being compromised, in contrast to using plaintext HMAC keys in local application software.

Amazon Managed Streaming for Apache Kafka (MSK) now offers two new features: mult-VPC private connectivity and cluster policy support for Amazon MSK clusters that simplify connectivity and access between your Apache Kafka clients hosted in different VPCs and Amazon Web Services accounts and your Amazon MSK clusters.

Amazon Redshift Data Sharing is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon CloudWatch announces support for filtering by metric name on CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. With this new capability you can now select the specific metrics you want to stream, providing additional filtering controls.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.4.0 for new and existing clusters. Apache Kafka 3.4.0 includes several bug fixes and new features that improve performance. Key features include a fix to improve stability to fetch from the closest replica. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.4.0.

Amazon Simple Notification Service (Amazon SNS) now supports payload-based message filtering, expanding the feature set that already supported attribute-based message filtering. With this release, you can apply subscription filter policies to filter out messages based on their contents, unlocking a variety of workloads. You may use this new capability to filter events from 60+ Amazon Web Services services that publish events to Amazon SNS, including Amazon S3, Amazon EC2, Amazon CloudFront, and Amazon CloudWatch. You may also use payload-based message filtering for your cross-account workloads, where subscribers may not be able to influence a given publisher to have its messages published with attributes to Amazon SNS.

Today, Amazon OpenSearch Service announces Multi-AZ with Standby, a new deployment option that enables 99.99% availability and consistent performance for business-critical workloads. With Multi-AZ with Standby, OpenSearch Service domains are resilient to potential infrastructure failures, such as a node or an Availability Zone (AZ) failure, while assuring no impact to performance or availability. Multi-AZ with Standby also ensures OpenSearch Service domains follow recommended best practices, simplifying configuration and management.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Update (RU) Release 2 for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The January 2023 RU Release 2 provides updated daylight savings time definitions provided by Oracle after the January 2023 RU was delivered.

Amazon S3 now automatically enables S3 Block Public Access and disables S3 access control lists (ACLs) for all new S3 buckets in all Amazon Web Services Regions, including the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. This change was first announced on December 14, 2022, began deploying on April 5, 2023, and is now applied to all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide.

Today we launched new observability features including log patterns, metrics analytics and support for Jaeger traces with OpenSearch 2.5 in Amazon OpenSearch Service.

We are excited to announce the unified Amazon Health Dashboard, a new destination that brings together the Service Health Dashboard and Personal Health Dashboard into a single connected experience. This new home is designed to provide a more responsive and accurate view, improved usability, and greater operational resilience.

Amazon Resource Access Manager (Amazon RAM) now supports customer managed permissions so you can author and administer fine-grained resource access controls for supported resource types. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), and with Amazon Identity and Access Management (IAM) roles and users. With customer managed permissions, you can apply the principles of least privilege, or the minimum permissions required to perform a task.

Amazon Keyspaces (for Apache Cassandra), a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service.

Amazon Relational Database Service (Amazon RDS) for MySQL and MariaDB now support Optimized Reads for up to 2X faster query processing compared to previous generation instances. Optimized Read-enabled instances achieve faster query processing by placing temporary tables generated by the MySQL and MariaDB server on the NVMe SSD-based block-level instance storage that’s physically connected to the host server. Complex queries that utilize temporary tables, such as queries involving sorts, hash aggregations, high-load joins, and Common Table Expressions (CTEs) can now execute up to 2X faster with Optimized Reads on RDS for MySQL and MariaDB.

Amazon Relational Database Service (Amazon RDS) now supports integration with Amazon Secrets Manager to streamline how you manage your master user password for your Amazon RDS database instances. With this feature, Amazon RDS fully manages the master user password and stores it in Amazon Secrets Manager whenever your Amazon RDS database instances are created, modified, or restored. The new feature supports the entire lifecycle maintenance for your Amazon RDS master user password including regular and automatic password rotations; removing the need for you to manage rotations using custom Lambda functions.

We are excited to announce that Amazon GameLift now supports per-second billing for both Linux and Windows instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed solution that allows you to manage and scale dedicated game servers for session-based multiplayer games. With this update, customers will only pay for Amazon GameLift usage in one second increments, with a minimum of 1 minute. 

Today, Amazon Fargate for Amazon ECS Windows containers is available in the Amazon Web Services China (Beijing) region, operated by Sinnet and the Amazon Web Services China (Ningxia) region, operated by NWCD. This feature simplifies the adoption of modern container technology for Amazon ECS customers by making it even easier to run their Windows containers on Amazon Web Services.

Amazon Aurora Serverless v1 now allows you to select a specific window for scheduling a maintenance event in Amazon Web Services China (Ningxia) Region, operated by NWCD. You can use the maintenance window to specify, for example, when your PostgreSQL 10 cluster gets upgraded to PostgreSQL 11. You can set the maintenance window with just a few clicks in the Amazon Web Services Management Console or using the latest Amazon SDK or CLI. Review the Aurora documentation to learn more. 

Amazon IoT Device Management Jobs add the capability for customer to schedule their remote actions within a maintenance window. Job scheduling allowed customers to define the start and end time of a job rollout. Following today's launch, Customers can configure the maintenance window recurrence on daily, weekly or monthly schedule (e.g. “Monday-Wednesday-Friday”) or define a customized recurrence for Continuous Jobs. Devices that are added to target groups receive job execution notifications only within the pre-configured maintenance window duration without requiring any changes on device-side software. Customers with devices located in different time zones can also utilize this feature in combination with Dynamic Thing Groups and Device Shadow to schedule Job executions according to the local time of their devices (see this blog). With Maintenance Window configuration, customers can automate device software updates to their enterprise or industrial assets based on devices' software deployment cycles.

We are excited to announce support for Amazon EC2 C6i instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GameLift is a fully managed service that allows you to deploy and scale dedicated game servers for session-based multiplayer games. 

Amazon Relational Database Service (Amazon RDS) events now include tags in the message body, which provide metadata about the resource that was affected by the service event. The message receiver can use these tags to do payload-based parsing with rule matching, enabling workflows such as routing, filtering, and down stream automation.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Amazon DynamoDB now supports up to 50 concurrent table restores per account. The default service quota for table restores increased from 4 to 50, and is applicable to restores performed using point-in-time recovery and on-demand backups managed by DynamoDB and Amazon Backup.

Amazon Relational Database Service (RDS) for Oracle now supports version 22.2 of Oracle Application Express (APEX) for all supported Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Today, Amazon Elastic Container Service (ECS) is announcing the availability of ECS-optimized Amazon Linux 2023 (AL2023) AMI and group managed service accounts (gMSA) on Amazon Elastic Container Service (ECS) Linux containers through credentials-fetcher integration.  gMSA is a managed account that provides automatic password management, service principal name (SPN) management, and the ability to delegate management to administrators over multiple servers or instances. This integration allows applications hosted on Amazon ECS Linux containers to easily authenticate with Microsoft Active Directory (AD) to access network shared resources. This integration enables customers to continue using AD as well as get the cost, reliability, and scalability benefits of Amazon Linux on ECS. 

