2020

Amazon Lambda reduced the billing granularity for Lambda function duration from 100ms down to 1ms in the Amazon Web Services China (Beijing) region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) region, operated by NWCD. This will lower the price for most Lambda functions, more so for short duration functions. Their compute duration will be billed in 1ms increments instead of being rounded up to the nearest 100 ms increment per invoke. For example, a function that runs in 30ms on average used to be billed for 100ms. Now, it will be billed for 30ms resulting in a 70% drop in its duration spend.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.7.0 for new and existing clusters. Apache Kafka 2.7.0 includes several bug fixes and new features that improve performance. Some key features include the ability to throttle create topic, create partition, and delete topic operations (KIP-599) and configurable TCP connection timeout (KIP-601). For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 2.7.0. 

Amazon CloudWatch Lambda Insights, enables you to monitor, troubleshoot, and optimize the performance of Amazon Lambda functions. You have access to automated dashboards summarizing the performance and health of your Lambda functions that provide visibility into issues such as memory leaks or performance changes caused by new function versions.  

Starting today, you can use the next generation of Amazon Database Migration Service instances (C5, R5 and T3) to migrate your databases to Amazon Web Services. You can easily scale up to these new instance classes by modifying your existing replication instance either through the Amazon Database Migration Console or the SDK.  

Starting today, Amazon Systems Manager Explorer provides a summary of Amazon Config rules and associated resource compliance, to help you check overall compliance status and quickly find non-compliant resources in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Systems Manager Explorer is an operations dashboard that provides a view of your operations data across your Amazon Web Services accounts and Regions, helping you see where you may need to investigate and remediate operational issues. Amazon Config enables you to assess, audit, and evaluate the configurations of your Amazon Web Services resources.

Amazon Cost Explorer Rightsizing Recommendations now includes Amazon EBS metrics in its analysis to generate enhanced EC2 instance type recommendations. 

The s3:ResourceAccount and s3:TLSVersion IAM condition keys help you write simple policies that restrict access to your buckets based on the Amazon Web Services Account ID of the bucket owner, or by the TLS Version used by the client. 

Amazon IoT Device Management customers use Secure Tunneling to securely access and troubleshoot remote devices located behind a restricted firewall. Now, customers can make concurrent client connections to a single device over a secure tunnel using the new multiplexing capability. Multiplexing enables customers to perform more advanced device troubleshooting, such as modifying parameters via a web application on the device while simultaneously issuing remote shell commands to verify the device is working properly. 

Amazon CloudTrail now provides more granular control of data event logging with advanced event selectors. Data events provide visibility into the data plane resource operations performed on or within a resource. You can currently log data events on two resource types: Amazon S3 object-level API activity (e.g. GetObject, DeleteObject, and PutObject API operations), and Amazon Lambda function execution activity (the Invoke API). With advanced event selectors, you can include or exclude values on fields such as EventSource, EventName, and ResourceARN. Advanced event selectors also support including or excluding values with pattern matching on partial strings, similar to regular expressions, providing more control over which CloudTrail data events you want to log and pay for. For example, you can log S3 DeleteObject APIs to narrow the CloudTrail events you receive to only destructive actions, enabling you to identify security issues while controlling costs. If you detect unauthorized activity, you can also take immediate action to restrict access. 

You now can use PartiQL (a SQL-compatible query language)—in addition to already-available DynamoDB operations—to query, insert, update, and delete table data in Amazon DynamoDB in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. PartiQL makes it easier to interact with DynamoDB and run queries in the Amazon Web Services Management Console and NoSQL Workbench. Because PartiQL is supported for all DynamoDB data-plane operations, it can improve the productivity of developers by enabling them to use a familiar, structured query language to perform these operations. 

You now can restore Amazon DynamoDB tables even faster when recovering from data loss or corruption. The increased efficiency of restores and their ability to better accommodate workloads with imbalanced write patterns reduce table restore times across base tables of all sizes and data distributions. To accelerate the speed of restores for tables with secondary indexes, you can exclude some or all secondary indexes from being created with the restored tables. 

You can now reboot individual brokers within your Amazon Managed Streaming for Apache Kafka (Amazon MSK) cluster by using the Reboot Broker API. The Reboot Broker API enables you to test the resiliency of your data producers and consumers by simulating MSK service maintenance such as automated patching or the effect a version upgrade has on a MSK broker. Visit the Amazon MSK API Reference for information on how to use this API.

Today, the Amazon Key Management Service (KMS) is announcing availability for attribute-based access control (ABAC) to allow the use of tags and aliases in policy conditions for IAM policies and Amazon KMS key policies. Attribute-based access control is an authorization strategy that defines permissions based on tags which can be attached to users and Amazon Web Services resources. KMS additionally supports the use of key aliases in policy conditions. 

You can now encrypt data in Amazon Kinesis Data Streams using server-side encryption. Data is encrypted using Amazon Key Management Service (KMS) managed customer master key. Server-side encryption makes it easy to meet strict data regulatory requirements, and enhances security by encrypting streaming data at rest within Amazon Kinesis Data Streams.  

We are excited to announce that customers will now be able to automate copy of EBS snapshots across accounts between Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD using Amazon Data Lifecycle Manager. Customers will also be able to encrypt those copies with a different Customer Master Key (CMK). Many customers have Disaster Recovery compliance needs that require their EBS snapshots to be copied to a separate region and stored with a different encryption key, so that their data is protected in case their account is compromised. We launched DLM support for copy across regions in December 2019, and now with support for copy across accounts, customers can automate their DR requirements as soon as their snapshots are created. 

You can now use Amazon IoT Device Defender to collect custom metrics from your devices.  

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). It provides a single, web-based visual interface where you can perform all ML development steps required to prepare, build, train and tune, deploy and manage models. Starting today, you can secure the connection from your Amazon Virtual Private Cloud (VPC) to SageMaker Studio using Amazon PrivateLink. When using PrivateLink, all the traffic flows entirely within the Amazon Web Services network without traversing the public internet, thus adding an additional layer of security. 

Amazon Systems Manager now supports Amazon Virtual Private Cloud (Amazon VPC) endpoint policies, which allow you to configure access to the Systems Manager API. When you create Amazon VPC endpoints for Systems Manager, you can attach Amazon Identity and Access Management (IAM) resource policies that restrict user access to Systems Manager API operations, when these operations are accessed via the Amazon VPC endpoint. For example, you can limit certain users to only be able to list Systems Manager Run Command invocations but not to send any command invocations. You can also restrict specific users’ ability to start a Systems Manager Session Manager session. 

Session Manager, a capability of Amazon Systems Manager, now offers customers greater control over how long sessions remain idle before being terminated automatically. This feature can help you meet compliance requirements, such as PCI Requirement 8.1.8, which requires that users reauthenticate if a session is idle for more than 15 minutes. 

Amazon Elasticsearch Service now supports Piped Processing Language (PPL), a new feature that enables users to explore, discover and find data stored in Amazon ES, using a set of commands delimited by pipes (|). PPL extends Elasticsearch to support a standard set of commands that is easy for system developers, DevOps engineers, support engineers, site reliability engineers (SREs), and IT managers who are proficient with Linux or Unix to learn. PPL enables these users to begin extracting insights from their log, monitoring and observability data on day one. 

Amazon S3 Bucket Keys reduce the request costs of Amazon S3 server-side encryption (SSE) with Amazon Key Management Service (KMS) by up to 99% by decreasing the request traffic from S3 to KMS. With a few clicks in Amazon Web Services China Management Console and no changes to your client applications, you can configure your buckets to use an S3 Bucket Key for KMS-based encryption on new objects. 

Amazon S3 now delivers strong read-after-write consistency automatically for all applications. Unlike other cloud providers, Amazon S3 delivers strong read-after-write consistency for any storage request, without changes to performance or availability, without sacrificing regional isolation for applications, and at no additional cost.  

Amazon S3 Replication now gives you the ability to replicate data from one source bucket to multiple destination buckets in the same, or different Amazon Web Services China China Regions. S3 Replication (multi-destination) is intended for customers that want to create and maintain multiple copies of their data in one or more Amazon Web Services China China Regions. Additionally, when replicating to multiple destinations, you can use Amazon CloudWatch metrics to track replication progress for each region pair. 

Amazon S3 Replication now gives you the flexibility of replicating object metadata changes for two-way replication between buckets. With this new feature, replica modification sync, you can easily replicate metadata changes like object access control lists (ACLs), object tags, or object locks on the replicated objects. This two-way replication is important if you want to build shared datasets across multiple China regions and keep all object and object metadata changes in sync. 

Amazon Batch now supports natively launching Amazon Linux 2 as your AMI in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, when creating an Amazon Batch compute environment through a single parameter. Amazon Linux 2 is the next generation of Amazon Linux, a Linux server operating system from Amazon Web Services . It provides a secure, stable, and high performance execution environment to develop and run cloud and enterprise applications. With Amazon Linux 2, you get an application environment that offers long term support with access to the latest innovations in the Linux ecosystem.  

Amazon Elasticsearch Service now supports open source Elasticsearch 7.9 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements. 

Amazon Elasticsearch Service now offers support for Remote Reindex enabling you to migrate data from a remote cluster into Amazon Elasticsearch Service. With this feature, you can simply copy data from one cluster to another, making it easier to migrate from legacy versions of Elasticsearch. Remote Reindex also supports migrating indexes from self-managed Elasticsearch onto Amazon Elasticsearch Service, providing a simple mechanism to onboard onto the service.

Amazon Systems Manager Automation now supports executing scripts and adding technical user documentation to standardize and share your operational playbooks to ensure consistency across all users, accounts, and Regions. With pre-built Automation playbooks, you don’t need to navigate between procedures in wikis and executing terminal commands to complete your operational tasks.  

Amazon CloudFormation is extending change sets to support applications modeled with nested stacks, enhancing the predictability of update operations. With this launch, you can now preview the changes to your application and infrastructure resources across the entire nested stack hierarchy and proceed with the update only when you confirm that all the changes are as intended.  

Amazon RDS Performance Insights supports an additional dimension to identify the source of high-frequency, long-running, and stuck SQL queries faster. The new Performance Insights dimension is available on Amazon RDS for MySQL, Amazon Aurora with MySQL compatibility, and Amazon RDS for MariaDB in the Amazon Web Services China (Beijing) region, operated by Sinnet and the Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon Elastic Container Service (Amazon ECS) Cluster Auto Scaling (CAS) now offers more responsive scaling when using EC2 Auto Scaling groups (ASGs) that span across Availability Zones (AZs) and instance types. 

Amazon Elasticsearch Service now offers anomaly detection for high cardinality datasets. This new feature enables you to sift through thousands of metrics from millions of events to accurately pinpoint individual entities with abnormal patterns. By leveraging machine learning, Amazon Elasticsearch Service now provides reliable and actionable insights to drastically reduce the time to isolate and remediate issues. High cardinality anomaly detection can be invaluable for a number of operational, security and business use cases like identifying hosts with high CPU and memory consumption, finding services with most error rates, isolating suspicious users or IP addresses accessing sensitive information, or detecting outliers in sales by region. 

With Amazon Kinesis Data Streams for Amazon DynamoDB, you can capture item-level changes in your DynamoDB tables as a Kinesis data stream. You can enable streaming to a Kinesis data stream on your table with a single click in the DynamoDB console, or via the Amazon API or Amazon CLI.  

Amazon RDS Performance Insights supports additional dimensions to identify the source of high-frequency, long-running, and stuck SQL queries faster. The new Performance Insights dimensions are available on Amazon RDS for PostgreSQL and Amazon Aurora with PostgreSQL compatibility in the Amazon Web Services China (Beijing) region, operated by Sinnet and the Amazon Web Services China (Ningxia) region, operated by NWCD. 

Amazon EC2 Auto Scaling now lets you attach multiple network interfaces when launching EC2 instances in an Auto Scaling group. Previously, customers had to write custom scripts and run lifecycle hooks to attach multiple network interfaces. You can now define multiple network interfaces in a launch template and your Auto Scaling group will automatically attach them to instances as they launch. 

Starting today, you can easily move your database migration tasks from one replication instance to another. To move, select the migration task and provide the target replication instance details. You can access this feature using Amazon DMS Console, Amazon CLI, or Amazon SDK. Once the migration task is moved to the target replication instance, you can resume your migration from where you left off.

We announce the availability of Automated ABR Configuration for Amazon Elemental MediaConvert in the Amazon Web Services China (Ningxia) Region, operated by NWCD. Automated ABR Configuration automatically customizes ABR encoding configurations to simplify transcoding setup, optimize video quality, and reduce ABR package sizes. Automated ABR Configuration is available in the MediaConvert on-demand multi-pass pricing tier at no additional charge. 

Amazon CloudFormation has expanded the availability of StackSets to the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. StackSets is a CloudFormation feature that allows you to centrally manage deployment of cloud resources to multiple Amazon Web Services China accounts and regions within Mainland China in a single operation. 

Amazon DocumentDB (with MongoDB compatibility) is now available in Amazon Web Services China (Ningxia) Region, Operated by NWCD.  

Amazon Managed Streaming for Apache Kafka (MSK) now offers consumer lag metrics for new Amazon MSK clusters by default, making it easier for you to track whether your applications are consuming the latest data available in your Apache Kafka cluster. Consumer lag metrics quantify the difference between the latest data written to your Kafka cluster, and the data read by your applications. Monitoring consumer lag allows application developers to identify, and alarm on slow or stuck consumers that are not keeping up with the latest data available in an Apache Kafka topic so they can take remedial actions such as scaling or rebooting those consumers. 

You can now use Amazon Simple Notification Service (Amazon SNS) FIFO topics, in combination with Amazon Simple Queue Service (Amazon SQS) FIFO queues, to build applications that require messages to be sent and processed in a strict sequence and without duplicates. SNS FIFO is intended for customer use cases where it is critical to maintain the consistency in processing messages across multiple independent services in a strictly ordered manner. Example use cases include bank transaction logging, stock tickers, flight trackers, news broadcasting, inventory management, vote tabulation, and price updates. 

You can now use Amazon Lambda with extensions for your favorite operational tools for monitoring, observability, security, and governance.

Amazon ElastiCache for Memcached has added support for the latest Memcached version 1.6.6. This version brings a number of enhancements, such as improved memory management reducing the memory usage from idle client connections and lowers the risk of memory fragmentation from large number of connections. Additionally, this version introduces the experimental meta protocol and meta commands.

Today, Amazon Elastic Container Service (ECS) launches integrated service discovery in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Amazon EC2 Auto Scaling now lets you configure your Auto Scaling group with multiple launch templates when you use a MixedInstancesPolicy and specify multiple instance types. After EC2 Auto Scaling released support for multiple instance types within a single Auto Scaling group, customers have been looking for ways to launch different instance types using different Amazon Machine Images (AMIs) so that instances with incompatible CPU architectures can exist in the same Auto Scaling group. With this enhancement you can now specify a launch template alongside the instance type in the overrides of your MixedInstancesPolicy, and that launch template will be used whenever launching instances of its corresponding instance type. 

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads. 

Amazon Identity and Access Management (IAM) now introduces new policy defaults for passwords of IAM users. This policy improves the default security for all Amazon Web Services customers by ensuring customers set stronger passwords for IAM users in their Amazon Web Services accounts. 

You can now use Amazon Resource Access Manager (RAM) in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Starting today Amazon Transit Gateway supports internet protocol (IP) multicast in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon RDS Performance Insights supports SQL-level metrics on Amazon RDS for PostgreSQL compatibility, a relational database built for the cloud. With RDS Performance Insights SQL-level metrics, you can identify high-frequency, long-running, and stuck SQL queries in seconds.  

You can now hibernate newly-launched EBS-backed Amazon EC2 T3 and T3a instances. Hibernation provides you with the convenience of pausing your workloads and resuming them later from the saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off.  

Starting today, you can proactively rebalance your workloads running on EC2 Spot Instances without having to wait until the Spot Instance receives a two minute Instance interruption notice. You now have access to a new feature called “EC2 Instance rebalance recommendation”, a signal from Amazon EC2 that notifies you when a Spot Instance is at elevated risk of interruption. The signal can arrive sooner than the two minute Spot Instance interruption notice, giving you the opportunity to proactively rebalance your workload to new or existing Spot Instances that are not at elevated risk of interruption. For example, you can start checkpointing your work early to save as much state as possible before the instance is interrupted. Or you can prevent scheduling new work onto the Spot Instances that received the rebalance recommendation to increase the chance of completing the work.

