2021

Amazon OpenSearch Service now enables you to deploy your instances across three Availability Zones (AZs) providing better availability for your domains. If you enable replicas for your indices, Amazon OpenSearch Service distributes the primary and replica shards across nodes in different AZs to maximize availability.

Amazon Lambda now supports IPv6 endpoints for inbound connections, allowing customers to invoke Lambda functions over IPv6. This helps customers to meet IPv6 compliance requirements, and removes the need for expensive networking equipment to handle address translation between IPv4 and IPv6.

Amazon CloudFront announces a redesigned console experience that is easier to use while still feeling familiar in the Amazon Web Services China (Ningxia) Region, operated by NWCD. The new console makes it easier to create and configure distributions with simplified forms and improved default settings. Updated reporting visualizations enable you to get more information at a glance, and selecting a distribution in the reporting section now supports a browse option that makes it easy to find the right distribution with full search, filtering, and pagination capabilities. Additionally, Amazon CloudFront now supports Response Header Policies in the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.6.3 for new and existing clusters. Apache Kafka 2.6.3 includes security improvements and bug fixes. To learn more about these fixes you can review the Apache Kafka release notes for 2.6.3.

The Fapiao Management page (formerly known as Tax Settings page) allows customers to provide the necessary information required for Fapiao issuance. This includes the issuance of both Special VAT Fapiao and General VAT Fapiao from Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.7.2 for new and existing clusters. Apache Kafka 2.7.2 includes security improvements and bug fixes. To learn more about these fixes you can review the Apache Kafka release notes for 2.7.2..

NICE DCV web client software development kit (SDK) version 1.0.4 introduces support for multiple concurrent connections. Developers can now use the web client SDK to build applications with multiple side-by-side streaming views that show different DCV sessions in a single webpage.

NICE DCV version 2021.3 introduces multiple new features such as DCV Connection Gateway and a refreshed DCV Web Client user interface. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Simple Queue Service (SQS) now provides managed server-side encryption in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD using SQS owned encryption keys (SSE-SQS) to protect sensitive data. SSE-SQS helps you build security-sensitive applications to support your encryption compliance and regulatory requirements.

Amazon Aurora MySQL-Compatible Edition now supports MySQL major version 8.0. MySQL 8.0 includes improved performance functionality from enhancements such as instant DDL to speed up the overall process of creating and loading a table and its associated indexes and SKIP LOCKED and NOWAIT options to avoid waiting for other transactions to release row locks. MySQL 8.0 adds developer productivity features such as window functions to more easily solve query problems and common table expressions to enable use of named temporary result sets. It also includes JSON functionality additions, new security capabilities, and more. MySQL 8.0 on Aurora MySQL-Compatible Edition is available in all regions supported by Amazon Aurora, including in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon Athena’s redesigned console is now generally available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. The new and improved console brings a modern, more personalized experience to all of the features you enjoy in the current console and includes several new features which make analyzing data with Athena more powerful and productive.

Starting today, the ability to customize reverse DNS for Elastic IP addresses for Virtual Private Clouds (VPC) is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With today’s launch, this feature is available in all China and commercial regions.

Amazon ElastiCache for Redis now supports Redis 6.2 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. In this release, there are performance improvements for TLS-enabled clusters having nodes with 8 vCPUs or more. These enhancements are designed to improve throughput and reduce client connection establishment time by offloading encryption to other vCPUs. ElastiCache for Redis 6.2 also enables you to manage access to Pub/Sub channels with Access Control List (ACL) rules. For the full list of improvements in Amazon ElastiCache for Redis 6.2 (enhanced), click here.

You can now launch RabbitMQ 3.8.23 brokers on Amazon MQ. This patch update to RabbitMQ contains several fixes and enhancements compared to the previously supported version, RabbitMQ 3.8.22.

You can now cache responses returned by your Custom Authorizer Lambdas when using Amazon IoT Core Custom Authentication workflow for HTTP connections. Customers can now define a caching duration (i.e. refreshAfterInSecs) for responses returned by customers’ custom authorizer lambdas when using long-lived HTTP connections. Customers can set a “refreshAfterInSecs” between 5 mins and 24 hours to reduce custom authorizer lambda invocations. This feature enhancement helps customers reduce their custom authorizer lambda cost and makes the behavior for HTTP match with that of other protocols supported by Amazon IoT Core.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.5.13, 10.4.22, 10.3.32,and 10.2.41. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Today, we are announcing three new enhancements for Amazon IoT SiteWise that make it easier for customers to collect data from industrial equipment at scale in Amazon Web Services China (Beijing) Region, operated by Sinnet. The new enhancements reduce the number of steps required to ingest equipment data to the cloud, and add flexibility for customers modeling their physical operations using Amazon IoT SiteWise asset models and assets.

You can now check whether a configuration change will require a blue/green deployment from the Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) console or using the Amazon OpenSearch Service APIs. With this new option, you can plan and make configuration changes that require a blue/green deployment when your cluster is not at its peak traffic.

You can now build event-driven applications using Amazon S3 Event Notifications that trigger when objects are transitioned or expired (deleted) with S3 Lifecycle, or moved within the S3 Intelligent-Tiering storage class to its Archive Access or Deep Archive Access tiers. You can also trigger S3 Event Notifications for any changes to object tags or Access Control Lists (ACLs). You can generate these new notifications for your entire bucket, or for a subset of your objects using prefixes or suffixes, and choose to deliver them to Amazon EventBridge, Amazon SNS, Amazon SQS, or an Amazon Lambda function.

Amazon FSx for Lustre, a service that provides cost-effective, high-performance, scalable file systems for compute workloads, is making it even easier to process data residing in Amazon S3 by enabling your FSx for Lustre file system’s contents to be updated automatically as data is deleted or moved in S3.

Today we are announcing the general availability of NICE EnginFrame 2021.0. NICE EnginFrame is an easy-to-use, web front-end that makes HPC job submission and management easier for customers. With this latest release, customers are able to use NICE EnginFrame across both on-premises and cloud environments using EnginFrame’s new Amazon HPC Connector feature. Where customers may have previously used NICE EnginFrame for these tasks on-premises and separately managed cloud resources for HPC using the Amazon Web Services Management Console, NICE EnginFrame customers can now manage all of these HPC workflows across both their on-premises and cloud environments using a single, unified interface.

Starting today, Amazon Transit Gateway supports intra-region peering, giving you the ability to establish peering connections between multiple Transit Gateways in the same Amazon Web Services China Region. With this change, different teams in your organization can deploy their own Transit Gateways, and easily interconnect them resulting in less administrative overhead and greater autonomy of operation.

Amazon Database Migration Service (Amazon DMS) expands its functionality by introducing Time Travel, a feature granting customers flexibility on their logging capabilities and enhancing their troubleshooting experience. With Time Travel, you can store and encrypt Amazon DMS logs using Amazon S3 to view, download and obfuscate the logs using datetime filters as needed. Time Travel helps make troubleshooting more easily and securely.

Amazon S3 Glacier Instant Retrieval is a new archive storage class that delivers the low cost storage for long-lived data that is rarely accessed and requires milliseconds retrieval. With S3 Glacier Instant Retrieval, you can save on storage costs compared to using the S3 Standard-Infrequent Access (S3 Standard-IA) storage class, when your data is accessed once per quarter. S3 Glacier Instant Retrieval delivers immediate access to archive storage, with the same throughput and milliseconds access as the S3 Standard-IA storage class. The S3 Glacier storage class will be renamed S3 Glacier Flexible Retrieval, and is now optimized for backup and disaster recovery use cases, with free bulk retrievals, and a 10% storage price reduction.

You can now use Amazon S3 Event Notifications with Amazon EventBridge to build, scale, and deploy event-driven applications based on changes to the data you store in S3. This makes it easier to act on new data in S3, build multiple applications that react to object changes simultaneously, and replay past events, all without creating additional copies of objects or developing new software. With increased flexibility to process events and send them to multiple targets, you can now create new serverless applications with advanced analytics and machine learning at scale more confidently without writing single-use custom code.

Amazon IoT Device Management Fleet Indexing now provides integration with two additional data sources, Amazon IoT Core named shadows and Amazon IoT Device Defender detect violations. With this release, supported data sources for Fleet Indexing increased to 5 from 3 (Amazon IoT Core registry, shadows, and connectivity lifecycle events). These two additional data sources will help IoT customers who store IoT fleet data across different services and systems and regularly access the data for fleet monitoring, health checks, over-the-air (OTA) updates, and troubleshooting.

The Amazon S3 console now reports security warnings, errors, and suggestions from IAM Access Analyzer as you author your S3 policies. The console automatically runs more than 100 policy checks to validate your policies. These checks save you time, guide you to resolve errors, and help you apply security best practices. By resolving errors and security warnings reported by the S3 console, you can validate that your policies are functional before you attach them to your S3 buckets or access points.

Amazon Elastic Container Service (Amazon ECS) now supports Amazon ECS Exec for workloads running on Windows operating systems. Amazon ECS Exec, launched in March 2021, makes it easier for customers to troubleshoot errors, collect diagnostic information, interact with processes in containers during development, or get “break-glass” access to containers to debug critical issues encountered in production.

Amazon Database Migration Service (Amazon DMS) expands functionality by adding support for Azure SQL Managed Instance as a source. Using Amazon DMS, you can now migrate data live from Azure SQL Managed Instance to any valid Amazon DMS supported targets with minimal downtime.

Amazon Web Services Managed Templates for IoT Jobs, a new feature of Amazon IoT Device Management now gives you the ability to deploy common remote operations to fleets of IoT devices directly from the Amazon IoT Console, with no incremental code, and in a standardized manner. Instead of having to manually define your remote operations in a JSON Job Document, you can select from a range of pre-built remote actions, provide relevant inputs, and quickly deploy them to your IoT fleets.

Improved cold query performance is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

With Amazon EC2 Auto Scaling’s new predictive scaling policy, you can now use custom metrics to predict the EC2 instance capacity needed by an Auto Scaling group. Predictive scaling proactively increases the capacity of an Auto Scaling group to meet predicted demand. For workloads that experience recurring, steep demand changes, predictive scaling can help improve your application’s responsiveness without having to overprovision capacity, resulting in lower EC2 costs. Custom metrics are useful when the predefined metrics (CPU Utilization, Network I/O, and ALB Request Count) are not sufficient to capture the load on your application. Previously, you could only use custom metrics with step scaling and target tracking, but you can now use them with predictive scaling as well.

Application Load Balancers and Network Load Balancers now support end-to-end connectivity with Internet Protocol version 6 (IPv6). Clients can now connect to application and network load balancers and access backend applications over IPv6.

Amazon Kinesis Data Firehose now supports Splunk as a delivery destination in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This native integration between Kinesis Data Firehose and Splunk Enterprise is designed to make data ingestion into Splunk Enterprise seamless, secure, and reliable. With this integration, there are no heavy forwarders to manage or set up. You just create a Kinesis Data Firehose delivery stream, stream events into it, and the delivery stream will continuously deliver these events to Splunk. You also have the option to backup your raw data to Amazon Simple Storage Service (Amazon S3).

You can now set Amazon S3 Lifecycle rules to limit the number of versions of an object to retain to achieve greater storage savings, and to choose objects to move to other storage classes based on size to optimize your lifecycle transitions. S3 Lifecycle helps you optimize your storage costs by transitioning or expiring your objects as they get older or are replaced by newer versions. You can use these Lifecycle configurations for your whole bucket, or for a subset of your objects by filtering by prefixes, object tags, or object size.

Starting today, Amazon Virtual Private Cloud (VPC) allows you to create IPv6-only subnets in your dual-stack VPCs and launch EC2 instances built on Nitro System in these subnets. The launch of IPv6-only subnets allows customers to scale their deployments on Amazon Web Services by not requiring any IPv4 addressing in the subnet. With a /64 IPv6 CIDR assignment to the subnet, it accommodates approximately 18 quintillion IP addresses for applications.

Starting today, Amazon Neptune announced the general availability of Amazon Graviton2-based T4g and R6g database instances, in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Graviton2-based instances deliver up to 40% better price performance over comparable current generation x86-based instances for a variety of workloads. Customers running graph workloads using Apache TinkerPop Gremlin, openCypher, or W3C SPARQL 1.1 query languages can expect to see significant improvements in query latency at a lower cost in comparison to x86-based instances of equivalent instance size.

Amazon S3 Storage Lens, a cloud storage analytics feature for organization-wide visibility into object storage usage and activity, now includes support for Amazon CloudWatch. You can now create a unified view of your operational health to monitor any of your S3 Storage Lens metrics alongside other application metrics using CloudWatch dashboards.

Today, Amazon CloudFormation StackSets announces the capability to import existing CloudFormation stacks into a stack set. StackSets extend the functionality of stacks letting you create, update, or delete stacks across multiple Amazon Web Services accounts and regions with a single operation. You can now bring your existing CloudFormation stacks into the management purview of a new or an existing stack set. This will let you create resources, applications or environments across your Amazon Web Services Organization and Amazon Web Services Regions efficiently. You can subsequently avoid the process of manually replicating and managing the infrastructure in each account and region individually.

Amazon Compute Optimizer now helps customers understand impact of migrating to Graviton2-based instances by recommending up to 3 Graviton2-based instance type options for x86-based Linux instances.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now offers an option to securely connect to Amazon MSK clusters over the internet. By enabling public access, authorized clients external to a private Amazon Virtual Private Cloud (VPC) can stream encrypted data in and out of specific Amazon MSK clusters. You can enable public access for MSK clusters at no additional cost, but standard Amazon Web Services data transfer costs for cluster ingress and egress apply.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for Kafka multi-topic with a single task. Using Amazon DMS, you can now replicate multiple schemas from a single database to different Kafka topics using the same task. This eliminates the need to create multiple separate tasks in situations where many tables from the same source database need to be migrated to different Kafka topics.

Amazon ElastiCache now supports the Graviton2-based T4g instance family in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers choose ElastiCache for workloads that require accelerated performance with microsecond latency and high throughput. T4g instances are ideal for running applications with moderate CPU usage that experience temporary spikes in usage.

You can now use Multi-Account Registration certificates on Amazon IoT Core Credential Provider endpoints. Multi-Account Registration is a feature of Amazon IoT Core that makes it easy for customers to register and use the same device certificate across multiple Amazon Web Services accounts and endpoints. For example, a customer could register the same certificate with testing and production accounts. Customers can subsequently move devices easily between these Amazon Web Services accounts by specifying the account endpoint when devices connect to Amazon IoT Core. Until now, Multi-Account Registration certificates were supported only on IoT data plane and IoT Jobs endpoints. Starting today, customers can also use Multi-Account Registration certificates on IoT Credential Provider endpoints. See Amazon IoT device data and service endpoints for more details.

Today, Amazon CloudFormation StackSets announces the capability to execute multiple operations for simultaneous execution. StackSets extends the functionality of CloudFormation stacks by letting you create, update, or delete stacks across multiple Amazon Web Services accounts and China Regions with a single operation. You can now submit more than one operation per stack set to be executed concurrently. This capability will enable you to reduce overall processing times with StackSets. Additionally, you can avoid the overhead of building logic to batch and queue operations submitted to StackSets.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for the parallel load for partitioned data to S3, improving the load times for migrating partitioned data from supported database engine source data to S3. This feature creates S3 sub-folders for each partition of the table in the database source, allowing DMS to run parallel processes to populate each sub-folder.

Amazon App Mesh now supports ARM64-based images with Envoy. With App Mesh-optimized ARM64 Envoy images, customers now get enhanced deployment flexibility and platform support to suit their requirements. Amazon App Mesh is a service mesh available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, that provides application-level networking to make it easier for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

Amazon SageMaker Studio now enables customers to make test inference requests to endpoints with a custom URL and endpoints that require specific headers. Amazon SageMaker helps data scientists and developers to prepare, build, train, and deploy high-quality machine learning (ML) models quickly by bringing together a broad set of capabilities purpose-built for ML. Amazon SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps.

Amazon Simple Notification Service (Amazon SNS) now supports message batching for the publish action, which lets you publish up to 10 messages in a single batch request to either Standard Topics or FIFO Topics. Batching messages into a single API request is intended for those who want to reduce their costs associated with connecting decoupled applications with Amazon SNS. Previously, Amazon SNS required individual API requests for every published message.

Amazon EMR is the industry-leading cloud big data platform for processing vast amounts of data using open source tools such as Apache Spark, Apache Hive, Apache HBase, Apache Flink, Apache Hudi, and Presto. Today, we are excited to announce that Amazon EMR now supports auto termination of idle EMR clusters in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon IoT SiteWise now allows customers to use the same asset model under different asset model hierarchies in Amazon Web Services China (Beijing) Region, operated by Sinnet. With this feature, customers can simplify the asset modeling experience by reducing the number of models required to build a virtual representation of their industrial operations. Previously, for the same type of machine deployed in different production sites, users had to create one asset model for each production site model. Now, users can create one asset model and reuse it in all of your production site models.

Today, Amazon Backup announced its enhanced resource assignment capabilities. Using these new capabilities, customers can now schedule backups that span all their Amazon Web Services supported resources or specific Amazon Web Services resource types. Customers can also narrow down their data protection to resources that are assigned to a particular tag, linked to a combination of tags, or can be identified by a partial tag value. Additionally, customers can exclude resources from their data protection by Amazon Web Services resource type, tag, or specific resource ID.

Today Amazon Batch introduced fair-share scheduling for Amazon Batch job queues in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, making it easier to run different workloads in a single queue. Now, customers can determine whether to run jobs in first-in, first-out (FIFO) or determine a “fair-share” policy, which can allocate resources equally or based on admin-defined weights and priorities. With fair-share scheduling of jobs, Amazon Batch will handle assigning compute among multiple users and workloads based on factors other than just whichever workload showed up first, resulting in enhanced processing efficiency and better respecting user or workload priority.

Amazon Step Functions now supports a service integration with Amazon EventBridge, enabling you to send custom events from your Step Functions workflows to an EventBridge event bus without writing custom code. You can now emit custom events from your workflows that allow loosely-coupled applications to react to steps in your business logic, orchestrated by Step Functions. You can also use this integration to send events to applications in a different region or a different account by using EventBridge’s cross-account and cross-region capabilites.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostGIS major version 3.1 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This new version of PostGIS is available on PostgreSQL versions 13.4, 12.8, 11.13, 10.18, and higher.

Amazon Step Functions’ Synchronous Express Workflows now supports Amazon PrivateLink allowing you to start a Synchronous Express Workflow from your Virtual Private Cloud (VPC) without traversing the public internet.

Babelfish for Aurora PostgreSQL is a new capability for Amazon Aurora PostgreSQL-Compatible Edition that enables it to understand queries from applications written for Microsoft SQL Server. With Babelfish, applications currently running on SQL Server can run directly on Aurora PostgreSQL with a fraction of the work required, compared to a traditional migration. Babelfish understands the SQL Server wire-protocol (TDS) and T-SQL, the Microsoft SQL Server query language, so you don't have to switch database drivers or re-write all of your application queries.

You can now share Amazon EC2 On-Demand Capacity Reservations with another Amazon Web Services account or within your Amazon Organization. When a Capacity Reservation is shared, EC2 instances launched by one Amazon Web Services account can utilize EC2 capacity reserved by another account. This feature is enabled by Amazon Resource Access Manager (RAM), a service that allows you to easily and securely share Amazon Web Services resources.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 13.4, 12.8, 11.13, and 10.18 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This release contains bug fixes and improvements done by the PostgreSQL community. As a reminder, Amazon Aurora PostgreSQL 9.6 will reach end of life on January 31, 2022.

