2022

Since 2021, Amazon Simple Queue Service (SQS) supported Server-Side Encryption with Amazon SQS-managed encryption keys (SSE-SQS) to protect sensitive data. Today, Amazon SQS announces SSE-SQS encryption by default for newly created queues. SSE-SQS can help you build security-sensitive applications to support your encryption compliance and regulatory requirements.

Amazon IoT Core, a managed cloud service that lets customers connect billions of IoT devices and routes trillions of messages to Amazon Web Services services, announces the General Availability of an upgraded message broker service that includes support for the MQTT version 5 protocol. MQTT5 is an updated device-to-device messaging communication standard that includes significant feature improvements over the previous MQTT version 3.1.1.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the instance store for temporary tablespaces and the Database Smart Flash Cache (flash cache) for M5d and R5d instances in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 14.5, 13.8, 12.12, and 11.17 in Amazon Web Services China (Beijing) Region, operated by Sinnet and in Amazon Web Services China (Ningxia) Region, operated by NWCD. These releases contain bug fixes and improvements by the PostgreSQL community. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora PostgreSQL 10, you must upgrade to a newer major version by January 31, 2023.

Amazon Lambda now supports content filtering options for Amazon MSK, Self-Managed Kafka, Amazon MQ for Apache ActiveMQ, and Amazon MQ for RabbitMQ. With event pattern content filtering, customers can write complex rules so that their Lambda function is only invoked to process meaningful events. This helps reduce traffic to customers’ Lambda functions, simplifies code, and reduces overall cost.  Filtering was already available for SQS, DynamoDB, and Kinesis as event sources for Lambda.

To respond to evolving technology and regulatory standards for Transport Layer Security (TLS), we will be updating the TLS configuration for Amazon Web Services API endpoints of all services to a minimum of version TLS 1.2. This update means you will no longer be able to use TLS versions 1.0 and TLS versions 1.1 with all Amazon Web Services APIs in Amazon Web Services China Regions by June 28, 2023. In this post, we will tell you how to check your TLS version, and what to do to prepare.

Amazon EC2 announces pagination for the EC2 DescribeImages API. It allows you to describe your images over a number of API requests, instead a single one. You can specify a page size when calling the API, which will be used as the upper bound for resources to return in a single request. A pagination token is returned on the response, which you can then include in your next API request to fetch the next page of images.

Amazon Lambda now supports custom Consumer Group IDs when using Amazon Managed Streaming for Apache Kafka (Amazon MSK) or Self-Managed Kafka as an event source.  Kafka uses Consumer Group IDs to identify consumer membership and record consumer checkpoints.  Using a custom Consumer Group ID is ideal for customers with workloads that require disaster recovery or fail‑over support.

Amazon DataSync, an online data movement service that simplifies, automates, and accelerates moving data between on-premises storage and Amazon Storage services, is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon S3 server access logs and Amazon CloudTrail logs will soon contain information to identify S3 requests that rely upon an access control list (ACL) for authorization to succeed. This feature, which will be activated over the next few weeks, will provide you with information that will simplify the process of adopting the S3 security best practice of disabling ACLs.

We are excited to announce that Amazon IoT Device Management Fleet Indexing now supports up to twelve query terms. Amazon IoT Device Management is a fully managed service that helps you search, organize, monitor, and remotely manage IoT devices at scale.

You can now use Amazon PrivateLink to privately access the Amazon Elastic Kubernetes Service (Amazon EKS) management APIs from your Amazon Virtual Private Cloud (VPC). PrivateLink provides private connectivity between VPCs, Amazon Web Services services, and your on-premises networks. You can now manage your Amazon EKS clusters in your VPC using PrivateLink to help meet your organization’s security and compliance requirements. To use PrivateLink, create an interface VPC endpoint for Amazon EKS in your VPC using the Amazon VPC console, SDK, or CLI. You can also access the VPC endpoint from on-premises environments or from other VPCs using Amazon Direct Connect, or VPC Peering. Creating VPC Endpoints incurs charges, see the Amazon PrivateLink pricing page for more information.

Today, Amazon Simple Queue Service (SQS) announces support for attribute-based access control (ABAC) using queue tags, enabling customers to bolster their overall security postures with a flexible and scalable access control solution. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS significantly reduces the complexity and overhead associated with managing and operating message-oriented middleware, and empowers developers to focus on differentiating work.

Amazon EKS now supports advanced configuration of cluster add-ons, enabling you to customize add-on properties to help you meet performance, compliance, or additional requirements not handled by default settings. Configuration can be applied to add-ons either during cluster creation or at any time after the cluster is created. Amazon EKS now supports configuration for the following add-ons: Amazon VPC CNI, CoreDNS, kube-proxy, EBS CSI driver, and Amazon Distro for OpenTelemetry. As an example, you can now install and configure Amazon VPC CNI to leverage EC2 prefixes for increased pod density on cluster worker nodes. Amazon EKS add-ons configuration is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon EC2 C6i, M6i and R6i instances are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are powered by 3rd Gen Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz, offering up to 15% better compute price performance over comparable Gen5 instances for a wide variety of workloads, and always-on memory encryption using Intel Total Memory Encryption (TME).

Amazon Aurora PostgreSQL-compatible edition now supports zero-downtime patching (ZDP) in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With ZDP, customers can upgrade to a new PostgreSQL minor version and apply patches to their Aurora cluster with minimal downtime.

Starting today, customers of  Amazon Cost Anomaly Detection in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will be able to define percentage based thresholds when configuring their alerting preferences. Amazon Cost Anomaly Detection is a cost management service that leverages advanced machine learning to identify anomalous spend and root causes, so customers can quickly take action to avoid runaway spend and bill shocks. The percentage-based alerting configuration enables customers to capture the anomalous spend dynamically rather than having to estimate an absolute Yuan amount.

Starting in April 2023, Amazon S3 will introduce two new default bucket security settings by automatically enabling S3 Block Public Access and disabling S3 access control lists (ACLs) for all new S3 buckets. Once complete, these defaults will apply to all new buckets regardless of how they are created, including Amazon CLI, APIs, SDKs, and Amazon CloudFormation. These defaults have been in place for buckets created in the S3 management console since the two features became available in 2018 and 2021, respectively, and are recommended security best practices. There is no change for existing buckets.

Amazon Elastic Container Services (Amazon ECS) launches a new networking capability called Service Connect in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon EBS direct APIs now support the IPv6 protocol in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD, so that applications can connect through EBS direct APIs over IPv6. EBS direct APIs enable customers to simplify their backup and recovery workflows by directly creating and reading EBS snapshots via APIs. With this change, customers can meet their IPv6 compliance needs, integrate with existing IPv6-based on-premises applications, and remove the need for expensive networking equipment to handle the address translation between IPv4 and IPv6.

The new Amazon GuardDuty machine learning techniques that are highly effective at detecting anomalous access to data stored in Amazon Simple Storage Service (Amazon S3) buckets are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. This new capability continuously models S3 data plane API invocations (e.g. GET, PUT, and DELETE) within an account, incorporating probabilistic predictions to more accurately alert on highly suspicious user access to data stored in S3 buckets, such as requests coming from an unusual geo-location, or unusually high volumes of API calls consistent with attempts to exfiltrate data. The new machine learning approach can more accurately identify malicious activity associated with known attack tactics, including data discovery, tampering, and exfiltration. The new threat detections are available for all existing Amazon GuardDuty customers in the Amazon Web Services China Regions that have GuardDuty S3 Protection enabled, with no action required and at no additional costs. If you are not using GuardDuty yet, S3 protection will be on by default when you enable the service. If you are using GuardDuty, and are yet to enable S3 Protection, you can enable this capability organization-wide with one-click in the GuardDuty console or through the API.

Starting today, Amazon EC2 R6gd instances powered by Amazon Graviton2 processors are available in Amazon Web Services China (Beijing) Region, operated by Sinnet. R6gd instances are ideal for memory-intensive applications such as open-source databases, in-memory caches, and real time big data analytics. The local SSD storage provided on these instances will benefit applications that need access to high-speed, low latency storage, as well as for temporary storage of data such as batch and log processing, and for high-speed caches and scratch files.

Amazon Fargate adds the ability to monitor the utilization of the ephemeral storage attached to a Amazon Elastic Container Service (ECS) task. Customers can track the storage utilization with Amazon CloudWatch Container Insights and ECS Task Metadata endpoint. 

Starting today, you can create budgets using a simplified 1-click workflow for common budgeting scenarios as well as take step-by-step tutorials to learn about creating different kinds of budgets. Amazon Budgets helps you track against expected spend by sending alerts when your cost and usage exceeds (or is forecasted to exceed) thresholds you define, or when your Reserved Instances’ utilization and/or coverage rate drops below a threshold. 1-Click Templates and Tutorials are intended for new and existing users seeking guidance on what budgets they can set to control costs in Amazon Web Services.

Amazon RDS for SQL Server now supports a linked server to Oracle database. From your RDS for SQL Server instance, you can use linked server to access external Oracle databases to read data and execute SQL commends. If you have existing solutions that use linked servers to integrate Oracle databases, you can now migrate your SQL Server workloads directly to Amazon RDS.

We are pleased to announce that as of today, customers in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will see additional details in Amazon Cost Anomaly Detection’s console, alerting emails, and SNS topics posted to Slack and Chime. Amazon Cost Anomaly Detection is a cost management service that leverages advanced machine learning to identify anomalous spend and root causes, so customers can quickly take action to avoid runaway spend and bill shocks. With this launch, customer can spend less effort trying to understand what account and monitor is tied to a cost anomaly, which in turn helps them take necessary actions more quickly.

Today, Amazon IoT Device Defender launched a new audit check Amazon IoT policy potentially misconfigured to identify certain potential misconfigurations in IoT policies. Security misconfigurations such as overly permissive policies can be a major cause of security incidents. With this new audit check in Amazon IoT Device Defender, you can now more easily identify flaws, troubleshoot issues, and take the necessary corrective actions.

NoSQL Workbench for Amazon DynamoDB now includes a guided DynamoDB Local installation process to streamline setting up your DynamoDB local development environment. You can use this new feature to build, test, and deploy workloads on DynamoDB more quickly.

NoSQL Workbench for Amazon DynamoDB now supports creating data models directly from sample data model templates to help you design data schemas for your workloads. You can use this feature to get familiar with NoSQL data modeling best practices when building your applications on DynamoDB.

Amazon Transfer Family has successfully completed the Drummond Group pre-certification testing for its Applicability Statement 2 (AS2) managed file transfer capabilities. The pre-certification issued by Drummond Group verifies that the Amazon Transfer Family AS2 capabilities have been thoroughly vetted for security and file exchange compatibility with two other third-party AS2 solutions. Customers across verticals such as healthcare, retail, financial services, and others that use Amazon Transfer Family AS2 endpoints can now have confidence in their ability to successfully exchange AS2 messages with other third-party solutions.

Today, Amazon CloudFormation StackSets launches event notifications via Amazon EventBridge. You can trigger event-driven actions after creating, updating, or deleting your CloudFormation stack sets. You can achieve this without developing or maintaining custom solutions that periodically poll for changes in your CloudFormation stack sets deployments via CloudFormation APIs. With this launch, you can build your event-driven applications across multiple Amazon Web Services accounts, Organizational Units (OUs), and Regions with Amazon CloudFormation StackSets and Amazon EventBridge.

Today, we are pleased to announce Amazon IoT Device Management Jobs added a new configuration option for scheduling, which gives customers flexibility to deploy remote operations during pre-defined time windows so regular usage of their IoT devices are not disrupted. Using the scheduling feature, customers can define the start and end time of a job rollout. Customers can also configure the end behavior to specify what happens to job executions at the end of the job schedule. This new Job scheduling feature helps customers to set up a rollout schedule in accordance with their standard operating procedures, or a deployment cadence for different types of updates based on their software development CI/CD cycles.

Amazon Redshift now supports real-time streaming ingestion for Amazon Kinesis Data Streams (KDS) and Amazon Managed Streaming for Apache Kafka (MSK). Amazon Redshift streaming ingestion eliminates the need to stage streaming data in Amazon S3 before ingesting it into Amazon Redshift, enabling customers to achieve low latency, measured in seconds, while ingesting hundreds of megabytes of streaming data per second into their data warehouse.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the October 2022 Release Updates (RU) for Oracle Database 19c and Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Today, EBS announced the availability of Rule Lock for Recycle Bin so customers can lock their Region-level retention rules to prevent them from being unintentionally modified or deleted. This new setting adds an additional layer of protection for customers to recover their EBS Snapshots and EC2 AMIs in case of inadvertent or malicious deletions.

Starting today, you can choose the private IP address that your NAT Gateway uses for network address translation.

Amazon EventBridge now supports additional filtering capabilities including the ability to match against characters at the end of a value (suffix filtering), to ignore case sensitivity (equals-ignore-case), and to have a single EventBridge rule match if any conditions across multiple separate fields are true (OR matching). We’re also increasing the bounds supported for numeric values to -5e9 to 5e9 from -1e9 to 1e9. With these new enhanced capabilities, you can now write complex rules that provide additional filtering options when building event-driven applications. 

Amazon Security Hub now supports automated security checks aligned to the Center for Internet Security’s (CIS) Amazon Web Services Foundations Benchmark version 1.4.0 requirements, Level 1 and 2 (CIS v1.4.0). Security Hub’s CIS v1.4.0 standard includes 34 automated rules that conduct continuous checks against 34 CIS v1.4.0 requirements across 8 Amazon Web Services services. The CIS v1.4.0 standard is supported in addition to the CIS v1.2.0 standard which was previously available in Security Hub.

Starting today, Amazon EC2 enables customer created tags to be included during Amazon Machine Image (AMI) CopyImage operations. This feature aims to reduce customer burden if you want to employ the same tags across all your copied AMIs. Previously, when you created a copy of an AMI, any tags you created for that AMI did not get copied over to the new AMI. You had to apply the tags to the new AMI manually after it was created if you wanted to replicate the same tags from the original AMI.

Amazon Organizations now supports Amazon CloudFormation, allowing customers to manage accounts and organizational units (OUs) within their organization using CloudFormation templates. With this latest integration, customers can efficiently deploy multiple organizational elements in a stack, allowing them to more easily scale across accounts and OUs.

Amazon Database Migration Service (Amazon DMS) now offers customers the option to use Internet Protocol version 6 (IPv6) addresses in their Virtual Private Cloud (VPC) on new and existing DMS Replication Instances. Customers moving to IPv6 can simplify their network stack by running their DMS Replication Instances on a network that supports both IPv4 and IPv6.

Amazon Aurora now supports exporting database clusters directly to S3 in Apache Parquet format without creating a snapshot first. Customers can also initiate an export to S3 directly from the Aurora database cluster, saving them time, cost and the extra overhead of creating/retaining snapshots to export data to S3.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.5, 13.8, 12.12, 11.17, and 10.22. We recommend you upgrade to the latest minor version to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Attribute-Based Access Control (ABAC) is an authorization strategy that defines access permissions based on tags which can be attached to IAM resources such as IAM users and roles, and to Amazon Web Services resources, like Lambda functions, to simplify permission management. ABAC support for Lambda functions allows you to scale your permissions as your organization innovates and give granular access to developers without requiring a policy update when a user or project is added, removed or updated. With ABAC support for Amazon Lambda, IAM policies can be used to allow or deny specific Lambda API actions when the IAM principal's tags match the tags on a Lambda function.

Amazon Relational Database Service (RDS) for Oracle now supports version 22.1 of Oracle Application Express (APEX) for all Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Amazon AppSync, a service that makes it easier to build scalable APIs that connect applications to data, just got simpler. API developers can now use JavaScript to define the business logic that connects their AppSync GraphQL and Pub/Sub APIs to data, and leverage two new libraries and a new service API command to simplify local development and testing.

You can now efficiently manage and rotate passwords for Amazon ElastiCache for Redis clusters using Amazon Secrets Manager.

Amazon S3 Storage Lens, a cloud storage analytics feature for organization-wide visibility into object storage usage and activity, adds 34 additional metrics that can be used to identify deeper cost optimization opportunities, identify data protection best practices, and improve performance of application workflows.

Amazon S3 Glacier improves restore throughput by up to 10x when retrieving large volumes of archived data. The increased throughput automatically applies to all standard and bulk retrievals from the Amazon S3 Glacier Flexible Retrieval and Amazon S3 Glacier Deep Archive storage classes, and is available at no additional cost. With higher restore throughput, applications can now process archived data faster.

