2024

Application Load Balancer (ALB) now supports Load Balancer Capacity Unit (LCU) Reservation that allows you to proactively set a minimum capacity for your load balancer, complementing its existing ability to auto-scale based on your traffic pattern.  

Today, Amazon Security Token Service (STS) is announcing support for digitally signing OpenID Connect (OIDC) JSON Web Tokens (JWTs) using Elliptic Curve Digital Signature Algorithm (ECDSA) keys. A digital signature guarantees the JWT’s authenticity and integrity and ECDSA is a popular digital signature algorithm. When your identity provider (IdP) authenticates a user, it crafts a signed OIDC JWT representing that user’s identity. When your authenticated user calls the AssumeRoleWithWebIdentity API and passes their OIDC JWT, STS vends short-term credentials that enable access to your protected Amazon Web Services resources.

EC2 Auto Scaling now supports Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift to help you quickly recover an impaired application from failures in an Availability Zone (AZ). Starting today, you can shift the launches of EC2 instances in an Auto Scaling Group (ASG) away from an impaired AZ to quickly recover your unhealthy application in another AZ, reducing the duration and severity of impact due to events such as power outages and hardware, or software failures. This new integration also brings support for ARC zonal autoshift, which automatically starts a zonal shift for enabled ASGs when we identify a potential failure affecting an AZ.

Amazon Elastic Beanstalk is now providing Windows Bundled logs to enhance log collection capabilities for customers running applications on the Windows platforms.  

Today, we announced support for a new Apache Flink connector for Amazon DynamoDB. The new connector, contributed by Amazon Web Services for the Apache Flink open source project, adds Amazon DynamoDB Streams as a new source for Apache Flink. You can now process DynamoDB streams events with Apache Flink, a popular framework and engine for processing and analyzing streaming data.  

Amazon S3 has increased the default bucket quota from 100 to 10,000 per Amazon Web Services account. Additionally, any customer can request a quota increase up to 1 million buckets. As a result, customers can create new buckets for individual datasets that they store in S3 and more easily take advantage of capabilities such as default encryption, security policies, S3 Replication, and more to remove barriers to scaling and optimize their S3 storage architecture.

Amazon OpenSearch Service now supports OpenSearch version 2.17 in Amazon OpenSearch Service. With OpenSearch 2.17, we have made several improvements in the areas of vector search, query performance and machine learning (ML) toolkit to help accelerate application development and enable generative AI workloads.

Today, Amazon MemoryDB announces support for Valkey, which is priced 30% lower than MemoryDB for Redis OSS. With MemoryDB for Valkey, you are not charged for data written up to 10 TB/month. Any data written over 10TB/month is billed at ¥0.26/GB, which is 80% lower than MemoryDB for Redis OSS. Valkey is an open source, high performance, key-value datastore stewarded by Linux Foundation. It is a drop in replacement of Redis OSS. Valkey is backed by 40+ companies and has seen rapid adoption since the project was created in March 2024.

Amazon S3 Access Grants now integrate with Amazon Redshift. S3 Access Grants map identities from your Identity Provider (IdP), such as Entra ID or Okta, to datasets stored in Amazon S3, helping you to easily manage data permissions at scale. This integration gives you the ability to manage S3 permissions for Amazon IAM Identity Center users and groups when using Redshift, without the need to write and maintain bucket policies or individual IAM roles.

Amazon OpenSearch Service now enables you to scale a single cluster to 1000 data nodes (1000 hot nodes and/or 750 warm nodes) and enables you to manage 25 petabytes of data (10 Petabytes in hot nodes and further 15 Petabytes in warm nodes). You no longer need to setup multiple clusters for workloads that require more than 200 data nodes or more than 3 Petabytes of data.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.40. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community and Amazon RDS. Learn more about the enhancements in RDS for MySQL 8.0.40 in the Amazon RDS user guide.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports major version 17, starting with PostgreSQL version 17.1. This release also includes support for the latest minor versions 16.5, 15.9, 14.14, 13.17, and 12.21. RDS for PostgreSQL comes with support for 94 PostgreSQL extensions such as pgvector 0.8.0, pg_tle 1.4.0, pgactive 2.1.3, and hypopg.1.4.1 that are updated to support PostgreSQL 17. This release also includes support for a new SQL function for monitoring autovacuum, providing insights to prevent transaction ID wraparound.

Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift have expanded their capabilities and now support EC2 Auto Scaling. ARC zonal shift helps you quickly recover an unhealthy application in an Availability Zone (AZ), and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures. ARC zonal autoshift safely and automatically shifts your application’s traffic away from an AZ when we identifies a potential failure affecting that AZ.  

Amazon IoT Core, a managed cloud service that lets you securely connect Internet of Things (IoT) devices to the cloud and manage them at scale, announces two new capabilities - ability to enrich MQTT messages with additional data and use thing-to-connection association to simplify permission management. Message enrichment enables developers to augment MQTT messages from devices with additional information from thing registry, without modifying their devices. The thing-to-connection association enables mapping an MQTT client to a registry thing, for client IDs that don’t match thing name. This will enable developers to leverage registry information in IoT policies, easily associate device actions to lifecycle events, and utilize existing capabilities like custom cost allocation and resource-specific logging, previously only available for matching client IDs and thing names.

Today, Amazon Identity and Access Management (IAM) is launching a new capability allowing customers to perform privileged tasks across their Amazon Web Services member accounts managed using Amazon Organizations. Accounts in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD do not have privileged root user credentials, so customers had to contact Amazon Web Services Support if they needed to perform tasks that required these privileges, such as unlocking an S3 bucket that denied all access.

Amazon Lambda now supports creating serverless applications using Python 3.13 in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Developers can use Python 3.13 as both a managed runtime and a container base image. We will automatically apply updates to the managed runtime and base image as they become available.

ElastiCache for Valkey self-designed (node-based) clusters now support server-side write request latency and read request latency metrics. With this launch, you can now measure the server-side response time for Valkey commands and troubleshoot latency spikes in your ElastiCache for Valkey cluster.  

Amazon OpenSearch Service now supports two new third party plugins- encryption plugin from Portal26.ai and Name Match plugin from Babel Street. These are now available as optional plugins that you can associate with your Amazon OpenSearch Service clusters.  

Amazon MemoryDB for Valkey now supports server-side write request latency and read request latency metrics. With this launch, you can now measure the server-side response time for Valkey commands and troubleshoot latency spikes in your MemoryDB cluster.  

Amazon Step Functions now supports exporting workflows as Amazon CloudFormation or Amazon Serverless Application Model templates directly in the Amazon Web Services console. This allows for centralized and repeatable provisioning and management of your workflow configurations. Amazon Step Functions is a visual workflow service capable of orchestrating virtually any Amazon Web Services service to automate business processes and data processing workloads.

Amazon DynamoDB is a serverless, NoSQL, fully managed database with single-digit millisecond performance at any scale. Starting today, we have made Amazon DynamoDB even more cost-effective by reducing prices for on-demand throughput by 50% and global tables by up to 67%.  

Amazon DynamoDB is excited to announce enhancements to the DynamoDB console that enable customers to easily find frequently used tables. Now, customers can favorite their tables in the console’s tables page for quicker table access.

Amazon Kinesis Data Streams released Kinesis Client Library (KCL) 3.0. KCL 3.0 introduces an enhanced load balancing algorithm that continuously monitors resource utilization of the stream processing workers and automatically redistributes the load from over-utilized worker to other underutilized workers. This ensures even CPU utilization across workers and removes the need to over-provision the stream processing compute workers, reducing compute costs by up to 33%. Additionally, KCL 3.0 is built with the Amazon SDK for Java 2.x for improved performance and security features, fully removing the dependency on the Amazon SDK for Java 1.x.

Amazon Kinesis Data Streams now provides Amazon CloudFormation support for creating resource policies for data streams and consumers. You can use CloudFormation templates to programmatically deploy resource policies in a secure, efficient, and repeatable way, reducing the risk of human error from manual configuration. CloudFormation allows you to track changes over time, apply updates in a controlled and automated manner, and includes version controls so you can easy roll back changes if needed.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the October 2024 Release Update (RU) for Oracle Database versions 19c and 21c.

Today, we announce end of Standard Support and Extended Support timelines for legacy Elasticsearch versions and OpenSearch Versions. Standard support ends on Nov 7, 2025, for legacy Elasticsearch versions up to 6.7, Elasticsearch versions 7.1 through 7.8, OpenSearch versions from 1.0 through 1.2, and OpenSearch versions 2.0 through 2.9. With extended support, for an incremental flat fee over regular instance pricing, you continue to get critical security updates beyond end of standard support. For more information, see this blog.

Amazon Relational Database Service (RDS) for Oracle now supports version 24.1 of Oracle Application Express (APEX) for 19c & 21c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser. To learn more about the latest features of APEX 24.1, please refer to Oracle’s documentation.

You can now use Amazon Timestream for InfluxDB in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Timestream for InfluxDB makes it easy for application developers and DevOps teams to run fully managed InfluxDB databases on Amazon Web Services Cloud for real-time time-series applications using open-source APIs.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports Oracle Management Agent (OMA) version 13.5.0.0.v2 for Oracle Enterprise Manager (OEM) Cloud Control 13c Release 5. OEM 13c offers web-based tools to monitor and manage your Oracle databases. Amazon RDS for Oracle installs OMA, which communicates with your Oracle Management Service (OMS) to provide monitoring information. Customers running OMS version 13.5 update 23 can now manage databases by installing OMA 13.5.0.0.v2.

Today, Amazon ElastiCache announces support for Valkey with Serverless priced 33% lower and node-based priced 20% lower than other supported engines. Valkey is an open source, high performance, key-value datastore stewarded by Linux Foundation. It is a drop in replacement of Redis OSS, backed by 40+ companies with rapid adoption since project inception in March 2024.

Amazon Elastic Container Service (Amazon ECS) now allows you to view the service revision and deployment history for your long-running applications deployed as Amazon ECS services. This capability makes it easier for you to track and view changes to applications deployed using Amazon ECS, monitor on-going deployments, and debug deployment failures.

Amazon EC2 Auto Scaling Groups (ASG) introduces a new capability for customers to strictly balance their workloads across Availability Zones, enabling greater control over provisioning and management of their EC2 instances.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2016, 2017, 2019, and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include 13.0.6450.1, 14.0.3480.1, 15.0.4395.2, 16.0.4150.1.

Starting today, you can utilize a final validation period while using EC2 Auto Scaling instance refresh. This new feature gives you time to conduct necessary validation or testing, ensuring the successful deployment of new EC2 instances to your Auto Scaling group before an instance refresh is marked successful.

Amazon Glue now supports SaaS connectivity with out-of-the-box support for Salesforce enabling users to quickly preview and transfer their CRM data, query, detect schema and schedule jobs.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports memory-optimized X2idn and X2iedn instances in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. These instances are designed to deliver fast performance for workloads that process large data sets in memory.

Today, we add job queuing for Amazon Glue jobs. This new capability enables you to submit Amazon Glue job runs without needing to manage account level quotas and limits.  

Amazon Web Services Marketplace is a curated digital catalog helping customers find, subscribe to, deploy, and manage the software and service from independent software vendors (ISV). On Nov 6, Amazon Web Services Marketplace China launches Channel Partner Private Offer (CPPO), which allows channel partners to resell ISVs’ products on Amazon Web Services Marketplace China. ISVs can authorize channel partners to resell their products and provide wholesale pricing through Amazon Web Services Marketplace China Management Portal. Channel partners can then use the authorization to customize pricing, duration and other offer details by creating private offers for buyers. Buyers are able to subscribe to the product by accepting the private offer through Amazon Web Services Marketplace China Website. CPPO will leverage the online transaction capabilities of Amazon Web Services Marketplace China to enable online billing and invoicing, with online payment and disbursement support provided by the third party payment and collection platform LianlianPay.  CPPO supports resell business model with a seamless one-stop experience, streamlines the sales process and delivers a superior customer experience, which is highly demanded by leading ISVs in China.

Amazon Aurora announced rolling upgrades support for Operating System (OS) upgrades in Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Aurora now seamlessly upgrades the OS version of database clusters while maintaining read access to the data when using Aurora cluster or reader endpoint. The feature automatically applies upgrades to a few reader instances at a time so the database can continue serving read traffic for clusters with more than one read replica.  

Amazon Keyspaces (for Apache Cassandra) is a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service that offers 99.999% availability.

Today, we are launching support for the UDP protocol on Amazon PrivateLink over IPv4 and IPv6, and on Network Load Balancer (NLB) over IPv6. Until now, Amazon PrivateLink only supported TCP, while NLB supported UDP only over IPv4.

Today, we announce the availability of two new Amazon CloudWatch metrics, VolumeAvgReadLatency and VolumeAvgWriteLatency, to monitor the performance of your Amazon Elastic Block Store (EBS) volumes. You can gain insight into the average latency of the I/O being driven on your EBS volumes to help root cause any application performance bottlenecks.  

Amazon Glue Studio Visual ETL data preparation authoring is a no code data preparation user experience for business users and data analysts with a spreadsheet-style UI that runs data integration jobs at scale on Amazon Glue. The new visual data preparation experience makes it easier for data analysts and data scientists to clean and transform data to prepare it for analytics and machine learning.  

We're excited to announce a new capability for the Gateway Load Balancer (GWLB) and Network Load Balancer (NLB) that allows you to configure the TCP idle timeout value.

Today, we announce the availability of two new Amazon CloudWatch metrics to give insight into when your application is attempting to drive higher than your Amazon EBS volume’s provisioned performance. These two metrics, Volume IOPS Exceeded Check and Volume Throughput Exceeded Check, monitor if the driven IOPS or throughput is exceeding the provisioned performance of your Amazon EBS volume.  

Amazon RDS for MariaDB now supports MariaDB major version 11.4, the latest long-term maintenance release from the MariaDB community. Amazon RDS for MariaDB 11.4 now supports the Simple Password Check Plugin, and Cracklib Password Check Plugin for password validation. You can use these plugins together, or individually to enforce the security policies appropriate for your organization. MariaDB 11.4 major version also includes improvements to database-level privileges, replication, and the InnoDB storage engine made by the MariaDB community.