Amazon Systems Manager Patch Manager now includes common vulnerability identifiers (CVE ID) in the description of missing patches identified in your fleet, across multiple Linux platforms. CVE IDs help you identify security notices applicable to vulnerabilities within your fleet and recommended patches.  

Starting today, you can manage Spot Interruptions proactively using the new Capacity Rebalancing for Amazon EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. Capacity Rebalancing helps you maintain workload availability by proactively augmenting your fleet with a new Spot Instances before a running instance receives a two-minute interruption notice. Previously, EC2 Auto Scaling, EC2 Fleet, and Spot Fleet replaced Spot Instances only after they were interrupted. Now, with Capacity Rebalancing, these services attempt to proactively replace Spot Instances when they receive the new EC2 Instance rebalance recommendation, rather than waiting until they receive a two-minute in interruption notice.

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). With a single click, data scientists and developers can quickly spin up SageMaker Studio Notebooks to explore datasets and build models. Starting today, you can launch SageMaker Studio Notebooks with your own images.

Aurora PostgreSQL patches 1.7.6 / 2.5.6 / 3.2.6 are now available for customers using Amazon Aurora PostgreSQL. For detailed release notes visit our version documentation. You can apply the new patch version in the Amazon Web Services Management Console, via the Amazon CLI, or via the RDS API. For detailed instructions, please see our technical documentation. 

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). It provides a single, web-based visual interface where you can perform all ML development steps required to build, train, tune, debug, deploy, and monitor models. Starting today, you can encrypt your Amazon SageMaker Studio storage volumes with customer master keys (CMKs) managed by you in Amazon Key Management Service (KMS).  

Amazon Elasticsearch Service now natively supports using Security Assertion Markup Language (SAML) to offer single sign-on (SSO) for Kibana. SAML authentication for Kibana enables users to integrate directly with third-party identity providers (IDP) such as Okta, Ping Identity, OneLogin, Auth0, Active Directory Federation Services (ADFS) and Azure Active Directory. With this feature, your users can leverage their existing usernames and passwords to log in to Kibana, and roles from your IDP can be used for controlling privileges in Elasticsearch and Kibana, including what operations they can perform and what data they can search and visualize.

Amazon IoT Greengrass 1.11 is now available. With this release, IoT Greengrass introduces multiple new features including System Health Telemetry, enhancements to Stream Manager, and support for Python 3.8.

Network Load Balancer (NLB) now supports Internet Protocol version 6 (IPv6). With this launch, you can now configure NLB to operate in dual-stack mode, accepting both IPv4 and IPv6 client connections.

Amazon RDS for SQL Server now supports Database Mail. With Database Mail you can send email messages from your Amazon RDS for SQL Server database instance. After specifying the email recipient(s), you can add files or query results to the message you send. 

Starting today, you can privately connect your Amazon Virtual Private Cloud (VPC) to Amazon Database Migration Service (DMS) without requiring an internet gateway, NAT device, or Amazon Direct Connect connection.  

We are pleased to announce the release of NICE DCV version 2020.2 with the following new features:

• DCV Session Manager - It is an optional component that provides REST APIs to create and manage the lifecycle of a session across a fleet of DCV servers. It is available at no cost for Amazon Web Services customers running DCV on Amazon EC2 instances and for on-prem customers with DCV Plus and DCV Professional Plus licenses.*
• Improved support for high-frame rate use cases - DCV frame rate limiter is now set to 60 FPS, by default, for console sessions, on servers and Amazon EC2 instances with an NVIDIA GPU. Furthermore, by enabling the new QUIC-based transport protocol, customers running high frame rate, highly dynamic workloads, such as gaming, can experience more fluid and responsive streaming quality, especially under sub-optimal network conditions. 
• Support for SLES 15 and Ubuntu 20.4 - Customers can now use DCV server and client components on SUSE Linux Enterprise 15 and Ubuntu 20.4 hosts.
• Smart Card Redirection for Windows server - Applications running in a remote Windows session can now use smart cards connected to the customer's client machine. This feature was already available for Linux servers.

Amazon FSx for Lustre, a service that provides high-performance shared storage, now supports storage quotas. With storage quotas, you can monitor and control user-and group-level storage consumption on your file systems to ensure that no user or group is able to consume excessive amounts of capacity. Storage quotas are intended for storage administrators who manage multi-user file systems such as user shares for data scientists, computational engineers, and genomics researchers. 

Amazon Backup automates policy-based backup and restore capabilities for Amazon FSx, making it easier for customers to meet enterprise compliance and data protection requirements. You can now create, manage, and restore Amazon FSx backups directly from the Amazon Backup console for both Amazon FSx for Windows File Server and Amazon FSx for Lustre. Using Amazon Backup, you apply backup plans to Amazon Web Services resources, which now include Amazon FSx file systems. Amazon Backup plans make it easy to standardize backup policies across Amazon Web Services services and ensure protection of application data. 

Amazon AppSync is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon AppSync simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources. AppSync is a managed service that uses GraphQL to make it easy for applications to get exactly the data they need.  

You can now use the updated Amazon Elastic File System (Amazon EFS) console in the Amazon Web Services China (Ningxia) Region, operated by NWCD and the Amazon Web Services China (Beijing) Region, operated by Sinnet. The updated console makes it even easier for you to create and manage your file system resources. In addition to a refreshed look and feel, you can create file systems configured with the recommended settings in just a few clicks and you can customize your view to quickly find information you’re looking for. You can also monitor your file system’s behavior using Amazon CloudWatch metrics and alarms natively in the Amazon EFS console.

Amazon S3 Replication is now able to replicate delete markers in S3 buckets. For buckets that use S3 versioning, when a customer issues a delete request without a version ID specified, S3 adds a delete marker on the latest version of the object to protect data from accidental deletions. With S3 Replication, you can easily enable or disable the replication of these delete markers between source and destination buckets for each replication rule. This is critical for customers that have an active-active architecture within the same Amazon Web Services China China Region or across different Amazon Web Services China China Regions.  

Amazon Storage Gateway introduces access-based enumeration for File Gateway, enabling you to protect sensitive information by allowing you to prevent users from seeing SMB file shares, folders, and files that they would not be able to open based on their access permissions. 

Amazon Security Hub is now integrated with Prowler, which can send findings to Security Hub. Prowler is an open source security tool to perform Amazon Web Services checks related to security best practices, hardening, and continuous monitoring. To learn more, visit the Integration pages in the Security Hub console and click on the "Configuration" link for the partner to learn more about the integration and how to set it up.  

Amazon S3 Replication now provides detailed metrics and notifications to monitor the status of object replication between buckets. You can monitor replication progress by tracking bytes pending, operations pending, and replication latency between your source and destination buckets using the S3 management console or Amazon CloudWatch. You can also set up S3 Event Notifications to receive replication failure notifications to quickly diagnose and correct configuration issues. S3 Replication metrics and notifications helps you closely monitor replication progress.  

Starting today, you can use Amazon Elastic File System (Amazon EFS) Quick Create from the Amazon EC2 Launch Instance Wizard to create new file systems using the recommended settings without having to leave the Amazon EC2 console. You can then immediately add your newly created file system to the EC2 instance you are launching and it will be automatically mounted on your instance after it has launched.  

S3 Intelligent-Tiering now supports automatic data archiving to further optimize storage costs when data access patterns change and subsets of objects become rarely accessed over long periods of time. S3 Intelligent-Tiering delivers milliseconds latency and high throughput performance for frequently accessed data and now the lowest storage costs in the cloud when data is not accessed for long periods. S3 Intelligent-Tiering is the only cloud storage class that delivers automatic cost savings by moving objects between four access tiers when access patterns change. There are two low-latency access tiers optimized for frequent and infrequent access, and two new archive access tiers for asynchronous access that are optimized for rare access at low costs. 

Amazon Storage Gateway now supports local storage cache of up to 64 TB for Tape Gateway and Volume Gateway, enabling low-latency access to larger working data sets at your premises. Now, you can easily scale your gateway’s local cache to manage more of your application data closer to your on-premises applications and users.  

Amazon Storage Gateway introduces file-level upload notifications for File Gateway, enabling you to trigger automated workflows in the cloud and easily process on-premises file data stored with Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD as Amazon Simple Storage Service (Amazon S3) objects.  

Today, we are reducing the price of Amazon EBS Cold HDD (sc1) volumes by 40%, or an estimated ¥1062 in the Amazon Web Services China (Ningxia) region, operated by NWCD and ¥1200 in the Amazon Web Services China (Beijing) region, operated by Sinnet for each 16TB sc1 volume .

Amazon Storage Gateway now supports schedule-based network bandwidth throttling for Tape Gateway and Volume Gateway, enabling you to optimize network use between your data center and Amazon Web Services for data synchronization.  

Amazon Data Lifecycle Manager (DLM) now supports the creation and retention of EBS-backed Amazon Machine Images (AMIs) in the Amazon Web Services China (Ningxia) region, operated by NWCD and Amazon Web Services China (Beijing) region, operated by Sinnet.  

Amazon FSx for Windows File Server, a fully managed service that provides shared file storage built on Windows Server, today announced that you can now access file systems using any Domain Name System (DNS) name of your choosing. Each Amazon FSx file system has a default DNS name for accessing it. Starting today, you can now also associate alternate DNS names for accessing your file systems.  

Amazon IoT Analytics is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, extending the footprint to 8 Amazon Web Services Regions. 

Amazon Elastic Container Service (Amazon ECS) now supports native Internet Protocol version 6 (IPv6) for Amazon ECS tasks using task networking (amazonvpc networking mode) in addition to this already being supported in host networking mode. With this capability, tasks using amazonvpc networking mode can communicate with other endpoints in Amazon Virtual Private Cloud (Amazon VPC) and internet in dual-stack mode via either IPv4 or IPv6. This will allow customers to communicate with on-premises resources that support only IPv6 addresses and meet IPv6 compliance requirements.  

With Amazon DynamoDB global tables, you can give massively scaled, global applications local access to DynamoDB tables for fast read and write performance. All of your data in DynamoDB is encrypted by default using the Amazon Key Management Service (KMS). Starting today, you can now choose a customer managed key for your global tables, giving you full control over the key used for encryption of your DynamoDB data replicated using global tables. Customer managed keys also come with full Amazon CloudTrail monitoring so you can view every time the key was used or accessed. 

The storage space allocated to your Amazon Aurora database cluster will now dynamically decrease when you delete data from the cluster. The storage space already automatically increases up to a maximum size of 128 tebibytes (TiB), and will now automatically decrease when data is deleted. You only pay for the storage you use. Starting September 21, 2020, dynamic resizing for storage space is being enabled region by region for Aurora MySQL versions 1.23 and 2.09, and Aurora PostgreSQL versions 10.13 and 11.8, and is expected to be enabled across all Aurora regions by end of November 2020. 

Starting today, you can configure Amazon CloudWatch alarms to automatically create operational issues in Amazon Systems Manager OpsCenter. This enables operations engineers and IT professions to view, investigate, and resolve operational issues related to Amazon Web Services resources from a central place, reducing time to issue resolution. Amazon CloudWatch collects monitoring data for Amazon Web Services resources and applications, and generates alarms based on configured thresholds. 

Amazon Step Functions is now integrated with Amazon Athena, an interactive query service, allowing you to build workflows that queries data on your S3 data lake. Amazon Step Functions support built-in error handling, parameter passing, recommended security settings, and state management, reducing the amount of code you have to write and maintain.  

You can now store streaming data for up to one year in Amazon Kinesis Data Streams. Long term retention of streaming data enables you to use the same platform for both real-time and older data retained in Amazon Kinesis Data Streams. For example, you can train machine learning algorithms like financial trading, marketing personalization, and recommendation models without moving the data into a different data store or writing a new application. You can also satisfy regional data retention regulations using long term retention. You only pay for data stored and retrieved without provisioning additional storage or compute resources. 

Amazon Elasticsearch Service now provides the ability to define a custom endpoint for your domain and associate an SSL certificate from Amazon Certificate Manager (ACM). Defining a friendly name makes it easier for your users to access Kibana, and allows you to move to a new domain without updating your clients. 

Amazon API Gateway now supports disabling the default, auto-generated REST API endpoint. The default REST API endpoint in API Gateway looks like https://{restapi_id}.execute-api.{region}.amazonaws.com.cn. This feature is intended for customers who use custom domain names for REST APIs and want to ensure that all traffic to their API only goes through the custom domain name and not the default endpoint. This feature was already available for HTTP APIs. Now, it is available for REST APIs too. 

Amazon Elasticsearch Service now supports open source Elasticsearch 7.8 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements. 

You can now enable Fast Snapshot Restore (FSR) on Amazon Elastic Block Store (EBS) snapshots, ensuring that EBS volumes restored from FSR-enabled snapshots instantly receive full provisioned performance. You can enable FSR for an additional hourly charge to your regular snapshot cost for each Availability Zone (AZ) in which FSR is enabled. This new capability enables you to restore multiple volumes from a snapshot without the need to initialize volumes yourself. Improved and predictable performance helps with use cases such as virtual desktop infrastructure (VDI), backup & restore, test/dev volume copies, and booting from custom AMIs. 

Application Load Balancer (ALB) now supports gRPC protocol. With this release, you can use ALB to route and load balance your gRPC traffic between microservices or between gRPC enabled clients and services. This will allow customers to seamlessly introduce gRPC traffic management in their architectures without changing any of the underlying infrastructure on their clients or services.

Apache Flink Kinesis Consumer now supports Enhanced Fan Out (EFO) and the HTTP/2 data retrieval API for Amazon Kinesis Data Streams. EFO allows Amazon Kinesis Data Streams consumers to scale by offering each consumer a dedicated read throughput up to 2MB/second. The HTTP/2 data retrieval API reduces latency of data delivery from producers to consumers to 70 milliseconds or better. In combination, these two features allow you to build low latency Apache Flink applications that utilize dedicated throughput from Amazon Kinesis Data Streams.

Session Manager, a capability of Amazon Systems Manager, now enables you to customize the shell environment by specifying the commands to run at the start of a session. Using this feature, you can tailor the shell experience to the needs of your users or your organization, by adding customizations such as changing the default shell interpreter, displaying the hostname, or configuring command shortcuts. 

Amazon CloudFront in China announces support for signed URLs and signed cookies to enable customers to restrict access to content delivered through their CloudFront distributions. Customers can use Amazon Identity and Access Management based permissions to manage public key access.  

Amazon ElastiCache for Redis Global Datastore, which provides fully managed, fast, reliable and secure cross-region replication is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Kinesis Data Analytics for Apache Flink now supports streaming applications built using Apache Beam Java SDK version 2.23. Apache Beam is an open-source, unified model for defining streaming and batch data processing applications that can be executed across multiple execution engines. This release allows you to build Apache Beam streaming applications in Java and run them using Apache Flink 1.8 on Amazon Kinesis Data Analytics, Apache Spark running on-premises, and other execution engines supported by Apache. 

Port forwarding sessions created using Session Manager, a capability of Amazon Systems Manager, now support multiple simultaneous connections over the session. This improvement reduces the rendering latency and improves load times for applications that load data using multiple concurrent connections, when delivering such applications over a port forwarding session.  

Amazon Systems Manager Patch Manager now makes it easier to create patch compliance reports by providing a catalog of all patches released for Amazon Linux and Amazon Linux 2. You can now list all released patches for Amazon Linux and Amazon Linux 2 even if they are not applicable to your fleet based on your patch rules. Further, you can view additional details such as severity, release date, and vulnerability identifier (CVE-ID) for patches in the catalog.  

Amazon RDS for SQL Server now supports SQL Server Reporting Services (SSRS) on SQL Server 2016 (13.00.5820.21 and later) in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This gives you the ability to host the report server web portal on the same Amazon RDS DB instance as your SQL Server database. There’s no additional cost to install SSRS directly on your Amazon RDS DB instance. 

Amazon CloudFormation now supports increased limits on five service quotas - template size, resources, parameters, mappings, and outputs. The maximum size of a template that can be passed in an S3 Object is now 1MB (previously 450KB). The new per template limits for the maximum number of resources is 500 (previously 200), parameters is 200 (previously 60), mappings is 200 (previously 100), and outputs is 200 (previously 60).