Amazon Lambda customers in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can configure up to 10,240 MB of ephemeral storage for their Lambda functions, a 20x increase compared to the previous limit of 512 MB.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.11, 10.5.18, 10.4.27 and 10.3.37. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

We are excited to announce that Amazon IoT Device Defender is now integrated with Amazon Security Hub. This integration allows customers to easily ingest alarms and their attributes from Amazon IoT Device Defender Audit and Detect features in one central location, without any custom coding. When reviewing and analyzing devices monitored by Amazon IoT Device Defender, this update can also help offload or reduce complexity of managing disparate workflows from multiple security consoles.

Starting today, you can now store and restore up to 5 TB Amazon Machine Images (AMIs) to and from an Amazon S3 bucket, compared to 1 TB prior, enabling storing and transferring of larger AMIs between partitions.

Amazon ElastiCache for Redis now supports Amazon Identity and Access Management (IAM) authentication access to Redis clusters. By using IAM, you can associate IAM users and roles with ElastiCache users and manage their cluster access.

Amazon OpenSearch Service now supports OpenSearch and OpenSearch Dashboards version 2.3. With this version, Amazon OpenSearch Service adds several features such as new algorithms to the machine learning (ML) commons library, improvements to aggregations, improvements to map visualizations, alerting, anomaly detection, and more.

Today, we are pleased to announce the general availability of an IoT Device Management feature, browser-based SSH (secure shell) using Secure Tunneling. Secure Tunneling provides customers a secure connection between source and destination devices that are brokered through a cloud proxy service on Amazon Web Services. To provide secure bi-directional communication between devices, tunnels are authenticated with the cloud proxy service and data transmitted through the tunnel is encrypted using Transport Layer Security (TLS). With the browser-based SSH, customers can open a tunnel SSH session directly from the Amazon Web Services console through an embedded CLI without the need for a local proxy. This feature improves the onboarding experience significantly because customers no longer need to install a local proxy on the operators' device. This streamlined experience allows customers to easily scale their use of secure tunneling for remote tasks such as troubleshooting or conducting routine operational maintenance.

Amazon Virtual Public Cloud (VPC) is introducing three new features to make it faster, easier and more cost efficient to store and run analytics on your Amazon VPC Flow Logs. First, VPC Flow Logs can now be delivered to Amazon S3 in the Apache Parquet file format. Second, they can be stored in S3 with Hive-compatible prefixes. And third, your VPC Flow Logs can be delivered as hourly partitioned files. All of these features are available when you choose S3 as the destination for your VPC Flow Logs.

Amazon Relational Database Service (Amazon RDS) now supports the delivery of message attributes, which provide structured metadata about a message. Amazon RDS event attributes are separate from the message, but are sent with the message body. The message receiver can use this information to decide how to handle the message, enabling routing and filtering without having to process the message body first.

Amazon ElastiCache for Redis now supports Redis 7. This release brings several new features to Amazon ElastiCache for Redis:

Amazon Relational Database Service (Amazon RDS) for Oracle now supports integration with Amazon Elastic File System (EFS) in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. You can now transfer files between the RDS for Oracle DB instance and Amazon EFS file system. Amazon EFS is designed for 99.999999999% (11 9s) of durability and up to 99.99% (4 9s) of availability. You can scale to petabytes on a single NFS file system.

Today, Change Manager, a new change management feature of Amazon Systems Manager, is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Change Manager simplifies the way you can request, approve, implement, and report on operational changes to your application configuration and infrastructure on Amazon Web Services and on-premises.

Today, Amazon Elastic Container Service (Amazon ECS) has announced the availability of ECS task scale-in protection, a new feature that enables customers to protect long-running tasks from being terminated by scale-in events and deployments.

Amazon Virtual Private Cloud (VPC) now supports two new addresses for the default gateway router for IPv6. With this launch, we now support the following address formats: $SUBNET::1 and FE80:EC2::1. These addresses can be used for static router configuration and within applications that are restricted to communicate with only global unicast addresses (GUA).

Today, we announced the availability of next-generation General Purpose (gp3) storage volumes for Amazon Relational Database Service (Amazon RDS). Amazon RDS gp3 volumes give you the flexibility to provision storage performance independently of storage capacity, paying only for the resources you need. Every gp3 volume provides you the ability to select from 20 GiB to 64 TiB of storage capacity, with a baseline storage performance of 3,000 IOPS included with the price of storage. For workloads that need even more performance, you can scale up to 64,000 IOPS for an additional cost.

The Amazon Time Sync Service is now available over the Internet. Built on Amazon Web Services' network infrastructure, the Amazon Time Sync Service utilizes a global fleet of redundant satellite-connected and atomic reference clocks in Amazon Web Services regions to deliver current time readings of the Coordinated Universal Time (UTC) global standard. Previously, Amazon Time Sync was available only to EC2 instances and Amazon Web Services.

Today, Amazon CloudFormation StackSets improves access to detailed information on stack instances for stack set operations. You can get the count of failed stack instances for stack set operations in DescribeStackSetOperation. Additionally, you can list and filter stack instances for stack set operations in ListStackInstances.

NICE DCV version 2022.2 introduces multiple new features, such as support for Mac computer Retina displays and time zone redirection. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.31 and 5.7.40. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon IoT Device Defender, a fully managed service for auditing and monitoring devices connected to Amazon IoT, now supports a new audit check for revoked intermediate Certificate Authority (CA). If a CA revokes an intermediate CA because it is potentially compromised, then all certificates issued by that intermediate CA are also potentially compromised and invalid. This new audit check identifies active device certificates issued by a revoked intermediate CA, and helps customers review and replace these active device certificates.

Amazon Directory Service for Microsoft Active Directory (Amazon Managed Microsoft AD) now provides you the flexibility to update your directory settings. This makes it easier to meet your specific security and compliance requirements across all new and existing directories. Starting today, you can update your directory settings and Amazon Managed Microsoft AD applies the updated settings to all domain controllers, automatically. You accomplish this using the Amazon Web Services console or automating with Amazon Command Line Interface (Amazon CLI) and/or API.

Amazon ParallelCluster 3.3 release is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by Ningxia Western Cloud Data Technology Co Ltd (NWCD). Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads.

Amazon Keyspaces (for Apache Cassandra)—a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service, now supports the Murmur3Partitioner.

You can now use Amazon Certificate Manager (ACM) to request and use Elliptic Curve Digital Signature Algorithm (ECDSA) P-256 and P-384 Transport Layer Security (TLS) certificates to secure your network traffic. TLS certificates are used to secure network communications and to establish the identity of websites over the internet as well as resources on private networks. ACM lets you easily provision, manage, and deploy public and private TLS certificates.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the July 2022 Release Updates (RU) for Oracle Database 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon OpenSearch Service now supports managed VPC endpoints (powered by Amazon PrivateLink) to connect to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). With an Amazon OpenSearch Service managed endpoint, you can now privately access your OpenSearch Service domain within your VPC from your client applications in other VPCs, within the same or across Amazon Web Services accounts, without using public IPs or requiring traffic to traverse the Internet.

Amazon ElastiCache clusters now support the IPv6 protocol, allowing clients to connect to ElastiCache clusters using IPv6. You can now configure your cluster to accept only IPv6 connections or to accept both IPv4 and IPv6 connections. This allows you to work to meet IPv6 compliance requirements and more efficiently integrate with existing IPv6-based applications.

Amazon RDS for SQL Server now supports transactional log backups in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. With this feature, customers can gain access to transaction log backups that are generated on the RDS SQL Server instance and copied to a customer S3 bucket. Subsequently, customers can restore single databases on that DB instance to a specific point-in-time using these transaction log backups. Customers may also use the transaction log backups to audit, replicate, or process the log data. 

Starting today, you can remove your Amazon Web Services account from launch permissions for an Amazon Machine Image (AMI) that was directly shared with your Amazon Web Services account. You can leverage this capability, for example, to reduce the likelihood of launching an EC2 instance with an unused or deprecated AMI that was shared with you earlier.

Starting on March 1, 2023, Amazon S3 will change the default security configuration for all new S3 buckets. For new buckets created after this date, S3 Block Public Access will be enabled, and S3 access control lists (ACLs) will be disabled. These defaults are the recommended best practices for securing data in Amazon S3.

Amazon Backup now offers a new Amazon Backup Vault Lock console experience in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. The new Amazon Backup Vault Lock console experience not only provides you an intuitive way to configure your vault lock details, but also allows you to deploy and manage your immutability policies to protect your backups from accidental or malicious deletions using a write-once, read-many (WORM) format. Depending on your data retention needs, you can now use Amazon Backup Vault Lock in governance mode or compliance mode to configure your vault’s immutability policies with greater flexibility and multiple levels of security. Under governance mode, users with the appropriate role-based permissions can test and change retention policies or even remove the lock completely. In compliance mode, the user can specify a lock date after which the vault is locked immutably. Once locked, the acceptable retention periods cannot be changed and the lock cannot be disabled even by the root user. With this feature, the console also provides you with visibility into your vaults’ lock status and facilitates reporting across all locked vaults. 

You can now set an EC2 Amazon Machine Image (AMI) to use Instance Metadata Service Version 2 (IMDSv2) by default. IMDSv2 is an enhancement to instance metadata access that requires session-oriented requests to add defense in depth against unauthorized metadata access. IMDSv2 requires a PUT request to initiate a session to the instance metadata service and retrieve a token. To set your instances as IMDSv2-only, you previously had to configure Instance Metadata Options during instance launch or update your instance after launch using the ModifyInstanceMetadataOptions API.

Today, Amazon EC2 announces an enhancement to Replace Root Volume to enable customers to easily patch or upgrade their software. The feature now supports the replacement of the root volume using an updated AMI without stopping the instance. This allows customers to update their applications and guest operating system, while retaining the instance store data, networking and IAM configuration.

Today, we are announcing Elastic IP transfer, a new Amazon VPC feature that allows you to transfer your Elastic IP addresses from one Amazon Web Services Account to another, making it easier to move Elastic IP addresses during Amazon Web Services Account restructuring.

Amazon Kinesis Data Streams is a serverless streaming data service that makes it easy to capture, process, and store streaming data at massive scale. Data Viewer is a new capability for Amazon Kinesis Data Streams that allows viewing data records directly from Amazon Web Services Management Console. As a result, you can easily inspect the data records without programming a dedicated consumer app just to view the data, quickly check the data structure of an unfamiliar stream, or query specific records for QA and troubleshooting. 

Amazon Relational Database Service (RDS) now supports a new instance event, RDS-EVENT-0230, under the event category of security patching, that will alert you when an operating system update is available for your DB instance.

Amazon SWF has launched a new console experience, making it easier for you to manage SWF workflows with more visibility and control. 

Starting today, Amazon Route 53 Resolver DNS Firewall is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Up to 10x faster exports to S3 for snapshot exports for Amazon Aurora MySQL-Compatible Edition now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. The performance improvement is automatically applied to all types of database snapshot exports, including manual snapshots, automated system snapshots, and snapshots created by Amazon Backup.

Amazon Athena has upgraded its SQL query engine to include the latest features from the Trino open source project. Athena engine version 3 includes over 50 new SQL functions, 30 new features, and more than 90 query performance improvements. With today’s launch, Athena is also introducing a continuous integration approach to open source software management that will improve currency with the Trino and Presto projects so that you get faster access to community improvements, integrated and tuned within the Athena engine. 

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 14.4 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. PostgreSQL 14.4 fixes an issue that could cause silent data corruption when using the CREATE INDEX CONCURRENTLY or REINDEX CONCURRENTLY commands. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process.

Amazon Identity and Access Management (IAM) Access Analyzer now helps you identify additional resources that can be accessed publicly or from other accounts or organizations. This includes Amazon SNS Topics, Amazon EBS Volume snapshots, Amazon RDS DB snapshots, Amazon RDS DB Cluster snapshots, Amazon ECR repositories, and Amazon EFS file systems. IAM Access Analyzer now analyzes resource policies, access control lists (ACLs), and access controls for these resources to make it easier to identify unintended public, cross-account, or cross-organization access. This helps you adhere to the security best practice of least privilege and reduce access to more of your resources.

Amazon S3 Replication now supports objects encrypted with server-side encryption with customer-provided keys (SSE-C). SSE-C is an encryption option that allows you to store your own encryption keys to satisfy compliance or security requirements, rather than having Amazon Web Services Cloud store the keys on your behalf using SSE-S3 or SSE-KMS. Now you can automatically replicate your SSE-C encrypted objects to a secondary bucket for your data protection or multi-region resiliency needs. S3 Replication will automatically replicate newly uploaded SSE-C encrypted objects if they are eligible, as per your S3 Replication configurations. To replicate existing SSE-C objects, you can use S3 Batch Replication. To retrieve a replicated SSE-C encrypted object from S3, you supply the same key used to encrypt that object when it was initially uploaded to S3.

On September 12th 2022, Amazon Elastic Block Store (EBS) introduced EBS Snapshots Archive, a new tier for EBS Snapshots that can help you save up to 75% on storage costs for EBS Snapshots that you intend to retain for more than 90 days and rarely access. Today, we are announcing that you can use Amazon Data Lifecycle Manager to automatically move snapshots created by Data Lifecycle Manager to EBS Snapshots Archive, further reducing the need to manage complex custom scripts and the risk of having unattended storage costs. The feature is available in both Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Relational Database Service (RDS) for Oracle now supports version 21.2 of Oracle Application Express (APEX) for all Oracle Database versions in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Using APEX, developers can build applications entirely within their web browser.

Amazon Relational Database Service (Amazon RDS) for MySQL, MariaDB and PostgreSQL now support 15 read replicas per instance, including up to 5 cross region read replicas, delivering up to 3X the previous read capacity.

Amazon Step Functions now provides a new console experience for viewing and debugging your Express Workflow executions that makes it easier to trace and root cause issues in your executions.

Today, Amazon Elastic Container Services (Amazon ECS) has announced the availability of additional metadata attributes for tasks running on Amazon EC2 capacity. You can now use the Amazon ECS task metadata endpoint to retrieve the service name of a task as well as the Amazon VPC ID of Amazon EC2 instance that the task is running on. These additional task metadata attributes provide you increased visibility over your ECS container workloads running on Amazon EC2.

Today, Amazon CloudFormation StackSets increased the default for three service quotas: number of stack instances per stack set, number of stack sets per management account, and number of concurrent stack instance operations in a single Region per management account. You can now (1) deploy 100,000 stack instances per stack set (previously 2,000), (2) create 1,000 stack sets in your management account (previously 100), and (3) run 10,000 concurrent stack instance operations in a single Region per management account (previously 3,500). See Amazon CloudFormation quotas for the latest service quotas.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2014, 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.

You can now deliver Amazon Virtual Private Cloud (VPC) Flow Logs directly to Amazon Kinesis Firehose, allowing you to stream your flow logs real-time to destinations supported by Amazon Kinesis Firehose or downstream logging solutions via custom HTTP endpoints.

Starting today, all new Amazon Directory Service for Microsoft AD (Amazon Managed Microsoft AD) directories run on Windows Server 2019. For current customers with existing directories, you can simply update with just a few clicks or programmatically via API. With this feature, you can initiate updates for existing directories when it’s most convenient, avoiding peak business hours, for example. Additionally, starting in March 2023, any Amazon Managed Microsoft AD directories will begin automatically being updated to Windows Server 2019.

Starting today, Cost Explorer customers will see a new interface in the console to visualize their cost and usage. The new summary widget provides an at-a-glance view of the total and average monthly cost. Customers can also look up specific spend and usage information using the new search function introduced in the table view. Cost Explorer has an easy-to-use interface that lets you visualize, understand, and manage your cloud costs and usage over time. You can analyze your data at a high level (for example, total costs and usage across all accounts) or dive deeper into your costs and usage data to identify trends, pinpoint cost drivers, and detect anomalies. 

Amazon Transfer Family now supports post-upload processing of partially uploaded files using managed workflows, offering customers even more control in defining and executing file-processing steps for both complete and incomplete file uploads.