Amazon OpenSearch Service now offers customers the option to provision a dedicated coordinator node. Dedicated coordinator nodes relieve data nodes from the responsibilities of traffic coordination and hosting of OpenSearch Dashboards, enabling better resource utilization, and improving overall efficiency of the cluster. In addition, coordinator nodes help reduce the number of private IP addresses that need to be reserved for virtual private cloud (VPC) domains.

Amazon EC2 announces the launch of a new interface type that decouples the Elastic Fabric Adapter (EFA) from the Elastic Network Adapter (ENA). EFA provides high-bandwidth, low latency networking crucial for scaling AI/ML workloads. The new interface, "EFA-only", allows you to create a standalone EFA device on secondary interfaces. This allows you to scale your compute clusters to run AI/ML applications without straining your private IPv4 address space or encountering IP routing challenges associated with Linux.

Starting today, you can provide Server Name Indication (SNI) with Route 53 Resolver endpoints for DNS-over-HTTPS (DoH), allowing you to specify the target server hostname for DNS query requests from your outbound endpoints to DoH servers that require SNI for TLS validation.

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with readable standbys now supports using Amazon Identity and Access Management (IAM) for database authentication. With IAM support, you can now centrally manage access to your RDS Multi-AZ deployments with two readable standbys along with other RDS deployments, instead of managing access individually. In addition, Amazon IAM eliminates the need for storing password-based login credentials in the database.

Amazon Lambda now supports replacing the default Java object serialization library with a customer-defined serializer. This feature is supported in all current Lambda managed runtimes and container base images for Java.

Amazon EC2 now allows customers to use the Optimize CPUs feature after the instance launch without needing to redeploy a new instance. You can now stop an instance, modify the number of vCPUs and/or disable the Hyper-Threading, and then start the instance to save on vCPU-based licensing costs. You can also use the Optimize CPUs feature when changing the instance type to retain the CPU configurations. This feature saves time and reduces operational complexity for you to modify vCPUs based on your business needs.

Amazon Serverless Application Repository now supports Amazon PrivateLink to connect to Amazon Serverless Application Repository through an interface VPC endpoint. You can now connect directly to the Amazon Serverless Application Repository using Amazon PrivateLink in your virtual private cloud (VPC) instead of connecting over the internet.

Amazon IoT Core, a managed cloud service that lets customers securely connect and manage Internet of Things (IoT) devices to the cloud at scale, announces three new authentication and authorization capabilities for domain configurations. Devices no longer need to use Transport Layer Security (TLS) Application Layer Protocol Negotiation (ALPN) extension to determine authentication type and application protocol and authentication. In addition, X.509 client certificates can now be used in custom authorizers both with and without the MQTT Connect message.

Amazon Beanstalk adds support for Python 3.12 on AL2023 Beanstalk environments.  

Today, Amazon Lambda announces the launch of a new code editing experience in the Lambda console based on Code-OSS (VS Code – Open Source). This integration brings new interface and productivity features directly into the Lambda console, giving customers a more intuitive coding environment when building serverless applications.

Amazon EventBridge Event Bus now provides an end-to-end event delivery latency metric in Amazon CloudWatch that tracks the duration between event ingestion and successful delivery to the targets on your Event Bus. This new IngestionToInvocationSuccessLatency allows you to now detect and respond to event processing delays caused by under-performing, under-scaled, or unresponsive targets.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL versions 16.4, 15.8, 14.13, 13.16, and 12.20. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific security and feature improvements. These releases also contain new Babelfish’s features and improvements. As a reminder, Amazon Aurora PostgreSQL 12 end of standard support is February 28, 2025. You can either upgrade to a newer major version or continue to run Amazon Aurora PostgreSQL 12 past the end of standard support date with RDS Extended Support.

Amazon Network Load Balancer (NLB) now supports Amazon Application Recovery Controller’s zonal shift and zonal autoshift features on load balancers that are enabled across zones. Zonal shift allows you to quickly shift traffic away from an impaired Availability Zone (AZ) and recover from events such as bad application deployment and gray failures. Zonal autoshift safely and automatically shifts your traffic away from an AZ when we identify potential impact to it. 

Amazon Transfer Family now provides real-time status of file transfers initiated using SFTP connectors. With this capability, you can easily monitor the current state of your file transfer operations and orchestrate post-transfer actions to automate your Managed File Transfer (MFT) workflows in Amazon Web Services.  

Amazon S3 now supports new Amazon Web Services Region and bucket name prefix filters for the ListBuckets API. In addition, paginated ListBuckets requests now return both your general purpose buckets and their corresponding Amazon Web Services Regions in the response, helping you simplify applications that need to determine bucket locations across multiple Regions.

Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift have expanded their capabilities and now support Network Load Balancers (NLB) with cross-zone configuration enabled. ARC zonal shift helps you quickly recover an unhealthy application in an Availability Zone (AZ), and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures. ARC zonal autoshift safely and automatically shifts your application’s traffic away from an AZ when we identify a potential failure affecting that AZ.

Amazon DynamoDB zero-ETL integration with Amazon Redshift is now generally available, enabling customers to run high-performance analytics on their DynamoDB data in Amazon Redshift with no impact on production workloads running on DynamoDB. As data is written into a DynamoDB table, it is seamlessly made available in Amazon Redshift, eliminating the need for customers to build and maintain complex data pipelines for performing extract, transform, and load (ETL) operations. You can create zero-ETL integration on a Amazon Redshift Serverless workgroup or Amazon Redshift provisioned cluster using RA3 instance types.

Starting today, you can launch Amazon EC2 Spot Instances using Ubuntu Pro based Amazon Machine Images (AMIs) in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now easily deploy Ubuntu Pro Spot instances and get five additional years of security updates from Canonical. You will be charged on a per-second basis for Ubuntu Pro EC2 AMI instances. For any new Ubuntu Pro EC2 AMI deployments, you will now see Ubuntu Pro charges in the Elastic Compute Cloud section of your bill.

Today we announce the general availability of Amazon Elastic Kubernetes Service (EKS) optimized accelerated AMIs for Amazon Linux 2023 (AL2023). EKS customers can now enjoy the improved security features, optimized boot times, and newer kernel versions of AL2023 for their workloads using NVIDIA GPU and Amazon Inferentia instances.

Starting today, you can assign the billing of unused Amazon EC2 On-Demand Capacity Reservations (ODCR) to any one of your Amazon Web Services organization accounts with which the reservation is shared. Capacity Reservations help you reserve compute capacity for any duration and share it across multiple accounts, enabling you to centrally pool and manage your reserved capacity. When a Capacity Reservation is shared, each account is billed for their respective usage of the reservation, while any unused capacity is by default billed to the account that owns the reservation. Now, depending on your business needs, you have the flexibility to configure which account gets billed for unused capacity.

Amazon Kinesis Data Streams announces support for attribute-based access control (ABAC) using stream tags, enabling customers to enhance their overall security postures with a scalable access control solution. Amazon Kinesis Data Streams is a serverless data streaming service that enables customers to capture, process, and store data streams at any scale. ABAC is an authorization strategy that defines access permissions based on tags which can be attached to IAM resources, such as IAM users and roles, and to Amazon Web Services resources for fine-grained access control.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) APIs now come with Amazon PrivateLink support, allowing you to invoke Amazon MSK APIs from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet.

Today, we are announcing Node.js support for Valkey General Language Independent Driver for Enterprise (GLIDE). GLIDE is an open source client library for Valkey, an open source key-value data store that supports a variety of workloads such as caching and message queues. With this launch, GLIDE supports Java, Python, and Node.js. GLIDE is one of the official client libraries for Valkey and it supports all Valkey commands. GLIDE supports Valkey versions 7.2 and 8.0, as well as Redis open-source versions 6.2, 7.0, and 7.2.

Autoscaling in Amazon Glue Interactive Sessions is now generally available. Amazon Glue versions 3.0 or higher can now dynamically scale resources up and down based on the workload. With Autoscaling, you no longer need to worry about over-provisioning resources for sessions, spend time optimizing the number of workers, or pay for idle workers.

Today we’re announcing enhancements to Amazon ElastiCache Reserved Nodes that make them more flexible and easier to use, helping you get the most out of your reserved nodes discount. Reserved nodes provide you with a significant discount compared to on-demand node prices, enabling you to optimize costs based on your expected usage.

You can now manage your Amazon S3 general purpose bucket quotas in Service Quotas. Using Service Quotas, you can view the total number of buckets in an Amazon Web Services account, compare that number to your bucket quota, and request a service quota increase.

Amazon Network Firewall now supports Amazon PrivateLink. Customers can now access and manage their Network Firewalls privately, without going through the public internet. Amazon PrivateLink allows you to privately access services hosted on Amazon Web Services Cloud, in a highly available and scalable manner, without using public IPs, and without requiring the traffic to traverse the Internet. When Amazon PrivateLink is used with Amazon Network Firewall, all management and control traffic between clients and Network Firewall flows over a private network.

Amazon Managed Streaming for Apache Kafka (MSK) now allows you to set up multi-VPC and cross-account private connectivity on Amazon MSK clusters configured with any of the MSK supported authentication mechanisms.

Starting today, Amazon EC2 Instance Connect now supports Internet Protocol Version 6(IPv6). Customers moving to IPv6 can now connect to their instances with a single click or command using EC2 Instance Connect over IPv6.

Amazon Lambda SnapStart for Java delivers up to 10x faster function startup performance at no extra cost. Lambda SnapStart is a performance optimization that makes it easier for you to build highly responsive and scalable Java applications using Amazon Lambda, without having to provision resources or spend time and effort implementing complex performance optimizations.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2019 and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include SQL Server 2019 CU28 - 15.0.4385.2 and 2022 CU14 - 16.0.4135.4.

Amazon S3 is beginning to apply a default minimum object size of 128 KB for S3 Lifecycle transition rules to any S3 storage class. This change can help optimize your transition costs for datasets with many kilobyte-sized objects by reducing the number of transition requests. You can override this new default and customize the minimum object size for S3 Lifecycle transition rules to any value.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2016, 2017, 2019, and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include 13.0.6445.1, 14.0.3475.1, 15.0.4390.2, 16.0.4140.3.

Amazon FSx for Lustre, a service that provides high-performance, cost-effective, and scalable file storage for compute workloads, now provides additional performance metrics for improved visibility into file system activity and an enhanced monitoring dashboard with performance insights and recommendations. You can use the new Amazon Cloudwatch metrics and dashboard to right-size your file systems and optimize performance and costs.

Amazon S3 Access Grants now support ListCallerAccessGrants, a new API that allows Amazon Identity and Access Management (IAM) principals and Amazon IAM Identity Center end users to list all S3 buckets, prefixes, and objects they can access, as defined by their S3 Access Grants. Customers can use ListCallerAccessGrants to build applications that identify and then take action on data that is accessible to specific end users.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.9, 10.6.19, and 10.5.26. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Today, we announce general availability of new capabilities and usability improvements for the Amazon IoT Device Management Software Package Catalog (SPC) and Amazon IoT Device Management Jobs. With these new capabilities, you can now:

With OpenSearch 2.15, you can now leverage OR1 instances for your existing Amazon OpenSearch Service domains. OR1 delivers up to 30% price-performance improvement over existing instances (based on internal benchmarks), and uses Amazon S3 to provide 11 9s of durability. You can start using OR1 by simply updating your existing domain configuration, and choosing OR1 instances for data nodes. This will seamlessly move domains running OpenSearch 2.15 to OR1 instances using a blue/green deployment. Please note that changing domain configuration from an OR1 instance type to another instance type will require a snapshot restore.

Amazon Lambda now supports Amazon Linux 2023 runtimes in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. This includes the following runtimes: Python 3.12, Node.js 20, Java 21, .NET 8, Ruby 3.3, and Amazon Linux 2023 (provided.al2023). Each runtime is available as both a managed runtime and a container base image. We will automatically apply updates to each managed runtime and container base image, as they become available.

The i4i instances offer up to 30 TB of NVMe storage using Amazon Web Services Nitro SSD devices that are custom-built by Amazon Web Services. These Nitro SSD storage offer high I/O performance, low latency, and security with always-on encryption. I4i instances also offer a new size with up to 128 vCPUs and 1,024 GiB of memory, which is twice the size of the largest i3 instance. To know more about i4i, see blog.

Amazon Managed Service for Apache Flink now supports Apache Flink minor version 1.20. This version is expected to be the last 1.x minor version released by the Flink community before Flink 2.0. We recommend that you upgrade to Flink 1.20 to benefit from bug fixes, performance improvements, and new functionality added by the Flink community. You can use in-place version upgrades for Apache Flink to upgrade your existing application to this new version.

AWS Elemental MediaConvert now offers volume discount pricing, providing customers with on-demand pricing which scales down as usage of the service goes up. Volume discount pricing takes effect starting during your September billing cycle.

Amazon Elastic Container Service (Amazon ECS) and Amazon Fargate now integrate with Amazon Elastic Block Store (EBS), allowing you to easily provision and attach EBS volumes to Amazon ECS tasks running on both Amazon Fargate and Amazon Elastic Compute Cloud (EC2) using Amazon ECS APIs. This capability makes it easier for you to deploy storage and data intensive applications such as ETL jobs, media transcoding, and ML inference workloads using serverless containers.

Amazon EventBridge Pipes now supports Amazon Key Management Service (KMS) customer managed keys, allowing you to encrypt Pipes filter patterns, enrichment parameters, and target parameters with your own keys instead of default Amazon Web Services owned keys. Using keys that you create, own, and manage can satisfy your organization’s security and governance requirements.

Amazon Relational Database Services (Amazon RDS) and Amazon Aurora databases now support 1-click connection to an Amazon Elastic Compute Cloud (Amazon EC2) compute instance in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now run OpenSearch version 2.15 in Amazon OpenSearch Service. With OpenSearch 2.15, we have made several improvements in areas of search performance as well as query optimization , and added capabilities to help you to make AI-powered applications with greater flexibility and ease.

Amazon Relational Database Service (RDS) for MySQL announces Amazon RDS Extended Support minor version 5.7.44-RDS.20240808. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of MySQL.

Amazon Resource Access Manager (RAM) now supports Amazon PrivateLink, allowing you to create and manage your resource shares from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet.