Starting today Amazon Relational Database Service (RDS) for Oracle supports the creation of Oracle Data Guard physical standby DB instances in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. This feature fully manages the configuration of Oracle Data Guard, and asynchronously replicates data over secured network connections between a primary DB instance and its physical standby mounted DB replicas. Amazon RDS for Oracle Data Guard mounted DB replicas require Oracle Enterprise Edition (EE) but not Oracle Active Data Guard.  

Starting today, Amazon Web Services Cost Categories is available in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet. With Amazon Web Services Cost Categories, you can now categorize your cost and usage information precisely to your organizational structure and cost allocation needs such as teams, cost centers, geography, applications, and more. Using Cost Categories, you can create these unique categories and then write rules on which costs belong to each group. After defining your unique category, you can view, track, and optimize costs using Cost Categories in the Amazon Cost Management suite of products such as Amazon Cost Explorer, Amazon Budgets, and Amazon Cost and Usage Report (‘CUR’).  

You can now hibernate newly-launched EBS-backed Amazon EC2 I3, M5ad, and R5ad instances. Hibernation provides you with the convenience of pausing your workloads and resuming them later from the saved state. Hibernation is just like closing and opening your laptop lid — your application will start right from where it left off. By using hibernation, you can maintain a fleet of pre-warmed instances that can get to a productive state faster without modifying your existing applications.  

Amazon Batch now allows users to configure retry strategies based on defined exit codes. Customers can now determine whether their Amazon Batch jobs retry based on specified events such as infrastructure failure or application failure. This allows customers to tightly control the actions taken on job failure - resulting in lower costs and faster throughput by retrying only when necessary. 

You can now filter automation executions by resource groups in Systems Manager Automation. This allows you to group and view the automation executions specific to your applications or environments.

Amazon Security Hub is now available in the Amazon Web Services China (Beijing) Region operated by Sinnet and in the Amazon Web Services China (Ningxia) Region operated by NWCD. 

Amazon FSx, a fully managed service that makes it easy to launch and run feature-rich and highly-performant file systems, is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With Amazon FSx, customers can leverage the rich feature sets and fast performance of widely-used open source and commercially-licensed file systems, while avoiding time-consuming administrative tasks like hardware provisioning, software configuration, patching, and backups.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.6.0 for new and existing clusters. Apache Kafka 2.6.0 includes several bug fixes and new features that improve performance. Some key features include native APIs to manage client quotas (KIP-546) and explicit rebalance triggering to enable advanced consumer usecases (KIP-568). Support for Apache Kafka version 2.6.0 is offered in all regions where Amazon MSK is available, including in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 2.6.0. 

You can now process multiple Amazon Kinesis data streams with a single Kinesis Client Library (KCL) based consumer application. Previously, each KCL based application processes a single Kinesis data stream. With this new capability, you can update the list of streams at runtime for multi-stream processing in a scalable KCL application without redeploying the application. This reduces operational overhead of maintaining multiple KCL applications. 

Amazon Lambda now supports Amazon PrivateLink. With this feature you can manage and invoke Lambda functions from your Virtual Private Cloud (VPC) without exposing your traffic to the public internet. PrivateLink provides private connectivity between your VPCs and Amazon Web Services services, like Lambda, on the private Amazon Web Services network.  

You can now initiate on-demand scanning for patch compliance in accordance with your patch rules, remediate when patches are out of compliance within seconds using Amazon Systems Managers Patch Manager, and track the progress in real time. You can patch your instances using pre-defined concurrency and error threshold configurations offered by Patch Manager. This new feature enables you to update your patch compliance on-demand without waiting for the next maintenance window by initiating patching with 2 clicks. 

You now can manage access to Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, by using temporary security credentials for the Python, Go, and Node.js Cassandra drivers. 

Amazon Database Migration Service (Amazon DMS) helps you migrate databases to Amazon Web Services quickly and securely. With this launch, Amazon DMS now supports Amazon S3 folder partitions based on transaction commit dates when using Amazon S3 as a target. Using date-based folder partitioning, you can write data from a single source table to a time-hierarchy folder structure in Amazon S3. By partitioning the S3 folder, you can better manage your S3 objects, limit the size of each S3 folder, and optimize data lake queries or other subsequent operations. This launch is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

You can now use Amazon Lake Formation in the Amazon Web Services China (Beijing) region, operated by Sinnet. 

Starting today, customers can manage their Purchase Orders ("POs") for Amazon Web Services services within their Amazon Billing Console, creating and defining invoices association rules, managing their PO status, and setting up notifications for PO expiration and balance depletion. 

You can create Amazon Aurora database cluster with up to 128TB of storage. The new storage limit is available for both the MySQL- and PostgreSQL-compatible editions of Amazon Aurora. Previously, Aurora database instances supported 64TB of storage.

Starting today, Amazon RDS for PostgreSQL will concurrently upgrade all of your in-region read replicas along with the upgrade of your primary database instance during major version upgrades of PostgreSQL. 

Amazon Cloud Map is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Aurora Parallel Query is now supported in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Parallel Query provides faster analytical queries over your transactional data, speeding up your queries by up to 2 orders of magnitude, while maintaining high throughput for your core transactional workload. Read more about Parallel Query on the Amazon Blog. 

Amazon Identity and Access Management (IAM) Access Analyzer now supports archive rules that allow you to retroactively mark existing findings as intended. Archive rules automatically archive new findings for public and cross-account access that meet the criteria you define. Now, you can apply the rules retroactively to mark existing findings as intended. For example, you can create a rule to archive all findings for a specific S3 bucket that you regularly grant read access to. This lets you focus on remediating findings that help you reduce broad access.  

Amazon Transcribe is an automatic speech recognition (ASR) service that you can use to add speech-to-text capabilities to your applications. Starting today, customers can use Amazon PrivateLink to access the Amazon Transcribe batch API from their Amazon Virtual Private Cloud (Amazon VPC) without using public IPs or requiring the traffic to traverse the Internet. Amazon PrivateLink provides private connectivity between VPCs and Amazon Web Services services, without ever leaving the Amazon network.  

You now have an option to modify instance types and weights for a running EC2 Fleet or Spot Fleet (referred to further as fleet). You can replace an entire launch template configuration specifying new instance types, weights, and other parameters without deleting and re-creating a fleet.

You can now run multi-container applications on Amazon Elastic Beanstalk using the Docker platform built on top of Amazon Linux 2 Operating System. The Elastic Beanstalk Docker on Amazon Linux 2 platform now supports docker-compose.yml format to define and run multiple containers. For more information about Docker on Amazon Linux 2 platform, see the Elastic Beanstalk developer guide.  

Starting today, Amazon Systems Manager Explorer provides a summary of Support cases across your Amazon Web Services China account, to help you get better visibility into the operational health of your Amazon Web Services environment in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Systems Manager Explorer is an operations dashboard that provides a view of your operations data across your Amazon Web Services China accounts and Regions, helping you see where you may need to investigate and remediate operational issues. Amazon Web Services Support provides tools and technology, people, and programs designed to proactively fix issues and help you optimize performance, lower costs, and innovate faster.  

Amazon Kinesis Data Analytics now allows you to Force Stop a running application and reset its status to Ready, giving you more control over your applications. In addition, you can check if your application is scaling up or down through the new ‘Autoscaling' application status. 

Amazon Aurora with PostgreSQL compatibility now supports T3 and R5 class database instances. Using T3 database instances with Amazon Aurora PostgreSQL is a cost-effective option for smaller workloads such as test, dev, and QA, while still giving you the option to use larger R5 class instances for production deployments. 

Amazon IoT Events is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon IoT Events is a fully managed service that makes it easy to detect and respond to changes indicated by IoT sensors and applications. For example, you can use IoT Events to detect malfunctioning machinery, a stuck conveyor belt, or a slowdown in production output. When an event is detected, IoT Events automatically triggers actions or alerts so that you can resolve issues quickly, reduce maintenance costs, and increase operational efficiency.  

You can now control access to Amazon Batch resources based on tag values. 

AWS Elemental MediaConvert now offers support for InSync FrameFormer frame rate conversion. With this feature, you can use InSync FrameFormer technology to perform broadcast-quality, motion-compensated frame rate conversions between international broadcast frame rates or between broadcast and film frame rates. This allows you to create high-quality video output files even when complex frame rate conversions are required. 

Today, we are excited to announce the general availability (GA) of an Amazon GameLift FleetIQ update that enables game developers to add low-cost, low-latency GameLift servers to their existing on-premises or cloud-based server capacities. GameLift is an Amazon Web Services managed service for deploying, operating, and scaling dedicated servers for multiplayer games, and it is trusted by some of the most successful game companies in the world, including Ubisoft, Gameloft, and N3TWORK. With this update, developers can launch low-cost GameLift servers into their Amazon Web Services accounts and register the servers with their existing game server management systems to incrementally migrate live games, burst in-game events, or deploy containerized games onto v services. To learn more about the GameLift FleetIQ update, visit our blog. 

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). With a single click, data scientists and developers can quickly spin up SageMaker Studio Notebooks for exploring datasets and building models. Starting today, you can choose to launch SageMaker Studio in your Amazon Virtual Private Cloud (VPC) for fine-grained control on network access and internet connectivity of SageMaker Studio Notebooks. You can choose to completely disable public internet access for notebooks to add an additional layer of security.  

Amazon ElastiCache for Redis now supports Redis 6. This release brings several new and important features to Amazon ElastiCache for Redis in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, you can use easily restore a new Amazon RDS for MySQL database instance from a backup of your existing MySQL 8.0 database, whether it’s running on Amazon EC2 or outside of Amazon Web Services. This is done by using Percona XtraBackup to create a backup of your existing MySQL database, uploading the resulting files to an Amazon S3 bucket, and then creating a new Amazon RDS DB instance through the RDS Console or Amazon Command Line Interface (CLI). 

Amazon Elastic Kubernetes Service (EKS) now supports a configurable Kubernetes service IP address range. This enables customers with clusters running in a peered or direct connected network environment to ensure that their pods can communicate with external applications on networks outside the cluster.  

Amazon CloudFormation Drift Detection now supports CloudFormation Registry resource types, so you can detect unmanaged configuration changes on additional Amazon Web Services resources, as well as third-party or private ones.

Amazon Step Functions announces enhancements to Amazon States Language, making it easier for you to build workflows. Customers now have more flexibility within their state machine definition and allow for more dynamic behaviour within their workflow application with enhanced Choice and Task states.

Amazon S3 Object Ownership is a new S3 feature that enables bucket owners to automatically assume ownership of objects that are uploaded to their buckets by other Amazon Web Services China China Accounts. This helps you to standardize ownership of new objects in your bucket, and to share and manage access to these objects at scale via resource-based policies such as a bucket policy or an access point policy. Whether your S3 bucket receives data from other Amazon Web Services China China Accounts, or stores output from Amazon Web Services China services like Amazon CloudTrail, S3 Object Ownership simplifies the work of creating and maintaining shared data sets on Amazon S3.  

Amazon Batch now supports new parameters when specifying Amazon Batch job definitions, including custom logging configurations, swap space, and shared memory. Amazon Batch enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on Amazon Web Services. Amazon Batch dynamically provisions the optimal quantity and type of compute resources (e.g., GPU, CPU, or memory optimized instances) based on the volume and specific resource requirements of the batch jobs submitted. With Amazon Batch, there is no need to install and manage batch computing software or server clusters that you use to run your jobs, allowing you to focus on analyzing results and solving problems.  

Amazon CloudWatch Logs Insights, a fully integrated, interactive, and pay-as-you-go log analytics service for CloudWatch is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. CloudWatch Logs Insights enables you to explore, analyze, and visualize your logs instantly, allowing you to troubleshoot operational problems with ease. With Logs Insights, you only pay for the queries you run. Logs Insights scales with your log volume and query complexity giving you answers in seconds. In addition, you can publish log-based metrics, create alarms, and correlate logs and metrics together in CloudWatch Dashboards for complete operational visibility.

In 2019 we launched Amazon EC2’s vCPU-based limits for On-Demand Instances to simplify the limit management experience for EC2 customers. Now, we have also made the same improvements for Amazon EC2 Spot Instances. We have migrated the account limit for Spot Instances from being instance based to a vCPU based limit experience. Starting today, you will be able to manage Spot limits from the Amazon EC2 console.

Amazon RDS for SQL Server now supports restoring SQL Server native backups onto DB instances that have read replicas configured. Previously, the read replica would need to be removed before restoring the native backup file onto your Amazon RDS for SQL Server DB instance. SQL Server backup files stored in your Amazon S3 bucket can now be restored directly on DB instances with read replicas. 

Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capabilities to your applications. Today, we are excited to announce native support for media files in AMR, AMR-WB, Ogg and WebM format by Amazon Transcribe. Previously, you were required to convert these file formats into supported formats like WAV, FLAC, MP3 or MP4 which added extra costs and scaling challenges for large workloads. You can now directly submit media files in AMR, AMR-WB, Ogg, and WebM format to Transcribe APIs. Amazon Transcribe supports OPUS encoded audio for files in Ogg and WebM format.  

You can now launch R5 and M5 instance types when using Amazon RDS for MySQL.  

Starting today, Amazon Web Services Resource Groups is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) customers can now authenticate their Apache Kafka clients using usernames and passwords, stored and secured by Amazon Secrets Manager. Username and password authentication uses SASL/SCRAM (Simple Authentication and Security Layer/ Salted Challenge Response Authentication Mechanism) which is a popular authentication mechanism natively supported by Apache Kafka. Credentials stored in Amazon Secrets Manager reduces the overhead of maintaining a traditional Apache Kafka authentication system, including: auditing, updating, and rotating client credentials. Customers can also centrally and securely manage their username and password credentials for multiple clusters directly from the Amazon Web Services Management console.  

Patch Manager, a capability of Amazon Systems Manager, now allows you to deploy patches automatically to instances running any current versions of Ubuntu. Until now, Patch Manager supported current versions of Ubuntu up to 18.04. With this release, Patch Manager now supports Ubuntu’s latest version - Ubuntu 20.04. This support provides more patching options for your Linux environments.  

Amazon Managed Streaming for Apache Kafka (Amazon MSK) can now automatically expand your Apache Kafka cluster storage using Application Auto Scaling policies. Auto-scaling policies enable you to set and control both the target disk utilization and a maximum scaling limit. Your Amazon MSK cluster storage will automatically expand by the required amount when the utilization threshold that you set is exceeded. This allows your cluster to automatically expand storage when needed without constant self-monitoring. 

NICE DCV is a high performance remote visualization protocol that enables users to securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs. For example, NICE DCV enables customers to take full advantage of the NVIDIA T4 Tensor Core GPUs present on EC2 G4 instances.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.5.1 for new and existing clusters. Apache Kafka 2.5.1 includes several bug fixes and new features, including Apache ZooKeeper in-transit encryption support. Support for Apache Kafka version 2.5.1 is offered in all regions where Amazon MSK is available, including the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Amazon Budgets allows you to monitor your cloud costs and usage, as well as utilization and coverage for your purchased Reserved Instances. You can receive notifications when costs and usage exceed (or are forecasted to exceed) your budgeted thresholds, and/or when your utilization or coverage falls under your target thresholds.

Amazon Systems Manager Explorer now supports new service customizations to help you easily discover and personalize operational data sources based on their business needs in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Systems Manager Explorer is an operations dashboard that provides a view of your operations data across your Amazon Web Services China accounts and Regio¬ns, helping you see where you may need to investigate and remediate operational issues. 

Amazon Elastic File System (Amazon EFS) now supports Amazon Systems Manager to simplify management of Amazon EFS clients. You can now use Amazon Systems Manager to automate the tasks required to install the latest version of the Amazon EFS client (amazon-efs-utils) package on your Amazon EC2 instances maintaining compliance and security by ensuring that the Amazon EFS client is kept up to date. Additionally, you can orchestrate file system mounts to multiple instances using a single command and improve visibility by monitoring the file system mount status using the CloudWatch Logs dashboard. You do not need to login to your Amazon EC2 instances to manage your Amazon EFS clients and there is no additional charge for using these features. 

With v2.0.0 of the Apache Flink Kinesis Data Firehose Producer, Amazon Kinesis Data Analytics now enables Apache Flink applications to send data directly to Amazon Kinesis Data Firehose. The new version adds support for the Amazon Identity and Access Management (IAM) Assume Role credentials provider, includes bug fixes, and updates the Amazon SDK and other dependencies.  