Starting today, you can perform an in-place upgrade of your Amazon Aurora database cluster from Amazon Aurora MySQL-Compatible Edition 2 (with MySQL 5.7 compatibility) to Aurora MySQL-Compatible Edition 3 (with MySQL 8.0 compatibility). Instead of backing up and restoring the database to the new version, you can upgrade with just a few clicks in the Amazon RDS Management Console or by using the Amazon SDK or CLI.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.5.17, 10.4.26 and 10.3.36. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

A new Route 53 feature, DNS resource record set permissions, is now available in the Amazon Web Services China (Ningxia) Region, operated by NWCD. DNS resource record set permissions enable customers to define Amazon Identity and Access Management (IAM) create, edit, and delete policies for individual or groups of DNS record sets within a Route 53 public or private hosted zone.

Amazon SageMaker comes with two options to spin up fully managed notebooks for exploring data and building machine learning (ML) models. The first option is fast start, collaborative notebooks accessible within Amazon SageMaker Studio - a fully integrated development environment (IDE) for machine learning. You can quickly launch notebooks in Studio, easily dial up or down the underlying compute resources without interrupting your work, and even share your notebook as a link in few simple clicks. In addition to creating notebooks, you can perform all the ML development steps to build, train, debug, track, deploy, and monitor your models in a single pane of glass in Studio. The second option is Amazon SageMaker Notebook Instance - a single, fully managed ML compute instance running notebooks in cloud, offering customers more control on their notebook configurations. Today, we are excited to announce that both SageMaker Studio and SageMaker Notebook Instance now come with JupyterLab 3 notebooks to boost productivity of data scientists and developers building ML models on SageMaker.

Starting today, Amazon Relational Database Service (Amazon RDS) for Oracle supports Oracle Data Guard Switchover and Automated Backups for read replica instances (read-only and mounted) deployed in separate Regions, or in different Availability Zones of a given Region in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Storage Gateway makes it simpler and faster for you to start setting up and managing your hybrid-cloud storage workflows. Now, using the Storage Gateway console, you can easily create an Amazon EC2 instance for your cloud-based gateway in just a few clicks. In the updated Create Gateway wizard, simply enter the VPC network, VPC subnet, and key pair for your EC2 instance and select Launch instance to automatically create and launch an EC2 instance with minimally required settings including instance type, cache storage, upload buffer, and inbound security ports.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 5.7.39. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Amazon Storage Gateway increases Tape Gateway throughput performance by up to 2x for backing up data to and restoring data from the cloud, helping you to meet application backup and recovery times of your business. With this launch, your on-premises Tape Gateway can backup data to the cloud up to 2x faster than before, up to 5.2 Gbps, and read data from the cloud up to 2x faster than before, up to 8 Gbps. This enhancement enables you to upload more data per gateway to the cloud in your backup window, accelerate restore times of your data stored in the cloud, and optimize on-premises storage used by the gateway.

Amazon S3 Object Lambda now supports adding your own code to S3 HEAD and LIST API requests, in addition to S3 GET requests. With S3 Object Lambda, you can modify the data returned by S3 GET requests to filter rows, dynamically resize images, redact confidential data, and much more. Now, you can also use S3 Object Lambda to modify the output of S3 LIST requests to create a custom view of objects in a bucket and S3 HEAD requests to modify object metadata like object name and size. S3 Object Lambda uses Amazon Lambda functions to automatically process the output of S3 GET, HEAD, and LIST requests. Amazon Lambda is a serverless compute service that runs customer-defined code without requiring management of underlying compute resources.

Amazon Storage Gateway increases the maximum supported virtual tape size on Tape Gateway from 5 TiB to 15 TiB, enabling you to store more data on a single virtual tape and reducing the number of tapes you need to manage. Additionally, this enhancement makes migrating long-term retention data stored on physical tapes to the Amazon Web Services China Regions easier by enabling you to copy data from Linear Tape-Open (LTO) generation 1 to generation 7 tapes to a virtual tape in the Amazon Web Services China Regions.

We have updated the Monthly Uptime Percentage in the service level agreement (SLA) for Amazon Cloud Map in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD, to 99.99%.

Amazon IoT Device Management Secure Tunneling now provides support for multiple simultaneous TCP connections, unlocking new use cases for advanced troubleshooting on remote devices. Secure Tunneling allows customers to establish bidirectional communication to remote devices using SSH, VNC or RDP. Now with multiple simultaneous TCP connections, customers can establish tunnels to access HTTP-based applications that typically make several connections for assets like images, javascript, and css. For example, you can now remotely access a web application that is running on a device to gain real-time telemetry or perform administrative tasks in a web-based GUI.

With Amazon EBS Snapshots, customers can now archive 25 snapshots concurrently to the Snapshots Archive tier by default, an increase from 5. This default limit increase makes it easier to move snapshots to the Snapshot Archive tier at scale.

Amazon Cloud Control API now supports Amazon PrivateLink, providing access for customers to leverage Amazon Cloud Control API through private Virtual Private Cloud (VPC) endpoints within their virtual private network in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers can now manage their cloud infrastructure in a consistent manner and use the latest Amazon Web Services capabilities faster using Cloud Control API’s common application programming interfaces (APIs) through private IP addresses in their Amazon VPC. These customers can use Amazon Cloud Control API without having to use public IPs, firewall rules, or an internet gateway.

Amazon Fargate customers can now configure Amazon Elastic Container Service (ECS) tasks and Amazon Elastic Kubernetes Service (EKS) pods to use up to 16 vCPUs, an approximately 4x increase from before. vCPUs are the primary compute resource in ECS tasks and EKS pods. Larger vCPUs enable compute-heavy applications like machine learning inference, scientific modeling, and distributed analytics to more easily run on Fargate. In addition, customers can now provision up to 120 GiB of memory on Fargate, also a 4x increase from before. This helps batch workloads, extract, transform, load (ETL) jobs, genomics, and media processing applications better perform memory-intensive operations on Fargate. Larger vCPU and memory options may also make migration to serverless container compute simpler for applications that need more compute resources and cannot be easily re-architected into smaller microservices.

In Amazon Web Services China (Beijing) Region, operated by Sinnet, any new account to Amazon GuardDuty can try the service for 30 days at no cost and gains access to the full feature set and detection findings during the free trial period. The GuardDuty console indicates how many days are left in the free trial and estimates how much the daily average cost for your account based on the volume of data analyzed and scanned (hence the estimates will be visible after first 7 days). This offering enables you to explore Amazon GuardDuty at no cost and take the guesswork out of budget planning.

You can now use Amazon S3 Replication Time Control (S3 RTC) for predictable S3 Replication times backed by a Service Level Agreement (SLA). S3 RTC helps customers meet compliance or business requirements for data replication, and provides visibility into the replication process with Amazon CloudWatch Metrics.

Amazon Lambda now supports configuring MaximumBatchingWindowInSeconds for Amazon SQS using the console, allowing customers to set the maximum amount of time, in seconds, that Lambda spends gathering records before invoking the function. You can configure MaximumBatchingWindowInSeconds to any value from 0 seconds to 300 seconds in increments of seconds.

Amazon FSx for Windows File Server, a service that provides fully managed file storage built on Windows Server, now provides additional performance metrics for improved visibility into file system activity and an enhanced monitoring dashboard with performance insights and recommendations. You can use the new metrics and dashboard to right-size your file systems and optimize performance and costs.

Amazon Elastic Container Service (Amazon ECS) has improved Amazon ECS Capacity Providers to deliver a faster Cluster Auto Scaling experience for scale-in events. Amazon ECS now scales-in excess capacity at a much faster rate, which helps you improve utilization of your infrastructure and saves compute costs.

Amazon Redshift Query Editor V2 is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning (ML) that enables data scientists and developers to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. SageMaker Studio comes with fast start, collaborative notebooks. You can quickly launch notebooks in Studio, easily dial up or down the underlying compute resources without interrupting your work, and even share your notebook as a link in few simple clicks. Today, we are excited to announce that Amazon SageMaker Studio notebooks now come with built-in integration with Amazon Glue Interactive Sessions. Data scientists and data engineers can use the serverless Apache Spark runtime environment managed by Glue Interactive Sessions to interactively prepare data at scale right in their Studio notebooks.

Amazon Elastic Kubernetes Service (EKS) now supports IPv6, enabling customers to scale containerized applications on Kubernetes far beyond limits of private IPv4 address space, while achieving high network bandwidth with minimal complexity. The feature is available both in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

We are excited to introduce two new enhancements to Amazon IoT Device Defender ML Detect, Custom Metrics and Dimensions support. ML Detect now supports monitoring of custom metrics allowing you to evaluate operational health parameters that are unique to your fleet. Also, in addition to setting static alarms manually with Rules Detect, you can now use machine learning to automatically learn your fleet's expected behaviors on custom metrics. Further, with the new Dimensions filter support for ML Detect, you can define attributes to evaluate more precise metrics in your ML security profile.

Amazon Transfer Family now supports up to ten host keys per SFTP server. In addition, ED25519 and ECDSA key types are now supported for server host keys. Previously, Amazon Transfer Family only supported one host key per server, and only the RSA key type.

Amazon Relational Database Service (Amazon RDS) Performance Insights’ Top SQL tab shows the SQL queries that are contributing the most to database load. Starting today, we are increasing the top SQL queries displayed in Amazon RDS Performance Insights from 10 to 25. Amazon RDS Performance Insights is a database performance tuning and monitoring feature of RDS and Amazon Aurora that helps you quickly assess the load on your database and determine when and where to take action.

Amazon Step Functions now provides a new console experience for viewing and debugging your workflow executions that makes it easier to search, filter, and root cause issues in your executions.

Amazon IoT Core now offers a new device provisioning console experience that enables customers a more intuitive way to select the best provisioning option for their IoT solution. You can now more easily navigate the device provisioning scenarios and follow a simple flow to create a provisioning template and configure permissions for a single or many devices. The updated user interface also gives you access to documentation, product information, and resources to assist you in choosing, creating, and managing your device provisioning flows in the same place.

Amazon Elastic Block Store (EBS) Snapshots Archive helps customers save up to 75% on storage costs for Amazon EBS Snapshots that they rarely access and intend to retain for more than 90 days. Amazon EBS Snapshots are incremental in nature, storing only the changes since the last snapshot. This makes them cost-effective for daily and weekly backups that need to be accessed frequently. If you have snapshots that you access every few months or years, and would like to retain them long-term for legal or compliance reasons, you can use Amazon EBS Snapshot Archive to store full, point-in-time snapshots at a lower cost than what you would incur if stored in the standard tier. 

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.30. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

Customers provisioning resources in the Amazon Web Services China (Beijing) Region, operated by Sinnet can now check the Free Tier usage and receive the email alerts of the following services: Amazon EC2, Amazon Lambda, Amazon S3, Amazon EFS, Amazon EBS, Amazon DMS, Amazon Security Hub, Amazon ECR, Amazon ElastiCache, Amazon RDS, Amazon SWF, Amazon Step Functions, Amazon CodeBuild, Amazon CloudWatch, Amazon SNS, Amazon SQS.

Amazon Fargate (Fargate), the serverless compute engine for Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS), recently announced the migration of service quotas from the current Amazon ECS task and Amazon EKS pod count-based quotas to vCPU-based quotas. The migration to vCPU quotas will not have any impact on your running tasks and pods.

Amazon SageMaker Studio is a fully integrated development environment (IDE) for machine learning that enables data scientists and developers to perform every step of the machine learning workflow, from preparing data to building, training, tuning, and deploying models. SageMaker Studio is integrated with Amazon CloudTrail to enable administrators to monitor and audit user activity and API calls from Studio notebooks, SageMaker Data Wrangler and SageMaker Canvas. Starting today, you can configure SageMaker Studio to also record the user identity (specifically, user profile name) in CloudTrail events thereby enabling administrators to attribute those events to specific users, thus improving their organization's security and governance posture.

Amazon DynamoDB transactions enable coordinated, all-or-nothing changes to multiple items both within and across tables. The maximum number of actions in a single transaction has now increased from 25 to 100.

EMR Studio is an integrated development environment (IDE) that makes it easy for data scientists and data engineers to develop, visualize, and debug big data and analytics applications written in R, Python, Scala, and PySpark. Today, we are excited to announce that EMR Studio is now available in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon EMR now supports Amazon EC2 I3en Instances in Amazon Web Services China (Ningxia) Region, operated by NWCD, and Amazon Web Services China (Beijing) Region, operated by Sinnet. 

In May 2019, Amazon Elastic Block Store (EBS) launched the ability for customers to take crash-consistent snapshots of all Amazon EBS volumes attached to an Amazon EC2 instance with a single API call. Now you can choose to take crash-consistent snapshots of a subset of Amazon EBS data volumes attached to an Amazon EC2 instance. You can also use Amazon Data Lifecycle Manager (DLM) to automate taking crash-consistent snapshots of the same subset of Amazon EBS volumes on a retention schedule defined by DLM policies.

Amazon Step Functions expands support for manipulation of your input and output data with the addition of 14 new intrinsic functions so you can simplify data processing, reduce calls to downstream services, and write less code. Step Functions is a low-code, visual workflow service that supports integrations with a number of Amazon Web Services services and API actions, and now more intrinsic functions.

EBS Recycle Bin is now available in both Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. The EBS Recycle Bin feature is available to customers through the Amazon Web Services Console, Amazon Command Line Interface (CLI), or Amazon SDKs.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor version 14.4. We recommend you upgrade to this latest minor version to fix known security vulnerabilities and bugs from prior versions of PostgreSQL. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon DocumentDB (with MongoDB compatibility) is a database service that is purpose-built for JSON data management at scale, fully managed and integrated with Amazon Web Services, and enterprise-ready with high durability.

Today, Amazon EC2 launched 3-Year Standard Reserved Instances (RIs) and 1-Year Convertible RIs in Amazon Web Services China (Beijing) Region, operated by Sinnet.

You can now create up to 10,000 Amazon S3 Access Points per region per account to manage granular access permissions across your different applications. In addition, S3 Access Points now support Amazon SageMaker, Amazon Redshift, and Amazon CloudFront, helping you use S3 Access Point Aliases directly with your applications as a replacement for S3 bucket names.

Starting today, the Amazon Relational Database Service (Amazon RDS) free tier will include db.t2.micro, db.t3.micro and Amazon Graviton2- based db.t4g.micro instances in Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Customers provisioning resources in the Amazon Web Services China (Beijing) Region, operated by Sinnet, can now access Free Tier, which will launch with 39 services eligible for use. There are three different types of free offers depending on the product: 1) “Always Free” provides a limited amount of services without an expiration date, 2) “12-Month” allows the use of specific services up to a limit each month for 12-months from the time of account creation, and 3) “Trials” offers free services for a limited-term from the time a customer activates the service.

Amazon Transfer Family now supports the Applicability Statement 2 (AS2) protocol, complementing existing protocol support for SFTP, FTPS, and FTP.

Amazon DynamoDB now makes it easier for you to migrate and load data into new DynamoDB tables by supporting bulk data imports from Amazon S3. Now, you can import data directly into new tables to help you migrate data from other systems, load test data to help you build new applications, facilitate data sharing between tables and accounts, and simplify your disaster recovery and business continuity plans.

Amazon GameLift now offers a new console experience that provides a more intuitive way to manage and scale your game servers on Amazon Web Services. The redesigned console has new left-hand navigation that makes it easy to switch between various GameLift features such as managing and creating builds, scripts, fleets, FlexMatch, and includes helpful resource links like “Prepare to launch”, and service quotas. The new interface will make it quicker and easier to configure and manage your game server instances by providing a view of all your settings in one location.

Amazon App Mesh adds support for multiple listeners, allowing you to run applications with several open ports in a mesh in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This enables you to control and secure inbound and outbound traffic for different application ports, as well as to collect port-specific metrics for this traffic. Amazon App Mesh is a service mesh that provides application-level networking to make it easier for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

Amazon OpenSearch Service now provides improved visibility into validation failures during domain updates. You can monitor the progress of a domain update, which could involve a blue/green deployment, from the OpenSearch Service console, or through the configuration APIs. OpenSearch Service will publish any validation failure events to Amazon EventBridge. You can also view these validation events in the Notifications tab of the OpenSearch Service console.

Amazon Aurora now offers customers the option to use Internet Protocol version 6 (IPv6) addresses in their Amazon Virtual Private Cloud (VPC) on new and existing Amazon Aurora instances. Customers moving to IPv6 can simplify their network stack by running their databases on a network that supports both IPv4 and IPv6. 