We are excited to announce that Amazon IoT Device Management resources are now supported on Amazon CloudFormation. With a few clicks, you can now use a CloudFormation template to pre-configure and deploy IoT fleet management infrastructure like Job Templates, Fleet Metrics, and IoT Logging settings in a standardized and repeatable way across multiple regions and accounts.

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data at scale.

Amazon Direct Connect now supports IPv6 in the Amazon Web Services China regions. You can now use IPv6 with your Amazon Direct Connect connection to access cloud resources such as Amazon EC2 Virtual Private Clouds (VPCs) or Amazon S3 buckets from your on-premises network. To connect to other Amazon Web Services products using IPv6 addresses, check the service documentation to verify that IPv6 addressing is supported.

CloudWatch Synthetics now supports using an Amazon Key Management Service (Amazon KMS) key that you provide to encrypt the canary run data that CloudWatch Synthetics stores in your Amazon Simple Storage Service (Amazon S3) bucket. By default, these artifacts are encrypted at rest using an Amazon managed key.

Starting today, you can configure EC2 Fleet and Spot Fleet to automatically terminate a Spot Instance when using Capacity Rebalancing. With Capacity Rebalancing, EC2 Fleet and Spot Fleet attempt to replace a Spot Instance when it is at an elevated risk of interruption as indicated by the EC2 Instance rebalance recommendation signal. Until now, EC2 Fleet or Spot Fleet launched a replacement Spot Instance without terminating the Spot Instance that received a rebalance recommendation, meaning you needed to either manually terminate the instance once workload rebalancing was completed, or let the instance run until it was interrupted by EC2. Now, you can set up EC2 Fleet or Spot Fleet to automatically terminate the instance that received a rebalance recommendation with a specified termination delay.

Amazon Relational Database Service (Amazon RDS) now offers the ability to specify an Amazon Key Management Service (KMS) customer master key (CMK) from a different account when exporting an Amazon RDS Snapshot to Amazon S3. This option helps customers organize and consolidate their KMS keys by eliminating the need to create keys in each account that has snapshots.

Amazon IoT Core now enables customers in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD to customize the behavior of their data endpoints, making it simpler to onboard IoT applications with existing devices in the field. Customers can now configure their data endpoints with custom domain names and associated server certificates stored in Amazon Certificate Manager. They can also attach custom authorizers, and create multiple data endpoints for their account.

Amazon Security Hub now supports Amazon Virtual Private Cloud (VPC) endpoints via Amazon PrivateLink so that you can securely initiate API calls to Security Hub from within your VPC without requiring the traffic to traverse across the Internet. Amazon PrivateLink support for Security Hub is now available in all Amazon Web Services Regions where Security Hub is available, including in the Amazon Web Services China (Beijing) Region operated by Sinnet and in the Amazon Web Services China (Ningxia) Region operated by NWCD. To try the new feature, you can go to the VPC console, API, or SDK to create a VPC endpoint for Security Hub in your VPC. This creates an elastic network interface in your specified subnets. The interface has a private IP address that serves as an entry point for traffic that destined for Security Hub. You can read more about Security Hub’s integration with PrivateLink here.

Today, Amazon Backup Vault Lock is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This new feature enhances customers’ ability to protect backups from inadvertent or malicious actions. It helps customers implement safeguards that ensure they are storing their backups using a Write-Once-Read-Many (WORM) model.

Amazon App Mesh Metric Extension is now generally available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With the Metric Extension, App Mesh customers can now opt in for a limited number of aggregated metrics from their virtual services. App Mesh Metric Extension is available to all customers running workloads on Amazon EC2, Amazon ECS, Amazon EKS, and self-managed Kubernetes. Amazon App Mesh is a service mesh that provides application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure.

Workflow Studio is a new visual workflow designer for Amazon Step Functions that makes it faster and easier to build workflows using a drag and drop interface in the Amazon Web Services console.

Amazon WorkSpaces now offers APIs which you can use to keep your WorkSpaces images up-to-date with the latest Amazon Web Services drivers. Previously, WorkSpaces images were kept up to date by manually launching a WorkSpaces instance, installing driver updates and creating a new image. With this launch, you can use WorkSpaces APIs to know if latest Amazon Web Services drivers are available for your images, install those updates and create updated images. After the new image is created, you can test it before updating your production bundles or sharing the image with other Amazon Web Services accounts. Keeping your WorkSpaces up to date with latest Amazon Web Services drivers lets you leverage the benefits of the latest instance types and other infrastructure components offered by Amazon Web Services.

Amazon EC2 Inf1 instances and Amazon Neuron now support YOLOv5 and ResNext deep learning models as well as the latest open-source Hugging Face Transformers. We have also optimized the Neuron compiler to enhance performance and you can now achieve an out-of-the box 12X higher throughput than comparable GPU-based instances for pre-trained BERT base models. These enhancements enable you to effectively meet your high-performance inference requirements and deploy state of the art deep learning models at low cost.

Following the release of updates in MySQL version 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor version 8.0.26. We recommend that you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon DocumentDB (with MongoDB compatibility) is a database service that is purpose-built for JSON data management at scale, fully managed and integrated with Amazon Web Services, and enterprise-ready with high durability. 

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data at scale.

Amazon DocumentDB (with MongoDB compatibility) is a database service that is purpose-built for JSON data management at scale, fully managed and integrated with Amazon Web Services, and enterprise-ready with high durability.

We are announcing the support of using Apache Spark SQL to update Apache Hive metadata tables when using Amazon EMR integration with Apache Ranger.

Amazon Lake Formation now supports cross account sharing of databases and tables in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now create cross account data lakes to access data across your organization and eliminate data silos.

Today we are announcing the availability of Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD provided License included Red Hat Enterprise Linux (RHEL) with Microsoft SQL Server Amazon Machine Images (AMI). Customers can now combine the scale, performance, and elasticity of Amazon EC2 with consistency, reliability, and high performance of Microsoft SQL Server on RHEL to deploy mission critical transactional systems and data warehouses.

You can now manage Amazon Step Functions workflows in the Amazon Batch console, where you can automate Batch jobs to help build long-running business-critical workflows that require machine learning, data analysis or overnight batch processing.

Amazon EC2 Auto Scaling Instance Refresh now supports performing updates to the Auto Scaling group (ASG) configuration as well as the ability to skip replacing already updated instances during an Instance Refresh. These new capabilities make it easier to deploy changes to an Amazon Machine Image (AMI) or install additional software in a controlled manner. To help you further deploy updates on Auto Scaling instances, we are also announcing four new Instance Refresh-based event notifications available through Amazon EventBridge.

AWS Elemental MediaConvert now supports rich text rendering of IMSC 1.1 text profile subtitles and the TTML subtitle format. Both of these formats allow detailed formatting that includes text size, position, justification, color, styling, and shadowing. For many viewers, on screen subtitles are an important part of the viewing experience and this feature gives subtitle authors more creative control of how text is rendered on screen. Additionally, IMSC and TTML allow greater text localization options including right-to-left text, rubies, and vertical text.

You can now launch Apache ActiveMQ 5.16.3 brokers on Amazon MQ. This version update to ActiveMQ contains several fixes and improvements compared to the previously supported version, ActiveMQ 5.16.2.

Amazon SageMaker announces a new set of capabilities that will enable interactive Spark based data processing from SageMaker Studio Notebooks. Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps required to prepare data, as well as build, train, and deploy models. With a single click, data scientists and developers can quickly spin up Studio Notebooks to interactively explore datasets and build ML models.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, now supports automatic data expiration by using time-to-live (TTL) settings. With TTL, you set expiration times on attributes or rows in your tables, and Keyspaces automatically deletes those expired attributes or rows. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.8.1 for new and existing clusters. Apache Kafka 2.8.1 includes several bug fixes. To learn more about these fixes you can review the Apache Kafka release notes for 2.8.1.

Amazon Elastic Container Services (ECS) now enables customers to manage containerized GPU-based workloads running on-premises infrastructure using Amazon ECS Anywhere. With Amazon ECS Anywhere GPU support, customers can deploy GPU based applications that need to remain on premise due to regulatory, network latency, data residency, or other requirements. Additionally, enterprises can make use of their existing investment on GPU compute capacity to run machine learning, 3D visualization, image processing and big data workloads without the need to transfer data to the cloud.

Network Load Balancer (NLB) now supports version 1.3 of the Transport Layer Security (TLS) protocol, enabling you to optimize the performance of your backend application servers while helping to keep your workloads secure. TLS 1.3 on NLB works by offloading encryption and decryption of TLS traffic from your application servers to the load balancer, and provides encryption all the way to your targets. TLS 1.3 is optimized for performance and security by using one round trip (1-RTT) TLS handshakes and only supporting ciphers that provide perfect forward secrecy. As with other versions of TLS, NLB preserves the source IP of the clients to the back-end applications while terminating TLS on the load balancer.

Amazon Direct Connect now supports inter-region routing for public access resources in the Amazon Web Services China regions. Amazon Direct Connect customers in any point of presence in China can now directly access public resources in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Today, Amazon EC2 Auto Scaling announced the ability to describe Auto Scaling groups using tags. Tag-based filtering makes it easier for you to view and manage your Auto Scaling groups based on the tags that you are interested in. Each tag is a simple label consisting of a customer-defined key and an optional value.

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now supports cross-cluster replication, enabling  you to automate copying and synchronizing of indices from one domain to another at low latency in same or different Amazon Web Services accounts or Regions. With cross-cluster replication, you can achieve high availability for your mission critical applications with sequential data consistency.

NoSQL Workbench for DynamoDB, a client-side tool that helps you design, visualize, and query nonrelational data models by using a point-and-click interface, now helps you import and automatically populate sample data to help build and visualize your data models. Now, you can import sample data from .csv files into new and existing data models. You also can export your query results in .csv format from the NoSQL Workbench operation builder.

Amazon Glue Studio is a new visual interface for Amazon Glue that makes it easy for extract-transform-and-load (ETL) developers to author, run, and monitor Amazon Glue ETL jobs. You can now use a simple visual interface as well as SQL to compose jobs that move and transform data, and then run them using Amazon Glue’s serverless engine. You can use Amazon Glue Studio’s job run dashboard to monitor ETL job execution and confirm that your jobs are operating as intended.

Amazon ElastiCache for Redis and Memcached now supports Graviton2 M6g and R6g instance families in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers choose Amazon ElastiCache for workloads that require blazing-fast performance with sub-millisecond latency and high throughput. Now, with Graviton2 M6g and R6g instances, customers can enjoy up to a 45% price/performance improvement over previous generation instances. Graviton2 instances are now the default choice for Amazon ElastiCache customers.  

We have updated the Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) management console to improve your overall experience with configuring and managing your OpenSearch and Elasticsearch clusters on the service. The new console helps you create and update domains, as well helps you get information about your domains, more easily.

Query Result Cache is an in-memory solution to increase Gremlin query performance for long and short running queries, and queries that need pagination of results. Using Query Results Cache, developers can now specify if they would like to cache the results of a Gremlin query for faster access.

You can now use Amazon Neptune Auto Scaling to automatically add or remove Read Replicas in response to changes in performance metrics you specify. Neptune Read Replicas share the same underlying volume as the primary instance and are well suited for read scaling. With Neptune Auto Scaling, you can specify a desired value for CloudWatch (CW) metrics for your Replicas such as average CPU utilization. Neptune Auto Scaling adjusts the number of Read Replicas to keep the CW metric closest to the value you specify.

Multi-Region Replication support for Amazon Directory Service for Microsoft Active Directory, also known as Amazon Web Services Managed Microsoft AD, is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Now you can deploy and use a single Amazon Web Services Managed Microsoft AD (Enterprise Edition) directory across both Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. This makes it easier and more cost-effective for you to deploy and manage your Microsoft Windows and Linux workloads. After you enabled this feature, with the automated multi-region replication capability you get higher resiliency, while your applications use a local directory for optimal performance.

Amazon EC2 now supports Hibernation for Ubuntu 20.04 LTS operating system. Hibernation allows you to pause your EC2 Instances and resume them at a later time, rather than fully terminating and restarting them. Resuming your instance lets your applications continue from where they left off so that you don’t have to restart your OS and application from scratch. Hibernation is useful for cases where rebuilding application state is time-consuming (e.g., developer desktops) or an application’s start-up steps can be prepared in advance of a scale-out.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostGIS major version 3.1. This new version of PostGIS is available on PostgreSQL versions 13.4, 12.8, 11.13, 10.18, and higher.

Following the announcement of updates to the PostgreSQL database, we have added support in Amazon Relational Database Service (Amazon RDS) for PostgreSQL minor versions 13.4, 12.8, 11.13, 10.18, and 9.6.23. This release closes security vulnerabilities in PostgreSQL and contains bug fixes and improvements done by the PostgreSQL community.

Today, we are making it easier for customers to view and update the alternate contacts on their Amazon Web Service accounts using a programmatic option accessible through the Amazon Web Service Command Line Interface (CLI) and Amazon Web Services SDK. Customers can now use these programmatic options ensure that their billing, operations, and security contacts for their account are up to date to ensure important notifications about their Amazon Web Service accounts are delivered to the right individuals.

Amazon OpenSearch Service now supports OpenSearch Dashboards Notebooks, a new feature that help enable OpenSearch users to interactively and collaboratively develop rich reports backed by live data and queries. A notebook is a document made up of cells or paragraphs that can combine markdown, SQL and Piped Processing Language (PPL) queries, and visualizations with support for multi-timelines so that users can more easily tell a story. Notebooks can be developed, shared as an OpenSearch Dashboards link, PDF or PNG, and refreshed directly from OpenSearch Dashboards to foster data driven exploration and collaboration among OpenSearch users and their stakeholders. Common use cases for notebooks includes creating postmortem reports, designing run books, building live infrastructure reports, or even documentation.

Amazon Pricing Calculator is now available in China regions and can be used to estimate costs of using Amazon Web Services in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now provision devices using Amazon IoT Core Just-in-Time Provisioning and Just-in-Time Registration features without having to send the entire trust chain on devices’ first connection to IoT Core. Until now, customers were required to configure their devices to present both the registered CA certificate and the client certificate signed by the registered CA certificate as part of the TLS handshake on devices’ first connection to IoT Core. Effective today, Amazon IoT core makes it optional for customers to present the CA certificate on devices’ first connection to IoT Core when using Just-in-Time Provisioning and Just-in-Time Registration. This enhancement makes it easy for customers to migrate brownfield devices to Amazon IoT Core, example, from customers’ self-managed cloud solutions.

Amazon App Mesh is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon App Mesh is a service mesh that provides application-level networking to make it easy for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

You can now launch NAT Gateways in your Amazon Virtual Private Cloud (VPC) without associating an internet gateway to your VPC. Internet Gateway is required to provide internet access to the NAT Gateway. However, some customers use their NAT Gateways with Transit Gateway or virtual private gateway to communicate privately with other VPCs or on-premises environments and thus, do not need an internet gateway attached to their VPCs.

You can now configure routes in your subnet route tables to forward traffic between two subnets in a VPC, via virtual appliances such as network firewalls, intrusion detection and protection systems, etc.

Amazon WorkSpaces now offers new bundles powered by Windows Server 2019, providing a Windows 10 desktop experience along with a 64-bit Microsoft Office 2019 Professional Plus bundle option. The feature brings a refreshed Windows 10 desktop experience, and enables customers to run applications that require recent Windows versions.

Today, we’re pleased to announce Amazon Glue version 3.0, a new version of Amazon Glue that accelerates your data integration workloads in Amazon Web Services. Amazon Glue 3.0 introduces a performance-optimized Spark runtime that includes optimizations from Amazon Glue and Amazon EMR, and is based on open-source Apache Spark 3.1.1. The Amazon Glue 3.0 runtime optimizes both read and write access to Amazon Simple Storage Service (Amazon S3), using faster vectorized readers and Amazon S3 optimized output committers. It also optimizes access to the Amazon Glue Data Catalog with the use of partition predicates. For highly partitioned datasets, Glue 3.0 improves the execution speed by filtering out unnecessary partitions using partition indexes. Amazon Glue 3.0 runtime is also fully integrated with Amazon Lake Formation, so you can secure your data access in different granularities like database-, table-, column-, row-, and cell-level access control using resource names and Amazon Lake Formation tag based access control. With Amazon Glue 3.0, we also bring in new capabilities to improve user experience for monitoring, debugging, and tuning Spark applications. Spark 3.1.1 enables an improved Spark UI experience that includes new Spark executor memory metrics and Spark Structured Streaming metrics that are useful for Amazon Glue streaming jobs. Similar to Amazon Glue 2.0, Amazon Glue 3.0 reduces startup latency and improve the overall job completion times.

Elastic Load Balancing now supports forwarding traffic directly from Network Load Balancer (NLB) to Application Load Balancer (ALB). With this feature, you can now use Amazon PrivateLink and expose static IP addresses for applications built on ALB.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports four new customer modifiable sqlnet.ora client parameters for the Oracle Native Network Encryption (NNE) option in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon RDS for Oracle already supports server parameters which define encryption properties for incoming sessions, these client parameters apply to outgoing connections such as those used by database links.

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps required to prepare, build, train and tune, deploy and manage models. With a single click, data scientists and developers can quickly spin up SageMaker Studio Notebooks for exploring datasets and building models. Now you can use lifecycle configurations to automate customizations for your Studio development environment.

With Amazon IoT Device Defender, customers can now verify an alarm based on their investigation of detected behavior anomalies. They can verify an alarm as True positive, Benign positive, False positive, or Unknown and provide a description of their verification. Users, such as a security or operational team, can use this to manage alarms and improve response time.

Amazon Relational Database Service (RDS) for Oracle now supports version 21.1 of Oracle Application Express (APEX) for 12.1, 12.2 and 19c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser.

Amazon Storage Gateway now makes it easier and faster for you to search, view, and manage your virtual tapes stored in Amazon Web Services China regions using Tape Gateway. From the Tapes page in the Storage Gateway management console, you can now quickly search for tapes using common filters such as tape barcode and status. You simply select the desired filter from the drop-down menu and quickly narrow down your search to the relevant set of tapes, saving you time and management overhead. For example, to delete archived tapes exceeding your defined retention period, you can use the Archived filter, select the desired date range, and delete all tapes that match your specified filter in just a few clicks.

You can now get real-time inference results from your models hosted by Amazon SageMaker directly from Amazon SageMaker Studio, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You now can use Amazon CloudTrail to filter and retrieve Amazon DynamoDB Streams data-plane API activity, giving you more granular control over which DynamoDB API calls you want to selectively log and pay for in CloudTrail and to help address compliance and auditing requirements.

Amazon Firewall Manager now enables customers to centrally deploy Amazon WAF rate-based rules across accounts in their organization. An Amazon WAF rate-based rule allows customers to track the rate of requests for each originating IP address and trigger a rule action on IPs once it goes over the limit. With this launch, security administrators on Amazon Firewall Manager can now deploy rate-based rules across accounts, mandating request limits per account, using Firewall Manager security policy for Amazon WAF.

Amazon Security Hub is now integrated with Amazon Organizations in Amazon Web Services China (Beijing) Region operated by Sinnet and in the Amazon Web Services China (Ningxia) Region operated by NWCD to automatically enable Security Hub in all current and newly created accounts in your organization. The integration also allows you to add up to 5,000 Amazon Web Services accounts under a single delegated administrator account. Once you have enabled the integration, any new account created within the organization is automatically enabled with Security Hub.