Today, Amazon EKS announces new controls for Kubernetes version policy, allowing cluster administrators to configure end of standard support behavior for EKS clusters. This behavior can easily be set through the EKS Console and CLI. Kubernetes version policy control is available for Kubernetes versions in standard support.

Amazon Elastic Container Service (Amazon ECS) now supports Amazon Graviton-based compute with Amazon Fargate Spot in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This capability helps you run fault-tolerant Arm-based applications with up to 70% discount compared to Fargate prices. Amazon Graviton processors are custom-built by Amazon Web Services to deliver the great price-performance for cloud workloads.

Amazon VPC allows customers to create VPCs and subnets of different sizes using IPv6 CIDRs. With this capability, customers can now create VPCs in sizes between /44 and /60, and subnets in sizes between /44 and /64, in increments of /4. Before today, we supported one standard IPv6 CIDR block size of /56 for VPC and /64 for subnet, whereas IPv4 CIDR block size were flexible for both VPCs and subnets.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL versions 16.3, 15.7, 14.12, 13.15, and 12.19. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. Databases now startup faster after upgrades and restarts. Version 16.3 with IO-Optimized configuration includes performance enhancements that improve write throughput for 8xl and larger instances. These releases also contain Babelfish’s new features and improvements such as support for group AD, logical replication, Blue/Green Deployments, and LIKE operator for AI collations. As a reminder, Amazon Aurora PostgreSQL 12 support ends on Feb 29, 2025. Upgrade to a newer major version.

Amazon Step Functions announces a new Validation API for your Step Functions workflows. The Validation API enables you to perform semantic checks on your workflows as you author them, helping you find syntactical errors sooner, shortening development cycles. Amazon Step Functions is a visual workflow service capable of orchestrating virtually any Amazon Web Services service to automate business processes and data processing workloads.

Today, Amazon Elastic Container Registry (ECR) announced the general availability of a new version of basic scanning. The new version of ECR basic scanning uses Amazon Web Services’ native scanning technology, which is designed to provide customers with improved scanning results and vulnerability detection across a broad set of popular operating systems. This allows customers to further strengthen the security of their container images.

Amazon Elastic Block Store (EBS) direct APIs now support the Internet Protocol version 6 (IPv6) protocol when you connect your Virtual Private Cloud (VPC) to EBS Direct APIs using Amazon PrivateLink. EBS direct APIs enable customers to simplify their backup and recovery workflows by directly creating and reading EBS snapshots via APIs. Through Amazon PrivateLink, customers can access EBS direct APIs as if it were in your VPC. With this change, customers can meet their IPv6 compliance needs, integrate with existing IPv6-based on-premises applications, and remove the need for expensive networking equipment to handle the address translation between IPv4 and IPv6.

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor version 11.22-RDS.20240808. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of PostgreSQL. Learn more about the updates and patches in this Extended Support minor version in the Amazon RDS User Guide.

Amazon Backup announces support for Amazon Neptune and Amazon DocumentDB, making it easier for you to centrally automate backup and restore of your application data stored in Amazon Neptune and Amazon DocumentDB along with other Amazon Web Services services for compute, storage, and database.

Amazon RDS for SQL Server now integrates transaction log backups with Database Migration Service (DMS) in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This integration provides greater reliability in data replication for customers using DMS to replicate data from an RDS for SQL Server source database. If database connection interruptions or sudden transaction volume spikes cause active transaction logs to be archived before DMS can finish processing, DMS can now access the RDS for SQL Server backup logs to recover and resume replication. This prevents replication failures that would previously require a full data reload.

Amazon OpenSearch Service now supports Amazon Graviton3 instances, which deliver up to 25% better performance over Graviton2-based instances. The new instance types are compute optimized (C7g), general purpose (M7g), and memory optimized (R7g) instances. You can update your domain to the new instances seamlessly through the OpenSearch Service console or APIs.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2016, 2017, 2019 and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include SQL Server 2016 GDR - 13.0.6441.1, 2017 CU31 GDR - 14.0.3471.2, 2019 GDR - 15.0.4382.1 and 2022 GDR - 16.0.4131.2.

Amazon Network Firewall now supports GeoIP Filtering on ingress and egress Amazon Virtual Private Cloud (VPC) traffic. This new feature makes it easy for customers to block traffic coming from or going to specific countries and meet compliance requirements. Previously, maintaining compliance with regulations was time-consuming because you have to maintain a list of IP addresses associated with specific countries and update your firewall rules regularly. GeoIP Filtering saves time and reduces operational complexity by enabling you to filter traffic on Amazon Network Firewall using the country name.

Today, we announce new updates to the Amazon CloudFormation IaC (Infrastructure as Code) Generator. This update includes a summary of all scanned resources, presented to you before proceeding to create or update your template. This enhancement helps you easily navigate through your list of scanned resources and proceed with template creation with a better understand of what’s included in your account.

Amazon S3 now includes additional context in HTTP 403 Access Denied errors for requests made to resources within the same Amazon Web Services account. This new context includes the type of policy that denied access, the reason for denial, and information on the Amazon IAM user or role that requested access to the resource. This context helps you to troubleshoot access issues, identify the root cause of access denied errors, and fix incorrect access controls by updating the relevant policies. This additional context is also available in Amazon CloudTrail logs.

Amazon S3 adds support for conditional writes that can check for the existence of an object before creating it. This capability can help you more easily prevent applications from overwriting any existing objects when uploading data. You can perform conditional writes using PutObject or CompleteMultipartUpload API requests.

Amazon S3 has completed a change so unauthorized requests that customers did not initiate are free of charge. With this change, bucket owners will never incur request or bandwidth charges for requests that return an HTTP 403 (Access Denied) error response if initiated from outside their individual Amazon Web Services account or Amazon Organization. To see the full list of error codes that are free of charge, visit Billing for Amazon S3 error responses. This billing change requires no changes to customer applications and applies to all S3 buckets.

Amazon MQ now provides support for RabbitMQ version 3.13 and Quorum queues on RabbitMQ 3.13. RabbitMQ version 3.13 includes several fixes and performance improvements to the previous versions of RabbitMQ supported by Amazon MQ. Starting from RabbitMQ 3.13, Amazon MQ will manage patch version upgrades for your brokers. All brokers on version 3.13 will be automatically upgraded to the latest compatible and secure patch version in your scheduled maintenance window.

Amazon Elastic Container Services (Amazon ECS) now improves container resiliency by giving you the ability to define a flexible container restart policy for restarting individual containers locally, without requiring a full task relaunch. With local container restarts, Amazon ECS can recover your containers from unexpected failures within a few seconds, enhancing your overall task stability by avoiding unnecessary task relaunches.

Today, we are introducing new capabilities for Amazon EC2 On-Demand Capacity Reservations which enable you to split your Capacity Reservations, move capacity between Capacity Reservations, and modify your Capacity Reservation’s instance eligibility attribute. On-Demand Capacity Reservations help you to reserve compute capacity for your workloads in a specific Availability Zone for any duration. When your workload requirements change, these new features provide you the flexibility to resize and reconfigure your reservations.

You can now use Amazon CloudWatch cross-account cross-region dashboards in Amazon Web Services China Regions. Cross-account cross-region dashboards enable you to create high level operational dashboards, with one click drill downs into more specific dashboards in different Amazon Web Services accounts, without having to log in and out of different accounts or switch Amazon Web Services Regions. The ability to visualize, aggregate, and summarize performance and operational data across accounts and Regions helps reduce mean time to resolution.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.39. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community and Amazon RDS. Learn more about the enhancements in RDS for MySQL 8.0.39 in the Amazon RDS user guide.

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions 16.4, 15.8, 14.13, 13.16, and 12.20. This release of RDS for PostgreSQL also includes updates for PostgreSQL extensions such as pgvector 0.7.3, hypopg 1.4.1, and others.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the July 2024 Release Update (RU) for Oracle Database versions 19c and 21c in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Web Services Analytics services, including Amazon QuickSight, Amazon Redshift, Amazon EMR, Amazon Lake Formation, and Amazon S3 via S3 Access Grants, now use trusted identity propagation with Amazon IAM Identity Center to manage and audit access to data and resources based on user identity. This new capability passes identity information between connected business intelligence and data analytics applications. Administrators define access to their service based on a common set of users and groups in the customer’s chosen identity provider (IdP). Auditors can track users’ access across services in Amazon CloudTrail. Analytics users benefit from an improved single sign-on experience when accessing data.

Today Amazon WorkSpaces and WorkSpaces Core are announcing the general availability of Amazon-provided licenses for Microsoft Visual Studio 2022 on WorkSpaces. Following this launch, WorkSpaces administrators can provide comprehensive Integrated Development Environment (IDE) for .NET and C++ developers on Windows powered WorkSpaces.

Today, we are introducing new Amazon CloudWatch(CW) dimensions for Amazon EC2 On-Demand Capacity Reservations(ODCR). The existing CW metrics for On-Demand Capacity Reservations can now be grouped using the following new dimensions: Availability Zone, Instance Match Criteria, Instance Type, Platform, Tenancy, or across all Capacity Reservations. You can group the metrics by any of these dimensions, within selected region.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.8, 10.6.18, 10.5.25, and 10.4.34. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.37. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community and Amazon RDS.

Amazon Relational Database Service (RDS) for MySQL announces Amazon RDS Extended Support minor version 5.7.44-RDS.20240529. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of MySQL.

Today, we’re introducing Valkey General Language Independent Driver for the Enterprise (GLIDE), an open source permissively licensed (Apache 2.0 license) Valkey client library. Valkey is an open source permissively licensed software under the Berkeley Software Distribution (BSD) that provides a high-performance key-value data store that supports a variety of workloads such as caching, session stores, leaderboards, and message queues. Valkey GLIDE is one of the official client libraries for Valkey; it supports all Valkey commands, and the GitHub repository is under the valkey.io project. GLIDE supports Valkey 7.2 and Redis open source 6.2, 7.0, and 7.2, and will continue to support future releases of Valkey. Application programmers can use GLIDE to safely and reliably connect their applications to services that are Valkey- and Redis OSS-compatible.

Amazon EC2 customers in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD can now hibernate C6g, C6gn, C6gd, C7g, M6g, M7g, R6g, and R6gd instances that are based on Amazon Graviton processors. Hibernation helps lower costs and achieve faster startup times by enabling customers to pause and resume their running instances at scale.  

Today, we announce advanced targeting capabilities for Amazon AppConfig feature flags. Customers can set up multiple values within flag data, and target those values to fine-grained and high-cardinality user segments. A common use-case for feature flag targets include allow lists, where a customer can specify user IDs or customer tiers, and only enable a new or premium feature for those segments. Another use-case is to split traffic to 15% of your user-base, and experiment with a user experience optimization for a limited cohort of users before rolling the feature out to all users.

Amazon MQ now supports ActiveMQ minor version 5.18, which introduces several improvements and fixes compared to the previous version of ActiveMQ supported by Amazon MQ. These enhancements include initial support for the JMS 2.0 simplified APIs, such as JMSContext, JMSProducer, and JMSConsumer, as well as the implementation of methods for XA transactions. Starting from ActiveMQ 5.18, Amazon MQ will manage patch version upgrades for your brokers. All brokers on ActiveMQ version 5.18 will be automatically upgraded to the next compatible and secure patch version in your scheduled maintenance window.

Amazon Step Functions now supports the use of Customer Managed Keys with Amazon Key Management Service (KMS) to encrypt Step Functions State Machine and Activity resources. This new capability enables you to encrypt your workflow definitions and execution data using your own encryption keys.

Starting today, Amazon Aurora MySQL 3.07 (with MySQL 8.0 compatibility) will support MySQL 8.0.36. In addition to security enhancements and bug fixes in MySQL 8.0.36, Amazon Aurora MySQL 3.07 includes several fixes and general improvements. For more details, refer to the Aurora MySQL 3 and MySQL 8.0.36.

Amazon Identity and Access Management (IAM) now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With IAM, you can specify who or what can access services and resources in Amazon Web Services by creating and managing resources such as IAM roles and policies. You can now establish a private connection between your virtual private cloud (VPC) and IAM to manage IAM resources, helping you meet your compliance and regulatory requirements to limit public internet connectivity.

Amazon Cost Categories has added a new dimension “Billing Entity” to its rules. You can now use eight types of dimensions: “Linked Account”, “Charge Type”, “Service”, "Usage Type", “Cost Allocation Tags”, “Region”, “Billing Entity” and other “Cost Category” while creating cost categories rules.

Amazon RDS for SQL Server now supports password policies for SQL Server logins in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon DocumentDB (with MongoDB compatibility) now supports change streams on reader instances.

A new minor version of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports the latest minor version of SQL Server 2019 across the Express, Web, Standard, and Enterprise editions. The new minor version includes SQL Server 2019 CU27 - 15.0.4375.4.

Amazon RDS (Relational Database Service) Performance Insights now provides support for Amazon PrivateLink and Internet Protocol Version 6 (IPv6). Customers can now access Performance Insights API/CLI privately, without going through the public Internet. Additionally, Performance Insights includes support for IPv6 connectivity and for a dual stack configuration (IPv4 and IPv6). 

You can now create Apache Airflow version 2.9 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.9 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Amazon Lambda announces advanced logging controls that enable you to natively capture logs in JSON structured format, adjust log levels, and select the Amazon CloudWatch log group for your Lambda functions.

Amazon Elastic Container Services (Amazon ECS) now makes it easier to troubleshoot task launch failures with enhanced stopped task error messages. When your Amazon ECS task fails to launch, you see the stopped task error messages in the Amazon Web Services Management Console or in the ECS DescribeTasks API response. With today’s launch, Amazon ECS stopped task error messages are now more specific and actionable. 

Amazon Cloud Control API now allows customers to use Internet Protocol version 6 (IPv6) addresses for their new and existing domains. Customers moving to IPv6 can simplify their network stack by running their Amazon Cloud Control API domains on a network that supports both IPv4 and IPv6.

Today, Amazon Identity and Access Management (IAM) is announcing improvements that simplify how customers manage OpenID Connect (OIDC) identity providers (IdPs) in their Amazon Web Services accounts. These improvements include increased availability when handling federated user logins through existing IdPs and a streamlined process for provisioning new OIDC IdPs.