The continued growth of the internet is exhausting available Internet Protocol version 4 (IPv4) addresses. IPv6 increases the number of available addresses by several orders of magnitude and customers no longer need to manage overlapping address spaces in their VPCs. Customers can standardize their applications on the new version of Internet Protocol by moving to IPv6 with a few clicks in the Amazon Web Services Management Console.

Support for IPv6 on Amazon Aurora is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Get started with the Amazon CLI or Amazon Web Services Management Console. 

To learn more about configuring your environment for IPv6, please refer to the IPv6 User Guide. 

Starting today, customers of Amazon Cost Anomaly Detection in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet will see a new interface in the console, where they view and analyze anomalies and their root causes. Amazon Cost Anomaly Detection monitors customers’ spending patterns to detect and alert on anomalous (increased) spend, and to provide root cause analyses.

Amazon Elastic Kubernetes Service (Amazon EKS) now allows you to more easily run workloads from various Kubernetes namespaces on Amazon Fargate serverless compute with a single EKS Fargate Profile. Using Amazon EKS on Amazon Fargate enables you to use Kubernetes without having to worry about compute infrastructure configuration and maintenance. Previously, you had to specify all the namespaces at the time you created the EKS Fargate Profile and were limited to a total of 5 namespace selectors or label pairs. Amazon EKS with Amazon Fargate is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon App Mesh introduces support for customizable Envoy access log format for Virtual Nodes and Virtual Gateways in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It enables you to diagnose your services with customized logging focusing on specific aspects that are important to you. Amazon App Mesh is a service mesh that provides application-level networking to make it easier for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

Amazon ParallelCluster 3.2 release is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by Ningxia Western Cloud Data Technology Co Ltd (NWCD). Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the Amazon Web Services cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads.

Amazon Direct Connect now supports connections to Amazon Transit Gateway at speeds of 500 megabits per second (Mbps) and lower, providing more cost-effective choices for Amazon Transit Gateway users when higher speed connections are not required. With this change, customers using Amazon Direct Connect at connection speeds of 50, 100, 200, 300, 400, and 500 Mbps can now can connect to their Amazon Transit Gateways.

Amazon Redshift now supports Row-Level Security (RLS), a new enhancement that simplifies design and implementation of fine-grained access to the rows in tables. With RLS, you can restrict access to a subset of rows within a table based on the users’ job role or permissions and level of data sensitivity with SQL commands. By combining column-level access control and RLS, Amazon Redshift customers can provide comprehensive protection by enforcing granular access to their data.

Amazon CloudWatch custom metrics now supports a 50x higher capacity allowing you to send up to 1,000 metrics per call at a 3x faster default call rate and specify 3x more dimensions (up to 30) per metric. Customers rely on CloudWatch custom metrics to capture application-specific data that complements the automatic metrics provided by CloudWatch based on the Amazon Web Services services you are using. With these improvements, customers can send the same volume of data with fewer API requests, leading to reduced costs.

The new Amazon S3 condition key enables you to write policies that help you control the use of server-side encryption with customer-provided keys (SSE-C). Using Amazon S3 condition keys, you can specify conditions when granting permissions in the optional ‘Condition’ element of a bucket or an IAM policy. One such condition is to require server-side encryption (SSE) using your preferred encryption method.

When you use SSE-C, you supply and manage the encryption keys while S3 implements the encryption and decryption of your object data. Most customers take advantage of S3’s built-in support for encryption keys with either S3-managed (SSE-S3) or Amazon Key Management Service (KMS) keys (SSE-KMS). However, some customers choose SSE-C to get an additional layer of control for sensitive data stored in S3 or to satisfy compliance regulations. In these cases, you may want all uploads to your buckets to use SSE-C. In other cases, you may want to prevent object uploads using SSE-C so that you and your customers do not have to maintain encryption keys. With the new condition key, customers can choose to either require or restrict use of SSE-C.

The S3 condition key for SSE-C encrypted objects is available at no additional cost in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. To get started with the new condition key, visit the documentation on protecting data using server-side encryption with customer-provided encryption keys. To learn more about S3 condition keys, visit the S3 User Guide.  

From today, IP-based routing for the Amazon Route 53 Domain Name System (DNS) cloud service is available in the Amazon Web Services China (Ningxia) Region, operated by NWCD. Route 53 provides customers with multiple routing options, such as geolocation routing and latency-based routing to route their end users to optimal endpoints. With the addition of IP-based routing, customers are now additionally empowered to fine-tune their DNS routing approach based on the Classless Inter-Domain Routing (CIDR) block that the query-originating IP address belongs to, allowing them to leverage knowledge of their end user base to optimize performance or network transit costs.

You can now run OpenSearch and OpenSearch Dashboards version 1.3 on Amazon OpenSearch Service. This version includes several new features and improvements around observability, SQL and PPL, Alerting and Anomaly Detection. You can upgrade your domain seamlessly to OpenSearch version 1.3 from any of the previous OpenSearch versions, or from Elasticsearch versions 6.8 or 7.x directly, using the OpenSearch Service console or APIs.

Amazon OpenSearch Service, with the availability of OpenSearch 1.3., now gives customers the ability to organize their logs, traces and visualizations in an application-centric view. Customers can also benefit from enhanced log monitoring support with live tailing of logs, the ability to see surrounding log data, and the ability to do powerful ad-hoc analysis of unformatted log data at query time. 

Amazon OpenSearch Service now supports Amazon Elastic Block Store (Amazon EBS) volume type gp3 (General Purpose SSD), in addition to the existing gp2, Magnetic and PIOPS (io1) volumes. You can use gp3 volumes on our latest generation T3, R5, R6g, M5, M6g, C5 and C6g instance families. Amazon EBS gp3 enables customers to provision performance independent of storage capacity, provides better baseline performance, at a 9.6% lower price point per GB than existing gp2 volumes on OpenSearch Service. In addition, with gp3 you now get denser storage on R5, R6g, M5, M6g instance families, which can help you to further optimize your costs.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.3, 13.7, 12.11, 11.16, and 10.21. We recommend you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon Virtual Private Cloud (VPC) now supports creating and managing Network Load Balancers (NLB) in shared VPCs. Using NLBs with VPC sharing, you can now route traffic across subnets in VPCs owned by a centrally managed account in the same Amazon Organization.

To get started, the VPC owner shares a subnet with your account using the Resource Access Manager. You can then view, create, modify, and delete your NLBs or load balancing targets (e.g. Amazon Elastic Compute Cloud (EC2) and Amazon Elastic Containers) in the shared subnets. You can also use NLBs to create an Amazon PrivateLink service, which will enable users to privately access your services in the shared subnets from other VPCs or on-premises networks, without using public IPs or requiring the traffic to traverse the internet.

Support for Network Load Balancer in shared subnets is now available in both Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

For additional information, please visit VPC sharing and the Network Load Balancer documentation.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2022 Patch Set Update (PSU) for Oracle Database 12.1 and Release Updates (RU) for Oracle Database 19c and 21c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

Oracle PSUs contain bug fixes and other critical security updates. Beginning with Oracle Database version 12.2.0.1, Amazon RDS for Oracle supports Release Updates (RU) in place of the PSU. To learn more about the Oracle PSUs supported on Amazon RDS for each engine versions, see the Amazon RDS for Oracle Release notes. If the Auto minor version upgrade (AmVU) option is enabled, the DB instance is upgraded to the latest quarterly PSU or RU six to eight weeks after it is made available by Amazon RDS for Oracle in your region. These upgrades will happen during the maintenance window. To learn more, see the Amazon RDS maintenance window documentation.

Amazon RDS for Oracle makes it easy to set up, operate, and scale Oracle Database deployments in the cloud. See Amazon RDS for Oracle Database Pricing for regional availability.

Starting today, Amazon Relational Database Service (Amazon RDS) is publishing usage metrics to Amazon CloudWatch, so that you can monitor against account-wide service limits. Publishing these usage metrics gives you the operational visibility to manage utilization and alarm as your usage approaches service limits. We added support for 11 service limit metrics: AllocatedStorage, DBInstances, DBClusters, DBSecurityGroups, ReservedDBInstances, DBClusterParameterGroups, DBParameterGroups, ManualSnapshots, ManualClusterSnapshots, DBSubnetGroups, OptionGroups.

Bottlerocket, a Linux-based operating system designed to run container workloads, is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon WorkSpaces now offers an API to create a new WorkSpace Image from a WorkSpace instance. Previously, this functionality was available only through the Amazon WorkSpaces console. After this launch, you can apply all the applications and operating system updates on a WorkSpace and use this API to create a new Image. Once the new image is created, you can test it before updating your production bundles or sharing the image with other Amazon Web Services accounts. With this launch you can fully automate your WorkSpaces CI/CD pipelines and keep your WorkSpaces images up-to-date as per your regulatory standards.

Starting today, Amazon VPC Flow Logs adds support for Transit Gateway. With this feature, Transit Gateway can export detailed telemetry information such as source/destination IP addresses, ports, protocol, traffic counters, timestamps and various metadata for all of its network flows. This feature provides you with an Amazon Web Services native tool to centrally export and inspect flow-level telemetry for all network traffic that is traversing between Amazon VPCs and customer’s on-premises networks via your Transit gateway.

You can now configure fine grained access control for data plane actions when using Amazon Identity and Access Management (IAM) to connect to Amazon Neptune.

Amazon Neptune is a fast, reliable, and fully managed graph database service that helps customers build applications for fraud detection, identity resolution, knowledge management, and security posture assessment using highly connected datasets. Starting with Neptune’s engine release 1.2.0.0, you can provide fine grained access to users accessing Neptune data plane APIs with IAM for performing graph-data actions such as reading, writing, and deleting data from the graph, and non graph-data actions such as starting and monitoring NeptuneML activities and checking the status of ongoing data plane activities. For example, you can create a policy with ‘read only’ access for data analysts who do not need to manipulate the graph data, a policy for ‘read and write’ access to developers using the graph for their applications, and a policy for data scientists who need access to NeptuneML commands.

To get started, just create an IAM policy with the required permissions and resources for your Neptune clusters. To learn more about changes to the IAM policy, see the documentation. This feature is available to Neptune customers in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. For more information on pricing and region availability, refer to the Neptune pricing page.

Amazon DocumentDB (with MongoDB compatibility) now allows you to create clones to enable fast creation of a new cluster that uses the same DocumentDB cluster volume and has the same data as the original.

Amazon CodeBuild’s support for Arm using Graviton2 is now available in: Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Today, we are making it easier for customers to view and update primary contact information on their Amazon Web Services accounts using the Amazon Command Line Interface (CLI) and Amazon SDK. We previously released the Accounts SDK that enables customers to programmatically manage billing, operations, and security contacts for their accounts. Starting today, customers can use the same SDK to additionally update their primary contact information saving them the time and effort of doing it through the management console.

Amazon EMR release 6.6 now supports Apache Spark 3.2, Apache Spark RAPIDS 22.02, CUDA 11, Apache Hudi 0.10.1, Apache Iceberg 0.13, Trino 0.367, and PrestoDB 0.267. You can use the performance-optimized version of Apache Spark 3.2 on EMR on EC2, EKS. In addition Apache Hudi 0.10.1 and Apache Iceberg 0.13 are available on EC2, EKS. Apache Hive 3.1.2 is available on EMR on EC2. Trino 0.367 and PrestoDB 0.267 are only available on EMR on EC2.

Amazon Systems Manager now supports up to 500 concurrent Automation executions, enabling you to automate operational tasks, such as patching instances on a larger scale. If you enable adaptive higher concurrency, Automation will automatically increase or decrease the concurrency quota based on the scaling requirements. You can enable adaptive higher concurrency from the Automation Preferences tab.

Amazon IoT Device Management Fleet Indexing now provides integration with two additional data sources, IoT Core named shadows and IoT Device Defender detect violations. Customers can now select specific named shadows to index only the data that is required for search queries. Also, detected violations can be indexed to target devices for troubleshooting or monitor the fleet-level anomalies trends with Fleet Metrics. These two additional data sources will help IoT customers who store IoT fleet data across different services and systems and regularly access the data for fleet monitoring, health checks, over-the-air (OTA) updates, and troubleshooting. With this release, supported data sources for Fleet Indexing increased to 5 from 3 (IoT Core registry, shadows, and connectivity lifecycle events).

Amazon CloudWatch now supports composite alarm action suppression, enabling you to reduce alarm noise during planned operational events. You can choose an alarm that will act as a suppressor for the actions of a composite alarm. When the suppressor alarm is in the ALARM state, if the composite alarm changes state, then the actions associated with this state change are withheld.

Amazon Transfer Family customers can now use ED25519 and ECDSA keys to authenticate users connecting to an Amazon Transfer Family server. Previously, Amazon Transfer Family only supported RSA keys for user authentication.

EC2 Auto Scaling now publishes predictive scaling policy’s forecasts as a CloudWatch metric, enabling you to analyze, monitor, and set alarms on the accuracy of predictive scaling. Predictive Scaling is a scaling policy that proactively increases the capacity of your Auto Scaling group ahead of predicted demand, improving the availability of your application while reducing the need to stay overprovisioned that otherwise would have increased your EC2 bill. As predictive scaling only increases the capacity for your Auto Scaling groups, applying it to your current scaling configurations only enhances your application availability. However, an inaccurate prediction can potentially increase your cost. Now, you can use the extensive list of CloudWatch features to measure accuracy of predictions, view forecasts using the familiar CloudWatch graphs, and also set automatic alarms and notifications when predictions are above your desired levels.

We are excited to launch two new features that can help you enforce access controls with Amazon EMR on EC2 clusters (EMR Clusters). These features are supported with jobs that are submitted to the EMR Cluster as EMR Steps. First is Runtime Role with EMR Steps. A Runtime Role is an Amazon Identity and Access Management (IAM) role that you associate with an EMR Step, and jobs use this role to access Amazon Web Services resources. The second is integration with Amazon Lake Formation to apply Table and Column-level access controls for Apache Spark and Apache Hive jobs with EMR Steps.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.8, 10.5.16, 10.4.25, 10.3.35 and 10.2.44. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Keyspaces (for Apache Cassandra)—a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service.

Amazon Keyspaces helps you run Cassandra workloads more easily by using a fully managed and serverless database service. With Amazon Keyspaces, you don’t need to provision storage upfront and you pay for the storage you use. Earlier this year we released a new CloudWatch metric BillableTableSizeInBytes to monitor and track your table storage costs over time. Now we’ve added Managed Policies that enable you to access the BillableTableSizeInBytes from your Keyspaces console.

Console access for the BillableTableSizeInBytes is available in all Amazon Web Services Regions where Amazon Keyspaces is available, including the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. For more information, see Monitoring Amazon Keyspaces with Amazon CloudWatch.

Amazon Aurora PostgreSQL-Compatible Edition now supports the Large Objects (LO) module in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. The lo module provides support for managing Large Objects (also called LOs or BLOBs).

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 13.7, 12.11, 11.16, and 10.21 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This release contains bug fixes and improvements done by the PostgreSQL community. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 14 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. PostgreSQL 14 includes performance improvements for parallel queries, heavily-concurrent workloads, partitioned tables, logical replication, and vacuuming. PostgreSQL 14 also improves functionality with new capabilities. For example, you can cancel long-running queries if a client disconnects and you can close idle sessions if they time out. Range types now support multiranges, allowing representation of noncontiguous data ranges, and stored procedures can now return data via OUT parameters.

EC2 Auto Scaling now publishes predictive scaling policy’s forecasts as a CloudWatch metric, enabling you to analyze, monitor, and set alarms on the accuracy of predictive scaling. Predictive Scaling is a scaling policy that proactively increases the capacity of your Auto Scaling group ahead of predicted demand, improving the availability of your application while reducing the need to stay overprovisioned that otherwise would have increased your EC2 bill. As predictive scaling only increases the capacity for your Auto Scaling groups, applying it to your current scaling configurations only enhances your application availability. However, an inaccurate prediction can potentially increase your cost. Now, you can use the extensive list of CloudWatch features to measure accuracy of predictions, view forecasts using the familiar CloudWatch graphs, and also set automatic alarms and notifications when predictions are above your desired levels.