We are launching Audit One-Click for Amazon IoT Device Defender. Audit One-Click makes it easy for Amazon IoT Core customers to improve their security baseline by making it possible to start auditing their account and IoT devices against security best practices with a single click.

Amazon S3 Access Points customers can now configure Amazon CloudWatch request metrics. With this launch, S3 request metrics can now be generated for all objects in a bucket, or you can generate metrics for specific combinations of prefix, object tags, or access points. With S3 Access Points, you can easily build the right access controls to shared dataset and now with the support of filtering by access points, you can monitor the request patterns by access controls. You can use the S3 Management Console, SDK, API, or Amazon CloudFormation to enable S3 request metrics. The metrics are available at 1-minute intervals and can be monitored on both the Amazon S3 Console or on Amazon CloudWatch Console.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports the simultaneous use of multiple authentication modes and updates to encryption-in-transit settings for Amazon MSK clusters. These features allow you to migrate your clients seamlessly from one authentication mode to another and update encryption settings to match those changes.

You can now launch RabbitMQ 3.8.22 brokers on Amazon MQ. This release includes a fix for an issue with queues using per-message TTL (time to live), identified in the previously supported version, RabbitMQ 3.8.17, and we recommend upgrading to RabbitMQ 3.8.22.

The Amazon Redshift Data API enables you to painlessly access data from Amazon Redshift with all types of traditional cloud-native, and containerized, serverless web services-based applications and event-driven applications. You can use the Data API with languages supported with the Amazon SDK such as Python, Go, Java, Node.js, PHP, Ruby, and C++.

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now supports index transforms that enables customers to extract significant information from large data sets and store summarized views in new indices. Customers can derive new insights, further analyze, and visualize trends from the new summary index.

Amazon OpenSearch Service now supports data streams to help simplify management of time-series data such as logs, metrics, and traces. Data streams abstract the underlying indexes required for your time-series data, the rollover process, and the optimizations required to efficiently manage and query time-based data, reducing operational overhead. You can move your older rolled-over indexes that are part of a data stream to UltraWarm and beyond that to cold storage, helping you retain data for longer, cost-effectively.

You can now package and deploy Amazon Lambda functions as a container image of up to 10 GB. This makes it easy to build Lambda based applications using familiar container tooling, workflows, and dependencies. Just like functions packaged as ZIP archives, functions deployed as container images will benefit from Amazon Lambda’s operational simplicity, automatic scaling with sub-second startup times, high availability, and native integrations with 140 Amazon Web Services. Customers can start building functions as container images by using either a set of Amazon Web Services base images for Lambda, or by using one of their preferred community or enterprise images.

Amazon IoT SiteWise now supports three new enhancements to Amazon IoT SiteWise formula expressions to allow users greater flexibility in monitoring their IoT assets in near real-time.

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easier for scientists, researchers, and IT administrators to deploy and manage high performance computing (HPC) clusters on Amazon Web Services. HPC clusters are traditionally collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads.

Amazon CloudWatch Metric Math now supports 16 new functions including RUNNING_SUM, TIME_SERIES, and DATAPOINT_COUNT. Two new FILL variants, two logarithmic functions, two functions for calculating the difference between each datapoint, and seven time functions are also now supported. With CloudWatch Metric Math, you can aggregate and transform metrics to create custom visualizations of your health and performance metrics. The new functions announced today allow you to view the logarithmic values of your metric, better visualize the change in latency over time, and calculate the cumulative sales of a product.

Amazon EC2 now supports Hibernation for On-Demand Nitro-based instances running Red Hat Enterprise Linux (RHEL) version 8, CentOS version 8, and Fedora version 34 onwards. Hibernation allows you to pause your EC2 Instances and resume them at a later time, rather than fully terminating and restarting them. Resuming your instance lets your applications continue from where they left off so that you don’t have to restart your OS and application from scratch. Hibernation is useful for cases where rebuilding application state is time-consuming (e.g., developer desktops) or an application’s start-up steps can be prepared in advance of a scale-out.

Amazon Elasticsearch Service has a new name: Amazon OpenSearch Service. This change coincides with the addition of support for OpenSearch 1.0. You can now run and scale both OpenSearch and Elasticsearch (until version 7.10) clusters on Amazon OpenSearch Service and get all of the same benefits you have enjoyed so far from Amazon Elasticsearch Service.

Amazon RDS for SQL Server now supports MSDTC JDBC XA transactions. With MSDTC you can either execute the transaction using SQL Server as the Transaction manager using linked servers, or you can promote MSDTC running on the same host as the Client application to the role of Transaction manager.

Starting today Amazon Relational Database Service (RDS) for Oracle supports the auto upgrade of Oracle time zone files. The Oracle time zone file auto upgrade feature provides an automated way to upgrade the DST timezone file version in the database instance. Customers observing timezones with TIMESTAMP WITH TIME ZONE data types in their databases previously had to provision a new database instance and migrate their data manually. These customers can now greatly benefit from this feature by automating the upgrade of their current time zone file version to the latest available version in the database instance.

We're excited to announce that Redshift ML is now generally available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Redshift ML enables you to create, train, and deploy machine learning (ML) models using familiar SQL commands. With Amazon Redshift ML, you can now leverage Amazon SageMaker, a fully managed machine learning service, without moving your data or learning new skills.

Amazon Web Services Lambda now supports Python 3.9 in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. You can now author Amazon Lambda functions in Python 3.9 and use its new features, such as support for TLS 1.3, new string and dictionary operations, and improved time zone support. Python 3.9 also includes performance optimizations that you can benefit from without making any code changes.

You can now create Amazon FSx for Windows File Server file systems that span Amazon Web Services Availability Zones (AZs) in Amazon Web Services China (Beijing) Region, operated by Sinnet, making it easy to deploy Windows file storage in Amazon Web Services with high availability and redundancy across multiple AZs. Multi-AZ file systems are designed to provide continuous availability to data, even in the event that an AZ is unavailable—supporting business-critical workloads such as business applications, web serving environments, and Microsoft SQL Server.

The Amazon S3 Intelligent-Tiering storage class automates storage cost savings for a wider range of workloads by eliminating the minimum storage duration, and eliminating the low per-object monitoring and automation charges for objects smaller than 128 KB. S3 Intelligent-Tiering is the only cloud storage class that delivers automatic storage cost savings when data access patterns change, without performance impact or operational overhead. Previously, S3 Intelligent-Tiering was optimized for long-lived objects stored for a minimum of 30 days and objects larger than 128 KB. With these changes, S3 Intelligent-Tiering is the ideal storage class for data with unknown, changing, or unpredictable access patterns, independent of object size or retention period. You can use S3 Intelligent-Tiering as the default storage class for data lakes, analytics, and new applications.

Amazon Database Migration Service (Amazon DMS) expands functionality by adding support for migrating multiple databases in one task using MongoDB as a source. Using Amazon DMS, you can now group multiple databases of a MongoDB cluster and migrate them using one DMS task to any Amazon DMS supported targets including Amazon DocumentDB (with MongoDB compatibility) with minimal downtime. 

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions and 10.5.12, 10.4.21, 10.3.31, and 10.2.40. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Elastic File System (EFS) now supports Intelligent-Tiering, a new capability that makes it easier for customers to optimize costs for shared file storage, even when access patterns change. EFS Intelligent-Tiering is designed to help you achieve the right price and performance blend for your application file data by placing your file data in a storage class based on file access patterns.

NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Starting today, you can configure Amazon Systems Manager OpsCenter to automatically aggregate security findings from Amazon Security Hub into OpsCenter as operational issues. This enables operations engineers and IT professionals to view, investigate, and resolve security issues along with other operational issues in OpsCenter. Additionally, you can now view Security Hub findings in Systems Manager Explorer. Systems Manager OpsCenter enables operators to track and resolve operational items related to Amazon Web Services resources in a central place and Systems Manager Explorer is an operations dashboard that provides a view of your operations data across your Amazon Web Services environment. Security Hub gives you a comprehensive view of your security alerts and security posture across your Amazon Web Services accounts.

Amazon Relational Database Service (RDS) for Oracle now supports the July 2021 Patch Set Update (PSU) for Oracle Database 12.1 and Release Updates (RU) for Oracle Database 12.2 and 19c.

Amazon Database Migration Service (Amazon DMS) expands functionality by supporting automatic segmentation using MongoDB and Amazon DocumentDB (with MongoDB compatibility) as a source. Using Amazon DMS, you can configure DMS tasks to segment the collection of a MongoDB cluster automatically and migrate them in parallel to any Amazon DMS supported targets including Amazon DocumentDB (with MongoDB compatibility) with minimal downtime.

Amazon Kinesis Data Firehose can now continuously partition streaming data by keys within data like “customer_id” or “transaction_id”, and deliver data grouped by these keys into corresponding Amazon Simple Storage Storage (Amazon S3) prefixes, making it easier for you to perform high performance, cost efficient analytics on streaming data in Amazon S3 using Amazon Athena, Amazon EMR, and Amazon Redshift Spectrum.

Today, Amazon IoT is announcing the general availability of several new enhancements for Amazon IoT Device Management. These new features will enable customers to better monitor characteristics of their fleet over time, diagnose connectivity issues, and perform aggregation queries to group devices across different values.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL versions 9.6.22, 10.17, 11.12, and 12.7. These releases contain bug fixes and improvements by the PostgreSQL community. As a reminder, Amazon Aurora PostgreSQL 9.6 will reach end of life on January 31, 2022. Minor version 9.6.22 is limited to upgrades for clusters already running Aurora PostgreSQL 9.6.

Amazon Aurora PostgreSQL-Compatible Edition now supports the oracle_fdw extension, which allows your PostgreSQL database to connect to and retrieve data stored in Oracle databases.

Amazon Aurora with PostgreSQL compatibility now supports major version 13. PostgreSQL 13 includes improved functionality and performance from new features and performance from new features and enhancements such as de-duplication of B-tree index entries, improved performance for queries that use partitioned tables, incremental sorting to accelerate data sorts, parallel processing of indexes with the VACUUM command, more ways to monitor activity within a PostgreSQL database, new security capabilities, and more. This release also adds support for bool_plperl, which simplifies writing Perl procedures.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now offers greater insight into the usage of Amazon MSK resources through 19 new metrics published to Amazon CloudWatch. These metrics offer customers additional visibility into resource utilization across CPU, storage, and the network, enabling customers to maximize the performance and uptime of their Apache Kafka applications interacting with Amazon MSK.

Starting today, customers will be able to automatically deprecate their Amazon Machine Images (AMIs) with Amazon Data Lifecycle Manager (Amazon DLM). Deprecating an AMI prevents outdated images from being accessed by new users after a specific time, helping to ensure that any new EC2 Instances are launched from only the most up-to-date AMIs. With Amazon DLM, customers can automate when to deprecate their AMIs, removing the need for complicated custom scripts.

Following a preview phase in which we analyzed and incorporated customer feedback, we have completed the new Amazon DynamoDB console, making it even easier for you to manage your data and resources. In addition to a refreshed design, the new pages provide you with additional contextual information about database resources and DynamoDB features throughout the console. The new navigation makes it simpler for you to complete your tasks by guiding you through the different steps, and by focusing your work around the relevant features. The new console also gives you access to the latest DynamoDB features.

The Amazon EC2 Instance Metadata Service, Amazon Time Sync Service, and Amazon VPC DNS server can now be accessed over IPv6 endpoints by instances built on the Nitro System. These local instance services have IPv6 addresses that can be accessed from your Amazon EC2 instances. These IPv6 endpoints use Unique Local Addresses (ULA); IPv6 for local instance services is useful for running software and containers in an IPv6-only single stack configuration. Additionally, if you are starting your transition to IPv6 in a dual-stack environment, the endpoints for the Instance Metadata Service, Amazon Time Sync Service, and Amazon VPC DNS are available over both IPv4 and IPv6.

Amazon Relational Database Service (Amazon RDS) now supports Boolean DB parameter expressions in PostgreSQL parameter groups, which enables database administrators to optimize more database configurations with fewer parameter groups.

Amazon IoT Core is now integrated with Amazon PrivateLink, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, enabling you to create private IoT Core data endpoints in your Virtual Private Cloud (VPC) using Interface VPC Endpoints. Amazon PrivateLink is an Amazon Web Services technology that enables private communication between your VPC and Amazon Web Services, such as IoT Core, by using private IP addresses that are not reachable from the public internet and do not require an internet gateway or NAT device to access. When used in conjunction with one of the many network-to-VPC connectivity options, your IoT Core VPC endpoint can function as though it were hosted directly on your private network.

Amazon Database Migration Service (Amazon DMS) expands functionality by adding support for MongoDB 4.2 and 4.4 as sources. Using Amazon DMS, you can now migrate data live from MongoDB 4.2 and 4.4 clusters to any Amazon DMS supported targets including Amazon DocumentDB (with MongoDB compatibility) with minimal downtime.

Amazon Virtual Private Cloud (VPC) now supports resource identifiers and tags for security group rules. You can now manage VPC security group rules using the assigned rule IDs and resource tags.

Retained messages is a standard MQTT feature that provides an easy way for you to store the latest important message on a topic for future subscribers. With Amazon IoT Core, you can now use retained messages to easily push configuration information or important updates to devices without knowing exactly when they will come online.

Amazon Database Migration Service (Amazon DMS) expands functionality by adding support for Redis and Amazon ElastiCache for Redis as a target. Redis is a fast, open-source, in-memory key-value data store for use as a database, cache, message broker, and queue. Amazon ElastiCache for Redis combines the speed, simplicity, and versatility of open-source Redis with manageability, security, and scalability from Amazon to power the most demanding real-time applications. Using AWS DMS, you can now migrate data live any AWS DMS supported sources to Redis data store with minimal downtime.

Amazon RDS for SQL Server now includes enhancements to the Auto Minor Version Upgrade feature for Amazon RDS for SQL Server database instances. Auto Minor Version Upgrade is a feature that you can enable to have your database automatically upgraded when a new minor database engine version is available.

Amazon Database Migration Service (Amazon DMS) expands its functionality by supporting parallel apply when using Redshift as a target during full load. Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. By taking advantage of the multithreaded full load task settings, you can improve the performance of your initial migration from any DMS supported sources to Amazon Redshift.

Starting today, Amazon EMR on Amazon Elastic Kubernetes Service (Amazon EKS) is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

CloudWatch Synthetics now supports visual monitoring, allowing you to catch visual defects on your web application’s end user experience. CloudWatch Synthetics supports monitoring your REST APIs, URLs, and website content by running scripts 24/7. The new visual monitoring feature makes it possible to catch visual defects that cannot be scripted.

You can now hibernate Amazon EC2 C5d, M5d, and R5d Instances. Hibernation allows you to pause your EC2 Instances and resume them at a later time, rather than fully terminating and restarting them. Resuming your instance lets your applications continue from where they left off so that you don’t have to restart your OS and application from scratch. Hibernation is useful for cases where rebuilding application state is time-consuming (e.g., developer desktops) or an application’s start-up steps can be prepared in advance of a scale-out.

Starting today, you can split your shared costs within your Amazon Cost Categories by defining Split Charge rules. Cost Categories enables you to group your cost and usage information into meaningful categories based on dimensions such as accounts, tags, services, charge types, and even other Cost Categories. Every organization has a set of costs that are shared by multiple teams, business units, or financial owners, for instance, data transfer costs, enterprise support, or operational costs of a central infrastructure team. These costs are not directly attributable to a single owner, and hence cannot be categorized into a singular Cost Category value. With Split Charge rules, you can now equitably allocate these costs among your Cost Category values to understand and report the true cost of running your business on Amazon Web Services.

You can now use Amazon IoT Core Credential Provider to request temporary, limited-privilege security token that are valid up to 12 hours and use the token to sign and authenticate any Amazon Web Services request. Until now, the Amazon IoT Core Credential Provider issued security tokens that were valid up to 1 hour only. Now with tokens valid up to 12 hours, customers have the ability to optimize the number of calls made to the Credential Provider by caching the credentials for a longer duration per their business needs.

Starting today, Amazon Firewall Manager is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon IoT Analytics now supports JOIN operation on Amazon IoT Analytics data stores, enabling customers to combine data from two or more Amazon IoT Analytics data stores based on a common attribute between them. Customers can now create an Amazon IoT SiteWise data backed Amazon IoT Analytics data store and join it with other S3 backed Amazon IoT Analytics data stores to discover insights about their industrial assets such as viewing properties and relationships between various Amazon IoT SiteWise assets, run statistical queries on Amazon IoT SiteWise and S3 data, and perform advanced analytics. You can use this feature to create an Amazon IoT Analytics SQL query data set that uses a join operation (inner join, left, right and full outer join, self join and cross join ) to combine two or more customer managed Amazon IoT Analytics data stores and Amazon IoT SiteWise managed data stores on a join condition using attribute names that exist in both data stores.

Amazon IoT SiteWise is a managed service to collect, store, organize and monitor data from industrial equipment at scale. Today, we are announcing support for exporting your Amazon IoT SiteWise data to Amazon S3. With this feature, you can configure Amazon IoT SiteWise to export your equipment data to your industrial data lake in Amazon S3. Once your data is exported, you can leverage a host of other Amazon Web Services services such as Amazon IoT Analytics, Amazon Athena, Amazon SageMaker, and Amazon QuickSight, to perform analytics and build machine learning (ML) models. You can also join and augment your equipment data from Amazon IoT SiteWise with other data sources in your data lake (such as from Enterprise Resource Planning systems) to get even richer insights that enable you to optimize your maintenance and operations activities.

Starting today, ED25519 SSH key pairs are generally available. Customers can now use ED25519 keys to prove their identity when connecting to an Amazon EC2 instance.

Amazon Direct Connect makes it easy to establish resilient network connectivity from your premises to Amazon Web Services regions. Using Amazon Direct Connect, you can establish private connectivity between Amazon Web Services China cloud and your data center, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than connections over the public internet.

Amazon API Gateway enables customers to authenticate clients using certificate-based mutual TLS, where digital certificates are exchanged between the client and API Gateway before a secure connection is established. Previously, only certificates issued by the qualified CA in the Amazon Certificate Manager (ACM) could be used as the server certificate when configuring mutual TLS in API Gateway. Starting today, customers can use a server certificate issued by a third-party certificate authority (CA) in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Redshift, a fully-managed cloud data warehouse, now supports case-insensitive collation with column and expression level overrides. Starting today, you can use the COLLATE clause within a CREATE DATABASE statement to specify the default collation for all CHAR and VARCHAR columns in the database as case-sensitive or case-insensitive. You can also specify a COLLATE clause in a CREATE TABLE statement to specify collation for columns in that table. In addition, the COLLATE() function allows you to override the collation of a string column or an expression.

Effective August 1, 2021, Amazon is reducing data processing charges for VPC Interface Endpoints (powered by PrivateLink). The new tiered pricing will reduce the costs for accessing high-volume, data intensive services over PrivateLink.

Amazon Neptune ML, a machine learning capability for graphs that uses Graph Neural Networks (GNNs), is now generally available in Amazon Web Services China (Ningxia) Region, Operated by NWCD and Amazon Web Services China (Beijing) Region, Operated by Sinnet. Using the Deep Graph Library (DGL), an open-source library to which Amazon Web Services contributes, Neptune ML automates the heavy lifting of selecting and training the best ML model for graph data. With Neptune ML, you can improve the accuracy of most predictions for graphs by over 50% when compared to making predictions using non-graph methods.