Today, we announce media metrics for AWS Elemental MediaConvert, increasing the information available for transcoding events and associated media assets. Now you can view and act on a broader set of data both during and after transcoding jobs complete. You can use the information available through media metrics to build dashboards with Amazon CloudWatch and to programmatically integrate actions into your workflows via Amazon EventBridge.

Starting today, the Amazon Web Services Billing Preferences page has a re-designed user experience, to help you manage your Amazon Web Services Billing Preferences. The Billing preferences page provides a user-friendly experience to manage your invoice delivery, usage and billing alerts as well as credit sharing preferences. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Lambda now supports Node.js 18 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Node.js 18 can take advantage of new features such as an upgrade of the bundled SDK for JavaScript to v3 and improved support for deploying ES Modules using Lambda layers. This release also provides access to Node.js 18 language enhancements, including the experimental ‘fetch’ API. For more information on Lambda’s support for Node.js 18, see our product documentation.

Amazon IoT Core, a managed cloud service that lets customers connect millions of Internet of Things (IoT) devices and routes trillions of messages to Amazon Web Services services, announces support for Shared Subscriptions to its MQTT-based messaging broker service. MQTT is a device-to-device messaging communication standard widely used in IoT applications for device to cloud message delivery. Amazon IoT Core supports both MQTT3.1.1 and the newer MQTT5 industry specifications allowing clients with either version to take advantage of this new feature seamlessly.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports Amazon RDS Optimized Writes enabling up to 2x higher write throughput at no additional cost. This is especially useful for RDS for MariaDB customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon Elastic Container Service (Amazon ECS) now provides contextual failure reasons that make it easier to troubleshoot task launch failures when customers use capacity providers for auto scaling the compute capacity in their cluster.

Amazon S3 adds a new Amazon CloudWatch metric to quickly diagnose and correct S3 Replication configuration issues. The OperationFailedReplication metric, available in both the S3 console and in Amazon CloudWatch, gives you per-minute visibility into the number of objects that did not replicate to the destination bucket for each of your replication rules.

We are pleased to announce that as of today, new Cost Explorer users in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will automatically receive the benefit of Cost Anomaly Detection. Cost Anomaly Detection uses machine learning to continuously monitor, detect, and alert customers of unexpected cost increases. The default configuration allows new Cost Explorer users to quickly improve cost controls with zero effort.

With Amazon Athena, you can use your SQL knowledge to query nearly 30 data stores - in addition to data stored in an Amazon S3 data lake - all without learning a new language, developing scripts to extract and duplicate data, or managing infrastructure. Starting today, you can now create and query views on these data sources, which include relational databases, streaming sources, and cloud object stores, for use cases such as interactive analysis and business intelligence reporting.

Amazon Elastic File System (Amazon EFS) has increased the maximum number of Access Points per file system from 120 to 1,000, enabling you to control file system access permissions across a larger number of applications in multi-tenant environments.

Amazon Redshift announces GA of Automated Materialized View (AutoMV) that helps you to lower query latency for repeatable workloads. AutoMV minimizes your effort for manually creating and managing materialized views and provides you the same performance benefits of user-created materialized views. Dashboard queries used to provide quick views of key performance indicators (KPIs), events, trends, and other metrics are some examples of workloads that can benefit from AutoMV. Reporting queries scheduled at various frequencies may also benefit from AutoMV.

Amazon EventBridge now supports Event Replay, which makes event-driven applications more durable and extensible by providing developers an easy way to replay past events. Event replay enables developers using Amazon EventBridge to build applications with the confidence that they can quickly recover from errors in their code, and the ability to easily extend their existing applications to add new functionality.

Amazon ElastiCache for Redis now makes it simpler and faster for you to get started with setting up an ElastiCache for Redis cluster. The new console experience offers streamlined navigation and minimal settings required to configure a cluster, in just a few clicks.

As announced on December 14, Amazon S3 is now deploying two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. To learn more, visit S3 Block Public Access and S3 Object Ownership in the S3 User Guide or the Amazon CloudFormation User Guide (S3 Block Public Access – S3 Object Ownership).

Amazon Lambda now supports setting Maximum Concurrency to the Amazon SQS event source, which allows customers to control the maximum concurrent invokes by the Amazon SQS event source. When multiple Amazon SQS event sources are configured to a function, customers can control the maximum concurrent invokes of an individual SQS event source. 

Amazon Lake Formation is a service that makes it simple to set up a secure data lake in days. A data lake is a centralized, curated, and secure repository that stores your data, both in its original form and prepared for analysis. A data lake enables you to break down data silos and combine different types of analytics to gain insights and guide better decisions.

Cross-account observability across Amazon CloudWatch is launched to help you monitor and troubleshoot applications that span multiple Amazon Web Services accounts within an Amazon Web Services Region. With cross-account observability in CloudWatch, you can seamlessly search, visualize, and analyze your metrics, logs, and traces without any account boundaries. Centralized security, operations, platform teams, and service owners deploying applications across multiple accounts can aggregate and correlate cross-account telemetry data in Amazon CloudWatch. They can use resulting trends and insights to efficiently monitor and troubleshoot issues affecting the health of their applications. Cross-account observability is an addition to CloudWatch’s unified observability capability.

Starting today you will receive notifications for your On-Demand Capacity Reservations that are utilizing less than 20% of Amazon EC2 instances in the reservation. These alerts will be delivered to you through Amazon Health Dashboard, Cloudwatch Events and email, without any action required from your side and at no additional cost to you. 

Customers can now track the build status and image build steps for their image pipelines directly in EC2 Image Builder. This capability makes it easier for you to track image builds, troubleshoot the build failures, and collect logs for audit purposes. Customers can also experience faster image build speeds as a result of workflow optimizations, with internal tests showing up to 35% improvements.

Amazon Cloud Map enables service editing capability in the Amazon Web Services Console in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Today, Amazon CloudFormation has expanded the availability of StackSets to the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, customers can deploy their stack sets to and from these newly supported Amazon Web Services Regions.

Amazon SWF now supports Amazon PrivateLink allowing you to run workflows from your Virtual Private Cloud (VPC) without traversing the public internet.

NICE DCV version 2023.0 introduces multiple enhancements and features, such as support for Red Hat Enterprise Linux 9 and monitor selection for a full-screen remote session on Linux and macOS clients. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Compute Optimizer now delivers recommendations to help customers identify optimal Amazon Elastic Container Service (Amazon ECS) task CPU and memory configurations for Amazon ECS services running on Amazon Fargate.