Vector search for Amazon MemoryDB, an in-memory database with multi-AZ durability, is now generally available. This capability helps you to store, index, retrieve, and search vectors. Amazon MemoryDB delivers the fastest vector search performance at the highest recall rates among popular vector databases on Amazon Web Services Cloud. Vector search for MemoryDB supports storing millions of vectors with single-digit millisecond query and update latencies at the highest levels of throughput with >99% recall. You can generate vector embeddings using AI/ML services, such as Amazon SageMaker, and store them within MemoryDB.

Amazon Lake Formation announces new features in Amazon Web Services China Regions. Starting today, customers can start using the following features; Apache Hive Metastore Federation for Amazon Glue Data Catalog, Cross Region resource links, Amazon Lake Formation Hybrid access mode for Amazon Glue Data Catalog, Amazon Lake Formation Read-Only Administrator role, Amazon Lake Formation Tag and Tag Policy Delegation, and Amazon Lake Formation integration with Amazon IAM Identity Center.

Amazon OpenSearch Service has added support for AI powered Natural Language Query Generation in OpenSearch Dashboards Log Explorer. With Natural Language Query Generation, you can accelerate analysis by asking log exploration questions in plain English, which are then automatically translated to the relevant Piped Processing Language (PPL) queries and executed to fetch the requested data.

Amazon EventBridge Schema Registry now supports Amazon PrivateLink, allowing you to access the registry from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With today’s launch, you can leverage EventBridge Schema Registry features from a private subnet without the need to deploy an internet gateway, configure firewall rules, or set up proxy servers.

If you are using Amazon Route 53 as your public, authoritative DNS, you will now have the capability to easily log DNS queries received by Amazon Route 53 through integration with CloudWatch logs in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. This capability makes it easier to debug issues, conduct security audits, and run business analytics. With near real-time log delivery, customers can react quickly to events, and the power of CloudWatch logs makes it easy to search, export, or archive your query logs. 

Amazon Simple Queue Service introduces two new Amazon CloudWatch metrics to improve the usage visibility of FIFO queues. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Amazon Elastic Container Registry (Amazon ECR) now emits Amazon EventBridge events when customers successfully replicate images using ECR’s replication capability. Amazon EventBridge is a serverless service that makes it easy for customers to connect their applications using events generated from variety of sources.

Amazon EventBridge announces a new console dashboard providing you with a centralized view of your EventBridge resources, metrics, and quotas. The dashboard leverages CloudWatch metrics, allowing you to monitor account level metrics such as PutEvents, Matched Events, and Invocations for Buses, Concurrency and Throttles for Pipes, and Invocations and Errors for ScheduledGroups. Additionally, the dashboard allows you to view your default and applied quotas and navigate to the Service Quotas page to request increases, enabling you to respond quickly to changes in usage.

We are excited to announce that we now support cross-subnet communication between Elastic Fabric Adapter (EFA) interfaces for Amazon EC2 instances within the same Availability Zone (AZ). This enhancement makes it possible to communicate with Amazon EC2 instances across subnets while benefiting from the low latency and high throughput provided by EFA. EFA is a network device that you can attach to your Amazon EC2 instance to accelerate High Performance Computing (HPC) and Machine Learning (ML) applications.

You can now upgrade your Amazon Managed Streaming for Apache Kafka (Amazon MSK) provisioned clusters running on X-86 based M5 or T3 instances and replace them with Amazon Graviton3-based M7G instances with a single click of a button. In-place upgrades allows you to seamlessly switch over your existing provisioned clusters to M7G instance type for better price performance, while continuing to serve reads and writes for your connecting client applications.

Amazon Aurora now provides additional granular monitoring information during upgrades for enhanced observability. Customers can use the additional granularity shared in Amazon Aurora Events to stay informed and better manage their database upgrades.

Amazon Private Certificate Authority (Amazon Private CA) is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Amazon Private CA is a managed, highly-available, cloud certificate authority (CA) with private keys secured in hardware security modules (HSMs) that are managed by Amazon Web Services. By using Amazon Private CA, you can reduce the operational costs and complexity of using public key infrastructure (PKI) at scale across industries and use cases including financial services, automotive, manufacturing, healthcare, electronics, technology, energy, and smart home.

Amazon EventBridge Pipes now supports Amazon PrivateLink, allowing you to access Pipes from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With today’s launch, you can leverage EventBridge Pipes features from a private subnet without the need to deploy an internet gateway, configure firewall rules, or set up proxy servers.

Amazon Managed Service for Apache Flink now supports Apache Flink 1.19. This version includes new capabilities in the SQL API, such as setting parallelism for sources, state TTL configuration, and session window support. Flink 1.19 also includes improvements to the async profiler, Python 3.11 support, improved metrics for two-phase commit sinks, and more. You can use in-place version upgrades for Apache Flink to adopt the Apache Flink 1.19 runtime for a simple and faster upgrade to your existing application.

Amazon ElastiCache now supports Graviton3-based M7g and R7g node families. ElastiCache Graviton3 nodes deliver improved price-performance compared to Graviton2. As an example, when running ElastiCache for Redis on an R7g.4xlarge node, you can achieve up to 28% increased throughput (read and write operations per second) and up to 21% improved P99 latency, compared to running on R6g.4xlarge. In addition, these nodes deliver up to 25% higher networking bandwidth. 

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with two readable standbys now supports export of snapshot data to an Amazon S3 bucket.. Amazon RDS Multi-AZ deployments with two readable standbys is ideal when your workloads require lower write latency and more read capacity. In addition, this deployment option supports minor version upgrades and system maintenance updates with typically less than one second of downtime when using Amazon RDS Proxy or any one of the open-source Amazon Advanced JDBC Driver, PgBouncer, or ProxySQL.

Amazon VPC IP Address Manager (IPAM) makes it easier for you to plan, track, and monitor IP addresses for your Amazon Web Services workloads. With IPAM's automated workflows, network administrators can more efficiently manage IP addresses.

Starting today, Amazon Elastic Kubernetes Service (EKS) provides the flexibility to create Kubernetes clusters without the default networking add-ons, enabling you to easily install open source or third party alternative add-ons or self-manage default networking add-ons using any Kubernetes lifecycle management tool. Cluster creation flexibility for networking add-ons is available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Managed Service for Apache Flink introduces the system-rollback feature and two new operations APIs. You can now opt-in to the system-rollback feature to automatically revert your application to the previous running application version when an application update, Flink version upgrade, or scaling action runs into code or configuration errors. You can use the new ListApplicationOperations and DescribeApplicationOperation APIs for visibility into all operations that were performed on your application, including details about when an operation was initiated, its current status, and success or failure so that you can take follow-up action.

Amazon Glue now offers 13 new built-in transforms: Flag duplicates in column, Format Phone Number, Format case, Fill with mode, Flag duplicate rows, Remove duplicates, Month name, Is even, Cryptographic Hash, Decrypt, Encrypt, Int to IP and IP to int. Amazon Glue is a serverless data integration service that makes it easy for analytics users to discover, prepare, move, and integrate data from multiple sources. With these new transform, ETL developers can quickly build more sophisticated data pipelines.

Amazon Lambda now allows Lambda functions to access resources in dual-stack VPC (outbound connections) over IPv6, at no additional cost. With this launch, and Lambda’s support for public IPv6 endpoints (inbound connections), Lambda enables you to scale your application without being constrained by the limited number of IPv4 addresses in your VPC, and to reduce costs by minimizing the need for translation mechanisms.

June 10, 2024 - Amazon DocumentDB (with MongoDB compatibility) now supports database authentication with Amazon Identity and Access Management (IAM) users and roles ARNs. Users and applications connecting to an Amazon DocumentDB cluster to read, write, update, or delete data can now use an Amazon IAM identity to authenticate connection requests. These users and applications can use the same Amazon IAM user or role when connecting to different Amazon DocumentDB clusters and to other Amazon Web Services products.

Today, we announce general availability of Amazon Glue Usage Profiles, a new cost control capability that allows admins to set preventatives controls and limits over resources consumed by their Glue jobs and Notebook sessions. With Amazon Glue Usage Profiles, admins can create different cost profiles for different classes of users. Each profile is a unique set of parameters that can be assigned to different types of users. For example, a cost profile for data engineer working on production pipeline could have unrestricted number of workers whereas the cost profile for a test user could have a restricted number of workers.

Amazon OpenSearch Service now supports JSON Web Token (JWT) that enables you to authenticate and authorize users without having to provide any credentials or use internal user database. JWT support also, makes it easy for customers to integrate with identity provider of their choice and isolate tenants in a multi-tenant application.

The Elliptic Curve Diffie-Hellman (ECDH) key agreement enables two parties to establish a shared secret over a public channel. With this new feature, you can take another party’s public key and your own elliptic-curve KMS key that’s inside Amazon Key Management Service (KMS) to derive a shared secret within the government-approved hardware security modules (HSMs). This shared secret can then be used to derive a symmetric key to encrypt and decrypt data between the two parties using a symmetric encryption algorithm within your application.

Amazon CloudWatch Logs is excited to announce support for creating account-level subscription filters using the put-account-policy API. This new capability enables you to deliver real-time log events that are ingested into Amazon CloudWatch Logs to an Amazon Kinesis Data Stream, Amazon Kinesis Data Firehose, or Amazon Lambda for custom processing, analysis, or delivery to other destinations using a single account level subscription filter.

Amazon MWAA is a managed service for Apache Airflow that lets you use the same familiar Apache Airflow platform as you do today to orchestrate your workflows and enjoy improved scalability, availability, and security without the operational burden of having to manage the underlying infrastructure. Amazon MWAA now adds the ability to customize the redirection URL that MWAA’s SSO uses after authenticating the user against their IAM credentials. This allows customers that use private web servers with ALBs, custom DNS entries, or proxies to point users to the correct web address while maintaining the simplicity of MWAA’s IAM integration.

We have launched the NICE DCV Access Console, a new web-based solution for administrators and end users to more easily manage their remote desktop sessions. NICE DCV is a high-performance remote display protocol that allows users to securely connect to remote desktops from any device. Customers can now efficiently deploy an out-of-the-box solution that centralizes their NICE DCV session management.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports the latest minor version of SQL Server 2022 across the Express, Web, Standard, and Enterprise editions. The new minor version include SQL Server 2022 CU13 - 16.0.4125.3.

Amazon Lambda now supports runtime management controls in the Amazon Web Services China (Beijing) Region, Operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, Operated by NWCD. The operational simplicity of automatic runtime updates is one of the features customers most like about Lambda. This release provides customers running critical production workloads with more visibility and control over when runtime updates are applied to their functions.

Amazon ElastiCache Serverless now supports the ability to automatically backup and restore your Memcached data. You can now create a snapshot of your serverless Memcached cache and use it to restore the cache or seed data into a new serverless cache, enhancing data resilience and recovery. 

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.7 for new and existing clusters. Apache Kafka version 3.7 includes several bug fixes and new features that improve performance. Key improvements include latency improvements resulting from leader discovery optimizations during leadership changes, as well as log segment flush optimization options. For more details and a complete list of improvements and bug fixes, see the Apache Kafka release notes for version 3.7.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports KRaft mode (Apache Kafka Raft) in Apache Kafka version 3.7. The Apache Kafka community developed KRaft to replace Apache ZooKeeper for metadata management in Apache Kafka clusters. In KRaft mode, cluster metadata is propagated within a group of Kafka controllers, which are part of the Kafka cluster, versus across ZooKeeper nodes. On Amazon MSK, like with ZooKeeper nodes, KRaft controllers are included at no additional cost to you, and require no additional setup or management.

Amazon Glue now provides example jobs for visual ETL and notebooks, a data-preview-focused layout, and a simpler UI with fewer clicks. Additionally, Glue Studio now natively supports the Snowflake, Redshift and OpenSearch connectors. Glue Studio offers a visual interface to author, run, and monitor Glue ETL jobs. These improvements make it faster to work with and easier to learn.

Today, Amazon IoT Device Management announced the launch of a new connectivity metrics dashboard, enabling customers to easily identify connectivity patterns and configure operational alarms for their device fleet through a unified view. Amazon IoT Device Management is a fully managed cloud service that helps you register, organize, monitor, and remotely manage Internet of Things (IoT) devices at scale. With this launch, you can now select and view a range of connectivity metrics sourced from Amazon IoT Core and Amazon IoT Device Management on a single page.

Amazon Elastic Container Service (Amazon ECS) and Amazon Fargate now allow you to use customer managed keys in Amazon Key Management Service (KMS) to encrypt data stored in Fargate task ephemeral storage. Ephemeral storage for tasks running on Fargate platform version 1.4.0 or higher is encrypted with Amazon Web Services owned keys by default. This feature allows you to add a self-managed security layer which can help you meet compliance requirements.

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor version 11.22-RDS.20240509. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of PostgreSQL.

Amazon Data Firehose (Firehose) now supports integration with Amazon Secrets Manager (Secrets Manager) to configure secrets such as database credentials or keys to connect to streaming destinations such as Amazon Redshift, Snowflake, Splunk, and HTTP endpoints.

Today, we are making it easier for Amazon Organizations customers to centrally manage the primary account email address of member accounts across their Organization using the Amazon Command Line Interface (CLI), Amazon Software Development Kit (SDK), and Amazon Organizations console. We previously released the Accounts SDK that enables Organizations customers to centrally and programmatically manage both primary and alternate contact information. In order to manage the primary email address of member accounts, customers were forced to contact Customer Support. Starting today, customers can use the same SDK to update the primary email address of a member account from either the Organization’s management account (or delegated administrator), allowing them to manage their Organization’s primary addresses at scale. Additionally, this API will require customers to verify the new primary email address using One Time Password (OTP) ensuring customers are using accurate email addresses for their member accounts. The primary email address won’t change to the new email address until it has been verified.

Starting today, Amazon Lambda functions now scale up to 12x faster than before in response to unpredictable traffic in the Amazon Web Services China regions. With this improvement each function can scale up to a rate of 1,000 concurrent executions every 10 seconds, up to your account concurrency limit.

Amazon Transfer Family support for the Applicability Statement (AS2) protocol has increased its default message size limit from 50 MB to 1 GB and throughput limit from 30 to 100 message transfers per second. You will find these increased limits reflected on the Amazon Transfer Family page within the Service Quotas console. These increased limits enable you to reliably connect with trading partners that frequently transmit sizable batches of AS2 messages. 