Amazon Neptune announced support for openCypher, a popular query language for building applications with graph databases. Developers can now use openCypher with Amazon Neptune, giving them more choices to build or migrate graph applications to a highly available, secure, and fully managed graph database. Support for openCypher is compatible with our customers’ existing property graphs and developers can use both Apache TinkerPop Gremlin and openCypher queries within the same graph.

Amazon IoT SiteWise is a managed service that makes it easy to collect, store, organize and monitor data from industrial equipment at scale to help you make better, data-driven decisions.

Amazon Neptune announces support for SPARQL 1.1 Graph Store HTTP Protocol (GSP) for graphs using W3C’s Resource Description Framework (RDF). Using GSP on SPARQL 1.1 endpoints, customers now have an efficient method to interact with complete named graphs within a graph store. This can streamline building graph applications using Amazon Neptune and tools that support the W3C Recommendation GSP such as Apache Jena.

Amazon Redshift, a fully-managed cloud data warehouse, now adds support for Recursive Common Table Expression (CTE). Starting today, you can use a Recursive CTE on your Redshift cluster to query hierarchical data such as organizational charts where employees report to other employees (managers), or multi-level product orders where a product consists of many components, which in turn consist of other components.

Amazon Relational Database Service (Amazon RDS) Cross-Region Automated Backups feature is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon IoT SiteWise is a managed service that makes it easy to collect, store, organize and monitor data from industrial equipment at scale to help you make better, data-driven decisions. 

Today, we are excited to announce the general availability (GA) of Amazon GameLift, now available in Amazon Web Services China (Ningxia) Region, operated by NWCD. Trusted by successful game companies in the world like Wargaming, Behaviour Interactive, and Ubisoft, GameLift deploys, operates, and scales dedicated servers for multiplayer games. Now, GameLift and its full suite of features has increased its coverage further, while providing seamless, low-latency gameplay experiences for players.

We are excited to announce an update to Amazon GameLift, an Amazon Web Services managed service. Trusted by game companies from all over the world like Wargaming, Metalhead Software, and Illfonic, GameLift FlexMatch launched in 2017 as a feature that uses a powerful matchmaking algorithm and flexible developer-defined rules to create high-quality matches at scale.

Amazon Storage Gateway now supports Quest NetVault Backup 13 on Tape Gateway, enabling you to backup and archive data from Quest NetVault Backup to Amazon Web Services without changing your backup workflows. With this announcement, Tape Gateway supports Quest NetVault Backup 13 running on Microsoft Windows Server 2012 R2 or Microsoft Windows Server 2016.

Amazon RDS for SQL Server now supports parameter changes for full-text search. Full-text search in SQL Server lets users and applications run full-text queries against character-based data in SQL Server tables. Customers now can customize the values of two parameters for full-text search in Amazon RDS:

• ‘max full-text crawl range’: Improves full-text crawl performance, and the default value is 4. If instance has a lot of CPUs, customers can increase the value to get better performance.
• ‘transform noise words’: Suppresses the error message in a query that contains noise words and removes the noise words from the query. 

Amazon Elastic Block Store (EBS) now supports idempotent creation of EBS Volumes, allowing you to safely retry volume creation without additional side effects. Idempotent creation of EBS Volumes is intended for customers that have higher level processes such as container orchestration systems or automation scripts that create EBS volumes as part of a workflow.

Today we’re releasing a flexible and simple way to implement custom authorization logic with Amazon Lambda for Amazon AppSync GraphQL API calls.

The Amazon DynamoDB Accelerator (DAX) SDK for Java 2.x is now available and is compatible with the Amazon Web Services SDK for Java 2.x. You can build Java applications with accelerated access to DynamoDB and benefit from non-blocking I/O and other features of the latest Amazon Web Services SDK for Java.

You can now launch RabbitMQ 3.8.17 brokers on Amazon MQ. This patch update to RabbitMQ contains several fixes and enhancements compared to the previously supported version, RabbitMQ 3.8.11.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, now automatically optimizes client connections made through Amazon PrivateLink to improve availability and read/write throughput.

Today we are announcing the availability of Amazon CloudWatch metrics for Amazon Data Lifecycle Manager (Amazon DLM), which you can use to gain insight into the operations of your lifecycle policy. You can use these metrics to see exactly how many Amazon Elastic Block Store (Amazon EBS) Snapshots and EBS-backed Amazon Machine Images (AMIs) are create, copied, shared and deleted each time a lifecycle policy is run. You can also create alarms to be triggered when resources are not created, copied or deleted by the policy, allowing you to take immediate action to diagnose and fix potential policy issues.

Amazon EC2 Auto Scaling now lets you control which instances to terminate on scale-in by allowing you to provide a custom function that selects which instances to terminate. Previously, you could use one of the predefined termination policies to determine which instances Auto Scaling would terminate. (For example, the OldestLaunchTemplate termination policy would terminate instances in order of their launch template age, oldest first.) Now, you can provide a custom Lambda function that indicates which instances are safe to terminate on scale-in. This feature is useful for stateful applications where you want to control which instances Auto Scaling terminates so that your application is not disrupted on scale-in.

Amazon Lambda customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD can now provision Lambda functions with a maximum of 10,240 MB (10 GB) of memory, a more than 3x increase compared to the previous limit of 3,008 MB. With larger functions, customers can now more easily use Amazon Lambda for workloads such as batch, extract, transform, load (ETL) jobs, and media processing applications perform memory intensive operations at scale.

Today, Amazon Web Services announces the general availability of Amazon IoT SiteWise Edge, a feature of Amazon IoT SiteWise that makes it easy for industrial customers to collect, organize, process, and monitor equipment data on-premises (i.e. at the edge). SiteWise Edge software enables factory operators to get visibility into their equipment data and make decisions that help improve equipment uptime, product quality, and process efficiency.

Amazon DynamoDB Accelerator (DAX) is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet. You can create DAX clusters in this Amazon Web Services Region for your DynamoDB applications that require microsecond response times.

Amazon CloudWatch announces support for the trimmed mean statistic on CloudWatch Metrics. With trimmed mean statistics, customers gain visibility on the average performance of a metric without the noise of outliers. Trends in average performance represented by the trimmed mean can be visualized on CloudWatch Dashboards or used to set thresholds in alarms for proactive alerting.

Starting today, Amazon CloudFormation StackSets enables you to import existing CloudFormation stacks into a stack set. StackSets extend the functionality of stacks letting you create, update, or delete stacks across multiple Amazon Web Services accounts and regions with a single operation. You can now bring your existing CloudFormation stacks into the management purview of a new or an existing stack set to easily create resources, applications or environments in other Amazon Web Services accounts and Amazon Web Services Regions. That way you can avoid the process of manually replicating and managing the infrastructure in each account and region individually. For example, you can import security resources such as IAM roles described in CloudFormation into a stack set and then centrally manage and deploy those IAM roles across multiple accounts to achieve a consistent organization-wide security compliance in a scalable manner.

Amazon Resource Access Manager (RAM) helps you securely share your resources across Amazon Web Services accounts within your organization or organizational units (OUs) in Amazon Web Services Organizations, and now also with IAM roles and IAM users for supported resource types. Also with this release, Amazon RAM now provides additional managed permissions that you can use to define access to shared resources. In addition to the default managed permission defined for each shareable resource type, you now have more flexibility to choose which permissions to grant to whom for resource types that support additional managed permissions.

Amazon CloudTrail now supports logging of data events for Amazon EBS direct APIs that customers can use to identify when their Amazon EBS snapshots are accessed using the ListSnapshotBlocks, ListChangedBlocks, GetSnapshotBlock, or PutSnapshotBlock APIs by users in their Amazon Web Services account. These data events are delivered to an Amazon S3 bucket and Amazon CloudWatch Events, and help customers’ security and operations teams detect unauthorized access and take immediate action. Until now, customers could use management events logged in Amazon CloudTrail to identify when EBS snapshots were created, copied, or shared with other Amazon Web Services accounts. With this new capability, customers can also identify when users in their Amazon Web Services account access Amazon EBS snapshots at the block level using EBS direct APIs.

Amazon S3 Access Point aliases allow any application that requires an S3 bucket name to easily use an access point. With S3 Access Points, you can create hundreds of unique policies to easily control access to shared datasets. Now, you can use S3 Access Point aliases anywhere you use S3 bucket names to access data in S3. With this update, customers can use Access Point aliases with any service from Amazon Web Services, including Amazon EMR, Amazon Storage Gateway, and Amazon Athena, open-source packages, such as Apache Spark and Apache Hive, and Amazon Partner Network (APN) solutions without any code changes and at no additional cost.

AWS Elemental MediaConvert has added support for creating AVC-Intra, VC3, and XAVC mezzanine formats carried in the MXF container. Often referred to as “intermediate“ or “editing“ file formats, these lightly compressed video codecs balance quality and performance by providing visually lossless compression, lightweight decoding requirements, and native editing and playback support in non-linear editing tools.

You can now use Change Calendar to prevent desired-state configuration updates made using State Manager. Change Calendar and State Manager are both capabilities of Amazon Systems Manager. With Change Calendar, you can schedule calendar events to control when changes can be made to your Amazon Web Services resources. You can use State Manager to define, enforce, and report on desired state configuration compliance for your infrastructure. With this new integration, you can help ensure that your desired-state configuration updates do not conflict with important business activities, such as sales events or new product launches.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2017 and 2016 on the Express, Web, Standard, and Enterprise Editions.

SQL Server 2017 14.00.3381.3.v1
SQL Server 2016 13.00.5882.1.v1

Amazon IoT Analytics now supports custom partitioning on Amazon IoT Analytics data stores, enabling customers to partition their data stores based on both timestamp and non-timestamp attributes. You can use this feature to create partitioned data stores so that your queries can run more efficiently as they will scan less data and hence run faster. The option to define a custom partition scheme on an Amazon IoT Analytics data store will be made available at the time of creation for both customer managed and service managed data stores. Partitions can be created either on top of channel message attributes or data store attributes resulting from pipeline activities.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 13.3, 12.7, 11.12, 10.17, and 9.6.22. This release closes security vulnerabilities in PostgreSQL and contains bug fixes and improvements done by the PostgreSQL community.

Amazon Neptune is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet. Starting today, you can create Neptune clusters and use the Neptune Workbench for your graph applications in this Amazon Web Services Region.

AWS Elemental MediaConvert has added support for HDR10+ metadata analysis and insertion. HDR10+ is a technology that further enhances HDR video with dynamic color metadata for viewing devices to adjust automatically on a scene-by-scene basis. Using MediaConvert you now have the option to perform a HDR10+ analysis on your HDR10 content and then to insert the resulting metadata into the encoded outputs for consumption on HDR10+ enabled devices. This metadata is treated like an enhancement layer to the base HDR10 metadata and allows for backwards compatibility with HDR10 compliant devices that do not have support for the enhanced HDR10+ metadata.

Following the announcement of updates in MySQL database versions 5.7 and 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor versions 5.7.34, and 8.0.25. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community. Learn more about upgrading your database instances in the Amazon RDS User Guide; and create or update a fully managed Amazon RDS database using the latest available minor versions in the Amazon RDS Management Console.

You can now update the maintenance window start time for your Amazon MQ brokers. Every Amazon MQ broker has a weekly 2 hour maintenance window during which changes are applied. These changes can include broker version updates, configuration changes, or patching of the operating system and other system software. The maintenance window gives you control over when these changes occur, in the event either are requested or required. You can minimize downtime during maintenance by using Multi-AZ brokers. The maintenance window start time can be changed using the console, CLI, or API.

Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capabilities to your applications. We are excited to announce streaming transcription support in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Redshift native support for JSON and semi-structured data is now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It is based on the new data type ‘SUPER’ that allows you to ingest and store semi-structured data in your Amazon Redshift data warehouses. Amazon Redshift also includes support for PartiQL for SQL-compatible access to relational, semi-structured and nested data. Using the SUPER data type and PartiQL in Amazon Redshift, you can perform advanced analytics that combine classic structured SQL data (such as string, numeric, and timestamp) with the semi-structured SUPER data (such as JSON) with superior performance, flexibility, and ease-of-use.

Amazon IoT SiteWise has now launched Amazon PrivateLink support for control plane APIs to manage Amazon IoT SiteWise resources such as gateways, asset models, and assets. You can now securely create, update or delete your Amazon IoT SiteWise resources without crossing the public Internet and without using public IP addresses. For more information, please visit the updated Amazon IoT SiteWise and interface VPC endpoints page in our developer guide.

Amazon Elasticsearch Service now supports integrating with Microsoft Power BI, a business analytics service that delivers insights to enable fast, informed decisions. Powered by the Open Distro for Elasticsearch ODBC Driver you can now integrate your Microsoft Power BI environment with you Amazon Elasticsearch Service domains using the Open Distro for Elasticsearch SQL Engine.

Amazon Elasticsearch Service now supports Reporting, a new feature that enables Kibana users to generate and download reports. They can now generate reports directly from the Dashboard, Visualize and Discover panels, and export them to PDF, CSV and PNG file formats.

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. Amazon DocumentDB makes it easy and intuitive to store, query, and index JSON data.

Amazon Data Lifecycle Manager (DLM) now offers a new console experience that makes it easier for you to create, modify and manage your DLM policies. The new console allows you to create policies and modify existing policies in a more streamlined manner and provides you more information and easier access to additional resources.

Amazon Cloud Map now provides the ability to configure the negative caching for DNS queries. Amazon Cloud Map is a cloud resource discovery service available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD, that allows customers to define custom names for their application resources, such as Amazon Elastic Container Services (ECS) tasks, Amazon Elastic Compute Cloud (EC2) instances, Amazon DynamoDB tables, or any other cloud resource. They can then use these custom names to discover the network location and metadata of these cloud resources from their applications using the Amazon Web Services SDK and authenticated API queries.

Amazon Aurora PostgreSQL-Compatible Edition adds support for the pg_bigm extension. pg_bigm extension provides full text search capability in PostgreSQL. This extension allows a user to create 2-gram (bigram) index for faster full text search.

Today, we are announcing the availability of Amazon Route 53 Resolver Query Logging, which lets you log the DNS queries that originate in your Amazon Virtual Private Clouds (VPCs). With query logging enabled, you can see which domain names have been queried, the Amazon Web Services resources from which the queries originated—including source IP and instance ID—and the responses that were received.

Amazon Aurora PostgreSQL-Compatible Edition supports the Partition Manager (pg_partman) extension. pg_partman is a PostgreSQL extension that helps you to manage both time series and serial-based table partition sets, including automatic management of partition creation and runtime maintenance. pg_partman works with PostgreSQL native partitioning so users can benefit from significant performance enhancements.

Amazon Aurora PostgreSQL-Compatible Edition adds support for the pg_proctab extension. pg_proctab is a collection of stored functions that can access the operating systems process table so that system statistics can be queried through the database. pg_proctab functions make it easier to collect data on your PostgreSQL database including up-to-date information on processor and I/O statistics on SQL queries which makes troubleshooting easier.

Starting today, Amazon Aurora PostgreSQL supports the pgcron extension.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 12.6, 11.11, 10.16, and 9.6.21 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD regions. This release contains bug fixes and improvements done by the PostgreSQL community.

Amazon RDS for Oracle now supports the January 2021 Patch Set Update (PSU) for Oracle Database 12.1 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. January 2021 Release Update (RU) for Oracle Database 12.2, 18c, and 19c have already been launched.

Today we announced Amazon Identity and Access Management (IAM) Access Control for Amazon MSK. IAM Access Control is a security option offered at no additional cost that simplifies cluster authentication and Apache Kafka API authorization using IAM role or user policies to control access. By using IAM Access Control, customers no longer need to build and run one-off access management systems to control client authentication and authorization for Apache Kafka, and MSK clusters are secured using least privileged permissions by default.  

Amazon SageMaker is a fully managed service that provides every developer and data scientist with the ability to build, train, and deploy machine learning (ML) models quickly. To deploy ML models for real-time predictions, Amazon SageMaker provides you with a large selection of compute instances, so you can find the right cost to performance ratio depending on your requirements. The Amazon Inf1 instance is powered by Amazon Web Services Inferentia, a custom chip built from the ground up to accelerate ML inference workloads. Starting today, Amazon ml.Inf1 instances are available in the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Cost Categories is a feature within the Amazon Cost Management product suite that enables you to group your cost and usage information into meaningful categories for your organization’s unique needs. You can define rules to categorize your costs using dimensions such as accounts, tags, services, charge types, and even other Cost Categories. Once Cost Categories are set up, you can use them across various products in the Amazon Billing and Cost Management console. This includes Amazon Cost Explorer, Amazon Budgets, and Amazon Cost and Usage Reports.

Amazon S3 Storage Lens delivers organization-wide visibility into your object storage usage and activity trends, and makes actionable recommendations to improve cost-efficiency and apply data protection best practices. S3 Storage Lens is the first cloud storage analytics solution to provide a single view of object storage usage and activity across tens to hundreds of accounts in an organization, with drill-downs to generate insights at the account, bucket, or even prefix level. Drawing from more than 14 years of experience helping customers optimize storage, S3 Storage Lens analyzes organization-wide metrics to deliver contextual recommendations to find ways to reduce your storage costs and apply best practices on data protection. 

You can now use the consistent hash exchange type on your Amazon MQ for RabbitMQ brokers. This exchange type uses consistent hashing to uniformly distribute messages across queues. Consistent hash exchanges are useful in applications like transaction processing to maintain the order of dependent messages while scaling up the number of consumers.

Amazon RDS for Oracle now supports Oracle Management Agent (OMA) version 13.5 for Oracle Enterprise Manager (OEM) Cloud Control 13c Release 5 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon CloudWatch Container Insights for Amazon Elastic Container Service (Amazon ECS) is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Using Container Insights, DevOps and systems engineers can monitor, isolate, and diagnose your containerized applications and microservices environments through automated dashboards summarizing the performance and health of their Amazon ECS and Amazon Fargate resources including clusters, tasks, containers, and services.

Amazon CloudWatch Application Insights is a capability that helps customers easily setup monitoring and enhanced observability for their enterprise applications running on Amazon resources. It automatically sets up application monitoring providing insights to issues for quicker problem resolution.

Amazon Redshift RA3 is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD Regions. Amazon Redshift RA3 instances with managed storage allow you to scale compute and storage independently for fast query performance and lower costs and also enable you to securely and easily share live data across Amazon Redshift clusters. RA3 is available in three different node types, RA3.16xlarge, RA3.4xlarge, and RA3.XLPLUS to allow you to balance price and performance depending upon your workload requirements.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.2.37, 10.3.28, 10.4.18, 10.5.9. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community. Amazon RDS customers can leverage automatic minor version upgrades to automatically upgrade their databases to the latest minor version during scheduled maintenance windows. Learn more about upgrading your database instances, including automatic minor version upgrades, in the Amazon RDS User Guide.

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads.

Today, we are announcing Amazon Direct Connect support for Amazon Transit Gateway. With this feature, customers can connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) China to their on-premises networks using 1/2/5/10/100 Gbps Amazon Direct Connect connections. You can now use Direct Connect gateway as an attachment with your Transit Gateways.

Today, Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD announced the launch of Domain Name System Security Extensions (DNSSEC) validation support for Amazon Route 53 Resolver.

Session Manager, a capability of Amazon Systems Manager, now supports free text search for nodes in the search bar of the Session Manager console. Customers can easily locate the node to connect to without knowing the exact value of a property such as Name or Instance ID. The free text search is supported for multiple properties of a managed node, including Instance ID, Name, Agent Version, Platform, Status, and many more.