Amazon Systems Manager Agent (SSM Agent) version 3.0 logs agent start and update events, and you can make these events trigger actions via alarms in Amazon CloudWatch. Additionally, in SSM Agent version 3.0, you can elect to have SSM Agent self-upgrade when the previously installed version of the agent is deprecated.

Amazon Redshift can now be accessed using the built-in Data API, making it easy to build web-services based applications and integrating with services, including Amazon Lambda and Amazon AppSync. Redshift Data API simplifies data access, ingest, and egress from languages supported with Amazon SDK such as Python, Go, Java, Node.js, PHP, Ruby, and C++ so you can focus on building applications versus managing infrastructure. 

Amazon EMR now supports Managed Scaling, a new feature that automatically resizes your EMR cluster for best performance at the lowest possible cost, without the need to specify scaling policies. You can reduce up to 60% cost compared with fixed-size clusters by setting the minimum and maximum compute resource limits for a cluster. 

Amazon Fargate, the serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS), increases the default service quotas (also commonly known as limits) for On-Demand and Spot resource counts. You can now launch up to 500 concurrent ECS tasks and EKS pods running on Fargate On-Demand and 500 concurrent ECS tasks running on Fargate Spot, up from 100 and 250 respectively. These are default quotas for an account in a given Amazon Web Services Region, but you can always raise these values by requesting a service quota increase.  

Newer patches 2.5.4 / 2.6.1 / 3.2.4 / 3.3.1 are now available for customers using Amazon Aurora PostgreSQL. For detailed release notes visit our version documentation. You can apply the new patch version in the Amazon Web Services Management Console, via the Amazon CLI, or via the RDS API. For detailed instructions, please see our technical documentation.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 12.4, 11.9, 10.14, 9.6.19, and 9.5.23. This release contains bug fixes and improvements done by the PostgreSQL community.  

Amazon Elasticsearch Service now offers the latest T3 (general-purpose) instances which offer superior performance and larger storage capacity compared to the previous generations. The T3 instances also support our recently launched features like encryption at rest and in-flight, role based access control, HTTP compression, custom dictionary, SQL, alerting, anomaly detection, and cross-cluster search.  

Amazon Backup now supports application-consistent backups of Microsoft workloads running on EC2, via Microsoft’s Volume Shadow Copy Services (VSS). Customers can create, manage, and restore consistent backups of their Microsoft Windows Server instances and Microsoft applications (including SQL Server, Active Directory and Exchange Server) directly from the Amazon Backup console. 

The new console for Amazon SQS is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The SQS console now simplifies development and production workflows by creating new user experience. 

Amazon Elasticsearch Service now offers a detailed audit log of all Elasticsearch requests. Audit Logs allows customers to record a trail of all user actions, helping meet compliance regulations, improving the overall security posture and providing evidence for security investigations. 

Amazon API Gateway now supports mutual TLS (mTLS) authentication. Customers can now enable mTLS on custom domain names for regional REST and HTTP APIs at no additional cost. Mutual TLS enhances the security of your API and helps protect your data from attacks such as client spoofing or man-in-the middle attacks.  

You can now use Amazon Identity and Access Management (Amazon IAM) identity-based policies to enforce encryption of data at rest for your Amazon Elastic File System (Amazon EFS) file system resources. Using an IAM condition key, you can prevent users from creating EFS file systems that aren’t encrypted. Central security administrators can also define service control policies (SCPs) inside Amazon Organizations to enforce EFS encryption for all Amazon Web Services accounts in their organization. 

Amazon Backup now provides customers a more seamless way to manage their backups, by automatically copying tags from their nested EBS volumes to their EC2 backups. For customers using tags to manage their Amazon Web Services resources, Amazon Backup will enable them to more effectively search for source resources or conduct billing for their backups. See Amazon Web Services Tagging Strategies for tagging best practices. 

Amazon Organizations added new capabilities to its existing support for tagging Amazon Web Services China region accounts in your organization. Now you can attach tags, or user-defined attributes, to Organizational Units (OUs) and the organization’s root thus enabling you to easily identify, classify, or categorize resources in your organization. You can also tag these resources as you create them, giving you a convenient way to ensure that all your Amazon Organizations resources are always tagged.  

Amazon Step Functions now supports tracing end-to-end workflows with Amazon X-Ray, giving you full visibility across state machine executions and making it easier to analyze and debug your distributed applications. 

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads. 

Newer patches 3.2.3/2.5.3/1.7.3 are now available for customers using Amazon Aurora PostgreSQL. These patches include critically important stability, reliability and security fixes which will improve the operation of your Aurora PostgreSQL instances and workloads. We strongly encourage you to update to the latest patch at your earliest convenience. We advise customers take manual snapshots before upgrading. For detailed release notes and for instructions on how to upgrade visit our technical documentation. 

Starting today, you can use enhanced premigration assessments to identify potential database migration problems before initiating your migration. Once the migration task is set up, a premigration assessment scans both the source and target database schemas and the migration task settings to identify a list of potential issues ranging from a data type mismatch to possible performance issues. You can select one or more premigration assessments to run on your database migration tasks and review the results on the console or in an Amazon S3 bucket. 

Amazon S3 now provides bucket owner condition, allowing you to validate the Amazon Web Services China China Account ID of the owner of an S3 bucket. Bucket owner condition helps you to easily verify that the S3 buckets that you interact with are owned by expected Amazon Web Services China China Accounts. 

When you create an Amazon Elastic Beanstalk application environment, you can now associate an existing Application Load Balancer within the same Amazon Virtual Private Cloud with your new environment. This capability enables you to share your existing Application Load Balancer and allow it to serve traffic for multiple applications running on Elastic Beanstalk.  

CloudTrail Insights now helps you correlate user identities, user agents, and error codes associated with unusual levels of API activity. Now, you can identify the IAM users and roles with the highest levels of API activity during both periods of anomalous activity, and normal activity. This capability helps you analyze and act on anomalies without manually searching through a large number of CloudTrail events.

We’re excited to announce that customers will be able to create up to 1,000 Active Jobs per Amazon Web Services account per connected region. The prior limit was 100 active continuous jobs and 100 active snapshot jobs per Amazon Web Services account. This new limit will apply to the total number of Jobs created - including both, continuous and snapshot jobs. The new limit applies to both: the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD.  

In addition to the previously supported OIDC/OAuth2 authorization option, customers can now secure Amazon API Gateway HTTP APIs using two new authorization options: Lambda authorizers and IAM authorizers. These new options enable customers to make flexible authorization decisions by providing an Amazon Lambda function, or leveraging Amazon IAM policies to control access to their APIs without writing any code. 

Starting today, Amazon Aurora PostgreSQL supports the RDKit extension. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now offers an Amazon MSK version 2.4.1.1, that addresses a critical bug KAFKA-9752 in Apache Kafka version 2.4.1 that can lead consumer groups to perpetually rebalance. Amazon MSK recommends that all customers who use or plan to use Apache Kafka 2.4.1, instead use or upgrade their clusters to Amazon MSK version 2.4.1.1. After September 23, 2020, Apache Kafka 2.4.1 will no longer be offered for new Amazon MSK clusters.

Amazon Elastic Kubernetes Service (EKS) customers can now leverage EC2 security groups to secure applications with different network security requirements on shared cluster compute resources. 

Amazon Step Functions now supports payload sizes up to 256KB. Previously, the limit was 32,768 characters. Now, you can pass larger payloads in your standard and express workflows, allowing Step Functions to seamlessly coordinate multiple services like Amazon Lambda, Amazon SNS, and Amazon SQS that already support larger payloads.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 11.8, 10.13 and 9.6.18. This release contains bug fixes and improvements done by the PostgreSQL community, and improved TLS support from PostgreSQL 12. Please see the list of supported extensions in the Amazon RDS User Guide for specific versions.

Amazon Redshift now allows you to encrypt your data in Redshift using keys you manage through Amazon Key Management Service (KMS).

Amazon Elastic Container Service (ECS) now publishes Elastic Load Balancer(ELB) lifecycle events for services attached to multiple load balancer target groups. ECS will emit service events when tasks are successfully registered or de-registered in target groups or in case of errors in the registration process. This enables you to track the progress of attaching your service to multiple target group and easily troubleshoot errors through events in the ECS service event stream as part of the update and describe service API responses as well as in the ECS Management Console. This functionality has already been available for services attached to a single target group but is now available for services attached to multiple target groups as well. 

You can now govern the virtual private cloud (VPC) settings for your Lambda functions using IAM condition keys. Using these condition keys, you can enforce that users only deploy functions that are connected to a VPC. VPC-enabled functions send all traffic through your VPC and abide by your VPC’s network controls. You can use these network controls to define where your functions can connect. You can also restrict access to network locations, including the public internet.  

Amazon Storage Gateway increases performance for reading data from Amazon Simple Storage Service for File Gateway, providing you 4x faster access to data managed through the gateway. 

EMR Notebooks is a service that provides a fully managed, Jupyter-based notebook to data scientists and engineers who write ad-hoc jobs and experiment with them. Now you can orchestrate EMR Notebooks in a non-interactive manner to run ETL workloads especially in production, in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Before this feature, executing notebooks required the Jupyter User Interface access through the Amazon Web Services Management Console.  

Amazon Data Migration Service (DMS) now supports migrating graph data from relational sources to Amazon Neptune. The Amazon Database Migration Service (Amazon DMS) enables you to migrate data from one data source to another. Using relational databases as source and Neptune as destination allows customers to copy their connected data into Neptune for graph queries.  

Amazon RDS for Oracle now supports the July 2020 Patch Set Updates (PSU) for Oracle Database 11.2 and 12.1, and July 2020 Release Update (RU) for Oracle Database 12.2, 18c and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Amazon EC2 can now hibernate EBS-backed Amazon EC2 M5a and R5a instances. You can now hibernate your newly launched instances running on M5a and R5a instance types. Hibernation provides you the convenience of pausing your workloads and resuming them from the saved state later. Hibernation is just like closing and opening your laptop lid, your application will start right where it left off.  

AWS Elemental MediaConvert now allows you to create WebM DASH outputs using VP8 or VP9 video. You can use segmented content in a WebM container to support dynamic adaptive streaming over HTTP (DASH). The ability to create WebM DASH outputs using the VP8 and VP9 codecs provides more options for preparing content for VOD delivery. 

Amazon IoT Core now enables customers to use Custom Authorizers to validate IoT device credentials passed through MQTT Connect messages. In addition, customers using HTTP or WebSockets to connect to Amazon IoT Core can now customize which headers or query parameters they use to pass device credentials.  

Now, Amazon Identity and Access Management (IAM) allows IAM users to have longer access to their Amazon Web Services resources when they Switch Roles in the Amazon Web Services Management Console. 

Provisioned Concurrency for Amazon Lambda is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Provisioned Concurrency is a feature that provides customers greater control over performance of their serverless applications at any scale. Functions using Provisioned Concurrency execute with consistent start-up latency making them ideal for building interactive mobile or web backends, latency sensitive microservices, and synchronously invoked APIs. Read more about Provisioned Concurrency in the Amazon Lambda documentation. 

FreeRTOS over-the-air update (OTA) now supports integrated code signing in the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD. Code signing provides cryptographic signing of an image file to ensure only genuine code can be installed and run on FreeRTOS devices. You can now login to the Amazon Web Services console, schedule an OTA update job, upload a new firmware image, and sign it automatically for immediate deployment to your entire fleet of IoT devices.  

Application Load Balancer (ALB) and Classic Load Balancer (CLB) now support HTTP Desync Mitigation Mode, a new feature that protects your application from issues due to HTTP Desync. Modern day web applications are typically built with a chain of proxies that ensure fast and reliable communication between clients and servers. While these proxies follow a standard mechanism to parse RFC 7230 compliant HTTP/1.1 requests, they may have differences in interpretation while parsing non-compliant requests. These differences in interpretation can cause Desync where different proxies in the chain may disagree on request boundaries and therefore may not process the same request. This could leave behind arbitrary messages that may be prepended to the next request in the queue and smuggled to the backend. Ultimately, request smuggling can make applications vulnerable to request queue or cache poisoning, which could lead to credential hijacking or execution of unauthorized commands.

Amazon AppConfig is now available in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

We’ve introduced the following 5 fields to the instance metadata service: region, placement group name, partition number, host ID, and availability zone-ID. You can use these fields after launch or while your instance is running to understand your instance location. This is useful for populating the region for your Amazon Web Services environment. Additionally, these fields help you identify your instance placement information within an availability zone. If you are running a spread workload such as a distributed database, you can use this information to spread your instances across an availability zone. 

Distributor, a capability of Amazon Systems Manager, now allows you to install and update software agents on instances running Oracle Linux 7.5, 7.6, 7.7, and 7.8. This support simplifies agent management for environments that include Oracle Linux instances. 

With this update, you can now view Amazon CloudWatch graphs to monitor the health and performance of your Amazon Web Services resources from OpsCenter, a feature of Systems Manager, without navigating across multiple consoles. OpsCenter enables you to view, investigate, and resolve operational items, also known as OpsItems, for Amazon Web Services resources. 

Amazon ElastiCache for Redis now supports encryption in-transit, encryption at-rest, and Redis authentication tokens to protect your data with additional security controls in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Storage Gateway now supports Write-Once-Read-Many (WORM) and Tape Retention Lock on Tape Gateway virtual tapes, providing you data protection features to meet regulatory compliance. 

Customers can now create Amazon API Gateway HTTP APIs that route requests to Amazon AppConfig, Amazon EventBridge, Amazon Kinesis Data Streams, Amazon SQS, and Amazon Step Functions. With these new integrations, customers can easily create APIs and webhooks for their business logic hosted in these Amazon Web Services services. 

Amazon DynamoDB Accelerator (DAX) now supports next-generation, memory-optimized Amazon EC2 R5 nodes for high-performance applications. R5 nodes are based on the Amazon Web Services Nitro System and feature enhanced networking based on the Elastic Network Adapter. Memory-optimized R5 nodes offer memory size flexibility from 16 to 768 GiB. 

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and managed Apache Cassandra–compatible database service, is now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Elastic Kubernetes Service (EKS) now supports using launch templates to customize EC2 instance settings for nodes managed by EKS. When combined, managed node groups with launch templates make it simple to add and update nodes in your cluster, while adhering to any level of specialized security or compliance requirements. 

Amazon Elasticsearch Service now facilitates connecting Amazon ES with two of the most powerful business intelligence and data visualization applications, Tableau and Microsoft Excel. To achieve this, we introduce Amazon ES- Tableau integration and the Amazon ES- Excel integration in Open Distro for Elasticsearch SQL Engine on Amazon Elasticsearch Service.  

Amazon RDS for Oracle now supports 20.1 version of Oracle Application Express (APEX) for 11.2, 12.1, 12.2, 18c and 19c versions of Oracle Database in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser. 

Amazon Kinesis Data Streams announces two new API features that simplify applications that consume data from Kinesis Data streams. The first feature is an optional filtering field in the ListShards API that enables you to set filtering criteria for the shards that you want to list from a data stream. For example, you can now use a timestamp filter to list shards with data at a certain time point. The second feature is a new field called ChildShards in the GetRecords and the SubscribeToShards APIs that enables you to discover child shards of a closed shard (without having to use the ListShards API to list all closed and open shards). Applications consuming data from Kinesis Data Streams can use this new field to efficiently transition reading from a closed shard to reading from its child shard. This is a common use case encountered by consuming applications when a shard is closed due to stream scaling operations.  

Amazon Key Management Service now allows you to import key material in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, enabling you to maintain local control over your key material while still taking advantage of the other KMS features such as service integration. Customers tell us that local control over the generation and storage of keys can sometimes help them meet their security and compliance requirements. 

Amazon ElastiCache for Redis now allows you to scale your Redis Clusters up to 500 nodes. Redis Cluster mode enabled configuration allows you to partition your data across multiple shards and offers better scalability, performance and availability. With this announcement, you can double your cluster size from 250 nodes to 500 nodes, thereby supporting larger memory storage capacity of up to 340 TB of memory and improved throughput per cluster. You can choose to configure a 500 node cluster that ranges between 83 shards (one master and five replicas per shard) and 500 shards (single master and no replicas). 

Customers can now get deeper insight into how Amazon API Gateway processes requests thanks to new access logging variables. These new access logging variables allow customers to see a step-by-step breakdown of an API call’s phases, latencies, and status codes. 