Amazon Database Migration Service (Amazon DMS) now supports Babelfish for Aurora PostgreSQL as a source by enhancing its existing PostgreSQL endpoint to handle Babelfish data types. This support is available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and the Amazon Web Services China (Ningxia) region, operated by NWCD. Babelfish is a feature of Amazon Aurora PostgreSQL-Compatible Edition that enables Aurora to understand commands from applications written for Microsoft SQL Server.

Amazon DataSync now lets you enable and disable task schedules. Using this new feature, you can temporarily disable scheduled executions of your task to accommodate events such as maintenance on your storage systems. Once the event is complete, you can enable your task schedule to resume execution of your task at the next scheduled interval.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports removing brokers from MSK provisioned clusters. Administrators can optimize costs of their Amazon MSK clusters by reducing broker count to meet the changing needs of their streaming workloads, while maintaining cluster performance, availability, and data durability.

Amazon Lambda now supports starting from a specific timestamp when using Amazon Managed Streaming for Apache Kafka (MSK) or Self-Managed Kafka as an event source. Previously, Kafka event source mappings could only have starting positions of trim horizon or latest. Now with starting from a timestamp, you can start processing messages at a precise point in time. This is useful for situations like Disaster Recovery, where you need a new consumer to quickly start processing where you previously left off.

Amazon Lambda now supports failed-event destinations for Amazon Managed Streaming for Apache Kafka (MSK) and self-managed Apache Kafka event source mappings. Failed-event destinations enable your Lambda function to continue processing events on a topic even when it returns an error.

Amazon Lambda now improves the responsiveness for configuring Event Source Mappings (ESMs) and Amazon EventBridge Pipes with event sources such as self-managed Apache Kafka, Amazon Managed Streaming for Apache Kafka (MSK), Amazon DocumentDB, and Amazon MQ. This enhancement allows changes—such as updating, disabling, or deleting ESMs or Pipes—to take effect within 90 seconds, an improvement from the previous time frame of up to 15 minutes.

Amazon Lambda now allows Lambda functions to authenticate with multi-VPC enabled Amazon Managed Streaming for Apache Kafka (Amazon MSK) clusters over Amazon Identity and Access Management (IAM). This allows you to easily establish IAM secured cross-account connectivity between Lambda functions and Amazon MSK clusters.

Today, Amazon Backup announces support for EBS Snapshots Archive, allowing customers to automatically move EBS Snapshots created by Amazon Backup to EBS Snapshots Archive. EBS Snapshots Archive is low-cost, long-term storage tier meant for your rarely-accessed snapshots that do not need frequent or fast retrieval, allowing you to save up to 75% on storage cost. 

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL versions 16.2, 15.6, 14.11, 13.14, and 12.18. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. These releases also offer improved performance through faster COPY operations (for PostgreSQL 16.2), Query Plan Management enhancements for queries with aggregate operations, and optimizations for further reducing the logical replication lag.

Amazon Database Migration Service (DMS) now supports Amazon S3 parquet files as a source. Using Amazon DMS, you can now migrate data in parquet format from S3 to any supported Amazon DMS target provided the S3 Parquet data was generated by DMS. Amazon DMS supports both full load and Change Data Capture (CDC) migration modes for S3 Parquet source endpoints using Amazon DMS console, Amazon CLI, or Amazon SDKs in all Amazon Web Services regions where DMS is available, including the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Database Migration Service Serverless (DMSS) now supports improved Oracle to Amazon Redshift Full Load throughput. Using Amazon DMSS, you can now migrate data from Oracle databases to Amazon Redshift at much higher throughput rates, ranging from two to ten times faster than previously possible with Amazon DMSS. For information about Amazon DMSS Full Load, see Full Load.

Amazon Route 53 Application Recovery Controller now offers zonal autoshift, a feature that you can enable to safely and automatically shift your application’s traffic away from an Availability Zone (AZ) when Amazon identifies a potential failure affecting that AZ. For failures such as power and networking outages, zonal autoshift improves the availability of your application by shifting your application traffic away from an affected AZ to healthy AZs.

Amazon Managed Workflows for Apache Airflow (MWAA) now supports the Airflow REST API along with web server auto scaling, allowing customers to programmatically monitor and manage their Apache Airflow environments at scale.

Amazon S3 will make a change so unauthorized requests that customers did not initiate are free of charge. With this change, bucket owners will never incur request or bandwidth charges for requests that return an HTTP 403 (Access Denied) error response if initiated from outside their individual Amazon Web Services account or Amazon Organization. To see the full list of error codes that are free of charge, visit Billing for Amazon S3 error responses. This billing change requires no changes to customer applications and applies to all S3 buckets.

Amazon EventBridge event matching on Event Bus now supports an array of values when combining anything-but filtering (matching anything except for the value) with prefix filtering (matching against characters at the beginning of a value), suffix filtering (matching against characters at the end of a value), and wildcard filtering (matching against patterns in string values). For example, you can now match against values that do not end with specific file types such as .png and .jpg. Or you can match against values that do not have a specific filename path such as */lib/* and */bin/*. 

Amazon CloudWatch extended the duration during which customers can access their alarm history. Now, customers can view state changes for up to 30 days prior.

The Amazon Network Firewall service quota limit for stateful rules is now adjustable. The default limit is still 30,000 stateful rules per firewall policy in a Region, but you can request an increase up to 50,000. This firewall rule limit increase helps customers strengthen their security posture on Amazon Web Services Cloud and mitigate emerging threats more effectively.

Amazon CloudFormation launches a new parameter called DeletionMode for the DeleteStack API. This new parameter allows customers to safely delete their CloudFormation stacks that are in DELETE_FAILED state.

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available. With Amazon Redshift Serverless, all users—including data analysts, developers, and data scientists—can now use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity without making any changes to your existing analytics and business intelligence applications.

Amazon Aurora MySQL zero-ETL integration with Amazon Redshift is now supported in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. 

Amazon MQ now provides support for RabbitMQ version 3.12.13, which includes several fixes and performance improvements to the previous versions of RabbitMQ supported by Amazon MQ. Starting from RabbitMQ 3.12.13, all Classic Queues on Amazon MQ brokers are upgraded to Classic Queues version 2 (CQv2) automatically. All queues on RabbitMQ 3.12 now behave similarly to lazy queues. These changes provide a significant improvement to throughput and lower memory usage for most use cases.

Starting today, Amazon Redshift is making snapshot isolation as the default for provisioned clusters when you create a new cluster or restore a cluster from a snapshot. The database isolation level will remain unchanged on your existing provisioned clusters unless explicitly changed. You can switch to serializable at any time if it is your preferred database isolation level. This change makes the product experience consistent for both Provisioned and Serverless which already uses snapshot isolation as default.

Today, Amazon Kinesis Data Streams announces support for logging data plane APIs using Amazon CloudTrail, enabling customers to have greater visibility into data stream activity in their account for best practices in security and operational troubleshooting. Amazon Kinesis Data Streams is a serverless data streaming service that enables customers to capture, process, and store data streams at any scale. 

Amazon RDS (Relational Database Service) Performance Insights now provides fine-grained access control for the performance data that it collects. Customers can create new IAM policies or update existing IAM policies to enforce fine-grained access to Performance Insights data through the console or APIs. 

Today, Amazon Identity and Access Management (IAM) is announcing support for signing Amazon Web Services API requests with the Sigv4A encryption algorithm using session tokens issued in the Amazon Web Services China (Beijing) Region, operated by Sinnet. Cryptographically signing an Amazon Web Services request with the Sigv4A algorithm allows you to send the request to service endpoints in any of the China regions.

You can now run OpenSearch version 2.13 in Amazon OpenSearch Service. With OpenSearch 2.13, we have made several improvements to search performance and resiliency, OpenSearch Dashboards and added new features to help you build AI-powered applications. We have introduced concurrent segment search that allows users to query index segments in parallel at the shard level. This offers improved latency for long-running requests that contain aggregations or large ranges. You can now index quantized vectors with FAISS-engine-based k-NN indexes, with potential to reduce memory footprint by as much as 50 percent with minimal impact to accuracy and latency. I/O-based admission control proactively monitors and prevents I/O usage breaches to further improve the resilience of the cluster. 

Amazon Relational Database Service (Amazon RDS) for PostgreSQL or PostgreSQL now supports the latest minor versions PostgreSQL 16.3, 15.7, 14.12, 13.15, and 12.19. This release of RDS for PostgreSQL also includes support for pgvector 0.7.0, which lets you index vectors larger than 2,000 dimensions and adds support for scalar and binary quantization through expression indexes.

Amazon EventBridge announces support for Amazon Key Management Service (KMS) Customer Managed Keys (CMK) on Event Buses. This capability allows you to encrypt your events using your own keys instead of an Amazon Web Services owned key (which is used by default). With support for CMK, you now have more fine grained security control over your events, satisfying your company’s security requirements and governance policies. 

Amazon Elastic Container Registry (ECR) now supports the ability to replicate images in private ECR repositories across accounts and/or regions, between the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

You can now turn on Amazon Virtual Private Cloud (VPC) Flow Logs for your Amazon Elastic Container Service (ECS) workloads running on both Amazon EC2 and Amazon Fargate to export detailed telemetry information for all network flows.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2024 Release Update (RU) for Oracle Database versions 19c and 21c in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.

Amazon Elastic Block Store (EBS) direct APIs now support Virtual Private Cloud (VPC) endpoint policies in all Amazon Web Services Regions. This newly supported capability provides a granular access control to your EBS resources for improved data protection and security posture. Previously, customers have full access to EBS direct APIs through an interface VPC endpoint, powered by Amazon PrivateLink. With this newly supported capability, customers can attach a VPC endpoint policy to an interface VPC endpoint and manage which EBS direct APIs actions (GetSnapshotBlock, ListSnapshotBlocks, ListChangedBlocks, PutSnapshotBlock) may be performed, the principal that may perform the actions, and the resources on which the actions may be performed.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports version 23.2 of Oracle Application Express (APEX) for 19c and 21c versions of Oracle Database in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Using APEX, developers can build applications entirely within their web browser.

Amazon RDS (Relational Database Service) Performance Insights now supports the Oracle Multitenant configuration on Amazon RDS for Oracle. An Amazon RDS for Oracle Multitenant instance operates as a container database (CDB) hosting one or more pluggable databases (PDBs). 

Starting today, customers can use Amazon Firewall Manager to create policies for Amazon Network Firewall and Amazon Virtual Private Cloud (VPC) network access control lists (ACLs) in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, enabling customers to centrally deploy and manage essential network protections for their VPCs across accounts in their Amazon Organization.

Today we are updating the minimum supported TLS version to 1.2 on Amazon ElastiCache compatible with open-source Redis version 6 and above, across all Amazon Web Services regions. This update is designed to help you meet security, compliance, and regulatory requirements.

Starting today, Amazon Cost Anomaly Detection will detect cost anomalies up to 30% faster. Customers can now identify and respond to spending changes more quickly. Cost Anomaly Detection leverages advanced machine learning to identify unusual changes in spend, enabling customers to quickly take action to avoid unexpected costs. 

Amazon EventBridge Pipes now supports event delivery through Amazon PrivateLink, allowing you to send events from an event source located in an Amazon Virtual Private Cloud (VPC) to a Pipes target without traversing the public internet. With today’s launch, you can use Pipes to poll from Amazon Managed Streaming for Apache Kafka (MSK), self-managed Kafka, and Amazon MQ sources residing in a private subnet without the need to deploy a NAT gateway, configure firewall rules, or set up proxy servers.

Today, Amazon Athena announced federated query pass-through, a new feature that allows entire queries to be executed directly on the underlying data source. Federated query pass-through allows you to take advantage of the unique functions, query language, and performance capabilities of different data sources, and can result in faster query execution and less data processed by Athena.

Starting today, you can check when your Amazon Machine Images (AMIs) were last used to launch EC2 instances by simply describing your AMIs, enabling you to efficiently filter and track your active AMIs.

Today, Amazon MemoryDB launched two new condition keys for IAM policies that enable you to control user authentication and encryption in transit settings during cluster creation. The new condition keys let you create IAM policies or Service Control Policies (SCPs) to enhance security and meet compliance requirements.

Today, Amazon EKS introduces EKS Pod Identity, a new feature that simplifies how cluster administrators can configure Kubernetes applications to obtain Amazon Identity and Access Management (IAM) permissions. These permissions can now be easily configured with fewer steps directly through EKS console, APIs, and CLI. EKS Pod Identity makes it easy to use an IAM role across multiple clusters and simplifies policy management by enabling the reuse of permission policies across IAM roles.

Two new minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2019 and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include SQL Server 2019 CU26 - 15.0.4365.2 and 2022 CU12 GDR - 16.0.4120.1.

Users of Amazon IAM Identity Center can now take advantage of a streamlined Amazon Web Services access portal and time-saving shortcut links to navigate directly to destinations in the Amazon Web Services Management Console in accordance with their permissions.

Amazon Relational Database Service (Amazon RDS) now supports C6gd database (DB) instances in RDS for PostgreSQL and MySQL Multi-AZ deployments with two readable standbys. These compute optimized DB instances are available in sizes ranging from 1 vCPU up to 64 vCPU (medium up to 16xlarge sizes). C6gd DB instances are the only instances that support medium size instances for Multi-AZ deployments with two readable standbys. C6gd is an ideal candidate for cost optimizing dev/test workloads intended for Multi-AZ deployments with readable standby instances.

Amazon Web Services Marketplace is a curated digital catalog helping customers find, subscribe to, deploy, and manage the software and service from independent software vendors (ISV). On May 06, Amazon Web Services Marketplace China launched new features which enable third party ISVs and partners as Seller of Record to complete self-service seller registration, to directly list and sell their software and service via Amazon Web Services Marketplace China Management Portal. NWCD as the operator of Amazon Web Services Marketplace China facilitates the transactions by providing online billing and payments support for buyers, partnering with the third party payment and collection platform LianlianPay. Furthermore, seller private offer is generally available in Amazon Web Services Marketplace China to support sellers to create and manage the negotiated offers for specific buyers. Apart from hourly (Pay-As-You-Go) and Annual pricing models, AMI (Amazon Machine Image) and SaaS contract pricing has also been unlocked for Amazon Web Services Marketplace China buyers and sellers to transact with more easiness and flexibility.