Amazon CodeDeploy improves support for Amazon EC2 deployments with Auto Scaling Groups by automatically detecting and updating EC2 instances that have outdated software revisions. After a deployment, CodeDeploy checks for outdated instances and creates a new deployment to bring the fleet to the intended revision of the software. In addition, as new instances are added to the Auto Scaling group, CodeDeploy checks that the updated revision is installed.

Amazon Key Management Service (KMS) now enables you to create and use asymmetric customer master keys (CMKs) and data key pairs in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon Kinesis Data Streams for Amazon DynamoDB now supports Amazon CloudFormation, which means you can enable streaming to an Amazon Kinesis data stream on your DynamoDB tables with CloudFormation templates. By streaming your DynamoDB data changes to a Kinesis data stream, you can build advanced streaming applications with Amazon Kinesis services. For example, Amazon Kinesis Data Analytics reduces the complexity of building, managing, and integrating with Apache Flink, and provides built-in functions to filter, aggregate, and transform streaming data for advanced analytics. You also can use Amazon Kinesis Data Firehose to take advantage of managed streaming delivery of DynamoDB table data to other Amazon Web Service services such as Amazon Elasticsearch Service, Amazon Redshift, and Amazon S3.

Amazon Transfer Family, fully managed service for serverless file transfers to and from Amazon Simple Storage Service (Amazon S3) and Amazon EFS, is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Aurora PostgreSQL patches 2.7.2 / 3.4.2 / 4.0.2 are now available for customers using Amazon Aurora PostgreSQL. For detailed release notes visit our version documentation. You can apply the new patch version in the Amazon Web Services Management Console, via the Amazon CLI, or via the RDS API. For detailed instructions, please see our technical documentation. 

Amazon Aurora MySQL-Compatible Edition now supports T3.large instances, in addition to the T3.medium, T3.small, and R5 class instances already available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Using T3.large instances with Amazon Aurora MySQL is a cost-effective option for smaller workloads such as test, dev, and QA, while still giving you the option to use larger class instances for production deployments.

Amazon Backup, now, by default, creates crash-consistent backups of Amazon EBS volumes that are attached to an Amazon EC2 instance. Customers no longer have to stop their instance, or coordinate between multiple Amazon EBS volumes attached to the same Amazon EC2 instance to ensure crash-consistency of their application state.

You now can further enhance the security of your applications by encrypting data in transit between your applications and your Amazon DynamoDB Accelerator (DAX) clusters, and between the nodes within a DAX cluster. To use this new feature, enable encryption in transit when creating a DAX cluster and use the latest version of any of the DAX clients. If you enable encryption in transit for a DAX cluster, all requests and responses between your applications and clusters are encrypted by Transport Layer Security (TLS), and connections to the cluster can be authenticated by verification of a cluster X.509 certificate. In addition, the data in transit between the nodes within a cluster also is encrypted. You can enable encryption in transit in the DynamoDB console, Amazon CLI, Amazon SDKs, and Amazon CloudFormation.  

Amazon RDS for PostgreSQL adds support for extension allowlists to provide database administrators more control over usage of extensions.

You will now be able to create crash-consistent Amazon Machine Images (AMIs) of your Amazon EBS-backed multi-volume instance without requiring a reboot. The AMI created will retain data from all completed I/O operations of each volume attached to the instance. This ensures that you can launch an instance from the AMI and return to the exact state prior to creation of the image.

Amazon Snowball Edge - Storage Optimized device is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Snowball Edge Storage Optimized devices provide 80 TB of Amazon S3 object and EBS block storage. They are well suited for local storage and large-scale data transfer. You can use these devices for data collection, and storage in environments with intermittent connectivity (like manufacturing, industrial, and transportation) or in extremely remote locations before shipping the devices back to Amazon Web Services. These devices may also be rack mounted and clustered together to build larger temporary installations.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, now helps you monitor and improve application read/write performance and throughput by using new Amazon CloudWatch metrics.

The MariaDB audit plug-in is now available for Amazon Relational Database Service (Amazon RDS) for MySQL instances using MySQL major version 8.0. The MariaDB audit plug-in is also available for instances using MySQL major versions 5.6 and 5.7, and provides event logging for database activity to help customers meet compliance and audit requirements, and troubleshoot application issues. Some of the key details for implementing the plugin are:

• Enabling and disabling the audit plug-in – Users can enable audit plug-in by creating an option group, adding MARIADB_AUDIT_PLUGIN option to the group, and attaching the option group to an RDS instance. Audit logging can be disabled by removing the option group from the instance.
• SERVER_AUDIT_EVENTS variables – These variables allow users to specify the events they want to include in the logs (CONNECTION: users connecting and disconnecting, QUERY: queries and their result, and TABLE: which tables are affected by the queries).
• SERVER_AUDIT_EXCL_USERS and SERVER_AUDIT_INCL_USERS variables – These variables specify which users' activity should be excluded from or included in the audit. SERVER_AUDIT_INCL_USERS has higher priority and all users' activity is recorded by default. 

Amazon CloudWatch launches Metrics Explorer – a tag-based dashboard tool that enables customers to filter, aggregate, and visualize operational health and performance metrics by tags. Metrics Explorer provides customers with a flexible troubleshooting experience, allowing them to build their tag-based application health dashboards, identify correlations, and quickly analyse their operational data to pinpoint issues. These tag-based dashboards will stay up to date as resources come and go, and they will help customers to identify the root cause and quickly isolate the issues when an alarm occurs on an application or environment.

Amazon Aurora MySQL-Compatible Edition now maintains read availability through writer node restarts. Previously, when a writer node restarted, all nodes in an Aurora MySQL cluster restarted as well. With today’s launch in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, reader nodes will continue to serve read requests during a writer node restart, improving read availability in the cluster.

Starting today, Amazon Aurora supports the Amazon Graviton2-based R6g instances in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, is now in scope for ISO and CSA STAR certifications and services to help you run highly regulated Cassandra workloads more easily.

Starting today, Amazon EC2 I3en Instances are Now Available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. I3en instances offer up to 60 TB of low latency NVMe SSD instance storage and up to 50% lower cost per GB over I3 instances.

Amazon CloudWatch now gives operators and developers visibility and actionable insights into their utilization of control plane APIs across Amazon Web Services. You can find API call count metrics organized by service in the CloudWatch console, and search and discover usage metrics from thousands available in the Usage namespace.

Amazon IoT Analytics is a fully managed service that makes it easy to collect, pre-process, enrich, store and analyze IoT data at scale to run sophisticated analytics on massive volumes of IoT data and gain insights into how IoT devices are operating without having to worry about the complexity typically required to build an analytics platform.

Amazon IoT Analytics is a fully managed service that makes it easy to collect, pre-process, enrich, store and analyze IoT data at scale to run sophisticated analytics on massive volumes of IoT data and gain insights into how IoT devices are operating without having to worry about the complexity typically required to build an analytics platform.

Amazon Compute Optimizer is a service that recommends optimal Amazon Web Services resources for your workloads to reduce costs and improve performance by using machine learning to analyze historical utilization metrics. Today, Compute Optimizer is launching several updates to its EC2 instance type recommendations. Through these updates, Compute Optimizer has improved recommendation quality, doubled the number of supported EC2 instance types, offered deeper insights into the recommendations, and provided customers a way to identify OS configuration changes needed to apply recommendations

You can now launch Apache ActiveMQ 5.16.2 brokers on Amazon MQ in Amazon Web Services China (Beijing) Region, operated by Sinnet and in Amazon Web Services China (Ningxia) Region, operated by NWCD. This version update to ActiveMQ contains several fixes, improvements, and new features compared to the previously supported version, ActiveMQ 5.15.15.

Amazon Graviton2-based database instances for Amazon Relational Database Service (RDS) are now supported in: Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Graviton2 instances M6g and R6g provide up to 35% performance improvement and up to 52% price/performance improvement over comparable current generation x86-based instances for RDS open source databases depending on database engine, version, and workload.

Now, with Amazon Systems Manager, IT administrators can clone runbooks and other Systems Manager documents such as Command documents. Using this feature, you can quickly create a copy of your existing runbooks or publicly available managed documents and update them based on your use case.

Amazon Direct Connect has enhanced the Amazon Web Services management console and added support for the Connection Wizard as part of the Resiliency Toolkit. The Connection Wizard provides customers the ability to achieve highly resilient network connections between Amazon Web Services China cloud and their on-premises infrastructure. The use of the Connection Wizard lets you order Dedicated connections to meet your SLA needs. You can select a resiliency model, and then the Connection Wizard guides you through the Dedicated connection ordering process. The resiliency models are designed to ensure that you have the appropriate number of connections in multiple Amazon Direct Connect locations so that you have connectivity to Amazon Web Services regions in case of a connection, a device, or a location failure.
The following resiliency models are available:

• Maximum Resiliency: This model provides you a way to order Dedicated connection to achieve a SLA of 99.99% after you meet all the requirements for achieving the Direct Connect SLA specific to your region (Amazon Web Services China (Beijing) region, operated by Sinnet SLA and Amazon Web Services China (Ningxia) region, operated by NWCD SLA
• High Resiliency: This model provides you a way to order Dedicated connection to achieve a SLA of 99.9% after you meet all the requirements for achieving the SLA listed (Amazon Web Services China (Beijing) region, operated by Sinnet SLA and Amazon Web Services China (Ningxia) region, operated by NWCD SLA
  
• Development and test: This model provides you a way to order Dedicated connection for your development and test workloads. This model does not allow you to get any SLA coverage. 

IT admins and security teams can now view, analyze, and report on the patch compliance of their environment from a single dashboard using Patch Manager. The Patch Manager dashboard provides you with enhanced reporting capabilities and integrates key patching information such as non-compliant instances and instances never scanned for patches into a single pane of glass. It further enables you to troubleshoot issues easily by providing a drilled down view of patch compliance, enabling you to monitor missing patches and analyze execution logs. Using this feature, you can generate patch compliance reports on demand or on a schedule to simplify analysis and sharing of patch compliance information.

You can now specify a new property called ‘DeprecationTime’ on your Amazon Machine Images (AMIs) to indicate when an AMI will become outdated.

S3 Inventory and S3 Batch Operations add support to identify and copy objects to use S3 Bucket Keys, reducing the costs of Server-Side Encryption (SSE) with Amazon Key Management Service (KMS). S3 Bucket Keys reduce the request costs of SSE-KMS by decreasing the request traffic from S3 to KMS. You can configure your bucket to use an S3 Bucket Key for Amazon KMS-based encryption on new objects. With this update, you can use S3 Inventory and S3 Batch Operations to configure S3 Bucket Keys while creating encrypted copies of millions or billions of existing objects, reducing the cost of server-side encryption requests with Amazon KMS.

Amazon Relational Database Service (Amazon RDS) for MySQL now offers rollback protection for major version upgrades.

Starting today Amazon Transit Gateway supports multicast internet group management protocol (IGMP) in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Web Services Marketplace has announced that customers can now subscribe to Software-as-a-Service (SaaS) products directly through Amazon Web Services Marketplace. All SaaS products in Amazon Web Services Marketplace will be sold by Ningxia Western Cloud Data Technology Co., Ltd. (NWCD), which is the service operator and provider for Amazon Web Services China (Ningxia) Region, and also operates Amazon Web Services Marketplace. NWCD will appear as the seller-of-record (SOR) on customer’s bill for any Amazon Web Services Marketplace SaaS product purchases and issue the fapiaos to customers directly.

Amazon RDS for PostgreSQL adds support for the oracle_fdw extension, which allows your PostgreSQL database to connect and retrieve data stored in separate Oracle databases.

Starting today, you can launch your RDF/SPARQL or Apache TinkerPop graph application using R5d instances on Amazon Neptune in Amazon Web Services China (Ningxia) region, operated by NWCD. The R5d instance type is based on the Amazon EC2 Nitro System and includes local NVMe-based SSD block level storage. Neptune R5d instances introduce a lookup cache that leverages the low-latency NVMe SSD storage to improve read query performance and reduce data retrievals from storage.

The Alarms feature in Amazon IoT Events allows you to set up, visualize and manage rule-based alerts for devices, equipment, and processes. You can receive alerts via SMS or email in near-real time when equipment data breaches thresholds, allowing operations teams to take timely actions to reduce unplanned equipment downtime.

Amazon FSx for Windows File Server now supports auditing end-user access to files, folders, and file shares. You can publish logs to Amazon CloudWatch Logs or stream logs to Amazon Kinesis Data Firehose, enabling you to query, process, store, and archive logs and trigger actions to further advance your security and compliance goals.

Today, Amazon Web Services announced the general availability of Amazon Elastic Container Service (ECS) Anywhere, a new capability of Amazon ECS. Amazon ECS Anywhere provides a fully managed container orchestration service that enables customers to run and manage containerized applications on-premises using the same APIs, cluster management, workload scheduling, monitoring, and deployment pipelines they use with Amazon ECS today in Amazon Web Services China Regions. Customers can use Amazon ECS Anywhere on their own infrastructure by connecting their servers or instances to the managed Amazon ECS control plane running in Amazon Web Services China Regions. Enterprises who need to keep their data on-premises for latency or regulatory reasons can now use a single and consistent cloud-managed container orchestrator across their hybrid footprint.

Today, Amazon Web Service China (Beijing)* has added a third Availability Zone (AZ) to support the high demand of our growing customer base. An Availability Zone (AZ) is one or more discrete data centers with redundant power, networking, and connectivity in an Amazon Web Services Region. AZs give customers the ability to operate production applications and databases that are more highly available, fault tolerant, and scalable than would be possible from a single data center.

Amazon Kinesis Data Analytics for Apache Flink now supports UpdateApplicationMaintenanceConfiguration in preview. Amazon Kinesis Data Analytics periodically patches the underlying infrastructure of applications with OS and container-image security updates to meet compliance and security goals during the default maintenance windows in each region. You can use UpdateApplicationMaintenanceConfiguration via the CLI or the API to choose your preferred maintenance window start times for an application.

Service level agreement (SLA) for Amazon Transit Gateway is updated to 99.99% in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Kinesis Data Analytics Studio is now available, enabling you to interactively query data streams in real time, and easily build and run stream processing applications using SQL, Python, and Scala. With a few clicks, you can launch a serverless notebook to perform ad hoc querying and live data exploration on data streams, and get results in seconds. From the notebook interface, you can also easily build and deploy your code as a stream processing application with durable state and autoscaling to continuously generate actionable insights in real time with no additional development effort.

You can now use the Glue Schema Registry, a serverless and free feature of Glue, in China (Beijing) and China (Ningxia) regions to validate and control the evolution of streaming data using registered Apache Avro schemas.

The scheduled scaling feature of Amazon EC2 Auto Scaling allows you to set a schedule for your Auto Scaling group to scale in and scale out your EC2 capacity. Amazon EC2 Auto Scaling now allows you to set a local time zone for scheduled scaling actions via the Amazon Command Line Interface (CLI), the Amazon SDKs, the Amazon Web Services Management Console and Amazon CloudFormation. Selecting a time zone makes schedules easier to review and also removes the need to adjust schedules for Daylight Saving Time (DST).

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, is now in scope for Amazon Web Services System and Organization Controls (SOC) Reports to help you run highly regulated Cassandra workloads more easily.

Starting today, Amazon WAF is available in two new regions: Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon Kinesis Data Firehose now provides additional protection of sensitive data through customer-provided keys for server-side encryption (SSE) of delivery streams in Amazon Web Services China (Beijing) Region, operated by SINNET and Amazon Web Services China (Ningxia) Region, operated by NWCD. This feature is integrated with Amazon Key Management Service (KMS), which allows you to centrally manage keys that protect Kinesis Data Firehose delivery streams along with keys that protect your other Amazon Web Services resources.

You can now create Amazon API Gateway REST APIs to trigger a Synchronous Express Workflow from Amazon Step Functions and respond with the output of that workflow.

NICE DCV is a high-performance remote display protocol that helps users to securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.  

CloudWatch Synthetics now supports cron expressions, allowing for flexibility when you schedule canaries to monitor your endpoints. For example, you can run a canary every minute on weekdays between 8 AM and 5 PM. Alternately, you can schedule a canary run for the third Tuesday of the month at 12 PM.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, now supports customer managed customer master keys (CMKs) for encryption of data at rest to help you meet your compliance and regulatory requirements.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for PostgreSQL version 13 in preview mode. Using Amazon DMS, you can now perform live migrations from any Amazon DMS supported sources to PostgreSQL 13 databases, and from PostgreSQL 13 databases to any Amazon DMS supported targets.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.7.1 for new and existing clusters. Apache Kafka 2.7.1 includes several bug fixes. For a complete list of fixes, see the Apache Kafka release notes for 2.7.1.

Amazon Lambda Extensions are a new way to integrate your favorite operational tools for monitoring, observability, security, and governance with Amazon Lambda. Starting today, extensions are generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, with new performance improvements.

You can now launch Apache ActiveMQ 5.15.15 brokers on Amazon MQ in Amazon Web Services China (Beijing) Region, operated by Sinnet and in Amazon Web Services China (Ningxia) Region, operated by NWCD. This patch update to ActiveMQ contains several fixes and new features compared to the previously supported version, ActiveMQ 5.15.14.

Amazon RDS for Oracle now supports the April 2021 Release Updates (RU) for Oracle Database 12.2, 18c, and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. April 2021 Patch Set Update (PSU) for Oracle Database 12.1 will be launched soon.

Amazon Glue DataBrew, a visual data preparation tool that makes it easy for data analysts and data scientists to clean and normalize data for analytics and machine learning, is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon RDS for Oracle now supports the April 2021 Patch Set Update (PSU) for Oracle Database 12.1 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. April 2021 Release Update (RU) for Oracle Database 12.2, 18c, and 19c have already been launched.

Starting today Amazon Relational Database Service (RDS) for Oracle supports the creation of a DB instance with a single pluggable database (PDB) using the Oracle multitenant architecture in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. This architecture enables the DB instance to operate as a multitenant container database (CDB). A PDB is a set of schemas, schema objects, and non-schema objects that logically appears to a client as a non-CDB.  

Amazon FSx for Lustre, a service that provides cost-effective, high-performance, scalable file storage for compute workloads, now supports data compression, enabling you to reduce the cost of storage for machine learning, high performance computing (HPC), and analytics data sets.

You can now add four additional metadata fields in your Amazon Virtual Private Cloud (Amazon VPC) flow logs, namely flow-direction, traffic-path, pkt-src-aws-service and pkt-dst-aws-service. With these enriched fields you can derive insights into the Amazon Web Services service that your workloads are communicating with, differentiate between ingress and egress traffic flows and identify the next hop of your egress traffic, such as an internet gateway, a VPC peering connection or a virtual private gateway.

Amazon IoT SiteWise now supports linear interpolation, enabling customers to estimate and retrieve the values of missing data points in their time series data.

Today, we are excited to announce the general availability (GA) of Queue notifications for Amazon GameLift. Trusted by some of the most successful game companies in the world like Wargaming, Ubisoft, and more, GameLift deploys, operates, and scales dedicated servers for multiplayer games. With this new update, you as a game developer can now receive automatic notifications when changes take place to the state of your player queues on GameLift.

Amazon Virtual Private Cloud (Amazon VPC) flow logs now makes it easier to query VPC flow logs using Amazon Athena. With a few clicks, you can now automate the integration between Athena and your VPC flow logs delivered to Amazon Simple Storage Service (S3). You can also choose from a set of predefined Athena queries to derive actionable insight such as the total egress traffic from your VPCs, identify the top talkers in your subnets, or troubleshoot anomalies in your VPC traffic.