Amazon Compute Optimizer now provides cost and performance optimization recommendations for 37 new EC2 instances types, including bare metal instances (m6g.metal) and compute optimized instances . Additionally, Amazon Compute Optimizer now analyzes the “Available Mbytes”, “Available Kbytes”, and “Available Bytes” metrics to deliver more accurate EC2 instance recommendations for EC2 Windows instances.

Amazon Compute Optimizer now supports 66 more Amazon Elastic Compute Cloud (Amazon EC2) instance types. Newly supported instance types include the latest generation general purpose instance families from both Intel and AMD (M6i), compute optimized instance families (C6i), memory optimized instance family (R6i), and storage optimized instance families. These additions to Compute Optimizer allow customers to ensure they are always sized to an optimal EC2 instance type by delivering recommendations that ensure high performance at low cost.

Amazon Elastic Kubernetes Service (EKS) announces domainless Group Managed Service Account (gMSA) support for Windows containers. This helps customers to easily authenticate applications hosted on Amazon EKS with Microsoft Active Directory (AD) using a portable user identity and using a plug-in mechanism to retrieve the gMSA credentials for their Windows containers. With the latest offering, customers can run containers without joining the Amazon EKS nodes or underlying instances to the domain and they don’t need to rejoin the node to a domain in rolling update or auto scale events.

Today, Amazon Compute Optimizer launches a new capability that makes it easier for customers to optimize their EC2 instances by leveraging multiple CPU architectures.

Amazon Athena has expanded its encryption settings to improve the security of your query results. With today’s launch, you can now ensure all query results are encrypted at or above a level of encryption that you specify.

Amazon Simple Notification Service (Amazon SNS) now supports setting content-type request headers for HTTP/S notifications. This enables your topic subscribers to create a DeliveryPolicy that specifies the content-type value that Amazon SNS assigns to their HTTP/S notifications, such as application/json, application/xml, or text/plain. With this launch, applications can receive their notifications in a more predictable format.

Amazon CloudFormation has expanded the availability of language Transform called ‘AWS::LanguageExtensions' to the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. When declared in a template, the transform enables extensions to the template language in Amazon CloudFormation. The language extensions transform expands the functionality of the base CloudFormation JSON/YAML template language.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.3.2 for new and existing clusters. Apache Kafka 3.3.2 includes several bug fixes and new features that improve performance. Some of the key features include enhancements to fetch from the closest replica and metrics. Amazon MSK will continue to use and manage Zookeeper for quorum management in this release. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.3.2.

Amazon MQ now supports the Amazon Key Management Service to create and manage keys for at-rest encryption of customer data for RabbitMQ brokers. Amazon MQ handles the encryption and decryption seamlessly, so you don’t have to change your applications to access your data. When you create a broker, you can now select the KMS key used to encrypt your data from the following three options: a KMS key in the Amazon MQ service account, a KMS key in your account that Amazon MQ creates and manages, or a KMS key in your account that you create and manage. In addition to encryption at rest, all data transferred between Amazon MQ and client applications is securely transmitted using TLS/SSL.

Application Load Balancer (ALB) now supports version 1.3 of the Transport Layer Security (TLS) protocol, enabling you to optimize the performance of your backend application servers while helping to keep your workloads secure. TLS 1.3 on ALB works by offloading encryption and decryption of TLS traffic from your application servers to the load balancer. TLS 1.3 is optimized for performance and security by using one round trip (1-RTT) TLS handshakes, and only supporting ciphers that provide perfect forward secrecy.

Amazon Organizations tag policies are now available in both the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services (Ningxia) Region, operated by NWCD. The tag policies feature is available to customers through the Amazon Web Services Console, Amazon Command Line Interface (CLI), or Amazon SDKs. 

Amazon CloudWatch Logs now supports ingesting enriched metadata introduced in Amazon Virtual Private Cloud (Amazon VPC) flow logs as part of versions 3 to 5 additional to the default fields. This launch includes metadata fields that provide more insights about the network interface, traffic type, and the path of egress traffic to the destination.

Today, we are announcing the general availability of Amazon Linux 2023 (AL2023), our new Linux-based operating system for Amazon Web Services that is designed to provide a secure, stable, high-performance environment to develop and run your cloud applications. AL2023 provides seamless integration with various Amazon Web Services services and development tools and offers optimized performance for Amazon Elastic Compute Cloud (EC2) Graviton-based instances and Amazon Web Services Support at no additional licensing cost. Starting with AL2023, a new Amazon Linux major release will be available every 2 years. This cadence provides you with a more predictable release cycle and up to 5 years of support, making it easier for you to plan your upgrades.

Amazon Database Migration Service (Amazon DMS) now supports validation to ensure that data is migrated accurately to S3.

Amazon Database Migration Service (Amazon DMS) has expanded support of Amazon Simple Storage Service (Amazon S3) as a target by adding the ability to create an Amazon Glue Data Catalog from the Amazon S3 data files generated by Amazon DMS. With this integration, you no longer need to run a crawler or additional ETL jobs to create the catalog, and the Amazon S3 data is ready to be queried through other Amazon Web Services services such as Amazon Athena. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, Amazon Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility) supports MySQL 8.0.26. In addition to several security enhancements and bug fixes, MySQL 8.0.26 includes several changes, such as enhanced tablespace file segment page configuration and new aliases for certain identifier names. For more details, please review Aurora MySQL 3 and MySQL 8.0.26 release notes.

Amazon Relational Database Service (RDS) Proxy is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.. Amazon RDS Proxy is a fully managed and a highly available database proxy for Amazon Aurora and RDS databases. Amazon RDS Proxy can help improve application scalability, resiliency, and security.

Amazon Aurora Serverless v2, the next version of Aurora Serverless, is now available in Amazon Web Services China (Beijing) Region operated by Sinnet, and Amazon Web Services China (Ningxia) Region operated by NWCD.

Amazon S3 Access Points simplify data access for any Amazon Web Services service or customer application that stores data in S3 buckets. With S3 Access Points, you create unique access control policies for each access point to more easily control access to shared datasets. Now, bucket owners are able to authorize access via access points created in other accounts. In doing so, bucket owners always retain ultimate control over data access, but can delegate responsibility for more specific IAM-based access control decisions to the access point owner. This allows you to securely and easily share datasets with thousands of applications and users, and at no additional cost.

You can now run OpenSearch and OpenSearch Dashboards version 2.5 in Amazon OpenSearch Service. With OpenSearch 2.5, OpenSearch Service adds several new features and enhancements such as support for Security Analytics, support for Point in Time Search, improvements to observability and geospatial functionality. 