Amazon CloudWatch is excited to announce a resource filtering capability for cross-account observability, providing customers with the flexibility to share a subset of their logs or metrics across multiple Amazon Web Services accounts using configurable filters.

Starting today, you can prevent Amazon Machine Images (AMIs) from accidental deregistration by marking them as protected. A protected AMI cannot be deregistered until you explicitly disable deregistration protection.

Customers can now create and manage default policies across their entire organization or organizational unit (OU) with Amazon CloudFormation StackSets. Default policies work in conjunction with customers’ existing backup mechanisms to only create EBS-backed AMIs and EBS Snapshots of instances and volumes without recent backups. This helps administrators ensure that all member accounts have comprehensive backup protection without creating duplicate backups or increasing management overhead and cost. This feature is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.

Trusted Language Extensions for PostgreSQL (pg_tle) now supports client authentication hook that lets you run additional checks over the existing authentication process, allowing you to enhance the security posture of your databases. A hook is an internal callback mechanism available to developers for extending PostgreSQL's core functionality. By using hooks, developers can implement their own functions or procedures for use during various database operations.

Amazon DynamoDB on-demand is a serverless, pay-per-request billing option that can serve millions of requests per second without capacity planning. Previously, the on-demand request rate was only limited by the table-level throughput quota (40K read request units and 40K write request units, by default), which uniformly applied to all tables within the account, and could not be customized or tailored for diverse workloads and differing requirements.  Since on-demand mode scales instantly to accommodate varying traffic patterns, a piece of hastily written or unoptimized code could rapidly scale up and consume resources, making it difficult to keep costs and usage bounded.

Amazon OpenSearch Service now supports Amazon Route 53 alias records for defining custom domain endpoints. Alias records provide better flexibility when configuring routing to Amazon Web Services resources. For more information about Route 53 alias records, please see documentation.

Amazon CloudWatch Container Insights with Enhanced Observability for EKS now auto-discovers critical health metrics from your Amazon Web Services accelerators Trainium and Inferentia, and Amazon Web Services high performance network adapters (Elastic Fabric Adapters) as well as NVIDIA GPUs. You can visualize these out-of-the-box metrics in curated dashboards to help you monitor accelerated infrastructure and optimize your AI workloads for operational excellence.

You can now restore your Amazon Managed Service for Apache Flink application to the previous running version and application state from the most recent, successful snapshot. This feature will work when your application is running and is most useful when you want to immediately rollback to the previous application version to mitigate downstream impact of an application update. Prior to this launch, you could only rollback applications that were in updating or autoscaling statuses.

Starting today, the Amazon Elastic Compute Cloud (Amazon EC2) G5 instances powered by NVIDIA A10G Tensor Core GPUs are now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. G5 instances can be used for a wide range of graphics intensive and machine learning use cases. 

Amazon VPC announces a network interface setting to dynamically remove and add an auto assigned public IPv4 address on EC2 instances. With this capability, customers that no longer require an auto assigned public IPv4 address on their EC2 instance can remove the public IPv4 address, and if needed attach back a new public IPv4 address, by modifying the public IP setting on the network interface. To retain the same IPv4 address when removing or adding to an EC2 instance, use Elastic IP address. Before today, once a public IPv4 address was auto assigned to EC2 instance it was not possible to remove it. It remained on the network interface for the lifetime of the EC2 instance.

Application Load Balancer (ALB) now supports Mutual TLS enabling you to authenticate clients while establishing TLS encrypted connections.

Amazon Inspector now offers continuous monitoring of your Amazon EC2 instances for software vulnerabilities without installing an agent or additional software in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD. Currently, Inspector leverages the widely deployed Amazon Systems Manager (SSM) agent to assess your EC2 instances for third-party software vulnerabilities. With this expansion, Inspector now offers two scan modes for EC2 scanning, hybrid scan mode and agent-based scan mode. In hybrid scan mode, Inspector relies on SSM agents to collect information from instances to perform vulnerability assessments and automatically switches to agentless scanning for instances that do not have SSM agents installed or configured. For agentless scanning, Inspector takes snapshots of EBS volumes to collect software application inventory from the instances to perform vulnerability assessments. For agent-based scan mode, Inspector only scans instances that have a SSM agent installed and configured. New customers enabling EC2 scanning are configured in hybrid mode by default, while existing customers can migrate to hybrid mode by simply visiting the EC2 settings page within the Inspector console. Once enabled, Inspector automatically discovers all your EC2 instances and starts evaluating them for software vulnerabilities.

NoSQL Workbench for Amazon DynamoDB is a client-side application that provides data modeling and query development features to help you design, create, and query DynamoDB tables. We regularly improve our user interface based on customer feedback to provide even better user experience. Today, we are pleased to announce quality enhancements to our operation builder to help customers better navigate, run operations, and browse their DynamoDB tables.

Amazon CloudFormation enhances ChangeSets to provide a richer preview of the actions that CloudFormation will take in a deployment. This launch improves your ability to assess whether a deployment will cause unintended changes to running resources, including changes that trigger outages. Additionally, this launch makes it easier to manage references to Amazon Secrets Manager and Amazon Systems Manager Parameter Store (SSM) within templates.

Amazon EventBridge API destinations now supports custom HTTP content-type header values for API destination connection resources and when using API destinations as a target in EventBridge Event Buses or Pipes.

Amazon Elastic Container Service (Amazon ECS) now lets you add automated safeguards for rolling updates of Amazon ECS services in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. You can now monitor and automatically react to changes during an Amazon ECS rolling update by using Amazon CloudWatch alarms. This allows you to more easily automate discovery and remediation for failed deployments and minimize the impact of a bad change.

Amazon Managed Workflows for Apache Airflow (MWAA) now offers larger environment sizes, giving customers of the managed service the ability to define a greater number of workflows in each Apache Airflow environment, supporting more complex tasks that can utilize increased resources.

Amazon RDS (Relational Database Service) Performance Insights now collects the query execution plans of the resource-intensive SQL queries in Amazon RDS for SQL Server, and stores them over time. It helps you identify if a change in the query execution plan is the cause of performance degradation or stalled query. 

Amazon Transfer Family customers can now use SFTP connectors to list files stored in remote SFTP servers, enabling visibility into the contents of directories in remote SFTP file systems and transfer files when file names are not known in advance.

Amazon OpenSearch Service adds support for Hebrew and HanLP (Chinese NLP) language analyzer plugins. These are now available as optional plugins that you can associate with your Amazon OpenSearch Service clusters.

Amazon CloudFormation StackSets launches ListStackSetAutoDeploymentTargets API that allows customers to list existing target Organizational Units (OUs) and Regions for a given stack set. With this launch, customers get visibility into the list of Regions where StackSets will auto-deploy stacks when a new account is added to target OUs. Customers no longer have to log into individual accounts under a given OU to get this information. Customers instead can get this Region combination for all target OUs of a given stack set in a single preview.

Amazon WorkSpaces now offers APIs to link your Amazon Web Services accounts, within the same region, so that these accounts can use the same underlying dedicated infrastructure. We enable you to run your Bring Your Own License (BYOL) WorkSpaces on infrastructure that is dedicated to you in the Amazon Web Services Cloud, and these new APIs make it easier for the you to use your dedicated infrastructure efficiently. 

Amazon DynamoDB now supports Amazon PrivateLink in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With Amazon PrivateLink, you can simplify private network connectivity between virtual private clouds (VPCs), DynamoDB, and your on-premises data centers using interface VPC endpoints and private IP addresses. Amazon PrivateLink is compatible with Amazon Direct Connect to facilitate private network connectivity, and helps you eliminate the need to use public IP addresses, configure firewall rules, or configure an internet gateway to access DynamoDB from your on-premises data centers. As a result, Amazon PrivateLink helps you maintain compliance for your DynamoDB workloads over the private network.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports the latest minor version of SQL Server 2022 across the Express, Web, Standard, and Enterprise editions. The new minor version include SQL Server 2022 CU12 - 16.0.4115.5.

Amazon Aurora Global Database for PostgreSQL now lets you forward write requests from a secondary to a primary Region, simplifying writing from multiple Regions and making it easier to develop globally distributed applications. With this launch, write forwarding is now available on both Aurora Global Database for MySQL and PostgreSQL.

Amazon Transfer Family now provides you with the option to import and use a trading partner’s public, self-signed TLS certificate for sending Applicability Statement 2 (AS2) messages to their server over HTTPS. Additionally, you can now choose to encrypt messages sent to your partner’s server using the 3DES cipher. By default, AS2 connectors will encrypt messages with the AES128 cipher unless you select 3DES for purposes of backwards compatibility with your partner’s existing AS2 implementation. These capabilities add to Amazon Transfer Family’s existing list of AS2 interoperability features and enable you to reliably connect with your trading partners that require these specific security configurations.

Amazon Key Management Service (Amazon KMS), the managed service for creating and managing cryptographic keys, today announced new flexibility, visibility, and pricing improvements for KMS automatic key rotation. You can now customize the frequency period for rotation (between 90 days to 7 years (2560 days)) as well as rotate any key on-demand to invoke immediate rotation of any customer managed KMS key. Lastly, we’ve added new console and API options to list all previous key rotations for any KMS key that has been rotated.

Amazon RDS for SQL Server now supports Single-AZ Read-Replicas using Always On Availability Groups (AOAG) for Enterprise Edition in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This provides customer the option to create up to 15 number of read replicas from a Single-AZ Enterprise Edition source instance in the same region, or cross regions.

Today, Amazon EC2 announced the general availability of Unified Extensible Firmware Interface (UEFI) Secure Boot.

Amazon CloudWatch Container Insights now offers observability for Windows containers running on Amazon Elastic Kubernetes Service (EKS), and helps customers collect, aggregate, and summarize metrics and logs from their containerized Windows applications. With this support, customers can monitor utilization of resources such as CPU, memory, disk, and network, as well as get enhanced observability such as container level EKS performance metrics, Kube-state metrics and EKS control plane metrics for Windows containers. CloudWatch also provides diagnostic information, such as container restart failures, for faster problem isolation and troubleshooting for Windows containers running on EKS. 

Amazon DataSync introduces manifests, a new feature that enables you to provide a definitive list of source files or objects to be transferred by your DataSync tasks. Using manifests, you can decrease your task execution times by specifying only the files or objects that need to be processed by your task.

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with two readable standbys now supports database security certificate rotation. Security certificates provide an extra layer of security by validating the connection made to Amazon RDS database instances and clusters.

Amazon OpenSearch Service is now extending the ability to update the number of data nodes without requiring a blue/green deployment for clusters without dedicated cluster manager (master) nodes. This change will allow you to make node count changes faster. Clusters with dedicated cluster manager nodes already supported updating the data node count without a blue/green deployment.

Amazon OpenSearch Service introduces OR1, the OpenSearch Optimized Instance family, that delivers up to 30% price-performance improvement over existing instances in internal benchmarks and uses Amazon S3 to provide 11 9s of durability. The new OR1 instances are best suited for indexing-heavy workloads, and offers better indexing performance compared to the existing memory optimized instances available on OpenSearch Service. 

Amazon CloudWatch now supports using Amazon CloudFormation to manage tags when you create, update, or delete alarms.

Amazon Transfer Family’s predefined security policies for SFTP connectors gives you the flexibility to control cryptographic algorithms used for establishing connections with remote SFTP servers, enabling compatibility with a wider range of remote server configurations.

We are excited to announce Amazon CloudWatch Logs Infrequent Access (Logs IA), a new log class for cost-effectively consolidating all your logs natively on Amazon Web Services Cloud, helping to improve visibility into your overall application health. CloudWatch Logs IA offers a subset of CloudWatch Logs' capabilities including managed ingestion, cross-account log analytics, and encryption with a lower per GB ingestion price making Logs IA ideal for ad-hoc querying and after-the-fact forensic analysis on infrequently accessed logs.

Amazon Config lets you assess, audit, and evaluate how your resources are configured, and helps you determine your overall compliance against the configurations specified in your internal guidelines. You can use Amazon Config aggregators to collect your configuration and compliance data from the below sources, and aggregate that data into a single account and Amazon Web Services Region to get a centralized view of your resource inventory and compliance.

Effective April 1, 2024, we have extended per-second billing to Red Hat Enterprise Linux (RHEL)-based instances running on Amazon EC2. Customers will pay for RHEL-based instances that are launched in On-Demand and Reserved form in one second increments, with a minimum of one minute.

Amazon CloudWatch Container Insights with Enhanced Observability for EKS now auto-discovers critical health and performance metrics from your NVIDIA GPUs and delivers them in automatic dashboards to enable faster problem isolation and troubleshooting in your AI/ML workload observability. Container Insights with Enhanced Observability delivers you out-of-the-box trends and patterns on your infrastructure health and removes the overhead of manual dashboard and alarm set-ups saving you time and effort.

Amazon EventBridge now supports a streamlined integration with Confluent Cloud in the EventBridge console, making it easier to configure Confluent Cloud as a source in Pipes and as a target with API destinations. Leveraging this new capability, you can increase developer agility by spending less time writing integration code and build features faster that combine Confluent Cloud with Amazon Web Services services.

Amazon DynamoDB now supports resource-based policies in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Resource-based policies help you simplify access control to your DynamoDB resources. With resource-based policies, you can specify the Identity and Access Management (IAM) principals that have access to a resource and what actions they can perform on it. You can attach a resource-based policy to a DynamoDB table or a stream. The resource-based policy that you attach to a table can include access permissions to its indexes. With resource-based policies, you can also simplify cross-account access control for sharing resources with IAM principals of different Amazon Web Services accounts.

We now allow customers to enable Cost Allocation Tags retroactively for up to 12 months. As long as customers have added tags to specific resources in the past, customers can activate (or deactivate) cost allocation tags today and apply cost allocation tags to historical usage for these resources for up to 12 months.