Amazon IoT is excited to announce the preview of “Job Templates” for Amazon IoT Device Management Jobs. Job Templates make deploying remote actions faster, easier, and more secure. IoT developers and fleet administrators can pre-define the remote operations to be executed on their IoT devices, and specify key deployment parameters like rollout rates, abort thresholds, and timeout criteria. Fleet operators and technicians who focus on fleet monitoring and troubleshooting can identify and select specific groups of devices as targets, and use these pre-defined Job Templates to securely deploy remote actions to their targets.

Amazon MQ for RabbitMQ is now available in a total of 22 regions, with the addition of the Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Starting today, Amazon Elastic File System (Amazon EFS) will support the use of longer resource identifiers (IDs) for newly created file systems and mount targets. You can opt into this change by using the API, Command Line Interface (CLI), Cloud Development Kit (CDK), and Amazon EFS console.

Amazon Backup now enables you to use cost allocation tags for Amazon Elastic File System (Amazon EFS) backups within Amazon Billing and Cost Management. With cost allocation tags, you can get better transparency and visibility into your Amazon EFS backup costs. For example, you can allocate your Amazon EFS backup costs to different departments (e.g., finance, engineering) or analyze Amazon EFS backup costs across your various workloads to better understand and manage your costs.

Amazon Elasticsearch Service now offers instances from the Amazon Graviton2 instance family. Instance types include general purpose (M6g), compute optimized (C6g), and memory optimized (R6g). Customers can enjoy up to 38% improvement in indexing throughput, 50% reduction in indexing latency, and 30% improvement in query performance when compared to the corresponding x86-based instances from the current generation (M5, C5, R5).

Amazon Aurora Global Database is now supported in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Global Database is a single database that spans multiple Amazon Web Services Regions, enabling disaster recovery from region-wide outages and low latency global reads. With this launch, you can now add a secondary region cluster in one Amazon Web Services China Region to your existing primary Aurora database cluster in the other Amazon Web Services China Region.  

Amazon Aurora PostgreSQL Patches 1.6.4, 2.4.4, 3.1.4, 1.7.7, 2.5.7, 3.2.7 are now available for customers using Amazon Aurora PostgreSQL. For detailed release notes visit our version documentation. You can apply the new patch version in the Amazon Web Services Management Console, via the Amazon Web Services CLI, or via the RDS API. For detailed instructions, please see our technical documentation.

Amazon Database Migration Service (Amazon DMS) has expanded its integrity and confidentiality of secure communication to Apache Kafka self-managed and Amazon MSK endpoints. Using Amazon DMS with improved Transport Layer Security (TLS) authentication and encryption, you can now use SSL encryption and authentication or SASL-SSL to secure Kafka endpoint connections. This security enhancement addresses the increasing demand on cloud security and improves the security of Amazon DMS.  

Amazon EC2 Auto Scaling introduces native support for Predictive Scaling Policy that proactively scales your applications for upcoming demand, resulting in higher availability. Conversely, it can potentially help you avoid the need to over-provision capacity, resulting in lower EC2 cost. Now, customers can use the same predictive scaling algorithm that is offered in Amazon Auto Scaling Plans through the native and more familiar approach of auto scaling policies.  

Starting today, Amazon Transit Gateway Connect is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Kubernetes is rapidly evolving, with frequent feature releases and bug fixes. Highlights of the Kubernetes 1.20 release include RuntimeClass and Process ID Limits reaching stable status, API Priority and Fairness being enabled by default, and kubectl debug reaching beta status. Learn more about Kubernetes version 1.20 in the Kubernetes project release notes.  

Today, we are pleased to announce that Amazon Compute Optimizer now supports exporting Amazon EBS volume and Amazon Lambda function memory size recommendations as csv files to Amazon Simple Storage Service (S3).

Amazon DynamoDB global tables now supports Amazon CloudFormation, which means you can create global tables and manage their settings with Amazon CloudFormation templates. Global tables build upon the global footprint of DynamoDB to deliver a fully managed, multi-region, multi-source database. You can use global tables to replicate table updates automatically across the Amazon Web Services China Regions you select, and you can set up global tables at any time with just a few clicks in the Amazon Web Services Management Console or by using the Amazon SDK.

Amazon Elasticsearch Service now supports cold storage, a fully-managed storage tier that makes it easy for customers to securely store and analyze their infrequently accessed data on-demand at a lower cost than other storage tiers. You pay for compute only when you need it. Cold storage allows you to retain any amount of data in your Amazon Elasticsearch Service domain while reducing cost per GB to near Amazon S3 storage prices.

Starting today, Amazon EC2 M6g, C6g, and R6g instances are available in the bare metal option in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon EC2 M6g, C6g, and R6g instances deliver up to 40% better price/performance over comparable x86-based instances for a broad spectrum of workloads, including application servers, micro-services, high-performance computing, CPU-based machine learning inference, electronic design automation, gaming, open-source databases, and in-memory caches. These instances were already available in these regions in 8 sizes, with up to 64 vCPUs, without the bare metal option.

Starting May 1st 2021, all data transfer over a VPC Peering connection that stays within an Availability Zone (AZ) is now free. All data transfer over a VPC Peering connection that crosses Availability Zones will continue to be charged at the standard in-region data transfer rates. You can use the Availability Zone-ID to uniquely and consistently identify an Availability Zone across different Amazon Web Services accounts.

Amazon EMR integration with Apache Ranger on EMR 6.3 is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. This feature allows you to define, enforce, and audit fine-grained data access control. With this feature, you can define and enforce 1/ database, table, and column level authorization policies for Apache Spark and Apache Hive users to access data through Hive Metastore, and 2/ prefix and object level authorization policies when accessing data in Amazon S3 via the Amazon EMR File System (EMRFS), leveraging Amazon CloudWatch to capture auditing logs.

Amazon Service Catalog is now available to customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Service Catalog allows organizations to create, govern, and manage catalogs of IT services that are approved for use on Amazon Web Services. Enterprises can centrally curate and share commonly deployed IT services with teams to achieve consistent governance and meet compliance requirements. Users can quickly discover and self-service deploy the approved IT services that they need.  

Amazon Organizations launched a renewed console experience that provides a more intuitive way to manage your multi-account environment on Amazon Web Services China region. You can now more easily navigate through your Organizational Unit’s hierarchy and perform your Amazon Web Services China region account management tasks in a streamlined way. The updated interface also gives you easy access to documentation, product information, and resources to assist you in managing your multi-account environment. 

We are pleased to announce the general availability of Amazon Compute Optimizer, a machine learning-based recommendation service that makes it easy for you to ensure that you are using optimal Amazon Web Services resources, in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data at scale.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.8.0 for new and existing clusters. Apache Kafka 2.8.0 includes several bug fixes and new features that improve performance. Some of the key features include connection rate limiting to avoid problems with misconfigured clients (KIP-612) and topic identifiers which brings some internal performance benefits (KIP-516). There is also an early access feature to replace zookeeper with a self-managed metadata quorum (KIP-500) however, this is not recommended for use in production. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 2.8.0.

Amazon Direct Connect provides private, high-bandwidth connectivity between Amazon Web Services and your data center, office, or colocation facility. Native 100 Gbps connections provide higher bandwidth, without the operational overhead of managing multiple 10 Gbps connections in a Link Aggregation Group (LAG). The increased capacity delivered by 100 Gbps connections is particularly beneficial to applications that transfer large-scale datasets, such as for broadcast media distribution, advanced driver assistance systems used for autonomous vehicles, and financial services trading and market information systems.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.6.2 for new and existing clusters. Apache Kafka 2.6.2 includes several bug fixes and security fixes. Version 2.6.2 will replace 2.6.1 as the default recommended version for new clusters created in Amazon MSK. For a complete list of fixes, see the Apache Kafka release notes for 2.6.2.

You now can use Amazon CloudTrail to log Amazon DynamoDB Streams data-plane APIs – GetRecords and GetShardIterator – to monitor and investigate item-level changes in your DynamoDB tables. Previously, you could use CloudTrail to log DynamoDB Streams control plane activity (and not data-plane activity) on your DynamoDB tables.

Following the announcement of updates in MySQL database versions 5.6, 5.7, and 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor versions 5.6.51, 5.7.33, and 8.0.23. We recommend that customers upgrade to any of the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community. Learn more about upgrading your database instances in the Amazon RDS User Guide, including automatic minor version upgrades.

Amazon Elastic Container Service (Amazon ECS) on Amazon Fargate now lets you configure the size of the ephemeral storage for your Tasks. You can simply specify the size (in GiB) of the ephemeral storage that your Task requires in the Amazon ECS Task Definition and this will automatically be provisioned and attached to your Task.  

Amazon Athena engine version 2 is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Storage Gateway adds a new gateway type, Amazon FSx File Gateway, providing fast, low-latency on-premises access to fully managed file shares in Amazon Web Services. Customers that want to take advantage of fully managed storage in the cloud, but require low latency for their users and applications, can now easily extend Amazon FSx for Windows File Server into their existing on-premises environment.

Amazon RDS for PostgreSQL can now make calls to Amazon Lambda functions. Amazon Lambda lets you run code without provisioning or managing servers, and without worrying about scalability.

You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now publish the Redis slow log from your Amazon ElastiCache for Redis clusters to Amazon CloudWatch Logs and Amazon Kinesis Data Firehose. The Redis slow log provides visibility into the execution time of commands in your Redis cluster, enabling you to continuously monitor the performance of these operations. You can choose to send these logs in either JSON or text format to Amazon CloudWatch Logs and Amazon Kinesis Data Firehose.

NoSQL Workbench for Amazon DynamoDB now supports Amazon CloudFormation, so you can manage and modify DynamoDB data models with CloudFormation templates. In addition, you now can configure table capacity settings in NoSQL Workbench.

Amazon EC2 Inf1 instances is now available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Inf1 instances are powered by Amazon Inferentia chips, which Amazon Web Services custom-designed to provide high performance and lowest cost machine learning inference in the cloud.  

Amazon Elasticsearch Service now supports Asynchronous Search. Asynchronous search lets you submit a query that gets executed asynchronously, monitor the progress of the request, and retrieve results at a later stage. You can also retrieve partial results as they become available even before the search has fully completed. Once the search completes, it can be stored for consumption at a later time up to an expiry duration.

Today, Amazon announces a new feature of Amazon Systems Manager Application Manager that customers can use to manage Amazon Elastic Container Service (Amazon ECS) clusters in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD. This feature provides IT professionals the ability to view operational data, manage compliance, and take remedial actions on their ECS clusters.  

Amazon announces a new feature of Amazon Systems Manager Parameter Store that supports removal of a label associated with a parameter, to enable customers to reorganize Parameter Store parameters with new labels in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon announces a new feature of Amazon Systems Manager Parameter Store that helps you discover public parameters more easily in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and in the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon Config advanced queries feature now supports pagination for queries that contain aggregate functions, such as COUNT and SUM. For example, getting the total number of resources in each Amazon Web Services account requires the COUNT aggregate function. You can now use advanced queries to get complete results for your aggregate queries through pagination, which were previously limited to 500 rows. Pagination is a technique that is used to divide large results into “pages,” where each page contains a subset of results. You can process the first page of results, then the second page, and so on.

Amazon MQ for ActiveMQ is now available in a total of 22 regions, with the addition of the Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon RDS for PostgreSQL adds support for the pg_bigm extension for faster full text search of languages that require multi-byte character sets such as Chinese, Korean, and Japanese.

Amazon CloudFormation enhances the existing dynamic referencing of Amazon Systems Manager Parameter Store parameters in CloudFormation templates. You can now reference the latest Systems Manager parameter values in CloudFormation templates without specifying parameter versions. If you choose not to specify the parameter versions in the template, CloudFormation will automatically fetch the latest parameter values from Parameter Store.   

Amazon RDS for SQL Server now support SQL Server extended events, a performance monitoring system that can be used to monitor and troubleshoot performance problems in SQL Server.  

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning (ML). SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps required to prepare, build, train and tune, deploy and manage models. With a single click, data scientists and developers can quickly spin up SageMaker Studio Notebooks for exploring datasets and building models. Starting today, you can use custom resource tags to track and categorize the costs of SageMaker Studio Notebooks by users, groups, lines of businesses, or cost centers.  

Patch Manager, a capability of Amazon Systems Manager, now enables you to configure actions to be performed on a managed instance before and after installing patches. Using this feature, you can configure actions to perform pre-installation checks such as ensuring that “Windows Update Service” is running before patching instances. Furthermore, you can configure actions that perform post-installation health checks to ensure that your instances are healthy after being patched.  

Amazon Identity and Access Management (IAM) now provides the ability to easily identify the user responsible for an Amazon Web Services action performed while assuming an IAM role. By setting the new source identity attribute, which gets logged in Amazon CloudTrail for most actions, you can easily find out who is responsible for actions performed using IAM roles.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 12.5, 11.10, 10.15, 9.6.20, and 9.5.24 in the Amazon Web Services China (Beijing) region, operated by Sinnet and in the Amazon Web Services China (Ningxia) region, operated by NWCD. This release closes security vulnerabilities in PostgreSQL and contains bug fixes and improvements done by the PostgreSQL community. This also includes the final release of PostgreSQL 9.5.

Amazon FSx and Amazon Backup now enable you to copy your Amazon FSx file system backups (both Amazon FSx for Windows File Server and Amazon FSx for Lustre) across Amazon Web Services China Regions, Amazon Web Services China accounts, or both. With cross-region backups, you can store a copy of your backup data in Amazon Web Services China Regions other than where your primary backups are stored, helping you meet business continuity, disaster recovery, and compliance requirements. In addition, cross-account backups enable you to copy backups into a secondary backup account to provide an additional layer of protection, should the main backup account experience disruption from accidental or malicious deletion, disaster, or ransomware. Customers may use their Amazon Organizations management account to designate certain accounts as secondary backup accounts to ensure that backups are copied only to trusted accounts in the organization.

We reorganized features on the console based on key tasks such as, writing code, testing, monitoring and configuring. With this update, we reduced the amount of scrolling needed to access common configuration options by creating a dedicated configuration tab. In addition, the new navigation design orients your work on the Lambda console towards the tasks you want to complete and focuses your work around relevant features. This change will also help you find new features more easily when they are available in the console.

NICE DCV is a high performance remote display protocol that helps users to securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Lambda now allows customers using Amazon Simple Queue Service (Amazon SQS) as an event source in the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD, to define a wait period, called MaximumBatchingWindowInSeconds, to allow messages to accumulate in their SQS queue before invoking a Lambda function. In addition to Batch Size, this is a second option to send records in batches, to reduce the number of Lambda invokes. This option is ideal for workloads that are not time-sensitive, and can choose to wait to optimize cost. 

You can now use Amazon Lake Formation in the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon EC2 Auto Scaling Warm Pools help applications scale out faster by pre-initializing application instances and save money by requiring fewer continuously running instances. With Warm Pools, customers can improve the elasticity of their applications by creating a pool of pre-initialized EC2 instances that are ready to quickly serve application traffic. Additionally, Warm Pools offer a way to save compute costs by placing pre-initialized instances in a stopped state.

Amazon CloudFormation StackSets announces new automation features to streamline deployments of resources to multiple accounts and regions through Amazon Organizations in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region operated by NWCD. With this launch, you can use StackSets to centrally manage deployments to the accounts in one or more organizational units (OUs) or all of the accounts in your organization. You will also be able to enable automatic deployments to any new accounts added to your organization or OUs.  

Amazon Glue version 2.0 featuring 10x faster Spark ETL job start times, is now generally available. With Glue version 2.0, job startup is faster and more consistent. In addition, Amazon Glue version 2.0 Spark jobs will be billed in 1-second increments with a 1-minute minimum rather than a 10 minute minimum. As a result, customers can now run micro-batch, deadline sensitive, and interactive workloads more cost effectively. Customers can run micro-batch jobs to quickly load data lakes, data warehouses, and databases and enable real-time analytics. With faster job start times, customers can run SLA driven data pipelines more reliably. Faster job start times also enable interactive data exploration and experimentation.  

Amazon ElastiCache now supports tag-based access control and adding tags to additional cluster resources. By using tags for access control, your Amazon Identity and Access Management (IAM) users, groups, and roles get access only to the Amazon ElastiCache resources with matching tags. This provides you the capability to scale by reducing the number of distinct permissions you need to create and manage in your Amazon Web Services account. You can define Amazon IAM policies that grant or deny access to a resource based on its tags. Furthermore, you can use specific condition context keys to customize your Amazon IAM policies to limit specific behaviors on Amazon ElastiCache resources. For a complete list of condition context keys for Amazon ElastiCache, visit the Amazon ElastiCache documentation.

Amazon Elasticsearch Service now supports open source Elasticsearch 7.10 and its corresponding version of Kibana. This minor release includes bug fixes and enhancements.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for MariaDB version 10.4 and 10.5. Using Amazon DMS, you can now perform live migrations from any Amazon DMS supported sources to MariaDB 10.4 and 10.5 databases, and from MariaDB 10.4 and 10.5 databases to any Amazon DMS supported targets.  

You can now quickly and conveniently copy Amazon Machine Images (AMIs) across Amazon Web Services China Regions (both Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD) and other Amazon Web Services regions (also known as partitions) to ensure that your AMIs are available and consistent among all Amazon Web Services regions.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for Db2 LUW version 11.5 as a source in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Using Amazon DMS, you can now perform live migrations from Db2 LUW version 11.5 databases to any Amazon DMS supported targets.

Amazon Step Functions now supports YAML state machine definitions within Amazon CloudFormation, making it possible to define workflows in the same language as your infrastructure as code.

Amazon EMR now supports Amazon EC2 M6g, C6g and R6g instances with EMR Versions 6.1.0, 5.31.0 and later. These instances are powered by Amazon Web Services Graviton2 processors that are custom designed by Amazon Web Services utilizing 64-bit ArmNeoverse cores to deliver the best price performance for cloud workloads running in Amazon EC2. Please read our blog for more information.

Customers using Amazon EFS with Amazon Batch can now specify EFS volumes in their Amazon Batch job definitions. Amazon Batch jobs using EFS will automatically mount the file systems specified by the customer in the job definition and make them available to the jobs, across Availability Zones. This enables persistent, shared storage to be defined and used at the job level.

AWS Elemental MediaConvert now supports using HLS (HTTP Live Streaming) packages as input. HLS is a streaming format used for video distribution across a wide range of devices including smart phones, desktop browsers, and connected TVs.

The new Amazon Storage Gateway management console makes it easier for you to create, manage, and monitor resources such as file shares, tapes, and volumes. In addition to a refreshed look and feel, you can now connect your gateway with a simple activation key to help speed up deployment, and create new file shares using a streamlined process. You can easily configure your gateway to use Amazon Virtual Private Cloud (VPC) endpoints and leverage enhanced troubleshooting information for the endpoint configuration. Throughout the console, contextual information about your Storage Gateway resources is provided as part of the help panel, allowing you to easily find answers to common questions and browse related User guide content.

Starting today, Amazon Gateway Load Balancer is available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon RDS for SQL Server now offers Always On Availability Groups for the Multi-AZ configuration in all Amazon Web Services Regions on Standard Edition. This new high availability option meets the requirements of enterprise-grade production workloads on SQL Server.  

You can now configure each path segment of an API Gateway custom domain name to route requests to different APIs. Using multi-level base path mappings, you can implement path-based API versioning and migrate API traffic between APIs according to request paths with many segments.

Amazon Personalize is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon Personalize is a machine learning service which enables you to personalize your website, app, ads, emails, and more, with custom machine learning models which can be created in Amazon Personalize, with no prior machine learning experience.