Amazon OpenSearch Service announces security analytics that provides new threat monitoring, detection, and alerting features. These capabilities help you to detect and investigate potential security threats that may disrupt your processes or pose a threat to sensitive organizational data.

Application Auto Scaling customers can now use Amazon CloudWatch Metric Math to customize the metrics they use with Target Tracking policy without actually publishing and paying for the customized metrics separately. Customers can use both arithmetic operators (such as +, -, /, and *) and mathematical functions (such as Sum and Average) to easily create custom metrics based on existing CloudWatch metrics. Application Auto Scaling offers support to automatically scale capacity of 13 supported services, including Amazon Elastic Container Service (ECS) services. Specifically, Target Tracking works like a thermostat - it continuously changes the capacity of the scaled resource to maintain the specified metric at a customer-defined target level. Today’s release makes it easier and cheaper to configure Target Tracking with custom metrics.

Virtual Private Cloud (VPC) interface endpoints for Amazon S3 now offer private DNS options that can help you more easily route S3 requests to lower-cost endpoints in your VPC. With private DNS for S3, your on-premises applications can use Amazon PrivateLink to access S3 over an interface endpoint, while requests from your in-VPC applications access S3 using gateway endpoints. Routing requests in this way helps you to take advantage of lower-cost private network paths without having to make code or configuration changes to your clients.

Amazon Route 53 Resolver endpoints now supports IPv6, allowing you to forward traffic to and resolve traffic from on-premises Domain Name System (DNS) resolvers with IPv6 addresses.

Starting today, Amazon Neptune supports R6i instances powered by 3rd generation Xeon Scalable processors. R6i instances are the 6th generation of Amazon EC2 memory optimized instances, designed for memory-intensive workloads. R6i instances provide up to 50 Gbps of networking speed, 2x that of R5 instances, and up to 20% higher memory bandwidth per vCPU compared to R5 instances.

Today, Amazon Neptune adds support for Slow Query Logs to help identify queries that need performance tuning. You can now identify slow-running queries and log runtime details for these queries’ key performance indicators such as query execution time, and response codes to Amazon CloudWatch Logs.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL 14.6, 13.9, 12.13, and 11.18 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process.

Amazon Neptune now supports graph summary API to help you understand important metadata about your property graphs (PG) and Resource Description Framework (RDF) graphs. Starting with engine version 1.2.1.0, you can use the graph summary API to retrieve estimated counts for your nodes, edges, and properties or incorporate the API into your graph applications for fast access to summary data about your graph.

Deletion protection is now available for Amazon DynamoDB tables in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. DynamoDB now makes it possible for you to protect your tables from accidental deletion when performing regular table management operations. When creating new tables or managing existing tables, authorized administrators can set the deletion protection property for each table, which will govern whether a table can be deleted. The default setting for the deletion protection property is disabled. When the deletion protection property is enabled for a table, the table cannot be deleted, irrespective of whether any Amazon Web Services Identity and Access Management (IAM) permissions policies allow deletion of the table. When deletion protection is disabled for a table, authorized administrators can delete the table if allowed by IAM permissions policies. The deletion protection property can be set through the Amazon Web Services Management Console, API, CLI, SDK, or Amazon Web Services CloudFormation.

Amazon Cognito identity pools now publishes data events to Amazon CloudTrail logs. Customers now have greater visibility into access-related activities for both guest and authenticated users of their applications. Administrators can now configure Amazon CloudWatch Alarms to monitor specific activity on Amazon Cognito identity pools and react based on automated workflows. Customers can record data events in Amazon CloudTrail and gain better insight into the identity providers leveraged by users to access to Amazon Web Services resources with Amazon Cognito identity pools. Amazon CloudTrail may charge for recording data events.

Amazon RDS for SQL Server now supports Cross Region Read Replica in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Cross Region Read Replica enables managed disaster recovery capability for mission critical databases by allowing a read replica in another region be "promoted" as a new standalone production database. This feature also supports data proximity by enabling replicas be placed closer to the application users of a given region to reduce read latencies. Additionally, this feature allows Amazon RDS for SQL Server customers to offload their read workload from the primary DB Instance, and also scale out read workloads over a farm of up to fifteen read replicas that can reside in any China region. To get started, visit the Amazon RDS SQL Server User Guide.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 15.2, 14.7, 13.10, 12.14, and 11.19. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon Identity and Access Management (IAM) now enables workloads that run outside of Amazon Web Services Cloud to access Amazon Web Services resources using IAM Roles Anywhere. IAM Roles Anywhere allows your workloads such as servers, containers, and applications to use X.509 digital certificates to obtain temporary Amazon Web Services credentials and use the same IAM roles and policies that you have configured for your Amazon Web Services workloads to access Amazon Web Services resources.

We’re pleased to announce the launch of Amazon Glue version 4.0, a new version of Amazon Glue that accelerates data integration workloads in Amazon. Amazon Glue 4.0 upgrades the Spark engines to Apache Spark 3.3.0 and Python 3.10. Glue 4.0 gives customers the latest Spark and Python releases so they can develop, run, and scale their data integration workloads and get insights faster.

AWS Elemental MediaConvert now has enhanced color processing features along with support for new color formats. As High Dynamic Range (HDR) content becomes more common, the ability to convert between Standard Dynamic Range (SDR) and HDR has also become important. While high-value content is commonly created using HDR color, most legacy, user-generated, and mass-produced content is created in SDR. Demand for format normalization continues to grow as users look to combine SDR and HDR content for editing, distribution, and monetization.

You can now create a single AMI that can boot on both Unified Extensible Firmware Interface (UEFI) and Legacy BIOS.

You can now use new Credential Control Properties to more easily restrict the usage of your IAM Roles for EC2.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.12, 10.5.19, 10.4.28 and 10.3.38. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Transfer Family now allows you to send Applicability Statement 2 (AS2) messages using HTTPS. AS2 offers security features like encryption and non-repudiation by default. With the ability to send AS2 messages over HTTPS, you can now benefit from an additional layer of in-transit encryption for your most sensitive EDI payloads and further compatibility with trading partners that require SSL/TLS communications.

You can now use Amazon CloudFormation templates to create and manage Amazon Transfer Family resources for AS2 including servers, connectors, partner profiles, and certificates. Amazon CloudFormation makes it easy to configure the entire stack of AS2 resources required to initiate and test an end-to-end AS2 message exchange. Additionally, you can now access Amazon CloudWatch metrics for AS2, such as number of successful and failed AS2 messages, in the Amazon Transfer Family Management Console. These metrics enable you to more effectively monitor your AS2 activity using a centralized dashboard.