Starting today, Amazon EC2 C6gn instances powered by Amazon Graviton2 server processors and featuring up to 100Gbps network bandwidth are available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

You can now set all new Amazon EC2 instance launches in your account to use Instance Metadata Service Version 2 (IMDSv2) by default. IMDSv2 is an enhancement that requires session-oriented requests to add defense in depth against unauthorized metadata access. To set your instances to IMDSv2-only, you previously had to use the IMDS Amazon Machine Image (AMI) property, set Instance Metadata Options during instance launch, or update instances after launch using the ModifyInstanceMetadataOptions API.

Amazon DynamoDB Import from S3 now supports up to 50,000 Amazon S3 objects in a single bulk import. With the increased default service quota for import from S3, customers who need to bulk import a large number of Amazon S3 objects, can now run a single import to ingest up to 50,000 S3 objects, removing the need to consolidate S3 objects prior to running a bulk import.

Customers in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, can now hibernate their Amazon EC2 Spot instances on 20 additional instance families. With this expanded coverage, customers can now enjoy the benefits of hibernate on the supported instance families, regardless of whether their purchase option is On Demand, Spot, or Savings Plan.

Amazon Lambda functions powered by Amazon Graviton2 processors are now available in Amazon Web Services (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Using an Arm-based processor architecture designed by Amazon, Lambda functions running on Amazon Graviton2 deliver up to 19 percent better performance at 20 percent lower cost for a variety of Serverless workloads, such as web and mobile backends, data and media processing. With lower latency and better performance, these functions are ideal for mission critical Serverless applications.

Amazon Managed Service for Apache Flink now supports Apache Flink 1.18. This new version includes improvements to connectors including Amazon OpenSearch, Amazon DynamoDB, MongoDB, and improved watermark alignment and query performance. You can use in-place version upgrades for Apache Flink to adopt the Apache Flink 1.18 runtime for a simple and faster upgrade to your existing application.

According to the “Notice of the State Taxation Administration Beijing Municipal on Implementing the Pilot Program of fully digitalized electronic invoices” and “Notice of the State Taxation Administration Ningxia Hui Autonomous Region on Implementing the Pilot Program of Fully Digitalized Electronic Invoices”, starting from November 1, 2023, certain taxpayers in the Beijing Municipality and the Ningxia Hui Autonomous Region will join the piloting of fully digitalized electronic invoices (“Digitalized E-Fapiao”).

You can now upgrade existing applications to new Apache Flink versions in Amazon Managed Service for Apache Flink using in-place Apache Flink version upgrades. With in-place Apache Flink version upgrades you retain application traceability across Apache Flink versions including snapshots, logs, metrics, tags, Flink configurations, resource limit increases, VPCs, and more. You can upgrade to new Apache Flink versions by selecting the application, the snapshot you want to restore from, and the new Apache Flink runtime you require using the Amazon CLI, SDK, CloudFormation, or Amazon Web Services Management Console.

In addition to security enhancements, bug fixes, and improved data replication performance with binary log (binlog), this release includes new generative AI capabilities and improved cross-region resiliency for Aurora Global Database. This release also contains improvements that bolster the cross-region resiliency of Aurora Global Database, enabling secondary regions to seamlessly serve read requests if the primary writer were to become unavailable during an instance restart. For more details, refer to the Aurora MySQL 3 and MySQL 8.0.34 release notes.

Today, we launched new IAM Identity Center APIs to manage user assignments to supported Amazon Web Services and cloud applications. Together with the previously available APIs, this release allows customers to automate the management of account and application access, streamlining how customers scale with IAM Identity Center.

Amazon S3 Access Grants map identities in directories such as Active Directory, or Amazon Identity and Access Management (IAM) principals, to datasets in S3. This helps you manage data permissions at scale by automatically granting S3 access to end-users based on their corporate identity. Additionally, S3 Access Grants log end-user identity and the application used to access S3 data in Amazon CloudTrail. This helps to provide a detailed audit history down to the end-user identity for all access to the data in your S3 buckets. With just a few clicks in the console or a few lines of code using the Amazon SDK, you can map S3 permissions to users and groups in an existing corporate directory, or to an IAM user or role. Then, as end-users are added and removed from directory groups, S3 permissions are automatically updated based on the end-user’s group membership. S3 Access Grants integrates with Amazon EMR and open source Spark so that you can enforce granular, job-based S3 access for a large fleet of pipeline jobs.

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor version 11.22-RDS.20240418. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of PostgreSQL.

Amazon Data Firehose now supports specifying a file extension for objects delivered to S3 destinations. 

Today, we are excited to announce that DynamoDB local for Amazon DynamoDB upgrades to Jetty 12 and JDK 17. We recommend that you run the latest version of DynamoDB local to utilize the most recent updates and features of DynamoDB local for your development and testing use cases.

Amazon EC2 now enables you to tag your Amazon Machine Images (AMIs) when you create an AMI from an EBS snapshot, or when you copy an AMI within the same or different Amazon Web Services Regions. Tags are simple key-value pairs that you can assign to Amazon Web Services resources such as AMIs to easily organize, search, and identify resources, create cost allocation reports, and control access.

Amazon CloudFormation improves its deployment experience to validate customer stack operation upfront for invalid resource property errors. Customers get instant feedback that their stack operation will fail due to issues such as spelling errors in their template. With this launch, customers fail fast and minimize the steps required for a successful stack operation.

Amazon Data Firehose now lets you select your preferred time zone for timestamps in S3 object key prefixes. 

You can now obtain an aggregated view of the performance and health of your WorkSpaces instances using the Amazon CloudWatch Automatic dashboard. This enables WorkSpaces administrators to quickly start monitoring WorkSpaces metrics and identify issues and their potential causes. You can also use CloudWatch Automatic dashboard as a starting point and create your own custom dashboards to meet your monitoring needs.

On March 7^th, Amazon VPC added a new feature to its DHCP option set called IPv6 preferred lease time setting, which allows customers to adjust the frequency of IPv6 lease renewals. This feature gives customers the option to increase the preferred lease time of IPv6 address assignments on Amazon EC2 Nitro instances to minimize the number of IPv6 lease renewals and prevent possible renewal failures. This setting applies to both dualstack and IPv6-only Amazon EC2 Nitro instances in the VPC.

Two new minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2019 and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include SQL Server 2019 CU25 - 15.0.4355.3 and 2022 CU11 - 16.0.4105.2.

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple to run applications using open-source analytics frameworks such as Apache Spark and Hive without configuring, managing, or scaling clusters. 

Customers can now create Amazon FSx for OpenZFS file systems in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD.

New console experience for Amazon Cost Categories

Amazon CloudWatch announces support for streaming of daily metrics on CloudWatch Metric Streams. With Metric Streams, you can create a continuous, near real-time stream of metrics to a destination of your choice. You can use Metric Streams to send metrics to your data lake on Amazon Web Services Cloud, such as Amazon Simple Storage Service (Amazon S3), or Amazon Web Services Partner solutions including Datadog, New Relic, Splunk, Dynatrace and Sumo Logic. This new capability provides additional metrics for streaming, adding daily metrics with timestamps up to two days old.

Amazon X-Ray announces support for logging eight new data and one new management event APIs in Amazon CloudTrail, enabling you to have full visibility across every Amazon X-Ray API action in your Amazon Web Services account. This helps you maintain operational and security best practices. Amazon X-Ray provides developers with end-to-end tracing capabilities to help debug distributed applications and quickly identify performance bottlenecks. 

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with two readable standbys now supports next-generation General Purpose gp3 storage volumes. Amazon RDS gp3 volumes give you the flexibility to provision storage performance independently of storage capacity, paying only for the resources you need. Amazon RDS Multi-AZ deployments with two readable standbys provides up to 2x faster transaction commit latency, automated failovers typically under 35 seconds, and two readable standby instances.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.7, 10.6.17, 10.5.24, and 10.4.33. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.

Today, we are announcing general availability of Amazon Linux 2023 (AL2023) on Amazon Elastic Kubernetes Service (EKS). AL2023 is the next generation of Amazon Linux from Amazon Web Services and is designed to provide a secure, stable, high-performance environment to develop and run your cloud applications. EKS customers can enjoy the benefits of AL2023 by using the standard AL2023-based EKS optimized Amazon Machine Image (AMI) with Managed Node Groups, self-managed nodes, and Karpenter.

Amazon Elastic Container Service (ECS) announces Group Managed Service Account (gMSA) support for Linux containers running on Amazon Fargate. With this support, applications running on Amazon Fargate can easily authenticate with Microsoft Active Directory (AD) to access network shared resources. 

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL major version 16 (16.1). PostgreSQL 16 adds support for SQL/JSON constructors and identity functions, more query types that can use parallelism, and the ‘pg_stat_io’ view that provides statistics on I/O usage. Please refer to the PostgreSQL community announcement for more details about the release. This release includes new features for Babelfish for Amazon Aurora PostgreSQL version 4.0 such as support for the Full Text Search CONTAINS function. Please refer to Amazon Aurora PostgreSQL updates for more information.

Amazon IoT Core, a managed cloud service that lets customers securely connect Internet of Things (IoT) devices to the cloud and manage them at scale, announces support for Online Certificate Status Protocol (OCSP) Stapling for TLS X.509 Server Certificates using Custom Domains and Configurable Endpoints. The new feature enables customers to add an additional layer of verification to their custom domain's server certificate validity, for example to respond to server certificate revocations more quickly. By including the OCSP response with the certificate during the TLS handshake, it eliminates the need for a separate request from the client to an OCSP server, resulting in faster connection establishment.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2024 Release Update (RU) for Oracle Database versions 19c and 21c.

Today, we launched the new Console Home, a customizable home page for the Amazon Web Services Management Console that offers customers a single place to access the information they need. The new Console Home provides customers the capability to customize their Console Home experience by adding, removing, resizing, and rearranging widgets.

Amazon Step Functions announces open workflow metrics for Step Functions workflows in Amazon CloudWatch to track and monitor the number of open workflow executions in real-time through Amazon CloudWatch. Amazon Step Functions is a visual workflow service capable of orchestrating virtually any Amazon Web Services service to automate business processes and data processing workloads.

Amazon DocumentDB (with MongoDB compatibility) announces support for partial indexes. With partial indexes, developers can create an index on a subset of documents that meet a specific filter criterion. By indexing a subset of data, partial indexes can reduce query times and improve performance during index creation and management.

Amazon Network Firewall is now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, enabling customers to deploy essential network protections for all their Amazon Virtual Private Clouds (VPCs).

Amazon Relational Database Service (Amazon RDS) for PostgreSQL now supports the latest minor versions PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18. This release of RDS for PostgreSQL also includes support for pgvector 0.6.0, which adds performance improvements for building Hierarchical Navigable Small Worlds (HNSW) indexes including parallelism and in-memory builds. We recommend that you upgrade to the latest minor versions to fix the known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes, performance improvements, and new functionality added by the PostgreSQL community.

Amazon Transfer Family now enables conditional workflows by publishing SFTP, FTPS, and FTP file transfer events to Amazon EventBridge in near real-time. You can use these event notifications to easily build and automate file transfer and file-processing workflows. Based on your need for flexibility and low code automation, Transfer Family support for EventBridge as well as existing managed workflows allows you to automate your Managed File Transfer (MFT) workloads.

NoSQL Workbench for Amazon DynamoDB, a client-side application that helps you visualize and build scalable, high-performance data models, now supports clone tables between development environments. With this feature, you can quickly develop and test your application with your DynamoDB tables across multiple environments. 

Today, we are announcing the general availability of Amazon Neptune I/O-Optimized, a new configuration for Amazon Neptune Database that provides improved price performance and predictable pricing for customers with I/O-intensive applications. With Neptune I/O-Optimized, there are zero charges for read and write I/O operations—you only pay for your database instances and storage usage, making it easy to predict your database spend up front. Neptune I/O-Optimized offers up to 40% cost savings for I/O-intensive applications where I/O charges exceed 25% of the total Neptune database spend.

Amazon Managed Streaming for Apache Kafka (Amazon MSK)’s  Identity and Access Management feature now supports all programming languages. Administrators can simplify and standardize access control to Kafka resources using Amazon Identity and Access Management (IAM). Amazon MSK’s IAM support is based on SASL/OUATHBEARER, an open standard for authorization and authentication.

Today, Amazon is renaming Amazon Kinesis Data Firehose to Amazon Data Firehose. Amazon Data Firehose provides an easy way to reliably capture, transform, and optimally deliver data streams into Amazon S3 based data lakes, Amazon Redshift, Amazon OpenSearch Service, Splunk, and other 3rd party destinations for analytics and archival. The name change is effective in the Amazon Web Services Management Console, documentations, and service web pages. There are no other changes, including to service endpoints, APIs, the Amazon Command Line Interface (Amazon CLI), the Amazon Identity and Access Management (IAM) access policies, Amazon CloudWatch metrics, or the Amazon Billing console dashboard. Your existing applications will continue to work as they did previously.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor version 8.0.36. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community.

You can now create Apache Airflow version 2.8 environments on Amazon Managed Workflows for Apache Airflow (MWAA). Apache Airflow 2.8 is the latest minor release of the popular open-source tool that helps customers author, schedule, and monitor workflows.

Amazon Simple Queue Service (SQS) launches an open-source Extended Client Library for Python that allows you to send and receive large message payloads. Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Parameter Store, a capability of Amazon Systems Manager, now allows you to share advanced parameters with other Amazon Web Services accounts, enabling you to centrally manage your configuration data. Parameter Store provides secure, hierarchical storage for configuration data and secrets. You can store data such as Amazon Machine Image (AMI) IDs, database strings, network configurations, and passwords as parameter values. You can reference parameters in code and through several integrations such as Systems Manager Documents and Amazon EC2. Today, many customers have workloads in multiple Amazon Web Services accounts that need shared, synchronized configuration data. Now, you can maintain a single source of truth for configuration data by sharing advanced parameters with other accounts, removing the need to duplicate and synchronize data across accounts.

Amazon Transfer Family now enables conditional workflows by publishing events to Amazon EventBridge for all successful and failed inbound and outbound Applicability Statement 2 (AS2) transfer operations. These events can be used to easily automate processing of your AS2 messages and message disposition notifications (MDN), or to send real-time status notifications to you and your trading partners.

API Gateway (APIGW) now supports version 1.3 of the Transport layer Security (TLS) protocol on its Regional REST, HTTP and WebSocket endpoints. TLS 1.3 on APIGW works by offloading encryption and decryption of TLS traffic from your application servers to API gateway.