Amazon EC2 Auto Scaling is a service that helps you meet application demand by automatically adding or removing EC2 instances to an Auto Scaling group according to the conditions you define. It already publishes a wide range of metrics to CloudWatch, which is an Amazon Web Services’ native offering to monitor the health of your infrastructure and applications. Now, predictive scaling forecasts are published as CloudWatch metrics for the past timestamps. You can leverage various CloudWatch features like Metric Math to create accuracy metrics such as Mean Absolute Percentage Error (MAPE) that are commonly used to measure timeseries forecasting accuracy, view multiple metrics on a single graph to understand when and by how much scaling policies are changing the capacity of your groups, or create dashboards and alarms for more automated monitoring experience.

Predictive Scaling policy is available through Amazon Command Line Interface (CLI), EC2 Auto Scaling Management Console, and Amazon SDKs in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. To learn more, visit documentation.

Today, Amazon IoT Core announced the general availability of a new feature that simplifies the registration of certificate authorities (CAs) necessary for device provisioning and makes it easier to move devices between customers' multiple Amazon Web Services accounts within the same Amazon Web Services region and between different regions. This reduces the complexity of registering devices to Amazon IoT Core and helps customers accelerate the development lifecycle for their IoT implementations when using Amazon IoT Core Just-in-Time Provisioning (JITP) and Just-in-Time Registration (JITR) device provisioning methods of Amazon IoT Core.

The Amazon Redshift ODBC driver is now open source and available for the user community under the Apache-2.0 license. With this release, customers will gain enhanced visibility to the driver implementation and can contribute to its development. Users can browse the code for the ODBC driver on the relevant Amazon GitHub repositories, submit driver functionality enhancements through Github pull requests, and report issues for review.

Amazon Relational Database Service (Amazon RDS) Performance Insights now allows you to choose retention periods for your performance history that range from one month up to 24 months. You can also use the RDS Performance Insights free tier, which includes seven days of performance data history and one million API requests per month. We have also adjusted the pricing model, resulting in reduced pricing of 24-month retention for most instance types.

RDS Performance Insights allows non-experts to measure database performance with a simple-to-understand dashboard that visualizes database load. With one click, you can add a fully managed performance monitoring solution to your Amazon Aurora clusters and Amazon RDS instances. RDS Performance Insights automatically gathers necessary performance metrics and visualizes them in a dynamic dashboard on the RDS console. You can identify your database’s top performance bottlenecks from a single graph. 

To get started, log into the Amazon RDS Management Console and enable Amazon RDS Performance Insights when creating or modifying an instance of a supported Amazon RDS engine. Then go to the Amazon RDS Performance Insights dashboard to start monitoring performance. Existing RDS Performance Insights can change the retention window for their databases using the modify database flow.

For a complete list of regions where RDS Performance Insights is offered, see Amazon Web Services Regions. To learn more about RDS Performance Insights and supported database engines, read the Amazon RDS User Guide. To learn about Performance Insights retention periods and pricing options, read here.  

Starting today, Amazon Virtual Private Cloud (VPC) customers can now create their own prefix lists in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

A prefix list is a collection of CIDR blocks that can be used to configure VPC route tables, Amazon Transit Gateway (TGW) route tables, and VPC security groups. Customers can share prefix lists with other Amazon Web Services accounts using Resource Access Manager (RAM) to easily audit and apply prefix lists across all their accounts to have a consistent security posture and routing behavior.

VPC security groups, VPC route tables, and TGW route tables are used to control access and routing policies. Customers often have a common set of CIDR blocks for security group and route table configurations. Prefix lists allow customers to group multiple CIDR blocks into a single object, and use it as a reference in their security groups or route tables. This makes it easier for customers to roll out changes and maintain consistency in security groups and route tables across multiple VPCs and accounts.

There is no additional charge to use prefix lists. For more information on prefix lists, visit our public documentation.

Amazon Database Migration Service (Amazon DMS) has expanded functionality by adding support for Babelfish for Aurora PostgreSQL as a target in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Babelfish for Aurora PostgreSQL is a new translation layer for Amazon Aurora PostgreSQL that enables Aurora to understand commands from applications written for Microsoft SQL Server. Using DMS, you can now perform full load migrations to Babelfish for Aurora PostgreSQL with minimal downtime.

Amazon Database Migration Service (Amazon DMS) now supports IBM Db2 Z/OS as a source for the full load operational mode, available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Using Amazon DMS, you can now migrate data from IBM Db2 running on the Z/OS operating system to any Amazon DMS supported target including Amazon S3, Amazon Redshift and Amazon Aurora. For information about Amazon DMS sources, see Sources for data migration.

You can now select all or subset of the functions that use a Lambda layer, and update them simultaneously to a newer layer version in the Lambda console.

Lambda layers provide a convenient way to package libraries and other dependencies that you can use with your Lambda functions. Using layers reduces the size of uploaded deployment archives and makes it faster to deploy your code. Previously, it was challenging to identify and update all the functions that used a specific layer version. With this release, the Lambda console displays a list of all the functions using a given layer and allows to select multiple functions to be updated with a newer layer version. This release eliminates the need to update one function at a time or utilize an external script to perform the update on multiple functions.

Access the Amazon Lambda console to get started. To learn more about updating layers see the Amazon Lambda User Guide.

This capability is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Pricing Calculator is a free, web-based planning tool that helps you to estimate the cost of your use cases in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. It allows you to explore the price points of services based on your architectural designs or common use cases, and review calculations behind your estimates. You can estimate cost of an individual or multiple services based on your needs.

We have added support for 14 services across Databases and Analytics product categories to Amazon Pricing Calculator. The newly supported calculators include Amazon ElastiCache, Amazon Redshift, Amazon RDS for SQL Server, Amazon RDS for Oracle database, Amazon EMR, Amazon Kinesis Data Analytics and Amazon OpenSearch Service. With these launches, we now support 22 services on the Amazon Pricing Calculator and we will continue to expand service coverage.

We have also updated the experience of ‘My estimate’ page on the Amazon Pricing Calculator. As part of the update, we have 1) moved to a tabular layout to improve the readability of the estimates, 2) added ‘Move to’ feature to simplify organization of estimates, and 3) launched ‘PDF export’ capability.

Read the Pricing Calculator user guide to learn more or visit calculator.amazonaws.cn to start estimating.

Amazon Database Migration Service (Amazon DMS) now supports Virtual private cloud (VPC) endpoints as sources and targets. DMS can now connect to any Amazon Web Services service with VPC endpoints so long as explicitly defined routes to the services are defined in their DMS VPC.

NICE DCV version 2022.1 introduces multiple new features such as support for Rocky Linux and Ubuntu 22.04 servers. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

The storage space allocated to your Amazon DocumentDB (with MongoDB compatibility) cluster will now dynamically decrease when you delete data from the cluster. Amazon DocumentDB is a database service that is purpose-built for JSON data management at scale, fully managed and integrated with Amazon Web Services, and enterprise-ready with high durability. Previously, when Amazon DocumentDB data was removed, such as by dropping a collection, the overall allocated space remained the same. The free space was reused automatically when data volume increased in the future.

Amazon RDS now allows you to have up to 20 concurrent snapshot copy requests per destination Region per account, an increase from the former limit of five concurrent copies per destination Region per account.

Amazon Fargate for Amazon Elastic Kubernetes Service (EKS) is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Fargate is a serverless, pay-as-you-go compute engine that lets you focus on building applications without managing servers. Amazon EKS is a managed container service to run and scale Kubernetes applications. Using Amazon Fargate serverless compute in your Amazon EKS clusters removes the need to provision and manage servers, lets you specify and pay for resources per application, and improves security through application isolation by design.

Amazon WorkSpaces is introducing two new graphics bundles based on the EC2 G4dn family: Graphics.g4dn and GraphicsPro.g4dn. These bundles allow you to run graphics- and compute-intensive workloads on desktops in the cloud as cost-effective solutions for graphics applications that are optimized for NVIDIA GPUs using NVIDIA libraries such as CUDA, CuDNN, and Video Codec SDK. They come with the NVIDIA T4 Tensor Core GPU that features multi-precision Turing Tensor Cores and RT Cores, Amazon Web Services custom second generation Intel® Xeon® Scalable (Cascade Lake) processors, and the local NVMe storage designed for applications that require fast access to locally stored data.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.1.1 and 3.2.0 for new and existing clusters. Apache Kafka 3.1.1 and Apache Kafka 3.2.0 includes several bug fixes and new features that improve performance. Some of the key features include enhancements to metrics and the use of topic IDs. MSK will continue to use and manage Zookeeper for quorum management in this release for stability. For a complete list of improvements and bug fixes, see the Apache Kafka release notes for 3.1.1 and 3.2.0.

Amazon OpenSearch Service now supports tag-based authorization for HTTP methods, making it easier for you to manage access control for data read and write operations. You can use Identity policies in Amazon Identity and Access Management (IAM) to define permissions for read and write HTTP methods, allowing coarse-grained access control of data on your Amazon OpenSearch Service domains.

Amazon Aurora Serverless v1 now supports in-place upgrade from MySQL 5.6 to 5.7. Instead of backing up and restoring the database to the new version, you can upgrade with just a few clicks using the Amazon Web Services Management Console or using the latest Amazon SDK or CLI. No new cluster is created in the process which means you keep the same endpoints and other characteristics of the cluster. The upgrade completes in minutes as no data needs to be copied to a new cluster volume. The upgrade can be applied immediately or during the maintenance window. Your database cluster will be unavailable during the upgrade. Review the Aurora documentation to learn more.

Amazon Lambda now supports Node.js 16 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. Developers creating serverless applications in Lambda with Node.js 16 can take advantage of new features such as support for Apple silicon for local development, the timers promises API, and enhanced performance. For more information on Lambda’s support for Node.js 16, see our product documentation.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Apache Cassandra-compatible database service, now helps you monitor your table-level storage costs through Amazon CloudWatch.

Amazon OpenSearch Service now offers support for search across region, enabling you to perform searches, aggregations, and visualizations across multiple Amazon OpenSearch Service domains in different region with a single query.

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports TDE enabled database migrations using Native Backup/Restore for Microsoft SQL Server. Previously, you would need to disable TDE on your on-premises TDE enabled SQL Server database in order to migrate to Amazon RDS. 

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor version for Microsoft SQL Server 2014 on the Express, Web, Standard, and Enterprise Editions.

Starting today, the Amazon Cost Anomaly Detection is available in Amazon Web Services China (Ningxia) Region, operated by NWCD, and in Amazon Web Services China (Beijing) Region, operated by Sinnet. Amazon Cost Anomaly Detection is a free service that monitors your spending patterns to detect anomalous spend and provide root cause analysis. Customers can now reduce cost surprises and enhance control without slowing innovation.

Amazon Elastic File System (Amazon EFS) now supports sub-millisecond read latencies for all new and existing General Purpose file systems. Latency-sensitive applications such as content management systems, analytics, DevOps, and machine learning inference can now achieve read latencies as low as 600 microseconds on average.

We are excited to announce three updates to Amazon GameLift’s FlexMatch, an Amazon Web Services managed service. GameLift FlexMatch launched in 2017 as a feature that uses a powerful matchmaking algorithm and flexible developer-defined rules to create high-quality matches using Amazon Web Services scale.

Automated Materialized View (AutoMV) for Amazon Redshift helps lower query latency for repeatable workloads like dashboard queries minimizing the effort for manually creating and managing materialized views.

Following the announcement of updates in MySQL database versions 5.7 and 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor versions 5.7.38, and 8.0.29 in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD.

NoSQL Workbench for Amazon DynamoDB is a client-side application to help visualize and build scalable, high-performance data models. Starting today, NoSQL Workbench adds support for table and global secondary index (GSI) control plane operations such as CreateTable, UpdateTable, and DeleteTable.

Amazon Glue Interactive Sessions are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. They provide a new interface for Amazon Glue's highly scalable Serverless Spark environment. They support interactive data integration job development, data exploration, and on-demand distributed data processing for customers' own applications.

Amazon Relational Database Service (Amazon RDS) can now publish events to Amazon Simple Notification Service (Amazon SNS) topics that have server-side encryption (SSE) enabled, for additional protection of events that carry sensitive data. Amazon RDS groups events into categories that you can subscribe to so that you can be notified when an event in that category occurs, enabling routing and automation.

Amazon Glue Studio Job Notebooks are now generally available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. They provide interactive, notebook-based job authoring for Amazon Glue to simplify the process of developing data integration jobs. Job Notebooks act as a serverless, built-in interface for Amazon Glue Interactive Sessions, a new feature that allows customers to run interactive Apache Spark workloads on demand.

Amazon AppSync is a fully managed service that makes it easy to create and manage GraphQL and Real-time APIs, making it easy to securely access, manipulate, and combine data from one or more data sources via a single API endpoint. With GraphQL, special functions called Resolvers are used to implement business logic linking or “resolving” types, fields, or operations defined in the GraphQL schema with the data in data sources such as Amazon DynamoDB, Amazon Lambda, HTTP APIs, and more.

Amazon ElastiCache for Memcached now supports encryption of data in transit using Transport Layer Security (TLS) version 1.2. When using encryption in transit, all network traffic between your clients and Memcached cluster are encrypted.

Amazon Elastic Container Services (Amazon ECS) provides a Cluster Auto Scaling (CAS) capability to dynamically manage the scaling of your Amazon Elastic Compute Cloud (EC2) Auto Scaling groups (ASG) on your behalf, so that you can focus on running your containers. Capacity Providers is the compute interface that links your Amazon ECS cluster with your ASG. With Capacity Providers, you can define flexible rules for how containerized workloads run on different types of compute capacity, and manage the scaling of the capacity. Capacity Providers improve the availability, scalability, and cost of running tasks and services on ECS. Starting today, we are simplifying the integration mechanism between Capacity Providers and ASGs by directly integrating with target-tracking scaling policy instead of relying on Amazon Auto Scaling scaling plan.

Amazon ElastiCache for Memcached has added support for Memcached version 1.6.12. This version is a cumulative update and contains all changes and improvements between version 1.6.6 to 1.6.12.

Amazon ElastiCache for Redis and Amazon MemoryDB for Redis now support natively storing and accessing data in the JavaScript Object Notation (JSON) format. With this launch, application developers can more easily store, fetch, and update their JSON data inside Redis without needing to manage custom code for serialization and deserialization. Using ElastiCache and MemoryDB, you can now efficiently retrieve and update specific portions of a JSON document without needing to manipulate the entire object, which can improve performance and reduce cost. You can also search your JSON document contents using the JSONPath query syntax.

We’re excited to announce that Amazon IoT Device Management customers will now be able to create up to 100,000 Active Jobs per Amazon Web Services account per region. The prior limit was 1,000 Active Jobs per account per region. This new limit will apply to the total number of Jobs created - both continuous and snapshot jobs. Customers that require a large number of Active Jobs - for example, to apply bespoke configurations to thousands of individual targets in parallel – are now unblocked by this upgrade.

Today, Amazon EC2 announced the Stop Protection feature that enables customers to protect their instances from accidental stop actions. Previously, customers could protect their instances from unintentional terminate actions by enabling Termination Protection. With Stop Protection, customers with stateful workloads can safeguard data in instance store volume(s) from unintentional stop and terminate actions.

A new Billing console home page experience is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. The Amazon Billing console allows you to easily understand your spend, view and pay invoices, manage billing preferences and tax settings, and access additional Cloud Financial Management services. The Billing console Home page helps Finance, DevOps, or FinOps users quickly understand Amazon Web Services spend and identify top drivers.

Customers can now deploy compute-intensive applications such as machine learning inferencing, multimedia processing, scientific simulations, HPC, and financial modeling that leverage Advanced Vector Extensions 2 (AVX2) to meet their performance requirements on Amazon Lambda in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Starting today, when you create a new predictive scaling policy, Amazon EC2 Auto Scaling goes back 14 days to generate capacity forecasts for the past dates, enabling you to see how predictive scaling would have scaled your Auto Scaling group. This allows you to quickly decide if the predictive scaling policy is accurate for your applications by comparing the demand and capacity forecasts against the actuals immediately after you create a predictive scaling policy. Previously, you would have had to wait at least a few days after creating the policy to build up sufficient forecast history for the same comparison to determine the forecast accuracy.