Amazon CloudWatch Synthetics announces a new update to Synthetics NodeJS runtime version syn-nodejs-puppeteer-3.9 and recommends customers to migrate Synthetics canaries to the latest runtime version. Runtime version syn-nodejs-puppeteer-3.9 includes updates to third-party dependency packages. Please refer to the runtime support policy for additional details. 

Amazon Relational Database Service (RDS) for SQL Server now supports Cross Region Automated Backups with encryption in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The Amazon RDS Cross-Region Automated Backups feature enables disaster recovery capability for mission-critical databases by providing you the ability to restore your database to a specific point in time within your backup retention period. This allows you to quickly resume operations in the event that the primary Amazon Web Services Region becomes unavailable. If you've enabled encryption on the source RDS for SQL Server DB instance, you can use this feature to copy encrypted DB snapshots to regions outside of the primary Amazon Web Services Region.

February 07, 2023 - Amazon DocumentDB (with MongoDB compatibility) continues to increase compatibility with MongoDB, and now offers added support for MongoDB API version 5.0 drivers with Amazon DocumentDB 5.0. Amazon DocumentDB is a fast, scalable, highly available, and fully managed document database service that supports MongoDB API based workloads. Amazon DocumentDB makes it easy and intuitive to store, index, and query JSON data.

Amazon Elastic Container Service (Amazon ECS) now enables customers to delete inactive task definition revisions programmatically or via the Amazon ECS console. With this new capability, customers can permanently delete task definition revisions that are no longer needed or contain undesirable configurations, simplifying their resource management and improving security posture.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest major version PostgreSQL 15. New features in PostgreSQL 15 include the SQL standard "MERGE" command for conditional SQL queries, performance improvements for both in-memory and disk-based sorting, and support for two-phase commit and row/column filtering for logical replication. The PostgreSQL 15 release also adds support for new extension pg_walinspect and server-side compression with Gzip, LZ4, or Zstandard (zstd) using pg_basebackup. Please refer to the PostgreSQL community announcement for more details about the release.

Today, FLAC audio and animated GIF video input sources for AWS Elemental MediaConvert is available in Amazon Web Services China (Ningxia) Region, operated by NWCD. These new input formats are compatible with all MediaConvert outputs. For example, you can convert lossless FLAC files into compressed audio formats like AAC, MP3, and Ogg Vorbis, or use FLAC files as sidecar audio sources to be joined with video files. Animated GIF inputs can be converted into higher-efficiency video streaming codecs like AVC and HEVC and distributed as standalone MP4 files or adaptive-bitrate streaming packages such as HLS or DASH.

Amazon Managed Streaming for Apache Kafka (MSK) now offers Tiered storage that brings a virtually unlimited and low-cost storage tier. Tiered Storage lets you store and process data using the same Kafka APIs and clients , while saving your storage costs by 50% or more over existing MSK storage options . Tiered Storage makes it easy and cost-effective when you need a longer safety buffer to handle unexpected processing delays or build new stream processing applications. You can now scale your compute and storage independently, simplifying operations.

You can now use Service Quotas in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, to view and manage your service quotas at scale as your Amazon Web Services workloads grow.

Amazon OpenSearch Service now lets you schedule service software and auto-tune updates during off-peak hours, helping you plan deployments to your domain better. In addition, with improved notifications through EventBridge events, and notifications on the OpenSearch Service console, you have better visibility of scheduled updates, when the updates start, and complete.

Starting today Amazon Relational Database Service (Amazon RDS) for MySQL supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Relational Database Service (RDS) for Oracle now supports early notifications of Auto minor Version Upgrades (AmVU) via Pending Maintenance Actions (PMA) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet., thereby improving usability of AmVU.

Amazon Elastic Container Service (Amazon ECS) has increased the “Tasks in PROVISIONING state per cluster“ service quota to deliver a faster Cluster Auto Scaling experience. Customers who need to launch a large number of tasks (>300) in their Amazon ECS clusters will now see their cluster infrastructure scale faster.

Starting today Amazon RDS for MariaDB supports Cross-Region Automated Backups. This feature extends the existing Amazon RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary Amazon Web Services Region to a secondary Amazon Web Services Region.

Amazon Kinesis Data Streams for Amazon DynamoDB now supports Amazon CloudFormation for DynamoDB global tables, which means you can enable streaming to an Amazon Kinesis data stream on your DynamoDB global tables with CloudFormation templates. By streaming your DynamoDB data changes to a Kinesis data stream, you can build advanced streaming applications with Amazon Kinesis services. For example, Amazon Kinesis Data Analytics reduces the complexity of building, managing, and integrating with Apache Flink and provides built-in functions to filter, aggregate, and transform streaming data for advanced analytics. You also can use Amazon Kinesis Data Firehose to take advantage of managed streaming delivery of DynamoDB table data to other Amazon Web Services services such as Amazon OpenSearch Service, Amazon Redshift, and Amazon S3.

Today, Amazon Systems Manager announces adding CloudWatch Alarms to control tasks. Now customers can choose to stop a task or an action in Systems Manager services when a CloudWatch alarm is activated. This allows customers to use the broad range of monitoring metrics supported by CloudWatch, ranging from resource utilization to application performance, to control tasks. If the specified CloudWatch alarm is activated during a task, Automation will stop the task, RunCommand will cancel the commands, State Manager and Maintenance Windows will skip dispatch. It's easy to get started, customers can add a CloudWatch alarm, while setting up a task in Systems Manager’s Automation, Run Command, State Manager, and Maintenance Windows services. Once setup, users can view the attached alarm in the task's details page. 

 Glue launches G.025X, a new quarter DPU worker type for streaming extract, transform, and load (ETL) jobs. This smaller worker type is suitable to process low volume and sporadic data streams. 

Torn Write Prevention (TWP) is a feature that ensures 16KiB write operations are not torn in the event of operating system crashes or power loss during write transactions. This feature is now available for customers in Amazon Web Services China Regions in Amazon Elastic Block Store (EBS), a block storage service, when attached to all EC2 Nitro-based instances.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports Amazon RDS Optimized Writes. With Optimized Writes you can improve write throughout by up to 2x at no additional cost. This is especially useful for RDS for MySQL customers with write-intensive database workloads, commonly found in applications such as digital payments, financial trading, and online gaming.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2023 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Trusted Advisor fault tolerance checks for ElastiCache for Redis and MemoryDB for Redis are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, the Trusted Advisor fault tolerance checks for ElastiCache for Redis are now available in all Amazon Web Services regions. Amazon Trusted Advisor evaluates your Amazon Web Services account with automated best practice checks and provides cloud optimization recommendations to reduce costs, improve performance, increase security, and monitor service quotas.