Amazon CloudWatch Synthetics announces release of Synthetics NodeJS Runtime versions - syn-nodejs-puppeteer-6.2, and syn-nodejs-puppeteer-5.2 - and Python Runtime version - syn-python-selenium-2.1. This release brings updated Chromium dependency libs for forward compatibility with the OS and adds new Lambda Ephemeral Storage usage metric in customer account. To learn more, see release notes.

Amazon OpenSearch Service now lets you update cluster volume size, volume type, IOPS and throughput without requiring a blue/green deployment. This makes it easier for you to make changes to your EBS settings without having to plan upfront for a blue/green deployment.

Network Load Balancer (NLB) now supports RSA 3072-bit certificates, and Elliptic Curve Digital Signature Algorithm (ECDSA) 256, 384 and 521-bit certificates via Amazon Certificate Manager (ACM). This launch enables customers use stronger encryption during transit to meet their compliance goals.

Amazon CloudFormation announces a new feature called IaC generator that makes it easy to generate CloudFormation templates and CDK apps for existing cloud resources that are not managed with CloudFormation. You can use the generated templates and apps to import resources into CloudFormation and CDK or replicate resources in a new account. With this launch, you can onboard workloads to Infrastructure as Code (IaC) in minutes. You can then leverage the IaC benefits of automation, scalability, and replicability for these workloads.

SFTP connectors will now publish file transfer event notifications in Amazon EventBridge. With this enhancement, you can orchestrate your file transfer and file-processing workflows in Amazon Web Services Cloud using Amazon EventBridge, or any workflow orchestration service of your choice that integrates with these events.

Trusted Language Extensions for PostgreSQL (pg_tle) now supports new crates for PL/Rust such as croaring-rs and num-bigint, enabling you to build more of your extensions on RDS for PostgreSQL. PL/Rust, a PostgreSQL trusted procedural language, lets users build high performance, memory safe user defined functions with the resource efficiency of compiled languages like C.

We are excited to announce that Amazon Fargate for Windows containers on Amazon ECS has reduced infrastructure pricing by up to 49%. Fargate simplifies the adoption of modern container technology for ECS customers by making it even easier to run their Windows containers on Amazon Web Services Cloud. With Fargate, customers no longer need to set up automatic scaling groups or manage host instances for their application.

Amazon Inspector is now available in the Amazon Web Services China (Beijing) region, operated by Sinnet, and Amazon Web Services China (Ningxia) region, operated by NWCD.

Amazon OpenSearch Service now provides improved visibility into the progress of domain updates. You can see granular status values representing different stages of an update, simplifying monitoring and automation of configuration changes.

Amazon DocumentDB (with MongoDB compatibility) now adds support for maintenance notifications to provide users visibility into scheduled maintenance activities on their Amazon DocumentDB clusters. Users can now receive near real time notifications of scheduled maintenance activities through health events in Amazon Health Dashboard (AHD) in Amazon Web Services console and through emails.

Amazon Elastic Container Services (Amazon ECS) launches support for configuring timeout for service-to-service communication with its networking capability called ECS Service Connect. This feature enables you to set custom timeouts for Amazon ECS services running with Service Connect, supporting applications serving long-running requests. Amazon ECS is a fully managed container orchestration service that makes it easier for you to deploy, manage, and scale containerized applications. Customers can use ECS Service Connect capability to easily configure service discovery, connectivity and traffic observability for services running in Amazon ECS. This helps build applications faster by letting you focus on the application code and not on your networking infrastructure.

Starting today, we are updating the Amazon Web Services China Region Free Tier for Amazon Elastic Compute Cloud, 12 month free, to include 750 hours of public IPv4 address usage per month. If you are an existing or new Amazon Web Services China Region Free Tier customer for Amazon EC2, you will get 750 hours public IPv4 address usage per month free when launching any EC2 instance with a public IPv4 address. 

Amazon Relational Database Service (Amazon RDS) for MySQL now supports multi-source replication, which allows you to configure multiple RDS for MySQL database instances as sources for a single RDS for MySQL target database instance. Multi-source replication on RDS for MySQL enables you to merge multiple shards into a single target, or consolidate data in one RDS for MySQL instance for analytics, or long-term backups.

Amazon Kinesis Data Streams now supports resource-based policies, so you can process data ingested into a stream in one account with an Amazon Lambda function in another account. Amazon Kinesis Data Streams is a serverless real-time data streaming service that can continuously capture gigabytes of data per second from hundreds of thousands of sources. Amazon Lambda is a serverless compute service that lets you run code without provisioning or managing servers. Together with Kinesis Data Streams and Lambda, you can build a completely serverless data streaming pipeline.

Starting today, customers can now access their Amazon Web Services Free Tier usage through the Amazon SDK, command line, and 3rd party tools at no cost. Using this API, customers can programmatically track free tier usage against monthly usage limits, which allows customers to understand when their free usage will transition to pay-as-you-go pricing each month. This helps avoid unintended charges by comparing forecasted usage to the free tier limit for each service throughout the month. The Amazon Web Services Free Tier allows customers to explore more than 100 products by offering free usage each month.

Amazon RDS for SQL Server now supports TempDB configuration replication for Multi-AZ database instances in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. With this new feature enabled, we will synchronize TempDB file configurations on the primary host, such as type, name, physical_name, size, max_size, growth, and is_percent_growth, with the secondary host in a Multi-AZ configuration.

Amazon VPC now supports idempotent creation of route tables and network ACLs, allowing you to safely retry creation without additional side effects. Idempotent creation of route tables and network ACLs is intended for customers that use network orchestration systems or automation scripts that create route tables and network ACLs as part of a workflow.

Starting today, EC2 Auto Scaling and EC2 Fleet customers who use attribute based instance type selection can define their Spot instances price protection limit as a percentage of an instances On-Demand price. With this new mechanism, customers have greater control over the instance types that are launched by EC2 Fleet or EC2 Auto Scaling, while also maximizing the benefit of Spot’s lower prices.

Today, we are excited to launch the general availability of Interactive Endpoints for Amazon EMR on EKS. With this launch, Amazon EMR on EKS customers will be able to run interactive workloads using an integrated development environment such as EMR Studio. For customers that require control on their execution environment, they will be able to use their self-hosted Jupyter notebooks as an another mechanism to run their interactive workloads via Interactive Endpoints.

Amazon QuickSight is a fast, scalable, and fully managed Business Intelligence service that lets you easily create and publish interactive dashboards across your organization. QuickSight dashboards can be authored on any modern web browser with no clients to install or manage; dashboards can be shared with 10s of 1000s of users without the need to provision or manage any infrastructure. QuickSight dashboards can also be seamlessly embedded into your applications, portals, and websites to provide rich, interactive analytics for end-users. QuickSight provides advanced ML-capabilities out-of-the-box, including 1-click forecasting, anomaly detection and customizable natural language narratives. QuickSight has a subscription-based, per user pricing model for dashboard authors. For dashboard consumption, QuickSight offers unique session-based pricing models which allow you to share insights with all of your users while only paying for usage; you can choose between per-user pricing or session capacity-based pricing that provides discounted per-session rates with annual commitments on session usage.  

Amazon MSK now automatically sends you alerts when you are at risk of exhausting your storage capacity. The alerts also provide recommendations on the steps to take to manage your storage. This feature makes it easier for you to identify and quickly resolve storage capacity issues before they become critical. Amazon MSK automatically sends these alerts to the Amazon MSK Console, Amazon Health Dashboard, Amazon EventBridge, and email contacts for your Amazon Web Services account. You can also easily configure Amazon EventBridge to deliver these alerts via Slack or to tools such as New Relic and Datadog.

According to the “Notice of the State Taxation Administration Beijing Municipal on Implementing the Pilot Program of fully digitalized electronic invoices” and “Notice of the State Taxation Administration Ningxia Hui Autonomous Region on Implementing the Pilot Program of Fully Digitalized Electronic Invoices”,starting from November 1, 2023, certain taxpayers in the Beijing Municipality and the Ningxia Hui Autonomous Region will join the piloting of fully digitalized electronic invoices (“Digitalized E-Fapiao”).

Amazon Step Functions expands its SDK integrations with support for over 1,500 new API actions from new and existing services such as Amazon Simple Queue Service, Amazon EC2, Amazon Relational Database Service, and Amazon Glue.

Today, Amazon EC2 Auto Scaling launches a new capability, instance maintenance policy, for customers to define whether instances are launched before or after existing instances are terminated during instance replacement. This controls how your group replaces instances for operations such as instance refresh, health checks, and rebalancing. From the console, you can choose "policy presets" or provide unique settings that help you optimize for availability or cost.

Amazon SageMaker Feature Store now supports the ability to provision read and write capacities for the online store. This capability is an alternative to on-demand billing mode and is designed to make it more cost-effective and provide more controls for workloads with predictable throughput requirements.

The Amazon Relational Database Service (Amazon RDS) Multi-AZ deployments with two readable standbys now supports minor version upgrades and system maintenance updates with typically less than one second of downtime when using Amazon RDS Proxy. This capability allows you to take advantage of the most recent performance improvements, bug fixes, and any new security fixes or patches from the latest minor versions of PostgreSQL and MySQL with minimal interruption to your application.

Today, Amazon Elastic Container Service (Amazon ECS) announced managed instance draining, a new capability that facilitates graceful shutdown of workloads deployed using Amazon ECS on Amazon Elastic Compute Cloud (Amazon EC2) instances by safely stopping and rescheduling workloads to other, non-terminating instances. This capability enables customers to simplify infrastructure maintenance workflows, such as rolling out a new Amazon Machine Image (AMI) version, without needing to build custom solutions to gracefully shutdown instances without disrupting their workloads.

Amazon Kinesis Data Firehose (Firehose) enables customers to capture, transform, and deliver data streams into Amazon S3, Redshift, OpenSearch, Splunk, and 10+ other destinations for analytics. With this new feature, customers can now use Firehose to deliver streams to their Splunk cluster configured with either an Application Load Balancer (ALB) or a Classic Load Balancer (CLB).

Amazon Transfer Family now provides static IP addresses for SFTP connectors, enabling connection with remote SFTP servers that are secured by IP allowlisting controls. With this enhancement, you can now reliably and seamlessly exchange files with external business partners that only accept inbound connections from known IP addresses.

Amazon Aurora PostgreSQL-Compatible Edition now supports the rds_extension database role which provides a cluster administrator the ability to delegate create, alter, or drop extension operations to lower privileged users. The cluster administrator can use the new rds.allowed_delegated_extensions DB parameter to limit which extensions a member of the rds_extension role can manage. To get started, take a look at our Using Amazon Aurora delegated extension support for PostgreSQL page.

Amazon Transfer Family now uses static IP addresses when sending messages to remote AS2 servers and when returning asynchronous message disposition notification (MDN) responses. This adds to Amazon Transfer Family’s existing support for static IPs when receiving AS2 messages with internet-facing, VPC-hosted AS2 endpoints.

Amazon Aurora PostgreSQL-Compatible Edition now supports the h3-pg extension, which provides an API to H3, an open-source hexagonal, hierarchical geospatial indexing system. With this extension, you can perform different kinds of spatial analysis over large datasets, including efficient indexing and lookups, modeling flow through a grid, and applying machine learning models over your geospatial data stored in Aurora PostgreSQL.

Amazon IoT TwinMaker is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet.

Amazon Aurora PostgreSQL-Compatible Edition now supports the HypoPG extension for creating hypothetical indexes, which lets you test the performance impact of an index on query plans before you build it.

Fleet Manager, a feature in Amazon Systems Manager (SSM) that helps IT Admins streamline and scale their remote server management processes, now enables a console-based management experience for Windows instances in the Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This feature provides customers a full graphical interface to setup secure connections to and manage Windows instances. You no longer need to install additional software, set up additional servers, or open direct inbound access to ports on the instance.

Starting today, you can enable Route 53 Resolver DNS Firewall to filter DNS traffic based on the query type (QTYPE) contained in the question section of the DNS query format.

A new minor version of Microsoft SQL Server is now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, offering performance and security fixes. Amazon RDS for SQL Server supports a minor version for Microsoft SQL Server 2019 on the Express, Web, Standard, and Enterprise Editions.

Amazon CloudWatch announces a comprehensive set of enhancements to the alarm and dashboard experience. It introduces out-of-the-box, best practice alarm recommendations for 23 Amazon Web Services services, streamlining your monitoring setup. You can easily view all metrics with recommended alarms using a convenient toggle. Creating alarms is simpler with pre-filled configuration in the alarm wizard or bulk downloading infrastructure-as-code templates for the recommended alarms.

Amazon ElastiCache for Memcached now supports Memcached version 1.6.22 when using the node-based deployment option. With this release, you can now design your own ElastiCache for Memcached cluster using Memcached version 1.6.22. ElastiCache Serverless for Memcached already supports Memcached version 1.6.22.

Following the announcement of updates to the PostgreSQL database by the open source community, we have updated Amazon Aurora PostgreSQL-Compatible Edition to support PostgreSQL 15.5, 14.10, 13.13, 12.17. These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific improvements. This release also contains new features and improvements such as group role authentication support using Amazon Directory Service for Microsoft Active Directory with the new pg_ad_mapping extension, and Babelfish for Aurora PostgreSQL version 3.4. Refer to the Aurora version policy to help you to decide how often to upgrade and how to plan your upgrade process. As a reminder, if you are running any version of Amazon Aurora. PostgreSQL 11, you must upgrade to a newer major version by February 29, 2024.

Amazon Graviton3-based M7g instances are now generally available for use with new provisioned Amazon Managed Streaming for Apache Kafka (MSK) clusters. MSK provisioned clusters running on M7g instances deliver up to 24% price/ performance improvement, up to 29% higher write and read throughput, and up to 27% reduction in CPU usage over comparable MSK clusters running on M5 instances. 

Amazon OpenSearch Service adds support for Transport Layer Security (TLS) version 1.3 amongst its transport security options for domain endpoint security. TLS 1.3 offers customers enhanced security and performance as compared to older TLS versions. In addition, we now support perfect forward secrecy, which provides additional safeguards against eavesdropping of encrypted data, through the use of a unique random session key. 

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 10.11.6, 10.6.16, 10.5.23, and 10.4.32. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.