Amazon App Mesh now supports IPv6 allowing customers to support workloads running in IPv6 networks and to invoke App Mesh APIs over IPv6. This helps customers to meet IPv6 compliance requirements, and removes the need for expensive networking equipment to handle address translation between IPv4 and IPv6.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL announces support for PostrgreSQL 14 with three levels of cascaded read replicas, 5 replicas per instance, supporting a maximum of up to 155 read replicas per source instance. You can now create Single-AZ or Multi-AZ cascaded read replica DB instances in same region or any one cross region from another read replica instance, enabling you to build a more robust disaster recovery architecture.

The multiple IPv6 classless inter-domain routing (CIDR) blocks in a Virtual Private Cloud (VPC), enabling customer to attach up to 5 prefixes to their virtual network, is launched today.  Before today, customers could add up to 5 IPv4 CIDR blocks and 1 IPv6 block.  With this new feature, customers can now use multiple blocks to build logical separation within their VPCs with independent CIDR blocks.  

Amazon Relational Database Service (Amazon RDS) now offers customers the option to use Internet Protocol version 6 (IPv6) addresses in their Virtual Private Cloud (VPC) on new and existing RDS instances. Customers moving to IPv6 can simplify their network stack by running their databases on a network that supports both IPv4 and IPv6.

Amazon Relational Database Service (Amazon RDS) now offers customers the option to use Internet Protocol version 6 (IPv6) while accessing the RDS Service APIs.

Amazon Virtual Private Cloud (Amazon VPC) Traffic Mirroring now supports sending mirrored traffic to monitoring appliances behind a Gateway Load Balancer. This feature enables VPC Traffic Mirroring customers to centralize the out-of-band monitoring and inspection of network traffic across Amazon Web Services accounts and VPCs.

Amazon EFS Replication provides you with an easy way to keep an up-to-date copy of your file system in a second Amazon Web Services Region or within the same Region. Amazon EFS Replication enables you to replicate file data in a few clicks and without requiring you to manually provision additional infrastructure or a custom process to monitor and synchronize data changes. Amazon EFS Replication is designed to meet a recovery point objective (RPO) and recovery time objective (RTO) of minutes, enabling you to meet your business continuity and compliance requirements.

Today we are announcing the general availability of 10 new data source connectors for Amazon Athena. With Athena, you can query data stored in relational, non-relational, object, and custom data sources without the need for ETL scripts to pre-process or copy data. This release expands the number of data sources you can query with Athena and helps analysts, data engineers, data scientists, and developers unlock business value from data stored in databases running on-premises or in the cloud.

Amazon CloudWatch now supports anomaly detection based on metric math expressions in Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. Amazon CloudWatch anomaly detection allows you to apply machine-learning algorithms to continuously analyze system and application metrics, determine a normal baseline, and surface anomalies with minimal user intervention. CloudWatch metric math allows you to aggregate and transform metrics to create custom visualizations of your health and performance metrics. Metric math supports basic arithmetic functions such as +,-,/,*, comparison and logical operators such as AND & OR, and a number of additional functions such as RATE and INSIGHT_RULE_METRIC. For example, with Amazon Lambda metrics you can divide the Errors metric by the Invocations metric to get an error rate, use anomaly detection to visualize expected values on a metric graph, and create an anomaly detection alarm to dynamically alert you when the value falls outside of the expected range.

Amazon EC2 now emits notifications to Amazon CloudWatch Events for a variety of Amazon Machine Image (AMI) actions such as creation, registration and de-registration. With CloudWatch Events (CWE), you can establish rules that initiate programmatic actions in response to these changes.

Amazon EC2 now adds a new property called ‘lastLaunchedTime’ for owners of Amazon Machine Images (AMIs). This property helps AMI owners view the timestamp of the last time the AMI was used for an EC2 instance launch. It allows AMI owners to understand the usage of their AMIs, especially publicly-shared AMIs, and to make informed decisions about deprecating or deregistering their AMIs.

Today, we are pleased to announce the general availability of IoT Device Defender ListMetricValues API. Customers can now access historical device-side, cloud-side, and custom metrics from connected devices that belong to a security profile using ListMetricValues API. In addition to viewing the data in the Amazon IoT management console, customers now have the flexibility to programmatically monitor and build their own visualization. This new API is available in both Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon CloudTrail announces CloudTrail error rate Insights, a new feature of CloudTrail Insights that enables customers to identify unusual activity in their Amazon Web Services account based on API error codes and their rate.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon IoT Secure Tunneling allows customers to access devices that are deployed behind restricted firewalls at remote sites. When a tunnel is created, a pair of client access tokens (CAT) will be generated and used by the source and destination devices to connect to the Secure Tunneling service. Prior to today, a token can be stored and reused, making it susceptible to malicious use. Now single-use tokens will be revoked after a successful connection. When the connection drops, instead of saving CATs to a local device and establishing a token re-delivery method, customers can call the RotateTunnelAccessToken API to deliver a new pair of CATs to the source and destination devices to resume connection with the original device in the predefined tunnel period. Once reconnected, customers can securely access and continue troubleshooting remote devices using Secure Tunneling.

Starting today, all public AMIs will have the deprecation time set to two years after their creation date. This means that public AMIs that are more than two years old will by default be deprecated. Once an AMI is deprecated, it will no longer appear in DescribeImages API calls for users that aren’t the owner of the AMI. Deprecating an AMI only reduces the visibility of the AMI in untargeted searches, but continues to be usable and available to you. Users of a deprecated AMI can continue to launch instances and describe the deprecated AMI using its ID.

Amazon Relational Database Service (Amazon RDS) Performance Insights now makes it easier for you to see the database performance metrics for the exact timeframe you want to analyze, by choosing a custom time window within your retention period. Previously, you could only see metrics in Performance Insights by choosing relative time intervals such as the past 1 hour, the past 24 hours, etc. Amazon RDS Performance Insights is a database performance tuning and monitoring feature of Amazon RDS and Amazon Aurora that helps you quickly assess the load on your database and determine when and where to take action. This helps non-experts to measure database performance with an easy-to-understand dashboard that visualizes database load. With one click, you can add a fully-managed performance monitoring solution to your Amazon Aurora clusters and Amazon RDS instances. Amazon RDS Performance Insights automatically gathers all necessary performance metrics and visualizes them in a dynamic dashboard on the Amazon RDS console. You can identify your database’s top performance bottlenecks from a single graph.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2022 Patch Set Update (PSU) for Oracle Database 12.1 and Release Updates (RU) for Oracle Database 12.2 and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. Please note 21c is already shipped with January 2022 RU.

Amazon DocumentDB (with MongoDB compatibility) is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, adding to the list of available Amazon Web Services services you can use in this region.

Starting today, customers can view the creation date and public key material for existing and new key pairs created using Amazon EC2 key pairs. Customers will also be able to create ED25519 key pairs in ppk format in addition to pem format and use CloudFormation templates with key pairs. These features will be available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon EC2 Auto Scaling Warm Pools now supports configuring your Auto Scaling group to return running instances to a Warm Pool on scale-in. With Warm Pools, you can scale out faster by bringing instances into service from a pre-initialized pool of EC2 instances. Warm Pools are a good fit for applications that have time consuming initialization steps — like loading gigabytes of data, provisioning services, or running custom scripts — that can take several minutes or longer before those EC2 instances are ready to serve traffic. Scale-in to Warm Pool saves you from having to rebuild a new Warm Pool instance during scale-in. Previously, EC2 Auto Scaling would terminate one of the running “in-service” instances during scale-in and then launch and pre-initialize a new instance to replenish the Warm Pool. Now, instances can be placed back into the Warm Pool in the desired state – stopped, or running, but idle.

Amazon Elastic Container Service (Amazon ECS) now supports managing on-premises workloads running on a Windows operating system with Amazon ECS Anywhere. Amazon ECS Anywhere is a capability of Amazon ECS that enables customers to more easily run and manage container-based applications on-premises, including virtual machines (VMs), bare metal servers, and other customer-managed infrastructure. Customers, who need to manage containerized workloads on-premises on Windows, can now more easily orchestrate these workloads using Amazon ECS Anywhere. With this capability, developers no longer need to run additional container orchestration software or convert their Windows-based workloads to Linux OS.

Amazon Lambda now supports Amazon MQ for RabbitMQ as an event source, allowing customers to quickly and easily build applications that are triggered from messages in their RabbitMQ queue. Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that makes it easy to set up and operate message brokers in the cloud. Customers can build applications quickly and easily with Lambda functions that are invoked based on messages posted to Amazon MQ message brokers without needing to worry about provisioning or managing servers.

Amazon Redshift now offers new enhancements for Audit Logging in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. These enhancements enables faster delivery of logs for analysis by minimizing latency while also adding Amazon CloudWatch as a new log destination. With this release, customers can choose to stream audit logs directly to Amazon CloudWatch, which enables customers to perform real-time monitoring.

Today, Amazon announces the general availability of openCypher query language support with Amazon Neptune. Customers can now use openCypher with Amazon Neptune, giving them more choices to build or migrate graph applications to a highly available, secure, and fully managed graph database.

Amazon Keyspaces (for Apache Cassandra), a scalable, highly available, and fully managed Cassandra-compatible database service, now helps you read and write data in Apache Spark more easily by using the open-source Spark Cassandra Connector.

Amazon Aurora-PostgreSQL Compatible edition now supports Multi Major Version Upgrades which allows you to perform major version upgrades across multiple different major versions is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

You can now access five new metrics when using Amazon PrivateLink for VPC Endpoints and VPC Endpoint Services. Amazon PrivateLink is a fully-managed private connectivity service that enables customers to access Amazon Web Services services, third-party services or internal enterprise services hosted on the Amazon Web Services service network in a secure and scalable manner while keeping network traffic private.

Starting today, you can use Amazon Budgets to create auto-adjusting budgets. An auto-adjusting budget dynamically sets your budget amount based on historical cost or usage over a time range that you specify. This reduces the guesswork in setting a budget limit and keeps you updated as your spend patterns change. Auto-adjusting budgets are generally available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon DynamoDB Standard-Infrequent Access (DynamoDB Standard-IA) table class is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. The DynamoDB Standard-IA table class is ideal for use cases that require long-term storage of data that is infrequently accessed, such as application logs, social media posts, e-commerce order history, and past gaming achievements.

Amazon GuardDuty for EKS Protection is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon GuardDuty is a threat detection service that continuously monitors for malicious or unauthorized behavior to help customers protect their accounts, workloads, and data. Amazon GuardDuty for EKS Protection monitors Kubernetes audit logs to identify suspicious activity, such as API operations performed by known malicious or anonymous users, misconfigurations that can result in unauthorized access to Amazon Elastic Kubernetes Services (Amazon EKS) clusters, and patterns consistent with privilege-escalation techniques.

Today, Amazon EC2 announces automatic recovery by default, a new feature that makes it even easier for customers to recover their instance when it becomes unreachable. Automatic recovery improves instance availability by recovering the instance if it becomes impaired due to an underlying hardware issue. Automatic recovery migrates the instance to another hardware during an instance reboot while retaining its instance ID, private IP addresses, Elastic IP addresses, and all instance metadata.

Amazon OpenSearch Service now allows you to use custom dictionaries with the IK (Chinese) Analysis plugin. With support for custom dictionaries, you can use your preferred keywords and synonyms with IK Analyzer to tailor search results to suit your business needs.

Amazon RDS for SQL Server now supports SQL Server Agent job replication. With this new feature, SQL Server Agent jobs created, modified, or deleted on the primary instance will be automatically synchronized to the secondary instance in a Multi-AZ configuration.

Beginning April 1, 2022, the inter-Availability Zone (AZ) data transfer within the same Amazon Web Services Region for Amazon PrivateLink, and Amazon Transit Gateway is free of charge. Previously, customers incurred an inter-AZ data transfer charge for sending data across availability zones while using these networking services. With this pricing change, inter-AZ data transfer for these services is free of charge, making it even more cost-effective for customers to run multi-AZ workloads.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now offers an option to provision storage throughput for Amazon MSK, enabling customers with high throughput workloads to seamlessly scale I/O without having to provision additional brokers. By provisioning up to 1000 MiB/s of throughput to Amazon MSK storage volumes, you can scale I/O requirements past 250 MiB/s without having to provision additional brokers. When configured, you pay a low rate for the amount of storage throughput provisioned in the clusters.

Amazon DocumentDB (with MongoDB compatibility) Performance Insights is a database performance tuning and monitoring feature that helps you quickly assess the load on your database and determine when and where to take action.

You can now publish the Redis engine log from your Amazon ElastiCache for Redis clusters to Amazon CloudWatch Logs and Amazon Kinesis Data Firehose. The Redis engine log provides visibility into the internal operations of the Redis engine, giving additional insight into Redis operations and helping you troubleshoot Redis issues. You can choose to send these logs in either JSON or text format to Amazon CloudWatch Logs and Amazon Kinesis Data Firehose.

Amazon OpenSearch Service now includes new observability interface and log monitoring features, that provide developers and devops engineers with the visibility and insights they need to diagnose performance and availability issues faster and reduce application downtime.

Amazon Aurora now allows you to create clones between Aurora Serverless v1 and provisioned Aurora DB clusters to enable quick sharing of data.

Amazon OpenSearch Service now offers support for cross-cluster search on existing domains. Cross-cluster search enables you to perform searches and aggregations across multiple domains with a single query or from a single OpenSearch Dashboard interface. With this feature, you can separate heterogeneous workloads into multiple domains, which provides better resource isolation, and the ability to tune each domain for their specific workloads to improve efficiency and reduce costs.

Amazon AppSync is a fully managed service that enables developers to build digital experiences based on real-time data. You can easily and effortlessly configure any supported data source to push and publish real-time data updates to subscribed clients with connection management, scalability, fan-out and broadcasting all handled by AppSync, allowing you to focus on your application business use cases and requirements instead of dealing with the complex infrastructure to manage real-time WebSocket connections at scale.

You can now use Amazon PrivateLink to privately access the Amazon FSx Application Programming Interface (Amazon FSx API) from your Amazon Virtual Private Cloud (Amazon VPC) without using public IPs, and without requiring the traffic to traverse across the Internet.

Amazon OpenSearch Service now supports cross-cluster replication on existing domains. Cross-cluster replication enables you to automate copying and synchronizing of indices from one domain to another at low latency in same or different Amazon Web Services accounts or Regions. With cross-cluster replication, you can achieve high availability for your mission critical applications with sequential data consistency.

You can now run OpenSearch and OpenSearch Dashboards version 1.2 on Amazon OpenSearch Service. This version includes a new observability interface in OpenSearch Dashboards, improvements to several other features such as anomaly detection, k-NN, and SQL/PPL. 

Amazon Cloud Control API has expanded its availability to the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Cloud Control API is a set of common application programming interfaces (APIs) that enable developers to manage their cloud infrastructure in a consistent manner and leverage the latest Amazon Web Services capabilities faster. Using Cloud Control API, developers can manage the lifecycle of hundreds of Amazon Web Services resources with five consistent APIs instead of using distinct service-specific APIs. With this launch, Amazon Web Services Partner Network (APN) Partners can now automate how their solutions integrate with existing and future Amazon Web Services through a one-time integration, instead of spending weeks of custom development work as new resources become available. Terraform by HashiCorp and Pulumi have integrated their solutions as part of this launch.

You can now define a cutoff behavior for your maintenance tasks using Amazon Systems Manager Maintenance Windows, which allows you to stop or continue ongoing tasks when the cutoff time is reached. This provides DevOps and IT engineers with more control on the cutoff behavior to ensure disruptive tasks are not run outside the desired period. For instance, while registering an Automation task with a maintenance window, you can now set up the cutoff behavior to cancel ongoing tasks. This would ensure that no new task invocations are started when the cutoff time is reached.

Following the announcement of updates to the PostgreSQL database, we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL version 13.6, 12.10, 11.15, and 10.20 in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This release contains bug fixes and improvements done by the PostgreSQL community. As a reminder, Amazon Aurora PostgreSQL 10 will reach end of life on January 31, 2023.

Amazon Elastic Container Service (Amazon ECS) today increased the default service quota for container instances per cluster. You can now launch up to 5,000 instances per cluster, an increase from 2,000. The limit increase enables customers to scale further and improve manageability of their clusters.

Amazon Aurora PostgreSQL-Compatible Edition now supports a foreign data wrapper that can connect to databases that use the Tabular Data Stream (TDS) protocol, such as Sybase databases and Microsoft SQL server. You can use this foreign data wrapper to connect to data sources in other databases eliminating the need to replicate or copy data.