Amazon Resource Access Manager (Amazon RAM) now supports higher default quotas to help you scale your resource sharing. Amazon RAM helps you securely share your resources across Amazon Web Services accounts, within your organization or organizational units (OUs), or with Amazon Identity and Access Management (IAM) roles and users for supported resource types. For each Amazon Web Services Region in an account, you can now share up to 25,000 resources and share resources with up to 25,000 principals. Additionally, you can create up to 25,000 resource shares per Amazon Web Services Region in an account. For each individual resource share, you can share up to 5,000 resources and share resources with up to 5,000 principals.

Amazon ElastiCache for Redis 7 now includes enhanced I/O multiplexing, which delivers significant improvements to throughput and latency at scale. Enhanced I/O multiplexing is ideal for throughput-bound workloads with multiple client connections, and its benefits scale with the level of workload concurrency. As an example, when using r6g.xlarge node and running 5200 concurrent clients, you can achieve up to 72% increased throughput (read and write operations per second) and up to 71% decreased P99 latency, compared with ElastiCache for Redis 6.

Amazon Gateway Load Balancer (GWLB) and Gateway Load Balancer Endpoint (GWLBE) now support end-to-end connectivity using Internet Protocol version 6 (IPv6). Customers can now send IPv6 traffic through Gateway Load Balancers and its endpoints to distribute traffic flows to dual stack appliance targets. 

Starting today, the Amazon Web Services Bills page has a re-designed user experience, making it easier to understand your Amazon Web Services spend. The Bills page provides an overview of your charges and the ability to drill into key details; the re-design provides a refreshed user interface, new views of your savings and taxes, and enhanced sorting and filtering capabilities. This re-design is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now connect over IPv6 to your services hosted in Amazon Web Services using Amazon PrivateLink. Amazon PrivateLink is a highly available, scalable technology that enables you to privately connect your VPC to supported Amazon Web Services services, services hosted by other Amazon Web Services accounts (VPC Endpoint Services), third-party SaaS services and supported Amazon Web Services Marketplace partner services.

Amazon Lambda now allows you to create or update your functions with container images stored in an Amazon ECR repository in a different Amazon Web Services account than that of your Lambda function. Previously, you could only access container images stored in an Amazon ECR repository in the same account as your Lambda functions. If you used a centralized account for your Amazon ECR repositories, you needed to copy your container images into an Amazon ECR repository in the same account as your Lambda function. You can now simplify this workflow by accessing the container image stored in an Amazon ECR repository in a different account. 

Amazon Elastic Container Service (Amazon ECS) has improved the accuracy of Elastic Load Balancing (ELB) for Amazon ECS services. Load balancing on Amazon ECS now more accurately routes traffic to running tasks as tasks will be deregistered from the ELB before they enter a stopped state. Furthermore, with these improvements, Amazon ECS also helps your services running on the Fargate Spot capacity provider be more resilient to Spot termination notices.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the tcn extension which provides a trigger function that allows you to asynchronously notify listeners of changes to a table.

Amazon Identity and Access Management now supports the ability to refine permissions policies based on the organizational unit (OU) or organization ID in Amazon Organizations of the principal or resource. With these new IAM capabilities, you now can author IAM policies to enable your principals to access only resources inside specific OUs, or organizations.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.32 and 5.7.41. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Today, we are excited to announce the ability to roll back an Auto Scaling instance refresh. EC2 Auto Scaling’s instance refresh feature allows you to replace instances in an Auto Scaling group on a rolling basis. With today’s launch you can use a rollback to undo changes an instance refresh made when it fails.

Today, we are excited to announce the expansion of instance refresh to support instances on standby or protected from scale in. For instances on standby, you now have the options to terminate them, ignore them altogether, as well as the current option to wait until they return to in service. For protected instances, you now have the options to refresh them, ignore them altogether, as well as the current option to wait for them until you remove scale-in protection.

Amazon Cloud Map increases default limit of service instances that can be registered in a namespace with API calls discovery from 2,000 to 6,000 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. With Amazon Cloud Map, you can define custom names for your application resources, such as Amazon Elastic Container Services (Amazon ECS) tasks, Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon DynamoDB tables, or other cloud resource. You can then use these custom names to discover the location and metadata of cloud resources from your applications using Amazon SDK and authenticated API queries.

Amazon Simple Notification Service (Amazon SNS), a messaging service that provides high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications, now supports active tracing with Amazon X-Ray. Customers can now view traces that flow through Amazon SNS topics to destination services, such as Amazon Simple Queue Service, Amazon Lambda, and Amazon Kinesis Data Firehose, in addition to traversing the application topology in Amazon CloudWatch ServiceLens. Customers can enable Amazon X-Ray active tracing using the Amazon SNS SetTopicAttributes API or the Amazon SNS Management Console.

Amazon Elasticache for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, ElastiCache for Redis offered an SLA of 99.9% for Multi-AZ configurations. With this launch, ElastiCache for Redis has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Announcing Amazon CloudWatch Metric Streams - a new feature that enables customers to create a continuous, near real-time stream of metrics to a destination of their choice.

Amazon MemoryDB for Redis now offers an availability Service Level Agreement (SLA) of 99.99% when using a Multi-Availability Zone (Multi-AZ) configuration. Previously, MemoryDB offered an SLA of 99.9% for Multi-AZ configurations. With this launch, MemoryDB has updated its Multi-AZ SLA to provide 10x higher levels of availability.

Amazon Pricing Calculator is a free, web-based planning tool that helps you to estimate the cost of your use cases in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows you to explore the price points of services based on your architectural designs or common use cases, and review calculations behind your estimates. You can estimate cost of an individual or multiple services based on your needs.

Amazon Database Migration Service (Amazon DMS) now supports Amazon EC2 C6i and R6i instance types in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by 3rd Generation Intel Xeon Scalable processors with an all-core turbo frequency of 3.5 GHz, offering up to 15% better compute price performance over comparable Generation5 instances for a wide variety of workloads, and always-on memory encryption using Intel Total Memory Encryption (TME).

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge), 9TiB of memory (u-9tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Today, Amazon CloudFormation adds Spotlight tab on the Amazon Web Services Management Console for CloudFormation to give quick access to curated articles on CloudFormation. You can now find Amazon CloudFormation articles from multiple official Amazon Web Services channels at a single location. You can use this feature to discover the editor’s choice articles on CloudFormation. With this launch, you can find the latest information on CloudFormation features, blogs, and workshops.

Starting today, Amazon EC2 High Memory instances with 6TiB of memory (u-6tb1.56xlarge and u-6tb1.112xlarge) and 12TiB of memory (u-12tb1.112xlarge) are now available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these High Memory instances with On Demand and Reserved Instance purchase options.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the seg extension which provides the "seg" data type for representing line segments or floating point intervals.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports additional cipher suites that can be used with the OEM Agent and SSL options in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Customers can make use of these new cipher suites as they provide stronger security for the RDS for Oracle database instance(s) connections, thereby increasing the security posture of their infrastructure.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.6, 13.9, 12.13, 11.18, and 10.23. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release. 