You can now develop your Amazon Lambda functions using custom runtimes on Amazon Linux 2, the latest generation of Amazon Linux. You can read more about the custom runtimes in the Amazon Lambda documentation. 

You can now develop Amazon Lambda functions using Java 8 (Corretto). Amazon Corretto 8 is a no-cost, production-ready distribution of OpenJDK 8 that comes with long-term support. Lambda functions written in Java 8 (Corretto) run on Amazon Linux 2, the latest generation of Amazon Linux. You can read more about the Java programming model in the Amazon Lambda documentation. 

Amazon Backint Agent is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD in addition to all commercial regions.

You can now develop your Amazon Lambda functions using Go on Amazon Linux 2, the latest generation of Amazon Linux. You can read more about the Go programming model in the Amazon Lambda documentation.

On Aug 12th, 2020, Amazon IoT Device Defender launched Audit Finding Suppression. The new capability allows you to choose which audit findings you want to see and turn off non-compliant findings for specific resources - this can be either because you are working towards fixing related issues or because the resources are known to be non-compliant, such as test or broken devices. In addition, you can configure audit finding suppressions for a defined period of time or indefinitely.  

Amazon ElastiCache now allows you to assign permissions to specific resources in Amazon IAM policies. You can now assign an IAM principal permissions to specific ElastiCache resource or resources. Prior to this release, Amazon ElastiCache did not support resource level permissions; customers could only assign permissions to all resources for a given action. With this release you can be fine-grained in your IAM policies and allow access to specific ElastiCache resources. For example, you can allow administrators in your organization to create production ElastiCache clusters and restrict other principals from modifying those specific clusters. This provides you with the flexibility to meet your enterprise security and compliance standards.

Amazon S3 Access Points now support the COPY API, allowing customers to copy data to and from access points within an Amazon Web Services China Regions. S3 Access Points simplifies managing data access at scale for applications using shared data sets on S3. Access Points are unique aliases used to enforce distinct and precise permissions and network controls for any request made through the access point. 

Amazon SageMaker Operators for Kubernetes make it easier for developers and data scientists using Kubernetes to train, tune, and deploy machine learning (ML) models in Amazon SageMaker. 

Customers can use wildcard custom domain names to easily create multiple URLs that route to one Amazon API Gateway HTTP API. This update extends API Gateway’s current support for wildcard custom domain names to include HTTP APIs. 

Amazon Lambda customers can now enable functions to access Amazon Elastic File System (Amazon EFS). Customers can easily share data across function invocations, read large reference data files, and write function output to a persistent and shared data store. 

Starting today, you can upgrade your Amazon Aurora with PostgreSQL compatibility database cluster from major version 10 to 11, with just a few clicks in the Amazon Web Services Management Console. 

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL minor version 11.7. This release contains bug fixes and improvements done by the PostgreSQL community. We have also updated some of the extensions supported in Aurora PostgreSQL: in Aurora PostgreSQL 11.7, we have updated orafce to version 3.8, PGAudit to version 1.3.1, and pgTAP to version 1.1.  

You can now access Persistent Application User Interfaces including Spark History Server, YARN Timeline Server, and Tez UI from the Amazon EMR console in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Starting today you can enable the SPATIAL option for your Amazon RDS instances for Oracle running Standard Edition 2 (SE2) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. 

A new version of the Amazon CodeDeploy agent is now available which includes improved memory efficiency for Amazon Linux 2 (AL2), Ubuntu and RHEL7, adds support for Ubuntu 19.10 and Ubuntu 20.04, and fixes stability issues on Windows Server 2019 related to Disk Cleanup. This agent version makes it easier for customers to use Amazon CodeDeploy to update their applications hosted on their preferred operating systems on Amazon EC2 and On-Premises instances.  

We are making a change to how we present Elastic Load Balancing charges in your Amazon Web Services bill and Cost and Usage Reports to make it easier for you to understand your monthly Elastic Load Balancing spend. These changes will be effective in all Amazon Web Services regions beginning August 2020.

Amazon Systems Manager Automation now supports higher concurrency limits when running automation executions, helping IT operators automate operational tasks at a larger scale. You can now run up to 100 concurrent automations per account – including child automations (automations that are started by another automation execution). If you attempt to run more automations, the additional automations are added to a queue of up to 1,000 executions. In addition, you can also run 25 rate control automations (automations with concurrency value and error threshold), with an additional queue of 1,000.  

You can now retrieve the Amazon CloudWatch Usage Metrics for Amazon Fargate, the serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS). These usage metrics provide better visibility into the number of Fargate tasks and/or pods being utilized so you can start to proactively manage your quotas. With this integration, you can monitor both Fargate OnDemand and Spot usage. 

Amazon EC2 On-Demand Capacity Reservations now allows you to bring your own licenses (BYOL) of Windows operating systems. With this release, you can now create an EC2 Capacity Reservation and launch EC2 instances, running your existing Windows licenses, into the Capacity Reservation.  

Amazon Identity and Access Management (IAM) Access Analyzer is a new feature that makes it simple for security teams and administrators to check that their policies provide only the intended access to resources. Resource policies allow customers to granularly control who is able to access a specific resource and how they are able to use it across the entire cloud environment. With one click in the IAM console, customers can enable IAM Access Analyzer across their account to continuously analyze permissions granted using policies associated with their Amazon S3 buckets, Amazon KMS keys, Amazon SQS queues, Amazon IAM roles, and Amazon Lambda functions. 

You can now use Amazon PrivateLink to privately access the Amazon RDS Application Programming Interface (Amazon RDS API) for Amazon RDS from your Amazon Virtual Private Cloud (Amazon VPC) without using public IPs, and without requiring the traffic to traverse across the Internet.  

Amazon Aurora Serverless is now available with MySQL 5.7 compatibility in the Amazon Web Services China (Ningxia) Region, operated by NWCD. MySQL 5.7-compatible Aurora offers enhancements such as JSON support, spatial indexes, and generated columns, and is up to 5X faster than MySQL 5.7.  

Amazon Elasticsearch Service now supports cosine similarity distance metric with k-Nearest Neighbor (k-NN) to power your similarity search engine. Cosine similarity is used to measure similarities between two vectors, irrespective of their sizes and is most commonly used in information retrieval, image recognition, text similarity, bioinformatics and recommendation systems.  

We are happy to announce that we are lowering the price of Amazon RDS for SQL Server Enterprise Edition database instances in the Multi-AZ configuration, for both On-Demand and Reserved purchase types on the latest generation hardware. 

Amazon Elasticsearch Service now supports gzip compression for HTTP payloads. With HTTP compression, you can reduce the size of your documents to up to 80%, lowering bandwidth utilization and latency, leading to improved transfer speeds.  

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads. 

Amazon Elasticsearch Service now supports the open source Learning to Rank plugin that lets you use machine learning technologies to improve the ranking of the top results returned from a baseline relevance query. With Learning to Rank (LTR) support, you can tune the search relevancy and re-rank your Elasticsearch query search results in information retrieval, personalization, sentiment analysis and recommendation systems.  

Starting today, Amazon Systems Manager Inventory enables you to send file data from Amazon EC2 instances and on-premises servers to Amazon Config. Amazon Config will discover, record and capture any configuration changes to these files and simplify compliance auditing and security analysis of your computing environments.  

You can now add tags to your Amazon Virtual Private Cloud (VPC) resources while creating the resource. These resources are VPCs, Subnets, Network Interfaces, Security Groups, Network ACLs, Route Tables, Internet Gateways, Egress-only Internet Gateways, DHCP Option Sets and VPC Peering Connections.  

Starting today, Amazon Systems Manager Explorer provides a summary of Amazon Web Services Compute Optimizer recommendations to help you improve cost and performance for your workloads in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Systems Manager Explorer is an operations dashboard that provides a view of your operations data such as patch compliance and instance details helping you see where you may need to investigate and remediate operational issues. Compute Optimizer delivers Amazon Elastic Compute Cloud (Amazon EC2) instance recommendations so that you can quickly identify the most impactful optimization opportunities. You can now see all your operations data and Compute Optimizer recommendations in one aggregated view from Systems Manager Explorer.  

Amazon RDS for MySQL has been updated to support release 8.0.20 of the MySQL database. This release includes a number of bug fixes as well as functionality improvements. 

The Amazon Elastic File System (EFS) CSI driver is now generally available. The EFS CSI driver makes it simple to configure elastic file storage for both EKS and self-managed Kubernetes clusters running on Amazon Web Services using standard Kubernetes interfaces. Applications running in Kubernetes can use EFS file systems to share data between pods in a scale-out group, or with other applications running within or outside of Kubernetes. EFS can also help Kubernetes applications be highly available because all data written to EFS is written to multiple Amazon Web Services China regions Availability zones. If a Kubernetes pod is terminated and relaunched, the CSI driver will reconnect the EFS file system, even if the pod is relaunched in a different Amazon Web Services China regions Availability Zone.

Amazon Elasticsearch Service now supports open source Elasticsearch 7.7 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements. 

Amazon Elastic File System (Amazon EFS) now supports up to 500 MB/s of per-client throughput, a 100% increase from the previous limit of 250 MB/s. Total throughput for an EFS file system remains at 10+ GB/s across all NFS clients.

Amazon Key Management Service now allows you to define VPC Endpoint policies, enabling you to increase the granularity of your security controls by specifying which principals can access your endpoint, which API calls they can make, and which resources they can access. 

The Amazon Serverless Application Model Command Line Interface (SAM CLI) is now generally available. SAM CLI is a deployment toolkit that also allows you to locally build, test, and debug serverless applications. SAM CLI v.1.0.0 is a stable version recommended for building production serverless applications.  

Starting today, you can now monitor Capacity Reservations usage metrics via Amazon CloudWatch metrics. With these new metrics, you can efficiently monitor your Capacity Reservations and identify unused capacity by setting CloudWatch alarms to notify you when usage thresholds are met. You no longer need to manually monitor your Capacity Reservation usage.  

Starting today, all new file systems created using the Amazon Elastic File System (Amazon EFS) console are automatically backed up with Amazon Backup using the recommended settings (daily backups with a retention of 35 days). Automatic backups for Amazon EFS further simplifies backup management of your file systems by easily enabling you to meet your business and regulatory backup compliance requirements. It is now as easy as checking a check box in the Amazon EFS console, or making a single API call, to enable backups for your existing file systems. You can also disable automatic backups for your file systems at any time. 

Amazon Systems Manager now supports scheduling of maintenance tasks, such as applying patches, offset from a specific day in a specific week of the month. This enables IT operators to specify the number of days to wait before executing a maintenance window. 

Starting today, the Amazon Cost Management suite of product is available in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet. The service endpoints for Amazon Cost Management are located in Amazon Web Services China (Ningxia) region, operated by NWCD. Customers can now view, manage, plan, and optimize their costs using set of services and features such as Cost Explorer, Amazon Budgets, and Cost and Usage Report (CUR). By using these cloud cost management resources, you can visualize your historic spend, forecast future expenses, and optimize your savings.

Patch Manager, a capability of Amazon Systems Manager, now allows you to deploy patches automatically to instances running Red Hat Enterprise Linux 7.8, 8.0, 8.1, and 8.2; CentOS 7.8, 8.0, and 8.1; and Oracle Linux 7.5, 7.7 and 7.8. This support provides more patching options for your mixed Linux environments. 

Customers using container services including Amazon Elastic Container Service (ECS), Amazon Elastic Kubernetes Services (EKS), or self-managed Kubernetes can now send their container logs to Amazon Elasticsearch Service using the Fluent Bit log router. Fluent Bit allows customers to route container logs to various Amazon Web Services services and partner monitoring solutions including CloudWatch, Amazon Kinesis, Datadog, Splunk, and now Amazon Elasticsearch Service. 

Amazon CloudWatch Synthetics is launched in Amazon Web Services China (Beijing) Region, operated by Sinnet and in Amazon Web Services China (Ningxia) Region, operated by NWCD. CloudWatch Synthetics is feature that supports monitoring your REST APIs, URLs, and website content every minute, 24x7, and alerts you when your application endpoints don’t behave as expected. CloudWatch Synthetics enables you to continually verify your customer experience even when there is no customer traffic on your applications. This lets you discover issues before your customers do and react quickly to fix them.  

Amazon Secrets Manager now enables you to search secrets based on attributes such as secret name, description, tag keys, and tag values. With this launch, you can easily identify, arrange, and manage your secrets in to logical groups that are used by specific applications, departments, or employees. You can use this functionality through the Secrets Manager console or the List Secrets API to quickly find a subset of all your secrets managed in Amazon Secrets Manager.  

Amazon Elastic Kubernetes Service (EKS) now supports Kubernetes version 1.17 for all clusters. 

The Amazon Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across Amazon Web Services China Region accounts securely and easily. The Secrets Manager console also uses Zelkova, an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across Amazon Web Services China Region accounts . This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access. 

Amazon Storage Gateway simplifies cache management for File Gateway by enabling you to create multiple file shares for a single Amazon S3 bucket and synchronize the gateway’s local cache with an Amazon S3 bucket based on frequency of directory access. These enhancements simplify the management of your gateway by providing flexibility when configuring new file shares and streamlining the cache refresh process.  

Amazon Storage Gateway now supports a local cache of up to 64 TB for File Gateway, improving performance for your on-premises applications by providing you with low-latency access to larger working data sets. Now, you can easily scale your gateway’s local cache to manage more of your application data closer to your on-premises applications and users.  

Amazon RDS for MySQL has been updated to support release 8.0.19 of the MySQL database. This release includes a number of bug fixes as well as functionality improvements. 

In the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD, Amazon Kinesis Data Firehose can now transform data to Apache Parquet and Apache ORC formats and deliver data to an encrypted Amazon S3 bucket. Apache Parquet and Apache ORC are columnar data formats that allow you to store and query data more efficiently. You can configure your Amazon Kinesis Data Firehose delivery stream to automatically convert data into Parquet or ORC format before delivering to your Amazon S3 bucket. This enables you to query Amazon S3 data much faster and at lower cost using Amazon Athena and Amazon Redshift Spectrum. There is no coding required. Usage based charges apply for data format conversion in Amazon Kinesis Data Firehose. For more information, see the pricing page.  

Today, we are announcing that customers can create snapshots of their block storage data, including on-premises data using Amazon Elastic Block Store (EBS) direct APIs. With a set of API calls, customers can use snapshots to store data in Amazon Web Services China regions, regardless of where it resides. This enables customers to achieve business continuity in Amazon Web Services at lower cost.

Amazon Elastic Container Service (ECS) Management Console now supports specifying a custom capacity provider strategy when you run tasks manually using the Run Task functionality. This capability has been available through the Amazon CLI, SDK, and API, but is now available through the Management Console as well. For use with manually running tasks, a custom capacity provider strategy consists of one or more capacity providers with an optional base and weight specified for each provider, giving you control over how your tasks are distributed across one or more capacity providers. 

Amazon IoT Core is announcing a new feature called named shadow, which allows you to create multiple shadows for a single IoT device. A device's shadow is a JSON document that is used to store and retrieve state information for a device. 

You can now automate the installation and update schedule for the Amazon CodeDeploy agent through integration with Amazon Systems Manager Distributor. With this integration, you can use the Amazon Web Services Management Console or the Amazon CLI to install the agent on demand, or create an update schedule for target instances on Amazon Elastic Compute Cloud (Amazon EC2) and on-premises servers.

EC2 Image Builder, a service that makes it easier and faster to build and maintain secure images, now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Image Builder simplifies the creation, patching, testing, distribution, and sharing of Linux or Windows Server images. 

Amazon EC2 Spot Instances let you take advantage of unused Amazon EC2 capacity. Spot Instances are available at up to a 90% discount compared to On-Demand prices. You can use Spot Instances for various stateless, fault-tolerant, or flexible applications such as big data, containerized workloads, CI/CD, web servers, high-performance computing (HPC), and other test & development workloads. Starting today, you can assign Amazon Web Services resource tags to Spot Instance requests on creation, in addition to the tags for each individual, launched Spot Instances. Use tags in your Spot Instance requests to more easily identify their purpose. For example, you can use tags to identify all Spot Instance requests used by a particular department, project, or application. 

EC2Launch v2 is a redesigned, unified launch agent for EC2 Windows instances, which simplifies the configuration of Windows instances to meet the needs of your workloads. EC2Launch applies Amazon Web Services-recommended configurations to your Windows instances, such as local administrator username changes, support for increased user data input length, and agent auto-updates. EC2Launch v2 provides you with a single EC2 launch experience regardless of EC2 platform and supported Windows OS. 