Today, we are enabling you to centrally close members accounts in your Amazon Organizations through the console and programmatically via the Command Line Interface or SDK. The feature makes it easier and more efficient for you to manage your Amazon Web Services workloads by enabling you to close member accounts from your organization’s management account significantly simplifying the way you govern your multi-account infrastructure in Amazon Web Services.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL adds support for tds_fdw which allows your PostgreSQL database to connect and retrieve data stored in separate SQL Server databases.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL minor versions 14.2, 13.6, 12.10, 11.15, and 10.20. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the PostgreSQL community. Please refer to the PostgreSQL community announcement for more details about the release.

Amazon EC2 Auto Scaling now publishes Auto Scaling instance lifecycle states in the Amazon EC2 Instance Metadata Service (IMDS), enabling you to easily trigger on-instance actions as an instance transitions from one lifecycle state to another. Instances in an Auto Scaling group transition through various lifecycle states from when they are launched and placed in service to when they are removed from service and terminated. By polling IMDS, you can setup your on-instance application to easily determine its lifecycle state without having to setup Amazon CloudWatch Events or other services.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL Foreign Data Wrappers are libraries for PostgreSQL databases that can communicate with an external data source, abstracting the details of connecting to the data source and obtaining data from it. mysql_fdw is a PostgreSQL extension that provides a Foreign Data Wrapper for easy and efficient access to Amazon Aurora MySQL-compatible, MySQL, and MariaDB databases. Please see the list of supported extensions in the Amazon RDS User Guide for specific versions.

Amazon Web Services Cost Explorer and Cost and Usage Reports (CUR) now provide more granular and detailed billing of Amazon Relational Database Service (Amazon RDS) charges. These detailed charges are reflected on Amazon RDS Backup, General Purpose, Provisioned IOPS (Storage and IOPS), and Magnetic Storage volumes running on Amazon RDS for MySQL, MariaDB, PostgreSQL, Oracle, and SQL Server database engines. Your bill will contain a detailed breakdown of costs by database engine granularity for the above RDS resources and features.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports two new customer modifiable sqlnet.ora parameters for the Oracle Native Network Encryption (NNE) option in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. This feature allows customers to block older ciphers and algorithms from being used by SQL*Net encryption and checksum parameters.

Amazon Lambda now supports .NET 6 as both a managed runtime and a container base image in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Developers creating serverless applications in Lambda with .NET 6 can take advantage of new features such as improved logging, simplified function definitions using top-level statements, and improved performance using source generators. Using .NET 6 also lets you take advantage of new .NET language features and performance optimizations. For more information on Lambda’s support for .NET 6, see our product documentation.

Amazon Service Catalog now supports Virtual Private Cloud (VPC) endpoint policies in all regions including, Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Previously, Service Catalog supported integration with Amazon PrivateLink in all regions, where customers could use default policies that provided full access to Service Catalog. With this newly supported feature, customers can create or modify their VPC endpoint(s), interface or gateway, and have the option of attaching a customer-managed policy that specifies access to Service Catalog.

Amazon Aurora now supports Amazon Graviton2-based T4g database instances in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Graviton2 T4g database instances deliver a performance improvement of up to 49% over comparable current generation x86-based database instances. You can launch these database instances when using Amazon Aurora MySQL-Compatible Edition and Amazon Aurora PostgreSQL-Compatible Edition.

Amazon App Mesh now supports Amazon CloudTrail integration with Envoy Management Service (EMS). With CloudTrail integration for EMS, customers now get a history of all API calls that Envoy proxies make to App Mesh to retrieve dynamic configuration. This can help customers enhance governance, compliance, and risk auditing capabilities for the workloads running in Amazon App Mesh. Amazon App Mesh is a service mesh available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, that provides application-level networking to make it easier for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

Amazon Relational Database Service (RDS) now supports Amazon Graviton2-based T4g database (DB) instances for MySQL, MariaDB, and PostgreSQL databases in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. T4g DB instances offer up to 36% better price performance over comparable current generation x86-based T3 DB instances depending on the workload characteristics.

Today, we are introducing Amazon EC2 Spot placement score in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD to help you find the optimal location and instance type selection for your Spot workloads. Spot Instances availability varies depending on the instance type, time of day, and Availability Zone. Until now there was no way to find an optimal Availability Zone or combination of instance types to fulfill your Spot capacity needs without trying to launch Spot Instances first. Now, Spot placement score can recommend an Availability Zone based on your Spot capacity requirements. You can also test different instance type combinations to find the most optimal one for getting the capacity you need. Spot placement score is useful for workloads that are instance type and/or Availability Zone flexible.

Starting today, the ability to assign IP prefixes to EC2 instances is available to Virtual Private Cloud (VPC) customers in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Elastic Kubernetes Service (Amazon EKS) now supports the containerd container runtime on Windows worker nodes. Amazon EKS is a managed container service to run and scale Kubernetes applications in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD, or on-premises. Containerd is a lightweight container runtime that manages the complete container lifecycle on its host system, from container image transfer to execution, as well as storage and network attachment. Customers with Windows workloads can now get similar performance, security, and stability benefits from containerd that are available to customers running Linux-based worker nodes.

Following the announcement of updates in MySQL database versions 5.7 and 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor versions 5.7.37, and 8.0.28. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community. Learn more about upgrading your database instances in the Amazon RDS User Guide, and create or update a fully managed Amazon RDS database using the latest available minor versions in the Amazon RDS Management Console.

Amazon CloudWatch agent has added support for configurable log filter expressions. Customers can install and configure the CloudWatch agent to collect system and application logs from Amazon Elastic Compute Cloud (EC2), on-premises hosts, and containerized applications and send them to CloudWatch. This new configuration option is intended for users who want to collect only log events that meet specified criteria.

Amazon CloudWatch agent now supports the collection of NVIDIA GPU performance metrics from Amazon Elastic Compute Cloud (Amazon EC2) accelerated computing instances running Linux. GPU-based instances provide access to NVIDIA GPUs with thousands of compute cores. You can use these instances to accelerate scientific, engineering, and rendering applications. Customers can install and configure CloudWatch agent to collect system and application metrics from Amazon EC2, on-premises hosts, and containerized applications and send them to CloudWatch. CloudWatch provides you with data and actionable insights to monitor your applications and optimize resource utilization. GPU metrics are intended for users who want to monitor the utilization of GPU co-processors in their EC2 accelerated instances.

Amazon CloudWatch agent now allows you to specify how long CloudWatch will retain log events. You can install and configure CloudWatch agent to collect system and application logs from Amazon Elastic Compute Cloud (EC2), on-premises hosts, and containerized applications and send them to CloudWatch. This new configuration option is intended for users who want to apply uniform log group retention periods when deploying the agent.

Amazon Lambda now allows customers to build applications that can be triggered by messages in an Apache Kafka cluster hosted on any infrastructure. Customers can keep their existing Apache Kafka cluster as-is, and quickly and easily build Kafka consumer applications with Lambda without needing to worry about provisioning or managing servers.

Amazon Lambda now supports Amazon MQ for Apache ActiveMQ as an event source to give customers more choices for messaging services to use with their serverless application. Amazon MQ is a managed message broker service for Apache ActiveMQ that makes it easy to set up and operate message brokers in the cloud. Customers can build applications quickly and easily with Lambda functions that are invoked based on messages posted to Amazon MQ message brokers without needing to worry about provisioning or managing servers.

Amazon Lambda now supports Amazon Managed Streaming for Apache Kafka (Amazon MSK) as an event source, giving customers more choices to build serverless applications with streaming data. Customers can build Apache Kafka consumer applications with Lambda functions without needing to worry about infrastructure management. Amazon MSK is a fully managed service that makes it easy to build and run applications that use Apache Kafka to process streaming data.

Amazon Lambda now supports Max Batching Window, a new feature that allows developers to fine tune Lambda invocation for cost optimization. This feature gives you additional control on batching behavior when processing data from Amazon MSK, Apache Kafka, and Amazon MQ for Apache Active MQ as event sources.

Amazon Lambda has launched improved auto scaling for Amazon MSK and self-managed Kafka as event sources to improve performance and help lower costs for customers. Lambda starts with one consumer and checks the OffsetLag metric (measure of backlog at source) and processing rate every minute and scales up or down every 3 minutes. Lambda allows up to one consumer per partition per topic for a Kafka cluster. Previously, Lambda used to start connection with Kafka clusters at a single consumer, then every 15 minutes would check for OffsetLag and scale up (or down) consumers.

Amazon Lambda has launched a new metric, OffsetLag, to monitor the performance of Amazon MSK and Self-managed Kafka. Up until now, Lambda users did not have visibility into how polling runs and had to increasingly rely on the Lambda support team to resolve delays in processing, leading to inefficiencies in data streaming. The OffsetLag metric is a measure of the total number of messages waiting in the message queue to be sent to the target Lambda function. This metric will provide transparency into the amount of data congestion in a message queue. Thus, developers can monitor the performance of events, set alarms and thresholds to check for undesirable congestion and quickly diagnose and solve inefficiencies in their data stream. This feature requires no additional charge to use, and is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Lambda functions that are triggered from Amazon MSK topics can now access MSK clusters secured by IAM Access Control. This is in addition to SASL/SCRAM, which is already supported on Lambda. To get started, customers who select MSK as the event source for their Lambda function can configure their function's execution role to allow Lambda to connect to their clusters and read from their topics. This feature requires no additional charge to use, and is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Lambda functions that are triggered from self-managed Apache Kafka topics can now access usernames and passwords secured by Amazon Secrets Manager using SASL/PLAIN, a simple username/password authentication mechanism that is typically used with TLS for encryption to implement secure authentication. This is in addition to SASL/SCRAM, which is already supported on Lambda. To get started, customers who select Apache Kafka as the event source for their Lambda function can choose SASL/PLAIN as their authentication mechanism, and select their credentials from Secrets Manager on the Amazon Web Services Management Console, Amazon CLI or Amazon SDK for Lambda. This feature requires no additional charge to use, and is available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. To learn more about using SASL/PLAIN authentication for your Lambda functions triggered from Amazon MSK topics, read the Lambda Developer Guide.

Amazon DynamoDB increases default service quotas to simplify use of large numbers of tables. DynamoDB increased the default quota for the number of DynamoDB tables you can create and manage per Amazon Web Services account and Amazon Web Services Region from 256 to 2,500 tables. DynamoDB also increased the number of table management operations you can perform concurrently from 50 to 500. You can now perform a larger number of create, delete, and update table operations in parallel per account and per Region.

Amazon Relational Database Service (RDS) for Oracle now supports Oracle Database 21c. You can now launch Amazon RDS instances for Oracle Database 21c.

Amazon DynamoDB now supports limiting the number of items processed in PartiQL operations as an optional parameter on each request and is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.6.7, 10.5.15, 10.4.24, 10.3.34 and 10.2.43. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Keyspaces (for Apache Cassandra)—a scalable, highly available, and fully managed Apache Cassandra-compatible database service—now helps you automate resource management by using the Amazon Web Services SDK.

Amazon RDS for Oracle now supports the October 2021 Patch Set Update (PSU) for Oracle Database 12.1 in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. October 2021 Release Updates (RU) for Oracle Database 12.2 and 19c is already launched.

You can now use AMAZON CloudFormation to manage Amazon Managed Streaming for Apache Kafka (MSK) cluster configurations and SASL/SCRAM secrets. To learn more about Amazon MSK support for AMAZON CloudFormation, refer to our Amazon CloudFormation documentation.

Amazon S3 accelerates integrity checking of requests using customer-defined checksum algorithms. You can choose from four supported checksum algorithms for data integrity checking on your upload and download requests. In addition, enhancements to the Amazon SDK and S3 API improve client-side checksum efficiency, increasing the performance and reducing the cost of data validation. You can automatically calculate and verify checksums as you store or retrieve data from S3, and can access the checksum information at any time using a new S3 API or an S3 Inventory report. Using checksums for data validation is a best practice for data durability, and these capabilities increase the performance and reduce the cost to do so.

Amazon Compute Optimizer now offers enhanced infrastructure metrics, a paid feature that when activated, enhances your Amazon EC2 instance and Auto Scaling group recommendations by capturing monthly or quarterly utilization patterns. Compute Optimizer does this by ingesting and analyzing up to six times more Amazon CloudWatch utilization metrics history than the default Compute Optimizer option (up to 3 months of history vs. 14 days). You can activate the feature at the organization, account, or resource level via the Compute Optimizer console or API for all existing and newly created EC2 instances and Auto Scaling groups.

EMR Notebooks is a managed environment based on Jupyter Notebooks that allows data scientists, analysts, and developers to prepare and visualize data, collaborate with peers, build applications, and perform interactive analysis using EMR clusters. Today, we are excited to announce that EMR Notebooks is now upgraded to JupyterLab v3.1.4, providing an enhanced user experience and new usability features.

Amazon Compute Optimizer now helps you quickly identify and prioritize top optimization opportunities through two new sets of dashboard-level metrics: savings opportunity and performance improvement opportunity.

Amazon Redshift launches Streaming Ingestion support for Kinesis Data Streams (KDS). Amazon Redshift’s Streaming Ingestion eliminates the need to stage data in Amazon S3 before ingesting it into Amazon Redshift, enabling customers to achieve low latency in the seconds while ingesting hundreds of megabytes of streaming data per second into their data warehouse.

Starting today, your IPv6 Amazon Web Services resources in Amazon Virtual Private Cloud (VPC) can use NAT64 (on NAT Gateway) and DNS64 (on Route 53 Resolver) to communicate with IPv4 services. As you transition your workloads to IPv6 networks, they would continue to need access to IPv4 network and services. With NAT64 and DNS64, your IPv6 resources can communicate with IPv4 services within the same VPC or connected VPCs, your on-premises networks, or the internet.

Amazon Security Hub now allows you to designate either the Amazon Web Services China (Beijing) Region operated by Sinnet or the Amazon Web Services China (Ningxia) Region operated by NWCD as your aggregator Region and the other as a linked Region to give you a centralized view of all your findings across all your accounts and all your Regions in China. After linking a Region to the aggregator Region, your findings are continuously synced between the Regions, so that any update made to a finding in one Region is replicated to the other Region. Previously, you needed to have a separate Security Hub tab open for each Region. Now, your Security Hub administrator or delegated administrator account in your aggregator Region can view and manage all of your findings. Individual Security Hub member accounts in the aggregator Region can also view and manage all of their findings across all linked Regions. Your Amazon EventBridge feed in your administrator account and aggregator Region also now includes all your findings across all member accounts and linked Regions, which allows you to simplify integrations with ticketing, chat, incident management, logging, and auto-remediation tools by consolidating those integrations into your aggregator Region. There is no additional cost to use this feature.

Amazon AppSync is a managed serverless GraphQL API service that simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources with less network calls.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL versions 13.5, 12.9, 11.14, and 10.19. These releases contain bug fixes and improvements by the PostgreSQL community. 

Amazon Glue Schema Registry now supports Protocol Buffers (Protobuf), enabling customers to use Protobuf schemas to govern the evolution of streaming data and centrally control data quality from data streams to data lake. Glue Schema Registry provides Apache-licensed serializers and deserializers for Protobuf that integrate with Java applications developed for Apache Kafka/Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Kinesis Data Streams, and Kafka Streams.

Amazon App Mesh introduces Agent for Envoy, a new component that monitors Envoy proxies and helps keep them healthy, in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Agent for Envoy also facilitates Envoy connection draining helping make your applications more resilient to failures. Amazon App Mesh is a service mesh that provides application-level networking to make it easier for your services to communicate with each other across multiple types of compute infrastructure. Amazon App Mesh standardizes how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.

Today, Amazon Systems Manager announces new features for Session Manager to support maximum session timeout and annotate the reason for starting a session. These features are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Systems Manager is the operational hub for Amazon Web Services, that provides a unified user interface to track and resolve operational issues across Amazon Web Services applications from a central place. Amazon Systems Manager Session Manager allows you to manage your EC2 instances, edge devices, and on-premise servers and virtual machines (VMs), using either an interactive browser based shell or command line.

NICE DCV version 2022.0 introduces multiple new features such as game controller support and high color accuracy support. NICE DCV is a high-performance remote display protocol that helps customers securely access remote desktop or application sessions, including 3D graphics applications hosted on servers with high-performance GPUs.