Amazon Backup adds support for bulk deletion of recovery points from backup vaults in the Amazon Backup console. You can now select multiple recovery points for deletion at one time.  

Amazon SageMaker Debugger’s new capabilities are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon SageMaker Debugger’s new capabilities have real-time monitoring of system resources for efficient utilization. With these new capabilities, you can now get automatic recommendations to re-allocate resources for your training jobs, helping you train better and reduce time and costs.

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data at scale.

Today, we are announcing the general availability of ML Detect, a new feature of Amazon IoT Device Defender that automatically detects device-level operational and security anomalies across your IoT fleet by learning from your past data. Now, in addition to being able to manually set static alarms with Amazon IoT Device Defender Rules Detect, you can use machine learning to automatically learn your fleet's expected behaviors so that you don’t need an in-depth understanding of how your devices act across a range of metrics to get started.  

CloudWatch Synthetics now supports storing your canary run artifacts, including log files, screenshots, and HAR files, in an Amazon Simple Storage Service (S3) bucket in another Region with a new major runtime version, syn-nodejs-puppeteer-3.0. CloudWatch Synthetics now also supports upgraded major versions of the Puppeteer, Chromium, and Node.js dependencies.

CloudWatch Synthetics now supports monitoring canary events with CloudWatch Events. This allows you to send notifications to teams, capture canary event information, and take corrective action in response to a canary state change or the completion of a canary run.

CloudWatch Synthetics now supports customizing the default launch settings on the Chrome browser with a new minor runtime version, syn-nodejs-2.1. This allows for more flexibility in the canary launched browser settings such as viewport, setting chromium flags, and handling errors. With syn-nodejs-2.1, you can also configure canary scripts to not take screenshots on a canary step, thereby reducing costs, and avoiding screenshots for sensitive data.

When using CloudWatch Synthetics, you can now get a snapshot of the canary health with a prebuilt monitoring dashboard. The new monitoring dashboard provides canary data trends over time for latency, availability, and error counts. The dashboard also provides expected latency based on historical data of the previous canary runs. This helps you spot anomalies sooner which in turn allows you to respond faster to ensure a better end user experience.

CloudWatch Synthetics now supports the use of environment variables with canaries. You can save time by using a single canary script to create different canaries that have a similar task.

Amazon CloudWatch Synthetics adds support to create canaries for your Amazon API Gateway APIs using the API blueprint. This simplifies your canary setup time and makes it easy to monitor your API Gateway APIs.

CloudWatch Synthetics now supports monitoring multiple APIs in a single canary and viewing detailed HTTP request reports by using the new minor runtime version, syn-nodejs-2.2. This gives you flexibility to test multiple HTTP requests together and individually monitor metrics of each request.

Starting today, Amazon Aurora PostgreSQL supports the pglogical extension. 

You can now use IAM condition keys as part of IAM and Service Control Policies (SCPs) to centrally govern endpoint, authorization, and logging configurations for your APIs in API Gateway.

Now you can use Amazon CloudTrail to log data-plane API activity to monitor, alarm, and archive item-level activity in your Amazon DynamoDB tables. You can use this information about item-level activity as part of an audit, to help address compliance requirements, and monitor which Amazon Identity and Access Management (IAM) users, roles, and permissions are being used to access your table data.

Today, Amazon X-Ray launches Insights in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. X-Ray Insights helps customers proactively discover issues in applications by using anomaly detection. It enables developers and DevOps engineers to detect anomalies in fault rate for an application and then notify their teams on these issues and why it occurred.

Amazon Elasticsearch Service now supports automated memory management of Elasticsearch clusters with the new Auto-Tune feature. Auto-Tune is an adaptive resource management system that automatically adjusts Elasticsearch internal settings to handle dynamic workloads, optimizing cluster resources to improve efficiency and performance. With Auto-Tune, you can achieve performance boost in ingestion throughput for log analytics workloads, and reduced tail latencies for search queries.

We are pleased to announce the release of version 1.0.0 of the NICE DCV web client software development kit (SDK). NICE DCV is a high performance remote display protocol that helps users to securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs. This JavaScript SDK is an optional component that enables developers and independent software vendors (ISVs) to integrate a customized NICE DCV web client into their web applications. Customers can build custom DCV web clients using custom user interface components and the core DCV streaming features provided by this SDK, delivering unique experiences tailored to their own use cases.

You can now manage non-IP based cloud resources in Amazon Cloud Map’s public and private DNS namespaces in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Cloud Map is a cloud resource discovery service. Using Amazon Cloud Map, you can define custom names for your application resources, such as Amazon ECS tasks, Amazon EC2 instances, Amazon S3 buckets, Amazon DynamoDB tables, or any other cloud resource. Your application can then discover the location and metadata of cloud resources associated with these custom names via Amazon SDK or by making authenticated API calls.

Amazon CloudTrail now supports logging of data events for Amazon DynamoDB. With this new feature, you can now use CloudTrail to log item-level DynamoDB activity from all your DynamoDB tables or specific tables with read-only and write-only filters. You can also use CloudTrail advanced event selectors for more granular control of events you want to log. All DynamoDB data events are delivered to an Amazon S3 bucket and Amazon CloudWatch Events, which creates an audit log of all data access for compliance purposes and allows you to respond to events recorded by CloudTrail. Details on when and who made DynamoDB API calls enhances data visibility for security and operations engineering teams. For example, you can quickly determine which DynamoDB items were created, read, updated or deleted in the past three days and identify the source of the API calls. If you detect unauthorized DynamoDB activity, you can also take immediate action to restrict access.

Amazon EC2 now supports Unified Extensible Firmware Interface (UEFI) boot when migrating virtual machines from on-premise to EC2 without having to convert them to Legacy BIOS. UEFI is a modern firmware that initializes your operating system.

Amazon Elastic Kubernetes Service (EKS) has reduced control plane creation time by 40%, enabling you to create a new EKS cluster control plane in 9 minutes or less, on average.

We’re excited to announce Amazon SageMaker Pipelines, a new capability of Amazon SageMaker to build, manage, automate, and scale end to end machine learning workflows. SageMaker Pipelines brings automation and orchestration to ML workflows, enabling you to accelerate machine learning projects and scale up to thousands of models in production.

Amazon IoT Greengrass 2.0 is now available in Amazon Web Services China (Beijing) region, operated by Sinnet. With this major release, Amazon IoT Greengrass provides an open source edge runtime, a rich set of pre-built software components, tools for local software development, and new features for managing device software on large fleets of devices.

The Amazon EC2 Auto Scaling Instance Refresh feature enables customers to update the EC2 instances in their Auto Scaling groups on a rolling basis. Now, Instance Refresh gives customers more control over the update process by letting them configure Instance Refresh checkpoints to phase their deployments. An Instance Refresh checkpoint specifies what percent of the Auto Scaling group’s instances should be replaced and how long to wait before continuing with the rolling update. This gives customers time to perform any necessary validation or testing steps at various checkpoints.

Amazon SageMaker Data Wrangler is now available in China regions (Beijing, Ningxia). Amazon SageMaker Data Wrangler reduces the time it takes to aggregate and prepare data for machine learning (ML) from weeks to minutes. With Amazon SageMaker Data Wrangler, you can simplify the process of data preparation and feature engineering, and complete each step of the data preparation workflow, including data selection, cleansing, exploration, and visualization from a single visual interface.

Amazon Neptune Workbench is now available in Amazon Web Services China (Ningxia) Region, Operated by NWCD. You can use the workbench to visualize nodes, edges, and properties along your graph to analyze relationships and graph patterns in your Amazon Neptune cluster.

Amazon SageMaker Model Monitor’s new capabilities are now available in China regions. Amazon SageMaker Model Monitor continuously monitors machine learning models for concept drift (i.e. changes in data distribution and characteristics over time) and alerts you if there are any deviations so you can take remedial action. Starting today, you can also use Amazon SageMaker Model Monitor to detect drift in model quality, bias, and feature importance. With these new fully managed capabilities, SageMaker Model Monitor helps you maintain high quality machine learning models in production.

We’re excited to announce that Amazon SageMaker Feature Store is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web ServicesChina (Ningxia) Rregion, operated by NWCDs (Beijing, Ningxia). Amazon SageMaker Feature Store is a feature of Amazon SageMaker that ingests, stores, shares, reuses, and serves features for real time and batch machine learning (ML) applications.  

We are excited to announce that Amazon SageMaker Clarify is now available in China regions. Amazon SageMaker Clarify helps machine learning developers achieve greater visibility into their training data and models so they can identify and limit bias and explain predictions.

Today we are introducing two new distributed training libraries for Amazon SageMaker, providing integrated methods for you to quickly train large deep learning models. Using partitioning algorithms, these SageMaker distributed training libraries automatically split large deep learning models and training datasets across Amazon Web Services GPU instances in a fraction of the time it takes to do manually. SageMaker achieves these efficiencies through two techniques: model parallelism and data parallelism. Model parallelism splits models too large to fit on a single GPU into smaller parts before distributing across multiple GPUs to train, and data parallelism splits large datasets to train concurrently in order to improve training speed.

Amazon Security Hub has released 19 new controls for its Foundational Security Best Practice standard. These controls conduct fully automatic checks against security best practices for Amazon API Gateway (APIGateway.1), Amazon DynamoDB (DynamoDB.1-3), Amazon Elastic Compute Cloud (EC2.9-10), Amazon Elastic File System (EFS.2), Amazon Elasticsearch Service (ES.2), Amazon RDS (RDS.9), Amazon Redshift (RedShift.1-3,6), Amazon Simple Notification System (SNS.1), Amazon Elastic Load Balancing (ELB.3-6), and Amazon Key Management Service (KMS.3). If you enabled the Amazon Foundational Security Best Practices standard in an account and configured Security Hub to automatically enable new controls, these controls are enabled by default.

Amazon RDS for Oracle now supports Oracle Management Agent (OMA) version 13.4 for Oracle Enterprise Manager (OEM) Cloud Control 13c Release 4 Update 9 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Today, Amazon Web Services China (Beijing) Region, operated by Sinnet, launched a new feature for static analysis of your event “detector models” (representations of your IoT devices as state machines on the Amazon Web Services cloud) in Amazon IoT Events. The feature automatically performs 7 different analyses (see list in developer guide) of your models for potential syntax errors (e.g. bad expressions or payloads), structural issues (e.g. missing states or input triggers) and runtime errors (e.g. data type mismatch, missing data, potential to hit service limits, etc.). This debugging tool is particularly useful for complex detector models which have a large number of state changes, each with unique conditional logic triggered by multiple input data streams. The analysis summarizes diagnostic information of each of the 7 analyses by severity level ('info', 'warning', 'error') and identifies its location within the model (state, transition, action, etc.) to help you fix issues in your model even before publishing it.

Amazon Identity and Access Management (IAM) Access Analyzer guides you on your least privilege journey by analyzing your existing resource policies to help you identify and resolve unintended public or cross-account access to your resources. Now, we are extending policy analysis in IAM Access Analyzer by adding over 100 policy checks that help you proactively validate your identity and resource policies during policy authoring. The checks include functional validation like developers might expect from a linter, and go beyond that to evaluate best practices in granting access. These checks analyze your policy and report security warnings, errors, general warnings, and suggestions based on their impact. They provide actionable recommendations that guide you to set secure and functional permissions. For example, IAM Access Analyzer reports a security warning when your policy allows your IAM roles and users to pass any role to any service, which is overly permissive. The reported finding recommends that you scope down the permissions to pass specific role(s) instead.

Amazon Identity and Access Management (IAM) Access Analyzer now enables you to validate public and cross-account access to your resources before deploying permissions changes. IAM Access Analyzer uses comprehensive policy analysis to provide provable security and generate findings for public and cross-account access to your resources. Now with IAM Access Analyzer, you can look before you leap, and prevent public and cross-account access before you set permissions. You can preview findings and validate that your policy changes grant only intended public and cross-account access to your resources. This helps you start with intended permissions before deploying permission changes.  

Amazon Elastic Container Service (Amazon ECS) introduces Amazon ECS Exec - a simple, secure, and auditable way for customers to runnning commands in a container running on Amazon Elastic Compute Cloud (Amazon EC2) instances or Amazon Fargate. ECS Exec gives you interactive shell or single command access to a running container making it easier to debug issues, diagnose errors, collect one-off dumps and statistics, and interact with processes in the container.

Amazon Elastic File System (Amazon EFS) now supports single Availability Zone (AZ) storage classes (One Zone), reducing storage costs by 47% compared to regional Amazon EFS storage classes, while maintaining the same capabilities. With this launch, you can achieve an effective storage price of ¥0.3136/GB-month.

Amazon S3 is reducing the cost to move data to Amazon S3 Glacier by lowering PUT and Lifecycle request charges by 40%. You can use the S3 PUT API to directly store compliance and backup data in S3 Glacier that does not require immediate access. You can also use S3 Lifecycle policies to move data to S3 Glacier to save on storage costs when data becomes rarely accessed.

Amazon Elasticsearch Service now publishes events to Amazon CloudWatch and Amazon EventBridge to provide better visibility into the service. Events to indicate the availability of a service software update for a domain, the start of an update, and the completion of an update will be included in the initial release. You will also be able to view these events under the new ‘Notifications’ view in the Amazon Elasticsearch Service console.

Starting today, Amazon EC2 C5a instances are available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon EC2 C5a instances feature 2nd generation AMD EPYC™ 7002 series processors running at frequencies up to 3.3 GHz, and are variants of the Amazon EC2 compute optimized (C5) family of instances.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra–compatible database service, now helps you automate table creation by supporting point-in-time recovery (PITR) and tag settings in Amazon CloudFormation.

Now you can export your Amazon DynamoDB table data to your data lake in Amazon S3, and use other Amazon Web Services such as Amazon Athena, Amazon SageMaker, and Amazon Web Services Lake Formation (available in the Amazon Web Services China (Beijing) region), to analyze your data and extract actionable insights. No code-writing is required. 

Amazon Elastic Kubernetes Service (Amazon EKS) now supports using OpenID Connect (OIDC) compatible identity providers as a user authentication option to Kubernetes clusters. With OIDC authentication, you can manage user access to EKS clusters by using the standard procedures in your organization for creating, enabling, and disabling employee accounts. 

Amazon Elasticsearch Service adds Trace Analytics, a new feature for distributed tracing that enables developers and IT operators to find and fix performance problems in distributed applications, leading to faster problem resolution times.  

Amazon Kinesis Data Analytics for Apache Flink now provides access to the Apache Flink Dashboard giving you greater visibility to your applications and advanced monitoring capabilities. You can now view your Apache Flink application’s environment variables, over 120 metrics, logs, and the directed acyclic graph (DAG) of the application in a simple, contextualized user interface. 

Amazon Relational Database Service (Amazon RDS) now supports replication filters for MySQL and MariaDB instances in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Replication filters specify which databases and tables are replicated in a read replica. Customers create lists of databases and tables to include or exclude for each replica.  

Amazon IoT Device Defender now supports Amazon CloudFormation for creating and configuring Amazon IoT Device Defender resources such as scheduled audits and Security Profiles along with the rest of your Amazon Web Services infrastructure—in a secure, efficient, and repeatable way.  

You can now build and run streaming applications using Apache Flink version 1.11 in Amazon Kinesis Data Analytics for Apache Flink. Apache Flink v1.11 provides improvements to the Table and SQL APIs. The Table API is a unified, relational API for stream and batch processing and acts as a superset of the SQL language specially designed for working with Apache Flink.

Aurora PostgreSQL patches 1.8.2 / 2.6.2 / 3.3.2 are now available for customers using Amazon Aurora PostgreSQL. For detailed release notes visit our version documentation. You can apply the new patch version in the Amazon Web Services Management Console, via the Amazon Web Services CLI, or via the RDS API. For detailed instructions, please see our technical documentation.

Amazon DynamoDB Accelerator (DAX) now supports next-generation, burstable general-purpose Amazon EC2 T3 instance types, which provide a baseline level of CPU performance with the ability to burst CPU usage however long is required.

Amazon Elasticsearch Service now supports tag-based authorization for easy management of access to configuration APIs that are used for operations such as creating, modifying, or updating Amazon Elasticsearch Service domains.

Amazon Elasticsearch Service introduces index rollups that lets you summarize the high granularity data and preserve feature-rich aggregations over large data sets that can then be leveraged for analytics while drastically reducing storage costs.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, now helps you update and store common data between multiple rows efficiently by using static columns. 

Amazon Config now supports Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Container Registry (Amazon ECR), and Amazon Elastic Kubernetes Service (Amazon EKS) in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Config provides a detailed view of the configuration of Amazon Web Services cloud resources in your Amazon Web Services account. This includes how the resources were configured, how they are related to one another and how the configurations and relationships have changed over time. With this launch, you can now use Amazon Config to monitor configuration data for resources in your Amazon Web Services account, such as monitoring configuration changes to EKS cluster settings and tracking compliance (and changes in compliance) for cluster configurations.

Amazon RDS for Oracle now supports the January 2021 Release Update (RU) for Oracle Database 12.2, 18c, and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. January 2021 Patch Set Update (PSU) for Oracle Database 12.1 will be launched soon.  

Amazon RDS for PostgreSQL now supports major version 13. PostgreSQL 13 includes improved functionality and performance from new features and enhancements such as de-duplication of B-tree index entries, improved performance for queries that use partitioned tables, incremental sorting to accelerate data sorts, parallel processing of indexes with the VACUUM command, more ways to monitor activity within a PostgreSQL database, new security capabilities, and more. 

Amazon Step Functions now supports the synchronous executions of Express Workflows, allowing you to easily build web-based applications and orchestrate high-volume, short-duration microservices. 

Starting today, the latest generation of burstable, general purpose Amazon EC2 T4g instances are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by Arm-based Amazon Graviton2 processors and deliver up to 40% better price performance over T3 instances. The T4g instances provide a baseline level of CPU performance with the ability to burst CPU usage at any time for as long as required. They offer a balance of compute, memory, and network resources for a broad spectrum of general-purpose workloads, including large scale micro-services, caching servers, search engine indexing, e-commerce platforms, small and medium databases, virtual desktops, and business-critical applications.  

Customers can now create HTTP APIs that route requests to the new Amazon Step Functions Synchronous Express Workflows. 

Amazon RDS adds new events reporting the cause of an Amazon RDS Multi-AZ automated database failover so that you can detect and respond faster. You can view these failover reasons in the event log.

Amazon Virtual Private Cloud (VPC) Traffic Mirroring is now available in Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD.

Amazon EC2 Auto Scaling now allows you to view deleted Auto Scaling groups in the scaling history. Previously if you deleted an Auto Scaling group, you need to either maintain the records of scaling activities for deleted Auto Scaling groups or ask support team to get the records for the same. Now, you can specify one additional parameter in a describe call to get a description of the scaling history for deleted Auto Scaling groups. This makes it easier to keep a record of scaling activities after an application has been shut down. 

You can now define your infrastructure and applications in Amazon CloudFormation with reusable building blocks called modules. A module encapsulates one or more resources and their respective configurations for reuse across your organization.  

Amazon CloudWatch Contributor Insights for Amazon DynamoDB support for Amazon CloudFormation is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, enabling you to manage Contributor Insights settings for DynamoDB with CloudFormation templates.  

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps required to prepare, build, train and tune, deploy and manage models. You can create a presigned URL for granting access to your SageMaker Studio domain to users in your organization. Starting today, you can secure access to the presigned URL by choosing a custom expiration time that can be as low as five seconds. The URL automatically expires in five minutes if you don’t choose an expiration time.