Amazon RDS for MariaDB has been updated to support release 10.3.23 and release 10.4.13 of the MariaDB database. These releases include a number of bug fixes as well as functionality improvements. 

Amazon Web Services Marketplace China now supports AMI-based delivery of third-party software using Amazon CloudFormation to streamline software deployment on Amazon Web Services. Customers can find and subscribe to AMI applications that run across a cluster of Amazon Elastic Compute Cloud (Amazon EC2) instances and/or require additional Amazon Web Services resources such as Auto Scaling groups, Elastic Load Balancers (ELB), or Amazon Relational Database Services (RDS), and easily deploy the third-party software using vendor-defined, pre-vetted Amazon CloudFormation templates with just a few clicks. 

Amazon Elastic File System (Amazon EFS) file systems using the default bursting throughput mode now have a minimum throughput of 1 MiB/s. All EFS bursting mode file systems (regardless of size) can drive 100 MiB/s of throughput, and file systems with more than 1TiB of Standard class storage can drive 100 MiB/s per TB when burst credits are available. This change increases the minimum throughput from 50KiB/s per GiB of Standard class storage to a fixed minimum of 1 MiB/s for file systems with less than 20 GiB of Standard class storage, when burst credits are exhausted. 

While building a WebSocket API with Amazon API Gateway, you can now send back Sec-WebSocket-Protocol field as part of the response from $connect route. This means clients can now request specific subprotocols while connecting to your WebSocket API.  

Amazon Aurora with PostgreSQL compatibility now supports T3.large instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet, in addition to the T3.medium and R5 class instances already available. Using T3.large instances with Amazon Aurora PostgreSQL is a cost-effective option for smaller workloads such as test, dev, and QA, while still giving you the option to use larger class instances for production deployments. 

Amazon Elastic Container Registry (ECR) now supports manifest lists to increase choice of different CPU architectures and operating systems you can use in container applications. Using manifest lists, you can store image variants for different hardware architectures such as x86 and ARM, and operating systems such as Linux and Windows as a single container image in ECR. Clients like docker can then automatically pull the right image variant for each architecture and operating system when starting containers. This helps simplify your build and deploy workflow as you use a single image and tag instead of embedding per-architecture image references throughout your CI/CD scripts. 

Amazon CodeCommit now supports emoji reactions to comments on pull requests and commits. With this launch, a developer can quickly react to a comment by clicking on the emoji icon in the comment to see a list of supported emojis. They can then choose an emoji from the list that represents their feedback about the comment. CodeCommit records the selected emoji as a reaction to that comment. The list of supported emojis includes popular reactions such as thumbs-up and thumbs-down, smiley face, heart, and ship-it.

You can now create Amazon Managed Streaming for Apache Kafka (Amazon MSK) clusters using kafka.m5.8xlarge and kafka.m5.16xlarge brokers. These new broker types give customers additional options to optimize the cost and performance of high volume streaming workloads on Amazon MSK. All Amazon MSK features apply to clusters with kafka.m5.8xlarge and kafka.m5.16xlarge brokers, including two and three availability zone deployments, encryption in transit and at rest, and each cluster is paired with a highly available, fully managed Apache ZooKeeper cluster at no additional cost.

Amazon RDS for Oracle now supports the management of diagnostic data with the Oracle Automatic Diagnostic Repository Command Interpreter (ADRCI) utility in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. If you have a support request, you can use the Amazon RDS package rdsadmin.rdsadmin_adrci_util to create the packages for specific incidents or problems to deliver them to Oracle Support. 

You can now manage users of the Amazon API Gateway Serverless Developer Portal directly from the portal’s admin interface. In addition, API consumers can quickly find APIs with improved search and more easily build APIs by exporting OpenAPI definitions for published APIs. 

Amazon RDS for MySQL has been updated to support release 5.6.48 and release 5.7.30 of the MySQL database. These releases include a number of bug fixes as well as functionality improvements. 

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 11.7, 10.12, 9.6.17, and 9.5.21. This release contains bug fixes and improvements done by the PostgreSQL community. This release updates the pg logical and pg hint plan extensions.  

You can now run .NET Core applications on Amazon Elastic Beanstalk using the new .NET Core Elastic Beanstalk platform built on top of Amazon Linux 2 Operating System. The .NET Core on Amazon Linux 2 platform comes with Nginx as a reverse proxy server and supports .NET Core 3.1 and .NET Core 2.1 frameworks. For more information about .NET Core on Amazon Linux 2 platform, see the Elastic Beanstalk developer guide. 

Amazon Organizations helps you centrally govern your environment as you grow and scale your workloads on Amazon Web Services. Whether you are a growing startup or large enterprise, you can use Amazon Organizations to programmatically create Amazon Web Services accounts, organize them in a hierarchy that reflects your current business needs, categorize them using tags, and simplify billing by setting up a single payment method for all of your accounts. You can access Amazon Web Services Organizations through the Amazon Web Services console, and via Amazon APIs and CLI. Amazon Web Services Organizations is available to all Amazon Web Services customers at no additional charge. The service endpoints for Amazon Organizations are located in the Amazon Web Services China (Ningxia) region, operated by NWCD.

AWS Elemental MediaConvert now offers the ability to encode WebM outputs using VP8 or VP9 video with Vorbis or Opus audio. This addition gives you greater choice when selecting a format for distributing video for browser-based and mobile device playback. 

Amazon SQS makes it easier to manage lists of queues by allowing callers to iterate through the results of ListQueues and ListDeadLetterSourceQueues APIs using a multi-page format. You can check the status of your request and receive the results in multiple pages by setting the MaxResults parameter to a value between 1 and 1000. You can receive up to a maximum of 1000 results in a single page. If there are more than 1000 results to display, you will receive a Next Token. Use the Next Token to receive the next set of results until the Next Token is null. This enables you to get all the results from your list request in multiple pages. We recommend you to use paginated lists instead of getting all the results in a single request. Furthermore, you can continue filtering your results of list requests using QueueNamePrefix. 

Amazon Web Services has updated the console for Amazon Simple Notification Service (Amazon SNS). The update provides user interface improvements and support for five new languages – German, Italian, Portuguese, Spanish, and Traditional Chinese – increasing the number of languages supported by the Amazon SNS console to ten.  

Amazon Systems Manager, the operational hub for Amazon Web Services and hybrid cloud deployments, announces the launch of OpsCenter to customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD. OpsCenter helps you view, investigate, and resolve operational issues related to your environment from a central location. OpsCenter presents operational issues in a standardized view, along with contextually relevant data to help you with the diagnosis and remediation of them. You can associate Amazon Systems Manager Automation documents for easier remediation and also specify deduplication logic to filter repetitive operational issues.

Today, Amazon Web Services announces Systems Manager Explorer availability to customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Amazon Backup adds Amazon Aurora database cluster snapshots as its latest protected resource. Starting today, you can use Amazon Backups to manage Amazon Aurora database cluster snapshots. Amazon Backups can centrally configure backup policies, monitor backup activity, copy a snapshot within an Amazon Web Services region, and copy a snapshot across China regions, making it easier for Aurora customers to automate snapshot backup and restore processes.  

Amazon EC2 Auto Scaling now lets you automatically update the instances in your Auto Scaling Groups (ASG) to release new application versions or make infrastructure changes. Traditionally, customers had to write custom scripts and build systems to update ASG configurations with new AMIs. With the new Instance Refresh feature, customers can now trigger configuration updates such as moving to new AMIs and changing instance types. You can roll out these updates to the ASG by replacing instances all at once or gradually.

Amazon Cognito Identity Pools now supports Sign in with Apple, providing another social identity provider for customers who use Cognito for receiving temporary Amazon Web Services credentials. This feature is available now in Amazon Cognito Identity Pools with no additional cost.  

Amazon CloudFormation is now integrated with Amazon CodeDeploy to allow ECS customers with application or network load balancers to invoke blue-green style deployments when performing application updates. This feature allows customers to configure the incremental traffic migration strategy for their deployments within CloudFormation templates as well as identify CloudWatch alarms to monitor the deployment. 

Amazon Direct Connect makes it easy to establish a dedicated network connection from your premises to Amazon Web Services. Using Amazon Direct Connect, you can establish private connectivity between Amazon Web Services and your data center, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

Amazon Elastic Container Service (ECS) capacity providers now support delete functionality. You can delete capacity providers once they are no longer in use using either the Amazon Web Services Management Console or the new DeleteCapacityProvider API. 

Amazon GameLift, a managed service for session-based multiplayer games that leverages the power and reliability of Amazon Web Services, enables game developers to deploy, operate, and scale dedicated low-cost servers. Since 2016, some of the largest game companies in the world, such as Ubisoft, Behaviour Interactive, and Bethesda, trust GameLift to maximize cost savings while scaling their multiplayer experiences.

That’s why today we’re excited to announce the release of an update that greatly enhances the flexibility in how you can adopt and use GameLift. Available now in preview, the updated GameLift FleetIQ feature allows you to onboard server workloads to the cloud at your own pace, partially or completely, using your own tools independent of adopting any other managed GameLift features. After hearing from you about how to make GameLift an even better alternative to on-premises deployments, we delivered this update so you can experience:

• Continued cost savings with minimal latency. You can still experience up to 70% cost-savings compared to existing on-premises deployments.

• Increased flexibility. Reuse your existing game backend management services and tooling without GameLift’s session management layer, giving you more control in moving game sessions to the cloud.

• The reliability of Amazon Web Services. Since instances run in your account, you can use containers or integrate instances with other Amazon Web Services services such as Amazon Web Services Shield and Amazon Elastic Container Service.

Amazon Elastic Beanstalk now supports the IMDSv2, an on-instance component to securely access instance metadata. The IMDSv2 comes with many enhancements such as using session-oriented requests. To learn about configuring the instance metadata service on your Elastic Beanstalk environments, see the Elastic Beanstalk developer guide.  

Amazon Elemental MediaConvert has added support for several new encoding features. First, Accelerated Transcoding increases the processing speed of file-based video encoding jobs by up to 25 times. With Accelerated Transcoding, you can meet the most demanding turnaround times for processing high quality video with confidence. 

Amazon Kinesis Data Analytics is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Resource Import now supports CloudFormation Registry types, so you can import resource types in the Registry, including non-Amazon Web Services and private ones. Resource Import allows you to bring existing infrastructure and application resources into CloudFormation, regardless of how they were created or managed previously. The CloudFormation Registry makes it easy to model and automate the management of Amazon Web Services and third-party resources with the benefits of infrastructure-as-code. With this release, you can import resource types registered with the Registry into CloudFormation and leverage automation. This includes resource types published by third-parties as well as private types. This release also adds support for 45 new Registry types in addition to the 50 originally supported types, including Amazon Config Conformance Packs, Amazon CloudWatch Alarms, and Amazon ECS Clusters. Going forward, all new public Registry types will be automatically supported by Resource Import. This allows you to import public Registry resource types into CloudFormation as soon as they are available.

You can now monitor your Amazon ElastiCache for Redis fleet with 18 additional engine and node-level CloudWatch metrics. These metrics are based on the Redis INFO command and are published either as-is or are calculated further to provide you with more actionable insights to manage your Amazon ElastiCache fleet. 

Amazon RDS for Oracle now supports the April 2020 Patch Set Updates (PSU) for Oracle Database 11.2 and 12.1, and April 2020 Release Update (RU) for Oracle Database 12.2, 18c and 19c in the  Amazon Web Services China (Ningxia) Region, operated by NWCD, and the  Amazon Web Services China (Beijing) Region, operated by Sinnet. 

You can now use all State Manager features through Amazon CloudFormation, with support for all Amazon CLI and SDK operations, such as rate control. State Manager, a feature of Amazon Systems Manager, is used to define, enforce, and report on desired state configuration compliance for your infrastructure. This integration provides additional safety, control, and flexibility when deploying desired state configurations with Amazon CloudFormation. 

You can now access Amazon PrivateLink based services privately from within your VPC using Private DNS names like ‘myinternalservice.mycompany.com’. With this announcement, you can access your internal / 3rd party Amazon PrivateLink based services, without making changes in your application to use the Amazon Web Services specified public DNS Name or managing private DNS Names in your own Route 53 Private Hosted Zones.  

Amazon Elastic Container Service (ECS) cluster auto scaling is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. 

Patch Manager, a capability of Amazon Systems Manager, now allows you to deploy patches automatically to instances running Debian 8 (Jessie), Debian 9 (Stretch), and Oracle Linux 7.6. 

Amazon Storage Gateway now consolidates monitoring a gateway’s CloudWatch Alarms directly from the Storage Gateway console. Access to CloudWatch Alarms in the console, along with the existing CloudWatch Metrics, provides you continuous visibility into gateway health and performance all in one place. Now you can quickly take action on alarms triggered when defined metrics fall outside thresholds you configure. 

Amazon Elasticsearch Service now offers anomaly detection, which uses machine learning to detect anomalies on streaming data and identifies issues as they evolve in real time so that you can mitigate issues immediately. This new feature is built on Random Cut Forests (RCF), a proven algorithm for real-time streaming, and is domain agnostic, making it a great choice for a wide range of log analytics applications. 

Amazon Elasticsearch Service now supports SQL Workbench and SQL CLI to run queries on Elasticsearch indexes with the conventional and familiar database language. SQL Workbench, a popular open source visual tool used to manage database environments, is now integrated in Kibana to view the results of SQL queries executed on Elasticsearch indexes. SQL CLI provides the flexibility to run ad-hoc or predefined queries from applications written in different programming languages.  

You can now run your applications on the Amazon Elastic Beanstalk using the new generation of Tomcat Elastic Beanstalk platforms built on top of Amazon Linux 2 Operating System. 

Amazon Backup now supports service opt-in in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Service opt-in enables Amazon Web Services customers to opt into (or out of) Amazon Backup support for supported Amazon Web Services services at the account level. Service opt-in provides an easy-to-configure solution to ensure that Amazon Backup service coverage reflects exactly what customers need. It will also make it easy for customers to opt-in when Amazon Backup introduces support for a new service, without having to change tagging strategies.  

Amazon Auto Scaling with scaling plans and predictive scaling (for Amazon EC2) is now available in several new commercial Amazon Web Services Regions including Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Using Amazon Auto Scaling, customers can configure predictive scaling to automatically scale their Amazon EC2 Auto Scaling groups in advance of impending traffic changes. Customers can also use Amazon Auto Scaling to manage scaling configuration for multiple resources with a single scaling plan for services such as Amazon EC2, Amazon ECS, Amazon DynamoDB, and Amazon Aurora. 

Amazon Elasticsearch Service (Amazon ES) now offers support for cross-cluster search, enabling you to perform searches, aggregations, and visualizations across multiple Amazon ES domains with a single query or from a single Kibana interface. With this feature, you can separate heterogeneous workloads into multiple domains, which provides better resource isolation, and the ability to tune each domain for their specific workloads which can improve availability and reduce costs. 

Amazon SAM now supports Amazon Step Functions, making it easier to integrate workflow orchestration into your serverless applications. 

You can now perform S3 Object Lock operations using Amazon S3 Batch Operations to apply or change legal holds or retention periods across many objects with a single API request or a few clicks in the S3 Management Console. S3 Batch Operations lets you perform repetitive or bulk actions like copying or updating tag sets across billions of objects. S3 Batch Operations handles all the manual work, including managing retries and displaying progress.  

Amazon RDS for SQL Server expands support for Windows authentication using the Amazon Managed Microsoft Active Directory service in  Amazon Web Services China (Beijing) region, operated by Sinnet and  Amazon Web Services China (Ningxia) region, operated by NWCD. 

The new Amazon CloudTrail console makes it easier for you to create and manage trails. The console experience is refreshed across all CloudTrail features and now includes documentation and pricing links alongside the features so you can easily learn more while staying in the console.  

You can now run your applications on the Amazon Elastic Beanstalk using the new generation of Docker, Corretto and Python Elastic Beanstalk platforms built on top of Operating System, Amazon Linux 2. 

You can now access Amazon S3 objects using the IPv6 protocol via the S3 dual-stack endpoint in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. S3’s dual-stack endpoint supports both IPv4 and IPv6 protocols and allows your applications to continue to access data without any code changes while leveraging the benefits of IPv6 protocols.