Starting today, you can configure your NAT Gateway to support up to 440,000 concurrent connections to a single destination by adding multiple IP addresses to same NAT Gateway.

Customers in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can now hibernate Amazon EC2 I3en, M6i and C6i instances. Hibernation provides you with the convenience of pausing your workloads and resuming them later from the saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off. By using hibernation, you can maintain a fleet of pre-warmed instances that can get to a productive state faster without modifying your existing applications.

Amazon OpenSearch Service now supports enabling Security Assertion Markup Language (SAML) authentication for OpenSearch Dashboards during domain creation. SAML authentication for OpenSearch Dashboards enables users to integrate directly with third-party identity providers (IDP) such as Okta, Ping Identity, OneLogin, Auth0, Active Directory Federation Services (ADFS) and Azure Active Directory.

Starting today, Amazon EC2 Launch Templates support Amazon Systems Manager parameters for Amazon Machine Images (AMIs). This simplifies automation and reduces misconfiguration likelihood by eliminating the need to create a new launch template version for every AMI update. 

Today, Amazon CloudFormation StackSets adds a new parameter in DescribeStackSet API to improve visibility to the list of Regions where a given stack set is deployed. You can now access the list of Regions directly through your management or delegated administrator Amazon Web Services account.

Amazon OpenSearch Service adds a new connection mode for cross-cluster connection, simplifying the setup required to remote reindex between a local domain and a remote VPC domains. Remote reindex enables you to migrate data from a source domain to a target domain. Remote reindex is also useful when you have to upgrade your domains across multiple major versions.

Today, Amazon Neptune announces support for JupyterLab 3 on Neptune notebooks to boost the productivity of developers and data scientists using the Neptune Workbench. With this update, you can now launch Neptune notebooks in the Amazon Web Services Management console using JupyterLab to access a modern interactive development environment (IDE) complete with developer tools for code authoring, debugging, and support for the latest open source JupyterLab extensions. 

Amazon Glue Studio Job Notebooks are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. They provide interactive, notebook-based job authoring for Amazon Glue to simplify the process of developing data integration jobs. Job Notebooks act as a serverless, built-in interface for Amazon Glue Interactive Sessions, a new feature that allows customers to run interactive Apache Spark workloads on demand.

Amazon Backup announces support for Amazon Redshift, making it easier for you to centrally manage data protection of your Amazon Redshift data warehouse. You can now use Amazon Backup to schedule and restore Redshift manual snapshots. Further, your backups can provide enhanced data protection with immutability, improved security with separate backup access policies, and better governance by centralizing backup and recovery.

Amazon Redshift Concurrency Scaling is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (RDS) for MariaDB supports encrypted SSL/TLS connections to the database instances. Starting today, you can enforce SSL/TLS client connections to your Amazon RDS for MariaDB database instance for enhanced transport layer security. To enforce SSL/TLS, enable the require_secure_transport parameter (disabled by default) through the Amazon RDS Management Console, the CLI or the API. When the require_secure_transport parameter is enabled, a database client will be able to connect to the RDS for MariaDB instance only if it can establish an encrypted connection.

Amazon OpenSearch Service now lets you validate the configuration changes before applying them via the console, SDK or the APIs. With this new option, Amazon OpenSearch Service performs detailed validation of the desired changes and provides a report. The option also reports if the change will require a blue/green deployment to help you plan your changes better.

Amazon Elastic File System (Amazon EFS) now supports a 1-day Lifecycle Management Policy that allows you to automatically move files that haven’t been accessed in 1 day to the Amazon EFS Infrequent Access (EFS IA) storage class. You can configure this new policy option for your file system, or you can use one of the existing policy options: 7, 14, 30, 60, or 90 days.

Amazon EMR now supports Amazon EC2 R6GD, C6I, M6I, R6I, G4DN, C5A AND X1 Instances in Amazon Web Services China (Ningxia) Region, operated by NWCD, and Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Amazon Launch Wizard is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Launch Wizard offers a guided way of sizing, configuring, and deploying Amazon Web Services resources for third party applications, such as Microsoft SQL Server Always On and HANA based SAP systems, without the need to manually identify and provision individual Amazon Web Services resources. 

Amazon ElastiCache for Memcached has added support for Memcached version 1.6.17. This version is a cumulative update and contains all changes and improvements from version 1.6.12 to 1.6.17. 

Amazon Simple Notification Service (SNS) now supports a higher default quota for subscription filter policies. With the increased quota, you can now have up to 10,000 subscription filter policies per account, and can apply up to 200 subscription filter policies per topic. By default, topic subscribers receive every message published to a topic. With subscription filter policies, subscribers can filter out unwanted messages, simplifying their architecture and optimizing the utilization of their resources.

Amazon CloudFormation announces support for CloudFormation Linter (cfn-lint) in Amazon Serverless Application Model Command Line Interface ( SAM CLI). The cfn-lint tool validates your JSON/YAML template against CloudFormation-based rules, and returns diagnostic error messages. With this launch, you can use an optional parameter --lint in sam validate command to run cfn-lint validations on your JSON/YAML templates.

Starting today, Amazon EC2 X2idn and X2iedn instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. X2idn and X2iedn instances are designed for memory-intensive workloads and deliver improvements in performance, price performance, and cost per GiB of memory compared to previous generation X1 instances. These new instances are powered by 3rd generation Intel Xeon Scalable Processors (Ice Lake) and deliver up to 50% higher compute price performance than comparable X1 instances. X2idn has a 16:1 ratio of memory to vCPU and X2iedn has a 32:1 ratio, making these instances a great fit for workloads such as in-memory databases and analytics, big data processing engines, and Electronic Design Automation (EDA) workloads.  

Starting today, Amazon EC2 High Memory instances with 9TiB of memory (u-9tb1.112xlarge) are available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can start using these new High Memory instances with On Demand and Reserved Instance purchase options.

Amazon EC2 Console introduces the new and improved launch experience - a quicker and easier way to launch an instance. The new design provides a single page layout allowing you to view all your settings in one location. You no longer need to navigate back and forth between steps to ensure your configuration is correct. The new design also introduces a summary panel, that provides an overview and helps navigate the page.  