Today, we are enhancing the Amazon Organizations console to enable you to centrally view and update the alternate contacts for your Amazon Web Services accounts. To ensure that you receive important notifications about your Amazon Web Services accounts, we previously released the Accounts SDK that enabled you to programmatically manage billing, operations, and security contacts for accounts in your organization. With this launch, you can now also use the console to easily perform this operation without logging into each account. Support for additional account settings will be available in future releases.

NICE DCV web client software development kit (SDK) version 1.1.0 introduces a user interface (UI) library, written as a React component. Instead of building the user interface from scratch, developers can now use and modify the React UI component to build applications faster.

Amazon ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easier for scientists, researchers, and IT administrators to deploy and manage high performance computing (HPC) clusters on Amazon Web Services. Amazon ParallelCluster uses a simple text file to model and provision all the resources needed for your HPC applications in an automated and secure manner.

Amazon RDS for SQL Server now offers Always On Availability Groups for the Multi-AZ configuration in all Amazon Web Service Regions on Standard Edition. This new high availability option helps you meet the requirements of enterprise-grade production workloads on SQL Server.

Amazon Step Functions now integrates with the Amazon SDK, expanding the number of supported Amazon Web Services services from 17 to over 120 and Amazon API Actions from 46 to over 5000.

Starting today, Amazon CodePipeline is now available in China (Beijing) Region, operated by Sinnet, and China (Ningxia) Region, operated by NWCD.

We are announcing the general availability of Enterprise On-Ramp Support Plan, a new Support tier between existing Business and Enterprise Support, to help customers that are starting their cloud journey and need expert guidance to grow and optimize on cloud in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With Enterprise On-Ramp, customers can solve cloud-related challenges with access to Amazon Web Services Support experts whether by phone or live chat, share their screen and get support to improve issue resolution.

Amazon SageMaker Studio is the first fully integrated development environment (IDE) for machine learning (ML). With a single click, data scientists and developers can quickly spin up SageMaker Studio Notebooks to interactively explore datasets and build ML models. The notebooks come pre-configured with deep learning environments for Amazon Web Services-optimized TensorFlow and PyTorch to quickly get started with building models. Starting today you can access two new environments for TensorFlow 2.6 and PyTorch 1.8.

Amazon IoT SiteWise is a managed service to collect, store, organize and monitor data from industrial equipment at scale.

Starting today, Amazon MemoryDB for Redis is generally available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon S3 Replication is an elastic, fully managed, low-cost feature that replicates newly uploaded objects across two or more Amazon S3 buckets, keeping buckets in sync. Now with S3 Batch Replication, you can synchronize existing objects between buckets.

Amazon Elastic Container Service (Amazon ECS) now supports the use of persistent, shared storage across ECS containers with Amazon FSx for Windows based applications. Customers can use Amazon FSx for their Windows containers in task definitions compatible with the EC2 launch type. Amazon ECS tasks using Amazon FSx are designed to automatically mount the file systems specified by the customer in the task definition and make them available to the containers in the task across all availability zones in an Amazon Web Services Region.

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now offers improved visibility into the progress of blue/green deployments to your Amazon OpenSearch Service domains. This includes visibility into the completion of different steps within an update, such as creation and deletion of instances, and the progress of shard migration.

You can now use Amazon PrivateLink to privately access Amazon ElastiCache from your Amazon Virtual Private Cloud (Amazon VPC). Amazon PrivateLink provides private connectivity between VPCs, Amazon Web services, and on-premises networks, without exposing traffic to the public internet and securing your network traffic. 

You can now configure Amazon IoT device-specific logging using devices’ client ID, source IP, or principal ID. Until now, customers were able to configure logging at account level and for a specific thing group. Starting today, Amazon IoT now also supports setting fine-grained logging level using client ID, source IP, and principal ID. This enhancement makes it easy for customers to diagnose device specific issues without having to register devices as a thing or define additional thing groups. Customers can now target very specific resources for more detailed logging.

Following the announcement of updates to the PostgreSQL database, we have added support in Amazon Relational Database Service (Amazon RDS) for PostgreSQL minor versions 13.5, 12.9, 11.14, 10.19, and 9.6.24. This release closes security vulnerabilities in PostgreSQL and contains bug fixes and improvements done by the PostgreSQL community. This also includes the final release of PostgreSQL 9.6.

Amazon MQ now provides support for RabbitMQ version 3.8.26. This patch update to RabbitMQ contains several fixes and enhancements compared to the previously supported version, RabbitMQ 3.8.23.

S3 Object Lambda allows you to add your own code to process data retrieved from S3 before returning it to an application. For the first time, you can now use custom code to modify the data returned by standard S3 GET requests. This can be used to filter certain rows, to dynamically resize an image, to redact or mask confidential information, or to otherwise modify data returned by S3. Powered by Amazon Lambda functions, all request and data processing runs on infrastructure that is fully managed by Amazon Web Services. Your custom code executes on-demand, eliminates the need to create and store derivative copies of your data, and requires no changes to applications.

Amazon Cloud Map API now supports the IPv6 protocol, allowing applications to connect to Amazon Cloud Map endpoints over IPv6, in Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. This allows you to more easily integrate with existing IPv6-based applications, and reduce the need for expensive networking equipment to handle the address translation between IPv4 and IPv6.

Amazon RDS for MariaDB 10.6 is available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. With this release, we are introducing multiple features to enhance the performance, scalability, reliability and manageability of your workloads, including:

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports PostgreSQL major version 14. PostgreSQL 14 includes performance improvements for parallel queries, heavily-concurrent workloads, partitioned tables, logical replication, and vacuuming. PostgreSQL 14 also improves functionality with new capabilities. For example, you can cancel long-running queries if a client disconnects and you can close idle sessions if they time out. In addition, stored procedures now return data.

Amazon RDS Performance Insights now supports collection and tracking of query execution plans for Amazon RDS for Oracle, so you can more easily identify if a change in the query execution plan is the cause of a worse performing or a stuck query.

Amazon CloudFormation users can now choose to preserve the state of successfully deployed resources in the event of CloudFormation stack operation errors. Using this feature, you can retry the operation using an updated CloudFormation template and quickly iterate through feedback loops, shortening development cycles.

Amazon DynamoDB now helps you meet regulatory compliance and business continuity requirements through enhanced backup features, including copying on-demand backups cross-account and cross-Region, cost allocation tagging for backups, and transitioning backups to cold storage. In addition, backups managed through Amazon Web Services Backup are now stored in the Amazon Web Services Backup vault, which allows you to encrypt and secure your backups by using Amazon Web Services Key Management Service (KMS) key that is independent from your DynamoDB table encryption key.

Amazon DocumentDB (with MongoDB compatibility) is a scalable, highly durable, and fully managed database service for operating mission-critical MongoDB workloads.

Amazon DocumentDB (with MongoDB compatibility) is a scalable, highly durable, and fully managed database service for operating mission-critical MongoDB workloads.

Amazon Elastic Container Service (Amazon ECS) now supports Amazon ECS Exec and Amazon Linux 2 for workloads running on-premises with Amazon ECS Anywhere. ECS Exec makes it easier for customers to troubleshoot errors, collect diagnostic information, interact with processes in containers during development, and get “break-glass” access to containers to debug critical issues encountered in production. With Amazon Linux 2, customers can now easily use the same Amazon Web Services secured operating system on-premises and in the cloud for development and testing.

AWS Elemental MediaConvert now supports creation of the AV1 (AOMedia Video 1) format in 4K frame sizes and with 10-bit color depth. These enhancements expand the AV1 encoding capabilities of AWS Elemental MediaConvert to enable creation of High Dynamic Range (HDR) 4K content for display on modern, color rich 4K playback devices. With AV1, you can deliver high-quality SD, HD, and now 4K high dynamic range video to mobile and other devices at low bitrates unachievable with traditional formats such as AVC (H.264) and HEVC (H.265). For details on AV1 pricing, please visit the MediaConvert pricing page.

Amazon Step Functions service integration with Amazon CodeBuild now supports batch actions. With this enhancement, you can now initiate batch actions on multiple builds with a single task from within a workflow.

We are excited to announce that Amazon EMR 6.5.0 now includes Apache Iceberg version 0.12. Apache Iceberg is an open table format for large data sets in Amazon S3 and provides fast query performance over large tables, atomic commits, concurrent writes, and SQL-compatible table evolution. With the current release, you can use Apache Spark 3.1.2 on EMR clusters with the Iceberg table format.

Amazon S3 introduces a new S3 Object Ownership setting, Bucket owner enforced, that disables access control lists (ACLs), simplifying access management for data stored in S3. When you apply this bucket-level setting, every object in an S3 bucket is owned by the bucket owner, and ACLs are no longer used to grant permissions. As a result, access to your data is based on policies, including Amazon Identity and Access Management (IAM) policies applied to IAM identities, session policies, Amazon S3 bucket and access point policies, and Virtual Private Cloud (VPC) endpoint policies. This setting applies to both new and existing objects in a bucket, and you can control access to this setting using IAM policies. With the new S3 Object Ownership setting, you can easily review, manage, and modify access to your shared data sets in Amazon S3 using only policies.

Amazon DynamoDB supports PartiQL—a SQL-compatible query language that lets you query, insert, update, and delete table data in DynamoDB. Now DynamoDB PartiQL APIs support ReturnConsumedCapacity, an optional parameter that returns the total read and write capacity consumed, along with statistics for the table and any indexes involved in an operation, to help you optimize your queries and throughput costs.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2019 and 2017 on the Express, Web, Standard, and Enterprise Editions.

Today, we announce an additional capability of Amazon Systems Manager Explorer. The new cross-account / cross-region feature provides IT and DevOps managers a consolidated dashboard view of operational events and conditions across their Amazon Web Services accounts and China regions where action may be required.

Amazon Storage Gateway now makes it simpler and faster for you to get started with setting up and managing your hybrid cloud storage workflow. Using the Storage Gateway management console, you can now quickly create a new gateway in four easy steps: First, complete your local gateway setup. Second, connect your gateway to Amazon Web Services China Regions. Third, activate your gateway. Fourth, finalize your gateway configuration.

Amazon RDS for Oracle now supports the October 2021 Release Updates (RU) for Oracle Database 12.2, and 19c in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet. October 2021 Patch Set Update (PSU) for Oracle Database 12.1 will be launched soon.

Amazon Relational Database Service (Amazon RDS) Performance Insights is a database performance tuning and monitoring feature of RDS and Aurora that helps you quickly assess the load on your database and determine when and where to take action. One way to view Performance Insights data is in the Amazon Web Services Management Console. Performance Insights also provides a public API so that you can query your own data. We are now launching three new API endpoints: GetResourceMetadata, ListAvailableResourceDimensions, and ListAvailableResourceMetrics. These new APIs provide programmatic access to metadata about the metrics collected by Performance Insights. This makes it easier to build richer, more dynamic integrations into your monitoring tool or platform of choice. To learn more about Performance Insights APIs, read “Retrieving metrics with the Performance Insights API”.

Starting today, you can request EC2 capacity based on your workload’s instance requirements. Attribute-based instance type selection, a new feature for Amazon EC2 Auto Scaling, EC2 Fleet, and Spot Fleet, makes it easy to create and maintain instance fleets without researching and selecting EC2 instance types. This is useful for running instance type flexible workloads and frameworks such as containers, big data, and CI/CD, or for simple cases where you want your instance fleets to automatically use the latest generation instance types. Instead of creating and maintaining a list of acceptable instance types, you can now simply define your instance requirements once, and let attribute-based instance type selection handle the rest.

Amazon Redshift default IAM role is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon AppSync is a managed GraphQL service that simplifies application development by letting you create a flexible API to securely access, manipulate, and combine data from one or more data sources. Today, we are happy to announce that AppSync now supports eviction of specific entries from AppSync’s built-in server-side cache.

Following the announcement of updates in MySQL database versions 5.7 and 8.0, we have updated Amazon Relational Database Service (Amazon RDS) for MySQL to support MySQL minor versions 5.7.36, and 8.0.27. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community. Learn more about upgrading your database instances in the Amazon RDS User Guide; and create or update a fully managed Amazon RDS database using the latest available minor versions in the Amazon RDS Management Console.

Amazon Simple Queue Service (SQS) announces support of dead-letter queue (DLQ) redrive to source queue in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, giving you better control over the life cycle of unconsumed messages. Dead-letter queues are an existing feature of Amazon SQS that allows customers to store messages that applications could not successfully consume. You can now efficiently redrive messages from your dead-letter queue to your source queue on the Amazon SQS console. DLQ redrive augments the dead-letter queue management experience for developers and enables them to build applications with the confidence that they can examine their unconsumed messages, recover from errors in their code, and reprocess messages in their dead-letter queues.

Per second billing to Microsoft Windows Server and Microsoft SQL Server instances running on Amazon EC2 has been extended to Amazon Web Services China (Beijing) Region, operated by Sinnet, and in Amazon Web Services China (Ningxia) Region, operated by NWCD. Customers will only pay for Windows Server and SQL Server instances that are launched in On-Demand, Reserved, and Spot form running on Amazon EC2 in one second increments, with a minimum of 1 minute.

Amazon RDS for SQL Server now supports SQL Server Analysis Services (SSAS) in Multidimensional mode. There is no additional cost to install SSAS directly on your Amazon RDS for SQL Server DB instance.

Amazon Simple Notification Service (Amazon SNS) now supports Attribute-based access control (ABAC) for API actions including Publish and PublishBatch. ABAC is an authorization strategy that defines access permissions based on tags which can be attached to IAM resources, such as IAM users and roles, and to Amazon Web Services resources, like Amazon SNS topics, to simplify permission management.

Amazon RDS for Oracle now supports the launch of additional memory configurations for R5 instance class in the Amazon Web Services China (Ningxia) Region, operated by NWCD, and the Amazon Web Services China (Beijing) Region, operated by Sinnet.

You can now access your instance's tags from the EC2 Instance Metadata Service. Tags enable you to categorize your Amazon Web Services resources in different ways, for example, by purpose, owner, or environment. This is useful when you have many resources of the same type—you can quickly identify a specific resource based on the tags that you've assigned to it. Previously, you could access your instance tags from the console or by using the describe-tags API.

Today, we are releasing improvements in Amazon AppSync to configure the maximum batching size to use when resolving a recurring field with an Amazon Lambda resolver or a Direct Amazon Lambda resolver.

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now supports enabling fine-grained access control on existing domains. Fine-grained access control adds several capabilities to help you have better access control over the data stored in your domain.

Starting today, customers can use Amazon EC2 On-Demand Capacity Reservations to reserve capacity for cluster placement groups. With cluster placement groups, customers can launch EC2 instances into logical groups within a segment of the network with high bisection bandwidth, thus getting low latency and high throughput between instances inside the cluster. Cluster placement groups are beneficial for customers with workloads that require tightly coupled node-to-node communication, such as high-performance computing (HPC) workloads or in-memory databases like SAP HANA. With the addition of On-Demand Capacity Reservations for cluster placement groups, customers can get the assurance of reserved capacity as they scale compute resources within their cluster.

Amazon IoT Device Management Jobs now supports a new Job execution retry configuration, enabling developers to increase success rates of large scale deployments by ensuring automatic redeployment of failed job executions.  Instead of having to manually identify and redeploy to devices that fail, customers can now define a maximum number of retries in the ‘Job Execution Retry Configuration’ for each Job rollout or deployment, along with the criteria to trigger the retry behavior.

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now offers machine learning based anomaly detection for historical data to identify trends, patterns, and seasonality in the past data. Anomaly detection for historical data enables customers to derive valuable insights from past data, and take appropriate actions to improve the overall efficiency of their applications.

You can now run OpenSearch and OpenSearch Dashboards version 1.1 on Amazon OpenSearch Service (successor to Amazon Elasticsearch Service). The new version includes several improvements such as cross-cluster replication support for clusters running OpenSearch, anomaly detection for historical data, and improved alerting.

Amazon Storage Gateway now supports Dell EMC NetWorker 19.5 and Veeam Backup & Replication 11A on Tape Gateway, enabling you to backup and archive data from Dell EMC NetWorker and Veeam Backup & Replication to Amazon Web Services without changing your backup workflows. With this announcement, Tape Gateway supports Dell EMC NetWorker 19.5 and Veeam Backup & Replication 11A running on Microsoft Windows Server 2019.