Amazon Step Functions is now integrated with Amazon CodeBuild, making it faster to build continuous integration workflows for your applications. Using Amazon CodeBuild integration, you can easily create workflows with primitives such as branching, parallel execution, and timeouts to handle software changes from different repository branches. Amazon Step Functions supports built-in error handling, parameter passing, recommended security settings, and state management, reducing the amount of code you have to write and maintain. 

You can now launch the T3 instance type with Amazon Neptune for development and test scenarios. Amazon T3 instances are the next generation burstable general-purpose instance type that provide a baseline level of CPU performance with the ability to burst CPU usage at any time for as long as required. T3 instances offer a balance of compute, memory, and network resources and are ideal for database workloads with moderate CPU usage that experience temporary spikes in use. 

Elastic Load Balancing now supports TLS ALPN policies for Network Load Balancers. Using TLS offloading with ALPN policies you can now offload your application’s TLS HTTP/2 traffic decryption/encryption logic to the Network Load Balancer, improving your service security posture and reducing operational complexity.  

You can now select the Traffic Splitting deployment policy when deploying application code using Amazon Elastic Beanstalk. This is in addition to the four existing deployment policies that Elastic Beanstalk currently supports (i.e. All at once, Rolling, Rolling with additional batch, and Immutable). 

Amazon DynamoDB now supports empty values for non-key String and Binary attributes in DynamoDB tables in the Amazon Web Services China (Beijing) Region, Operated by Sinnet and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Empty value support gives you greater flexibility to use attributes for a broader set of use cases without having to transform such attributes before sending them to DynamoDB. List, Map, and Set data types also support empty String and Binary values.

You can now use the Amazon Elastic Beanstalk ListPlatformBranches API action that lists available Elastic Beanstalk platform branches and provides summary information about each platform branch.  

Amazon RDS Performance Insights supports SQL-level metrics on Amazon Aurora with MySQL-compatibility, a relational database built for the cloud. With RDS Performance Insights SQL-level metrics, you can identify high-frequency, long-running, and stuck SQL queries in seconds.  

You can now use Amazon EMR Notebooks in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Elastic Compute Cloud (EC2) now supports the use of custom identifiers to reference Amazon Machine Images (AMIs) during instance launch. You can create these identifiers using Amazon Systems Manager Parameter Store and use them to reference your AMI during instance launch, reducing likelihood of instance misconfiguration and simplifying maintenance of your automation. Code that references these parameters no longer needs to be modified every time a new version of an AMI is created. 

Amazon Elastic Container Service (ECS) now supports environment files to store environment variables for containers using the EC2 Launch type. This simplifies configuration of environment variables by editing or referencing centrally located files, instead of manual edits to environment variables as key value pairs across all your containers.

Amazon Route 53 is now available in the Amazon Web Services China (Ningxia) Region,operated by NWCD.

Amazon CloudFront in China announces support for Origin Access Identity (OAI). By using OAI, you can restrict your viewers from accessing content from your Amazon S3 buckets directly by requiring them to retrieve the content through Amazon CloudFront’s distributed edge network in China. To learn more about OAI with Amazon CloudFront in China, read CloudFront’s documentation on Configuring Secure Access and Restricting Access to Content. To get started with Amazon CloudFront in China, visit our webpage. 

Today, we are reducing the price of the Device Jobs feature of Amazon IoT Device Management by 90%+. Amazon IoT Device Management is a service that enables customers to onboard, organize, monitor, and remotely manage their devices connected to Amazon IoT Core. Device Jobs is a fully managed feature that enables customers to trigger remote actions on their connected IoT devices, such as OTA firmware updates, device reboots, factory resets, content delivery, and configuration changes.

EBS direct APIs for Snapshots are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

You can now run license included Windows Server instances on EC2 Dedicated Hosts, which enables you to use fully compliant Windows Server software licenses from Amazon Web Services with a pay-as-you-go model. This new capability helps in scenarios where you have eligible SQL Server licenses to use on Dedicated Hosts but do not have accompanying Windows Server licenses to run the SQL Server workloads. 

You can now launch R5, M5, and T3 instance types when using Amazon RDS for PostgreSQL. 

You can now include enriched metadata in Amazon Virtual Private Cloud (Amazon VPC) flow logs published to both Amazon CloudWatch Logs and Amazon Simple Storage Service (S3). Prior to this launch, custom format VPC flow logs enriched with additional metadata could be published only to S3. With this launch, we are also adding new metadata fields that provide insights about the location such Amazon Web Services Region and Amazon Availability Zone ID where the network interface for which flow logs are being captured exists. 

Amazon Elasticsearch Service UltraWarm is now generally available. UltraWarm is a performance-optimized warm storage tier that lets you store and interactively analyze your data using Elasticsearch and Kibana while reducing your cost per GB by up to 90% over hot storage options. With UltraWarm, Amazon Elasticsearch Service supports hot-warm domain configurations. Hot storage is used for indexing and providing the fastest access to data. UltraWarm complements hot storage with less expensive, more durable storage for older data that you access less frequently, all while maintaining the same interactive analysis experience. 

Amazon Storage Gateway now supports Amazon S3 Intelligent-Tiering as a storage class for File Gateway, enabling you to automatically optimize storage costs when data access patterns change, without impacting performance or incurring operational overhead. This eliminates the need to have a deep understanding of your on-premises data access patterns of users and applications.

Amazon SageMaker is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 11.7, 10.12, 9.6.17, and 9.5.21. This release contains bug fixes and improvements done by the PostgreSQL community.  

Amazon Storage Gateway increases performance for reading from and writing to virtual tapes on Tape Gateway by 2x, enabling you to perform faster backup and recovery than before. 

Amazon Redshift Spectrum is now available in Amazon Web Services China (Beijing) region, operated by Sinnet

You can now use Amazon Step Functions to log workflow execution history to CloudWatch Logs, which make it faster and easier to monitor event-driven, serverless workflows. You can select different levels of logging, and also have the ability to exclude the logging of a workflow’s payload.

Amazon Storage Gateway automates creating new virtual tapes on Tape Gateway, helping you eliminate manual management of new tapes, easily manage large deployments, and efficiently scale growing on-premises backup and archive storage needs. With this enhancement, Tape Gateway automatically creates new virtual tapes to maintain the minimum number of available tapes you configure and then makes these new tapes available for import by the backup application, enabling your backup jobs to run without interruption. Automatic tape creation removes the need for custom scripting as well as the manual process to create new virtual tapes. 

Amazon Kinesis Data Firehose can now deliver streaming data to an Amazon Elasticsearch Service domain in an Amazon VPC. You can now easily ingest, transform, and reliably deliver streaming data in to an Amazon Elasticsearch Service domain running in a VPC without building and managing your own data ingestion and delivery infrastructure. 

You can now export an OpenAPI 3.0 compliant API definition file from HTTP APIs in Amazon API Gateway. API Gateway is a fully managed service that makes it easy for developers to create, publish, maintain, monitor, and secure APIs at any scale. Previously, you had to import OpenAPI 3.0 API definitions to create HTTP APIs in API Gateway.  

Amazon Elastic Container Service (ECS) tasks running on both Amazon Elastic Compute Cloud (EC2) and Amazon Fargate can now mount Amazon Elastic Filesystem (EFS) filesystems. ECS tasks using EFS will automatically mount the filesystems specified by the customer in the task definition and make the available to the containers in the task across all availability zones in the region. This enables persistent, shared storage to be defined and used at the task and container level in ECS. 

Now you can launch your Amazon Neptune RDF/SPARQL or Apache TinkerPop graph application with an db.r5.8xlarge instance type in Amazon Web Services China (Ningxia) Region, Operated by NWCD. 

Amazon RDS Performance Insights is now available in the Amazon Web Services China regions. Performance Insights is a database performance tuning and monitoring feature of RDS that helps you quickly assess the load on your database and determine when and where to take action.  

Amazon RDS for Oracle now supports 19.2 version of Oracle Application Express (APEX) for 11.2, 12.1, 12.2, 18c and 19c versions of Oracle Database in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser. 

Amazon CodeCommit, a fully-managed source control service, is now available to customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, operated by NWCD. CodeCommit makes it easy for teams to collaborate on code in a secure and highly scalable ecosystem. CodeCommit eliminates the need to operate your own source control system or worry about scaling its infrastructure. You can use CodeCommit to securely store anything from source code to binaries, and it works seamlessly with your existing Git tools.  

When using Amazon S3 Batch Operations you can now assign tags to jobs to label and manage access to create and edit permissions. S3 Batch Operations is an S3 feature that lets you perform repetitive or bulk actions like copying objects or running Amazon Lambda functions across millions of objects with a single request. You provide the list of objects, and S3 Batch Operations handles the repetitive work, including managing retries and displaying progress.  

Amazon Fargate, a serverless compute engine for containers, launches new platform version 1.4.0. This latest version enables several new Fargate features of which some are highlighted below. Unless otherwise noted, the new features discussed in this post are relevant to the native Fargate platform and are directly consumable by the Amazon Elastic Container Service (ECS) orchestrator.  

Amazon Elasticsearch Service now offers support for adding custom dictionary files to your domains. Now you can specify synonyms, stop words, and segmentation files to improve your indexing, matching, and search relevancy. Previously, you could only include these types of customizations directly in your mapping which could make them unwieldy and difficult to manage.  

Amazon Identity and Access Management (IAM) now makes it easier to identify who is responsible for an Amazon Web Services action performed by an IAM role when viewing Amazon  CloudTrail logs. Adding the new service-specific condition, sts:RoleSessionName, in an IAM policy, enables you to define the role session name that must be set when an IAM principal (user or role) or application assumes the IAM role. Amazon Web Services adds the role session name to the Amazon CloudTrail log when the IAM role performs an action, making it easy to determine who performed the action.  

Starting today, seven new Amazon EC2 bare metal instances are available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon EC2 bare metal instances provide your applications with direct access to the Intel® Xeon® Scalable processor and memory resources of the underlying server. These instances are ideal for workloads that require access to the hardware feature set (such as Intel® VT-x), for applications that need to run in non-virtualized environments for licensing or support requirements, or for customers who wish to use their own hypervisor. 

Amazon RDS for MariaDB now supports MariaDB version 10.4 in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. 10.4 is the latest major version release of MariaDB offering new functionality and enhancements for better performance, reliability, security, and manageability.  

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. 

Amazon Athena is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet. 

VPC Interface endpoints (powered by Amazon PrivateLink) and gateway endpoints now support additional IAM condition keys. With this launch, you can now use the IAM condition key ec2: VpceServiceOwner to restrict creation of interface endpoints to either Amazon Web Services services or services owned by specific Amazon Web Services accounts. You can also restrict endpoint creation to only specific services by using the ec2: VpceServiceName condition key in your IAM policies. Additionally, you can manage actions on your VPC endpoint and endpoint services based on existing tags on resources like VPCs and subnets using the ec2:resourceTag condition key. 

You can now use Amazon Glue in the Amazon Web Services China (Beijing) region, operated by Sinnet.  

Amazon DynamoDB global tables are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With DynamoDB global tables, you can create fully replicated tables across regions for disaster recovery and high availability of your DynamoDB tables. You can easily add a replica table in one Amazon Web Services China Region to your existing DynamoDB table in the other Amazon Web Services China Region. When you use DynamoDB global tables, you benefit from an enhanced 99.999% availability SLA at no additional cost.

You can now run your applications on Amazon Elastic Beanstalk using the new generation of Docker, Corretto and Python Elastic Beanstalk platforms built on top of Operating System, Amazon Linux 2. 

Starting today, you can launch Amazon EMR clusters with Amazon EC2 G3s, Z1d, M5a, and R5a instances.  

Amazon CloudWatch Contributor Insights for DynamoDB is now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. CloudWatch Contributor Insights for DynamoDB is a diagnostic tool that provides an at-a-glance view of your DynamoDB tables’ traffic trends and helps you identify your tables’ most frequently accessed keys (also known as hot keys). You can monitor each table’s item access patterns continuously and use CloudWatch Contributor Insights to generate graphs and visualizations of the table’s activity. Using this information, you can better understand the top drivers of your application’s traffic and respond appropriately to unsuccessful requests.  

Amazon IoT Device Defender is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon IoT Device Defender is a fully managed service that helps you secure your fleet of IoT devices. It continuously audits device configurations for security vulnerabilities. It also continuously monitors security metrics from devices and Amazon IoT Core for deviations from what you have defined as appropriate behaviors for each device. Amazon IoT Device Defender publishes alerts to the Amazon IoT Console, Amazon CloudWatch, and Amazon SNS when an audit fails or when behavior anomalies are detected. Amazon IoT Device Defender also supports the ability for customers to use predefined mitigation actions to respond to audit findings and apply them at scale.  

Amazon WorkSpaces now allows customers to bring their own licenses (BYOL) to WorkSpaces in the Amazon Web Services China (Ningxia) region, operated by NWCD. With BYOL, you can now add your own Windows 10 licenses to WorkSpaces and use the Windows Desktop operating system on your Amazon WorkSpaces running on hardware that is dedicated to you. This option entitles you to a discount per month per WorkSpace, and also allows you to use a single Windows 10 Desktop golden image on-premises and for your Amazon WorkSpaces. 

Starting today, Amazon Elastic File System (Amazon EFS) General Purpose mode file systems support up to 35,000 read operations per second, a 400% increase from the previous limit of 7,000. Maximum write operations are unchanged at 7,000 per second. 

Amazon Storage Gateway now enables logging of end-user operations on files and folders for SMB file shares when using File Gateway. Logging allows you to comply with internal security policies, meet external compliance requirements, troubleshoot access errors, and analyze usage trends of your data. 

Amazon RDS for PostgreSQL now supports major version 12. PostgreSQL 12 includes improved functionality and performance. Version 12 also includes management of indexing, improved partitioning capabilities, JSON path queries per SQL/JSON specifications, nondeterministic collations which support case-insensitive and accent-insensitive comparisons for ICU provided collations, most common-value statistics for improved query plans, creation of generated columns that computes values with an expression, and many additional features. 

You can now develop Amazon Lambda functions using .NET Core 3.1. This is the latest LTS release of .NET Core. It has new features like partial class support for razor components, support for shared queues, unwrapping of exceptions, and parameters passing to top-level components. Lambda functions written in .NET Core 3.1 run on Amazon Linux 2, the latest generation of Amazon Linux. You can read the .NET Core programming model in the Amazon Lambda documentation to learn more about writing functions in .NET Core 3.1.  

Amazon API Gateway announced the general availability of HTTP APIs, enabling customers to easily build high performance RESTful APIs that offer up to 71% cost savings and 60% latency reduction compared to REST APIs available from API Gateway. As part of this launch, customers will be able to take advantage of several new features including the ability to route requests to private Amazon Elastic Load Balancers (ELB), offering new support for Amazon ALB and continued support for Amazon NLB.  

Amazon Elastic Compute Cloud (EC2) now lets you attach IAM resource policies to your VPC endpoints. VPC Endpoint policies can help you meet compliance and regulatory requirements by granularly controlling access to Amazon EC2 APIs. 

Starting today, Amazon EBS crash-consistent snapshot ability is available in Amazon Web Services China (Ningxia) region, operated by NWCD and Amazon Web Services China (Beijing) region, operated by Sinnet. You can now take crash-consistent snapshots across multiple EBS volumes in an EC2 instance with a single API call. Backup data across multiple volumes is in sync and the restore of EBS volumes is accurate. Since snapshots are automatically taken across multiple EBS volumes, you no longer need to stop your instance or coordinate between volumes to ensure crash-consistency. To get started, call the new API using the Amazon Command Line Interface (CLI) tool or Amazon SDK. You can also use the Amazon Web Services console to create Multi-volume crash-consistent snapshots.

Starting today, Amazon Data Lifecycle Manager (DLM) for EBS Snapshots is available in the Amazon Web Services China (Ningxia) region, operated by NWCD and Amazon Web Services China (Beijing) region, operated by Sinnet. Amazon DLM provides a simple, automated way to back up data stored on Amazon EBS volumes. With this feature, you no longer have to rely on custom scripts to create and manage your EBS volume backups.  

Amazon VPC Network Address Translation (NAT) gateway now supports adding tags at the time of resource creation, and tag-based access control. You can define fine-grained access controls for NAT gateways using tags and Amazon Identity and Access Management (IAM) policies. Tags are simple key-value pairs that you can assign to resources to easily organize, search, and identify resources, create cost allocation reports, and control access to resources. 