Today, Amazon CloudFormation updates the language extension transform to supports default values and additional intrinsic functions in Fn::FindInMap. Customers can use these features to minimize the length of their CloudFormation templates, and improve their readability. The language transform enables extensions to the CloudFormation template language with functions such as Fn::Length, Fn::JsonToString, etc. Customers can modularize their templates into groups with different attributes in Parameters and Mappings, and use Fn::FindInMap to refer to attributes of these groups. For example, you can use Fn::FindInMap for EC2 resource type with a Mappings section containing a single map, RegionMap, that associates AMIs with Amazon Web Services Regions to your EC2 instances. With these language enhancements, you can use intrinsic functions such as Fn::Split, Fn::Select, and others within Fn::FindInMap. Previously, Fn::FindInMap only supported Fn::FindInMap and Ref intrinsic functions. Additionally, you can define string or list type default values in Fn::FindInMap. To see the list of supported intrinsic functions and learn about Fn:FindInMap, refer to the user guide.

Trusted Language Extensions for PostgreSQL is a new open source development kit to help you build high performance extensions that run safely on PostgreSQL. With Trusted Language Extensions, developers can install extensions written in a trusted language on Amazon Aurora PostgreSQL-Compatible Edition and Amazon Relational Database Service (RDS) for PostgreSQL.

Amazon Backup now offers you the ability to create legal holds on your protected data beyond your defined retention policies, for legal and auditing purposes. Legal holds prevent your backups from being deleted after the expiration of their retention period, until your backups are explicitly released from legal hold. With this feature, Amazon Backup allows you to manage legal hold requests at scale and help prove compliance to outside counsel, auditors, and related third-parties.

Amazon S3 Storage Lens now offers lower pricing tiers for customers with 25 billion or more objects, making continuous monitoring of large storage footprints more cost effective. Customers with hundreds of billions of objects will now see progressively lower prices, saving up to 40% on organization-wide storage monitoring.

Today, Amazon Backup is announcing application-aware data protection that enables you to add Amazon CloudFormation stacks to backup policies, making it easier for you to back up and restore your entire applications. Amazon Backup automates the data protection of applications that are defined using Amazon CloudFormation stacks to create immutable application-level backups using Amazon Backup Vault Lock.

Amazon S3 now automatically applies S3 managed server-side encryption (SSE-S3) as a base level of encryption to all new objects added to S3, at no additional cost and with no impact on performance. SSE-S3 uses 256-bit Advanced Encryption Standard and is already applied to trillions of objects. This new base level of encryption helps customers meet their encryption requirements, with no changes to applications. Additionally, customers can still choose to encrypt their objects using customer-provided encryption keys (SSE-C), Amazon Key Management Service keys (SSE-KMS), or a client library such as the Amazon S3 Encryption Client.  

Amazon Relational Database Service (Amazon RDS) now supports Blue/Green Deployments to help you with safer, simpler, and faster updates to your Amazon Aurora and Amazon RDS databases. Amazon RDS Blue/Green Deployments create a fully managed staging environment that allows you to deploy and test production changes, keeping your current production database safe. With a single click, you can promote the staging environment to be the new production system in as fast as under a minute, with no changes to your application and no data loss.

Amazon Kinesis Video Streams is now available in the Amazon Web Services China (Beijing) Region operated by Sinnet. Amazon Kinesis Video Streams makes it easy to securely stream video from connected devices to Amazon Web Services for analytics, machine learning (ML), playback, and other processing. Kinesis Video Streams automatically provisions and elastically scales all the infrastructure needed to ingest streaming video data from millions of devices. It durably stores, encrypts, and indexes video data in your streams, and allows you to access your data through easy-to-use APIs. Kinesis Video Streams enables you to playback video for live and on-demand viewing, and quickly build applications that take advantage of computer vision and video analytics.

Today, we are introducing a new price and capacity optimized allocation strategy for Amazon EC2 Spot Instances in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD to help you optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. The price and capacity optimized allocation strategy makes Spot allocation decisions based on both spare capacity availability and Spot Instance price. The price and capacity optimized allocation strategy is the best choice for most Spot applications such as big data, containerized workloads, CI/CD, web servers, image and media rendering, machine learning, and high performance computing (HPC).

Amazon Transfer Family announces built-in support for PGP decryption of files uploaded over SFTP, FTPS or FTP to Amazon S3 or Amazon EFS. Customers can now configure and automate decryption of files that are encrypted using PGP keys by their users before upload, which can help them meet their data protection and compliance requirements when exchanging sensitive data with third parties.

We are excited to announce the availability of Reserved nodes for Amazon MemoryDB for Redis in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Reserved nodes allow you to save up to 55% over On-Demand node prices in exchange for a usage commitment over a one- or three-year term. Reserved nodes are complementary to MemoryDB On-Demand nodes and give businesses flexibility to reduce costs. Reserved nodes can be reserved for one-year or three-year terms with No Upfront, Partial Upfront and All Upfront payment options. 

Amazon ElastiCache for Redis now supports updates to encryption in transit on existing cluster resources. You can change the TLS configuration of your Redis clusters without re-building or re-provisioning them or impacting application availability. When enabling encryption in transit, your overall solution can remain connected to Redis clusters.

Amazon RDS for Oracle now supports copying option groups during in-region cross-account snapshot copy requests using the API, CLI, or Amazon Backup. Amazon RDS uses option groups to enable and configure features that make it easier to manage your databases. Copying the option groups with the snapshot on cross account copy allows you to restore that snapshot in the target account with the same options as the source snapshot without needing to reconfigure the option groups. 

Amazon CloudFormation now supports AllowedValues and AllowedPattern properties for CommaDelimitedList parameter type. You can use the CommaDelimitedList parameter type to specify multiple string values in a single parameter. For example, you can create three different subnets with their own VPC CIDR blocks, and use CommaDelimitedList to specify three different CIDR blocks. With these language enhancement, you can add validation checks to your CommaDelimitedList, and reduce input errors to your CommaDelimitedList while updating your stacks and/or stack sets.

Application Auto Scaling now offers customers more visibility about the scaling decision it takes for an auto scaled resource. Application Auto Scaling (AAS) is a service that offers standardized auto scaling experience across 13 different Amazon services beyond Amazon EC2, for example Amazon DynamoDB provisioned read and write capacity, and Amazon Elastic Container Service (ECS) services. Application Auto Scaling takes scaling actions based on the customer-defined scaling policies that act as a guideline for scaling decisions. Until now, customers only got details about successful and not about deferred scaling actions. With this feature, customers get more insights about scaling decisions that do not lead to a scaling action in both descriptive and machine-readable format.

Starting today, Amazon Managed Domain Lists for Route 53 Resolver DNS Firewall is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) region, operated by NWCD, making it easier for customers to quickly get started with managed protections against DNS threats. In addition, Route 53 now sources threat intelligence from Recorded Future for DNS Firewall, expanding the breadth of DNS threats you can block using Amazon Managed Domain Lists, with new domains continuously added as DNS threats emerge and are identified by Recorded Future’s threat intelligence systems.