Amazon Config now supports the ability to use an Amazon Key Management Service (KMS) key or alias Amazon Resource Name (ARN) that you provide, to encrypt the data delivered to your Amazon Simple Storage Service (S3) bucket. By default, Amazon Config delivers configuration history and snapshot files to your S3 bucket and encrypts the data at rest using S3 AES-256 server-side encryption, SSE-S3. With this release, if you provide Amazon Config with your KMS key or alias ARN, Amazon Config will use that KMS key instead of using AES-256 encryption.

You can now export Amazon Relational Database Service (Amazon RDS) or Amazon Aurora snapshots to Amazon S3 as Apache Parquet format. You can analyze the exported data with other Amazon Web Services services such as Amazon Athena, Amazon EMR, and Amazon SageMaker. 

The Amazon Snow Family console has been enhanced to make it easier for you to create and monitor your Snow data transfer and compute jobs. In addition to an improved console look and feel, you can also now create your Snow jobs with just a few clicks in the Amazon Snow Family console.

Amazon Fargate recently increased default service quotas to 500 and starting today you can launch up to 1000 concurrent Amazon Elastic Container Service (ECS) tasks and Amazon Elastic Kubernetes Service (EKS) pods running on Fargate On-Demand and 1000 concurrent Amazon ECS tasks running on Fargate Spot. These are default quotas (also commonly known as limits) for an account in a given Amazon Web Services Region, but you can always raise these values even further to meet your application needs by requesting a quota increase. This makes it even more seamless to run your workloads at scale on Fargate, the serverless compute engine for containers that works with Amazon ECS, Amazon EKS, and Amazon Batch.  

Application Load Balancer (ALB) now supports Application-based cookie stickiness. This new feature helps customers ensure that clients connect to the same load balancer target for the duration of their session using application cookies. This enables customers to achieve a consistent client-server experience with greater controls such as the flexibility to set custom cookie names and criteria for client-target stickiness within a target group.

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). SageMaker Studio provides a single, web-based visual interface where you can perform all ML development steps required to prepare, build, train and tune, deploy and manage models. Starting today, you can now automate the process of creating SageMaker Studio domains and adding user profiles using Amazon Web Services CloudFormation.

Amazon Identity and Access Management (IAM) now allows administrators to use tags to manage and secure access to Customer Managed Policies, Instance Profiles, OpenID Connect Providers, SAML Providers, Server Certificates and Virtual MFAs.  

Today, we are excited to announce the general availability (GA) of two Amazon GameLift updates in the Amazon Web Services China (Beijing) Region, operated by Sinnet. The first is an update to Amazon GameLift FlexMatch, enabling you as a game developer to use the multiplayer matchmaker with any game server solution of your choice. As for the second update, Amazon GameLift now supports AMD instances. An Amazon Web Services managed service, GameLift enables developers such as Metalhead Software, Yager, and Illfonic to deploy, operate, and scale dedicated servers in the cloud for multiplayer games. Whether it’s creating a 200+ player battle royale game with Large Match Support or automatically adapting server capacity with player traffic using Autoscaling, GameLift leverages the power and reliability of Amazon Web Services to provide seamless gameplay experiences for players worldwide.

Amazon IoT SiteWise a managed service that makes it easy to collect data from your industrial equipment, model your physical assets, processes and facilities, quickly compute common industrial performance metrics, and create fully managed web applications to help analyze industrial equipment data, prevent costly equipment issues, and reduce production inefficiencies. 

DynamoDB local now supports PartiQL (a SQL-compatible query language) so that you can query, insert, update, and delete DynamoDB table data in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. PartiQL is supported for all DynamoDB data-plane operations, and it helps improve the productivity of developers as they use this familiar, structured query language to perform operations. Developers can use PartiQL to develop applications, and test them offline before deploying them to production.

You can now tag your Amazon Web Services Cloud Map namespaces and services through Amazon Web Services Console in Amazon Web Services China (Beijing) Region, operated by Sinnet and in Amazon Web Services China (Ningxia) Region, operated by NWCD. AAmazon Web Services WS Cloud Map is a cloud resource discovery service. Using Amazon Web Services Cloud Map, you can define custom names for your application resources, such as Amazon ECS tasks, Amazon EC2 instances, Amazon S3 buckets, or any other cloud resource. Your application can then discover the location and metadata of cloud resources associated with these custom names via Amazon SDK or by making authenticated API calls. 

To coincide with our new Amazon Budgets Actions launch , we are reducing the price for budget-days from CNY 0.07 to free. Before this reduction, customers received 62 free budget-days per month before paying CNY 0.07 per budget-day for all active budgets within a regular account or consolidated billing family. Customers who simply want to monitor their cost, usage, or Reservations coverage and utilization can now do so free of charge. 

Starting today, you can define the action you want to take in your account when a budget exceeds its threshold (actual or forecasted amounts). This level of control will allow you to reduce unintentional overspending in your account. For example, you can choose to apply a custom “Deny EC2 Run Instances” IAM policy to a user, group, or role in your account once your monthly budget for EC2 has been exceeded. 

Today, we are announcing the public preview of ML Detect in the Amazon Web Services China Regions, a new feature of Amazon IoT Device Defender that automatically detects device-level operational and security anomalies across your fleet by learning from past data.

Amazon GuardDuty is now available in the Amazon Web Services China (Beijing) region operated by Sinnet and in the Amazon Web Services China (Ningxia) region operated by NWCD. You can now continuously monitor and detect security threats in the China regions to help protect your Amazon Web Services accounts, workloads, and data stored in Amazon S3.

Amazon EC2 now provides additional network performance metrics to help customers gain more insights into instance network performance. Five new metrics provide customers visibility when their instances exceed network allowances defined by Amazon Web Services. This visibility helps customers proactively resolve application performance issues and right size instance fleets based on desired network performance.

Effective Feb 1st, 2021, Amazon SQS provides tiered pricing for monthly API requests in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Tiered pricing will provide discounts based on your monthly usage of Amazon SQS. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Using SQS, you can send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available.

You can now author Amazon Lambda functions in Node.js 14 and use its new features, such as top-level-await, enhanced diagnostics, modifications of the streams APIs, and a revised JavaScript engine for better performance. Lambda functions written in Node.js 14 run on Amazon Linux 2, the latest generation of Amazon Linux. To learn more about writing functions in Node.js 14, see the Node.js programming model in the Lambda documentation.  

Amazon RDS for Oracle now supports 20.2 version of Oracle Application Express (APEX) for 12.1, 12.2, 18c and 19c versions of Oracle Database in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

You can now perform S3 Delete Object Tagging operations using Amazon S3 Batch Operations to delete object tags across many objects with a single API request or a few clicks in the S3 Management Console. S3 Batch Operations lets you perform repetitive or bulk actions like copying objects or replacing tag sets across billions of objects. S3 Batch Operations handles all the manual work, including managing retries and displaying progress.  

Amazon S3 now supports Amazon PrivateLink, providing access to Amazon S3 directly as a private endpoint within your secure, virtual network with Amazon PrivateLink. Simplify your network architecture by connecting to Amazon S3 from on-premises or in Amazon Web Services using private IP addresses in your Virtual Private Cloud (VPC), eliminating the need to use public IPs, configure firewall rules, or configure an internet gateway to access Amazon S3 from on-premises.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, now supports JavaScript Object Notation (JSON) syntax to help you read and write data from other systems more easily.

Amazon Aurora with PostgreSQL compatibility can now make calls to Amazon Lambda functions. Amazon Lambda lets you run code without provisioning or managing servers, and without worrying about scalability.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 11.9, 10.14, and 9.6.19 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD region. This release contains bug fixes and improvements done by the PostgreSQL community.

Amazon Systems Manager Automation now lets you define the actions to perform when an operator cancels the execution of a runbook. Using this feature, you can automatically roll back any changes or perform necessary cleanups when the execution of a runbook is canceled.

Amazon Elastic File System (Amazon EFS) now allows you to drive up to 3x higher read throughput on your file system. For example, bursting mode file systems now provide 300MB/s of bursting read throughput, or 300MB/s per TiB of data stored in Amazon EFS standard, whichever is higher. If you have configured 1 GB/s of provisioned throughput, your application can now drive up to 3 GB/s for read operations (and continue to drive 1GB/s for write operations) without any application or configuration changes.  

Amazon FSx for Lustre, a service that provides high-performance shared storage, now enables you to increase the storage capacity of your file systems with the click of a button, providing you the flexibility to easily respond to your evolving storage needs by increasing file system size in a matter of minutes. 

Amazon Elasticsearch Service now supports Gantt charts, a new visualization in Kibana. Users can now embed Gantt charts into dashboards to enable visualization of events, steps and tasks as horizontal bars. The length of the bars shows the amount of time associated with an event, step or a task. Gantt charts are used to represent a series of events that contain a parent-child relationship. This can be particularly useful in trace analytics, telemetry, and monitoring use cases, in which the users need to understand the overall interaction between traces or events. Gantt charts help users manage their resources by getting an overview of the events or tasks and understanding the relationships between them. 

Amazon Aurora with PostgreSQL compatibility now supports major version 12. PostgreSQL 12 includes better index management, improved partitioning capabilities, and the ability to execute JSON path queries per SQL/JSON specifications. It also enables nondeterministic collations that support case-insensitive and accent-insensitive comparisons for ICU provided collations, most common-value statistics for improved query plans, creation of generated columns that compute values with an expression, and many additional features. 

Amazon IoT Core now supports a new IoT rule action to deliver messages from your devices directly to your Amazon Managed Streaming for Apache Kafka (“Amazon MSK”) or self-managed Apache Kafka clusters for data analysis and visualization, without writing a single line of code.

Starting today, you can perform an in-place upgrade of your Amazon Aurora database cluster from PostgreSQL major version 11 to 12. Instead of backing up and restoring the database to the new version, you can upgrade with just a few clicks in the Amazon RDS Management Console or by using the Amazon SDK or CLI. 

Change Calendar, a capability of Systems Manager, now publishes an event to Amazon EventBridge when it changes state from open to closed and vice versa. You can use the published state change event to automatically start actions such as disabling promotions through your continuous integration and delivery (CI/CD) pipeline, managing access to your fleet, or updating the system configurations. Change Calendar allows you to create blocked days on your calendar in order to prevent changes from being made to your application during important business events such as public marketing promotions, when you expect high demand on your resources.  

Amazon Elasticsearch Service now supports encryption of data at rest and node-to-node encryption on existing domains, enabling organizations hosting sensitive workloads to meet stringent security and compliance requirements.

Starting today, you can use Amazon Secrets Manager to rotate Amazon Database Migration Service (DMS) source and target database credentials easily. Rotating credentials is an Amazon Identity and Access Management (IAM) best practice that helps you meet your security and compliance requirements. 

You can now launch R5, M5, and T3 instance types when using Amazon RDS for MariaDB and T3 instance types when using Amazon RDS for MySQL. Amazon RDS now also supports R5, M5, and T3 Reserved Instance types when using Amazon RDS for MariaDB and MySQL.  

We have updated the Monthly Uptime Percentage in the service level agreement (SLA) for Amazon Web Services Cloud Map in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD, to 99.95%. 

Amazon EMR integration with Apache Ranger is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can define, enforce, and audit fine-grained data access control on Amazon EMR with Apache Ranger and leverage Amazon CloudWatch to capture auditing logs.  

You can now scale your Amazon Managed Streaming for Apache Kafka (MSK) clusters without reassigning Apache Kafka partitions by changing the size or family of your brokers on-demand. Changing the size or family of your brokers gives you the flexibility to adjust your MSK cluster’s compute capacity for changes in your workloads, without interrupting your cluster I/O. In just a few clicks, you can scale up or scale down your Amazon MSK clusters’ compute capacity that includes CPU, memory, network throughput and I/O capacity. You will be charged for the chosen broker size or family per Amazon MSK standard pricing.

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. Amazon DocumentDB makes it easy and intuitive to store, query, and index JSON data. 

Amazon Database Migration Service (Amazon DMS) has expanded its functionality by supporting parallel apply when using Redshift as a target during on-going replications in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. By taking advantage of the multithreaded CDC task settings, you can improve the performance of your on-going replications from any DMS supported sources to Amazon Redshift. 

Starting today, EC2 Fleet and Spot Fleet (further referred to as Fleet) are integrated with Amazon EventBridge (formerly CloudWatch Events) to notify you about important Fleet events, state changes, and errors. This allows you to automate actions in response to Fleet state changes as well as monitor the state of your Fleet from a central place without a need to continuously poll Fleet APIs. Amazon EventBridge enables you to collect monitoring data from Amazon Web Services resources and applications, and allows you to build loosely coupled and distributed event-driven architectures. 

Amazon Elasticsearch Service now supports the ability to reload dictionary files without reindexing your data. Elasticsearch uses analyzers to convert string data into terms or tokens that power its search capabilities. These analyzers can do things like remove white space and stop words, perform stemming, handle compound words, and add synonyms. Previously, on Amazon Elasticsearch Service these analyzers could only process data as it was indexed. If you wanted to add some additional synonyms at a later time, you had to reindex your data with the new dictionary file. 

Amazon Elastic Container Service (ECS) now lets you attach IAM resource policies to VPC Endpoints. This allows you to control access to your ECS resources from VPC Endpoints, helping you meet compliance and regulatory requirements. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.6.1 for new and existing clusters. Apache Kafka 2.6.1 includes several bug fixes and improvements such as persisting an update in group membership (KAFKA-10284) and improved CPU usage during consumer rebalancing (KAFKA-10134). For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 2.6.1.  

Amazon Step Functions is now integrated with Amazon EKS, making it easier to build resilient applications that orchestrate jobs running on Kubernetes with Amazon services such as Amazon Lambda, Amazon SNS, and Amazon SQS with minimal code. You can now build workflows including steps that launch tasks in Amazon EKS and wait for its completion without writing code to manage the state of the Kubernetes job.  

Starting today, Amazon EC2 M6g, C6g, and R6g instances are available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon EC2 M6g, C6g, and R6g instances deliver up to 40% better price/performance over comparable x86-based instances for a broad spectrum of workloads, including application servers, micro-services, high-performance computing, CPU-based machine learning inference, electronic design automation, gaming, open-source databases, and in-memory caches.

Amazon Step Functions is now integrated with Amazon API Gateway REST and HTTP APIs, making it faster and easier to build application workflows including microservices created by API Gateway. You can use the API Gateway integration to create a workflow that orchestrates HTTP and REST APIs acting as the ‘front door’ for business logic running on Amazon Lambda, a serverless compute service or Amazon Elastic Container Service, fully managed container orchestration service. 

Today we announced the availability of gp3, the next-generation general purpose SSD volumes for Amazon Elastic Block Store (Amazon EBS) that enable customers to provision performance independent of storage capacity and provides up to 20% lower price-point per GB than existing gp2 volumes. With gp3 volumes, customers can scale IOPS (input/output operations per second) and throughput without needing to provision additional block storage capacity, and pay only for the resources they need.  

You can now monitor the storage size of your Amazon Elastic File System (Amazon EFS) resources using Amazon CloudWatch. Using the Amazon EFS or Amazon CloudWatch consoles, you can view your file system's storage size over time, including size in each of the EFS storage classes - EFS Standard, and the cost-optimized EFS Infrequent Access. 

Following the announcement of updates to the PostgreSQL database, we have updated Amazon RDS for PostgreSQL to support PostgreSQL minor versions 12.5, 11.10, 10.15, 9.6.20, and 9.5.24. This release closes security vulnerabilities in PostgreSQL and contains bug fixes and improvements done by the PostgreSQL community.  

Amazon Systems Manager now lets you easily search for runbooks and other Systems Manager documents, such as Run Command and Distributor packages, by specifying a part of the name as the search keyword. This feature enables easy discovery of runbooks when you have a large number of runbooks in your account or when you do not remember the exact name of a runbook.  

Amazon Kinesis Data Firehose now supports streaming data delivery to a generic HTTP endpoint in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. This feature enables you to use a fully managed service to stream data to an HTTP endpoint without building custom applications or worrying about operating and managing the data delivery infrastructure. Amazon Kinesis Data Firehose incorporates error handling, auto-scaling, transformation, conversion, aggregation, and compression to help you accelerate the deployment of data streams across your organization. 

Amazon Transit Gateway now supports the ability to establish peering connections between Transit Gateways in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Transit Gateway is a service that enables customers to connect thousands of Amazon Virtual Private Clouds (Amazon VPCs) and their on-premises networks using a single gateway. With Amazon Transit Gateway, customers only have to create and manage a single connection from a central regional gateway to each Amazon VPC, on premises data center, or remote office across their networks. 

Amazon RDS for SQL Server now supports the Microsoft Business Intelligence suite on SQL Server 2019. You can now run SQL Server Integration, Analysis, and Reporting Services on DB instances using the latest major version. 

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning. With a single click, data scientists and developers can quickly spin up SageMaker Studio notebooks to explore and prepare datasets to build, train and deploy machine learning models in a single pane of glass. Amazon Elastic MapReduce (EMR) is a web service that makes it easy to quickly and cost-effectively process vast amounts of data. Starting today, customers can use Studio notebooks to easily and securely connect to Amazon EMR clusters and prepare vast amounts of data for analysis and reporting, model training, or inference. 

Amazon API Gateway now supports data mapping definitions from an HTTP API’s method request data (e.g. path parameters, query string and headers) to the corresponding integration request parameters and from the integration response data (e.g. headers) to the HTTP API method response parameters. 

You now have an option to delete an instant type EC2 Fleet. All running instances associated with it will be terminated and the fleet will be deleted.  

Amazon EC2 Auto Scaling now supports using up to 40 instance types with mixed instances policies. This doubles the number of instance types you can specify. Previously, you could only specify 20 instance types. Now, you can specify up to 40 instance types when you first create an Auto Scaling group, and when you update existing Auto Scaling groups. You can use the Overrides section in your mixed instances policy structure to input up to 40 instance types that Amazon EC2 Auto Scaling can use to provision your On-Demand and Spot Instances. By using a variety of instance types, you can maintain your workload’s availability as you can provision your application’s resources across more Spot instance pools per Availability Zone and reduce the chance of getting insufficient capacity error in case of On-Demand. Running your application's resources across diverse Spot instance pools also allows you to further reduce your operating costs over time. 

Starting today Amazon Relational Database Service (RDS) for Oracle supports publishing Oracle Management Agent (OMA) logs from your DB instances to Amazon CloudWatch Logs in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. 

Amazon FSx, a fully managed service that makes it easy to launch and run feature-rich and highly-performant file systems, announced that customers can now access Amazon FSx for Windows File Server and Amazon FSx for Lustre file systems from non-RFC1918 IP addresses. Amazon FSx for Windows File Server customers can now also join their file systems to on-premises Active Directories with non-RFC1918 IP addresses.  

Starting today, you can perform an in-place upgrade of your Amazon Aurora database cluster from MySQL major version 5.6 to 5.7 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Instead of backing up and restoring the database to the new version, you can upgrade with just a few clicks in the Amazon RDS Management Console or by using the Amazon SDK or CLI.

Today Amazon Batch introduced the ability for customers to specify Amazon Fargate as a compute resource for their Amazon Batch jobs in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With Amazon Batch support for Amazon Fargate, customers now have a way to run jobs on serverless compute resources, fully managed from job submission to completion. Now, you only need to submit your analytics, map reduce, and other batch workloads and let Amazon Batch and Amazon Fargate handle the rest.