Amazon Elastic Container Registry (ECR) today introduced up-to-the minute API metrics for the number of times you push and pull images with Amazon CloudWatch Usage Metrics, giving you the operational visibility you need to manage ECR usage and identify anomalous activity. 

Amazon Elasticsearch Service now offers k-Nearest Neighbor (k-NN) search which can enhance search by similarity use cases like product recommendations, fraud detection, and image, video and semantic document retrieval. Built using the lightweight and efficient Non-Metric Space Library (NMSLIB), k-NN enables high scale, low latency nearest neighbor search on billions of documents across thousands of dimensions with the same ease as running any regular Elasticsearch query.  

You can now assign Amazon Web Services resource tags to Spot Fleet requests on creation to more easily identify their purpose. For example, you can use tags to identify all Spot Fleet requests used by a particular department, project, or application. 

Amazon Elastic Kubernetes Service (EKS) now supports Kubernetes version 1.15 for all clusters. 

The Secure Tunneling feature of Amazon IoT Device Management is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Secure tunneling enables customers to troubleshoot misbehaving devices remotely to diagnose device issues, deploy a fix, and validate the device is working properly using remote shell or remote desktop operations. 

Amazon EC2 can now hibernate EBS-backed Amazon EC2 T2 instances. You can now hibernate your newly launched instances running on T2 instance types. Hibernation provides you the convenience of pausing and resuming your workloads. Hibernation is just like closing and opening your laptop lid, your application will start right where it left off.  

Amazon Certificate Manager (ACM) can now provision, manage, and deploy public Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with Amazon Web Services services in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet.  

You can now tag your Amazon Virtual Private Cloud (VPC) flow logs. A tag is a simple label consisting of a user-defined key and an optional value that can be used to easily manage, categorize and search for your VPC flow log subscriptions based on purpose, owner, or other such criteria.  

You can now access Amazon EC2 Auto Scaling and Application Auto Scaling within your Amazon Virtual Private Cloud (VPC) as these Auto Scaling services now support Amazon PrivateLink. With Amazon PrivateLink support, you can now privately access auto scaling services from your VPC, without using public IPs, and without requiring the traffic to traverse across the internet. 

Amazon Elasticsearch Service now supports open source Elasticsearch 7.4 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements. 

Amazon CloudFormation Drift Detection and Resource Import are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.  

You can use Amazon DynamoDB backup and restore to create on-demand and continuous backups of your DynamoDB tables and then restore from those backups. Starting today, you also can restore table backups as new tables in the other Amazon Web Services China Region.  

Amazon EC2 Auto Scaling now publishes notifications to the Amazon Personal Health Dashboard and Amazon Health API when EC2 instances fail to launch in one of your Auto Scaling groups due to a missing launch template or security group. This gives you actionable feedback to review and update the Auto Scaling group. 

Amazon Elastic Container Registry (ECR) now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon ECR is a fully managed container registry that makes it easy for developers to store, manage and deploy container images. Amazon PrivateLink is a networking technology designed to enable access to Amazon Web Services services in a highly available and scalable manner, while keeping all the network traffic within the Amazon Web Services network.

Amazon EC2 is transitioning On-Demand Instance limits from the current instance count-based limits to new vCPU-based limits to simplify the limit management experience for Amazon Web Services customers. Usage toward the vCPU-based limit is measured in terms of number of vCPUs (virtual central processing units) for the Amazon EC2 Instance Types launched. 

Amazon RDS for MySQL has been updated to support release 5.6.46, release 5.7.28, and release 8.0.17 of the MySQL database. These releases include a number of bug fixes as well as functionality improvements.

Amazon EC2 Auto Scaling now lets you enable and disable target tracking, step, and simple scaling policies. You can temporarily disable individual scaling policies during events such as maintenance windows. Once you’re ready, you can simply enable the scaling policies again to re-activate them, eliminating the need to delete and re-create the policies from scratch. 

Amazon Backup is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. 

Amazon Elasticsearch Service now supports the next generation M5 (general-purpose) instances, which offer superior performance at lower costs compared to previous-generation instances.  

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads.

Amazon Elasticsearch Service now enables you to automate recurring index management activities. In the past you had to use additional tools to manage the data lifecycle inside Elasticsearch. For example, customers often setup daily indexes for their operational logs, roll them over nightly, and after 30 days delete the oldest index. With Index State Management, you can now create a policy that will automate these operations based on index age, size, and other conditions, all from within your Amazon Elasticsearch Service domain.  

With Amazon CloudWatch composite alarms, you can now combine multiple alarms to reduce alarm noise and focus on critical operational issues. You can easily combine multiple alarms together into alarm hierarchies that only trigger once when multiple alarms fire at the same time. This helps you stay focused on finding the root cause of operational issues to reduce system and application downtime. 

Amazon Directory Service for Microsoft Active Directory (Amazon Managed Microsoft AD) and AD Connector now communicate more securely with self-managed Active Directory when using the Lightweight Directory Access Protocol (LDAP). With support for client-side LDAP signing and client-side secure LDAP (LDAPS), customers using Amazon Directory Service-enabled applications like Amazon WorkSpaces can now better protect their organization’s identity data and meet security requirements. 

Amazon CloudWatch Contributor Insights, now available in preview, analyzes time-series data to provide a view of the top contributors influencing system performance. Once set up, Contributor Insights runs continuously without needing additional user intervention. This helps developers and operators more quickly isolate, diagnose, and remediate issues during an operational event.  

Amazon RDS for MariaDB has been updated to support release 10.3.20 of the MariaDB database. This release includes a number of bug fixes as well as functionality improvements. 

Amazon Elastic Kubernetes Service (EKS) is now available in the Amazon Web Services China (Beijing) Region, Operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon Kinesis Data Firehose can now deliver data to Amazon Redshift in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now specify Amazon Redshift as a destination for your Amazon Kinesis Data Firehose delivery streams with a few clicks, without having to manage and scale your ingestion and delivery infrastructure. You can then use your existing analytics applications and tools to analyze streaming data in near real time. 

Amazon RDS for Oracle now supports the January 2020 Patch Set Updates (PSU) for Oracle Database 11.2 and 12.1, and January 2020 Release Update (RU) for Oracle Database 12.2, 18c and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Starting today, Amazon Elastic Container Registry (ECR) is increasing the rate at which you can pull container images, and introducing simplified quotas (also called limits) for image APIs. These quotas are now between five to ten times higher than before, enabling you to increase the rate at which you deploy container images from ECR without worrying about API throttling. 

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 11.6, 10.11, 9.6.16, and 9.5.20. This release contains bug fixes and improvements done by the PostgreSQL community.

Amazon EC2 adds Hibernation support for Ubuntu 16.04 LTS operating system in addition to Amazon Linux, Amazon Linux 2, Ubuntu 18.04 LTS, and Windows Server 2012, 2012R2, 2016 and 2019.  

You can now view and monitor the number of concurrent executions of your Amazon Lambda functions by version and alias. 

Amazon RDS for Oracle enables you to use the Federal Information Processing Standard (FIPS) 140-2 for the Secure Socket Layer (SSL). FIPS 140-2 is a U.S. government standard that defines cryptographic module security requirements.  

Amazon CloudFront customers in China can now get detailed information about their CloudFront usage and activity by using CloudFront Reports in the Amazon Web Services Management Console. Customers in China can use the CloudFront Cache Statistics Report to see total requests, the percentage of viewer requests by result type, bytes transferred, HTTP status codes, and the percentage of GET requests that did not finish downloading. The CloudFront Popular Objects Report shows the 50 most popular objects and statistics about those objects. The CloudFront Top Referrers Report shows the top 25 referrers and the number of requests from each referrer. The CloudFront Usage Report shows the number of requests and data transferred by protocol or destination. The CloudFront Viewers Report shows the breakdown of viewers by devices, browsers, operating systems, and locations. These reports are available to all CloudFront custmers at no additional cost. 

You can now add tags, simple labels consisting of a user-defined key and an optional value, to your Amazon Virtual Private Cloud (VPC) gateway endpoints, interface endpoints (Amazon PrivateLink), and endpoint services (Amazon PrivateLink) directly at runtime. By tagging resources at the time of creation, you can eliminate the need to run custom tagging scripts after resource creation. 

You can now capture and aggregate your Amazon Virtual Private Cloud (Amazon VPC) flow logs at shorter intervals of up to 1 minute, giving you quicker visibility into your network traffic flows. With a 1-minute configuration, your VPC flow logs arrive in an expedited manner and provide more granular visibility into the sequence of events in a flow, thereby enabling you to accurately investigate and rapidly respond to security incidents, or troubleshoot connectivity issues faster. 

Amazon Simple Notification Service (Amazon SNS) provides server-side encryption (SSE) of topics for additional protection of sensitive data. This capability is now available in Amazon Web Services China (Beijing) Region operated by Sinnet, and Amazon Web Services China (Ningxia) Region operated by NWCD.  This feature is integrated with Amazon Key Management Service (Amazon KMS), which allows you to centrally manage keys that protect Amazon SNS topics along with keys that protect your other Amazon Web Services resources.

Amazon Aurora with MySQL compatibility and Amazon Aurora with PostgreSQL compatibility are now available to customers in the Amazon Web Services China (Beijing) region, operated by Sinnet. Aurora is a MySQL and PostgreSQL compatible relational database built for the cloud, that combines the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases.

Amazon Config now supports Amazon Simple Queue Service (Amazon SQS) in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Config provides a detailed view of the configuration of Amazon Web Services resources in your Amazon Web Services account. This includes how the resources are related to one another and how they were configured in the past so that you can see how the configurations and relationships changed over time.

You can now develop Amazon Lambda functions using Ruby 2.7. This is the latest release of Ruby and supports new features like pattern matching, argument forwarding and numbered arguments. Lambda functions written in Ruby 2.7 run on Amazon Linux 2, the latest generation of Amazon Linux. To learn more about the Ruby programming model and how to create Amazon Lambda functions in Ruby 2.7, please click here. 

Amazon Storage Gateway is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Amazon Storage Gateway expands deployment options for all gateway types to include Linux Kernel-based Virtual Machine (KVM) hypervisor. If you use KVM hypervisor-based on-premises virtual infrastructure, you can now deploy Storage Gateway in your environment to seamlessly use Amazon storage services. 

We are thrilled to announce that we have released a new batch of updates that enable you to experience updated Identity and Access Management features that are consistent across all other Amazon Web Services services.  

You can now create Amazon CloudFormation templates to provision and configure Amazon Virtual Private Cloud (Amazon VPC) ingress routing infrastructures predictably and repeatedly. Amazon VPC ingress routing allows you to route ingress and egress traffic to and from internet gateways and virtual private gateways through networking and security virtual appliances in your VPCs. 

Amazon SQS is now available through VPC endpoints and also provides server-side encryption (SSE) of queues in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, allowing you to access Amazon SQS within your Amazon Virtual Private Cloud (Amazon VPC) without traversing the internet.  

Amazon Elasticsearch Service now offers fine-grained access control, which adds multiple capabilities to give you tighter control over your data. New features include the ability to use roles to define granular permissions for indices, documents, or fields and to extend Kibana with read-only views and secure multi-tenant support. 

You can now associate route tables with internet gateway and virtual private gateway, and redirect incoming and outgoing Amazon Virtual Private Cloud (Amazon VPC) traffic through virtual appliances in your VPC. 

Amazon Step Functions now supports Amazon PrivateLink, allowing you to access Amazon Step Functions from VPC-enabled Amazon Lambda functions and other Amazon Web Services services without traversing the public internet. By using Amazon PrivateLink, you can access Step Functions while keeping your network traffic within the Amazon network using interface VPC endpoints. Your network architecture is significantly simplified as you no longer need to use an Internet Gateway, Network Address Translation (NAT) devices, or firewall proxies to connect to Amazon Step Functions.

We are pleased to announce that Application Load Balancers now support native Internet Protocol version 6 (IPv6) in an Amazon Virtual Private Cloud (VPC). With this ability, clients can now connect to the Application Load Balancer in a dual-stack mode via either IPv4 or IPv6.  

Amazon AppSync is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon AppSync simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources. AppSync is a managed service that uses GraphQL to make it easy for applications to get exactly the data they need. 

Amazon Elastic File System (Amazon EFS) is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon RDS for Oracle now supports new customer modifiable sqlnet.ora parameters - ALLOWED_LOGON_VERSION_SERVER and ALLOWED_LOGON_VERSION_CLIENT in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.  

Amazon Transit Gateway is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon Transit Gateway enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway. As you grow the number of workloads across multiple Amazon Web Services accounts, you need to scale your networks, better control your policies, and effectively monitor your resources. 

You can now run your applications on Amazon Elastic Beanstalk using Amazon EC2 Spot Instances. You can add Amazon EC2 Spot Instances to your environment’s capacity in both single instance and load balanced environments. Previously, Elastic Beanstalk supported only On-Demand and Reserved Instances .  

Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is serverless, so there is no infrastructure to manage, and you pay only for the queries that you run. 

You can now designate a dead-letter queue (DLQ) to an Amazon Simple Notification Service (SNS) subscription to capture undeliverable messages. Amazon SNS DLQs make your application more resilient and durable by storing messages in case your subscription endpoint becomes unreachable. 

Amazon Neptune is now available in Amazon Web Services China (Ningxia) Region, Operated by NWCD.

The Amazon Serverless Application Repository is now available in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. The addition of these regions increases the availability of the Amazon Serverless Application Repository, which offers region support for Asia Pacific (Mumbai, Singapore, Sydney, Tokyo, Hong Kong), Canada (Central), EU (Frankfurt, Ireland, London, Paris), South America (São Paulo), US West (N. California, Oregon), US East (N. Virginia, Ohio), Middle East (Bahrain), and Amazon Web Services GovCloud regions. With this launch, the Amazon Serverless Application Repository is now available in 22 commercial regions. 

Amazon EC2 provides a broad selection of instance types optimized to fit different use cases. Customers now have additional ways to easily discover and compare instance types based on CPU, memory, storage, networking performance, regional presence, pricing, and more.  

You can now stop your Amazon EC2 Spot Instances backed by Amazon EBS and start them at will, instead of relying on the “Stop” interruption behavior to stop your Spot Instances when interrupted. Earlier, you could only terminate your Spot Instances but now you can stop your Spot Instances and start them from the user initiated stop state provided Spot capacity is available within your maximum price requirements.  

Amazon Redshift Spectrum is now available in Amazon Web Services China (Ningxia) region, operated by NWCD.

You can now develop your Amazon Lambda functions using Python 3.8. This is the newest major release of the Python language, and contains many new features such as assignment expressions, positional-only arguments, and typing improvements. Lambda functions written in Python 3.8 run on the latest generation of Amazon Linux, Amazon Linux 2. You can read the Python programming model in the Amazon Lambda documentation to learn more about writing functions in Python 3.8. 

Amazon Web Services Marketplace China website is now available in the Amazon Web Services China (Ningxia) Region and Amazon Web Services China (Beijing) Region. Previously, only customers with a valid Amazon Web Services China account can browse the third party software in Amazon Web Services Marketplace China through Amazon Elastic Compute Cloud (Amazon EC2) console. With the website launch, anyone with internet access can now discover and compare various product listings in Amazon Web Services Marketplace China. 

Today, we are announcing that the next generation GPU powered instance family, Amazon EC2 G4 GPU instances, are generally available. 

Starting today, Amazon EC2 z1d instances are available in the Amazon Web Services China (Ningxia) region, operated by NWCD.  

The Amazon Deep Learning AMIs are available on Ubuntu 18.04, Ubuntu 16.04, Amazon Linux 2, and Amazon Linux with TensorFlow 1.15, Tensorflow 2.0, PyTorch 1.3.1, MXNet 1.6.0-rc0.  

Amazon ElastiCache adds support for Redis open source version 5.0.6. This is a bug fix release with various improvements in stability and memory management. For Redis 5.0.6 open source release notes click here. This release improves the stability of ElastiCache for Redis when dealing with large number of new concurrent connections and with low memory conditions. Additionally, customers can now monitor replication latency with sub-second granularity.  

We now support Destinations for asynchronous invocations on Amazon Lambda, a new feature that allows you to gain visibility to asynchronous invocation result and route the result to an Amazon Web Services service without writing code.