2025

Starting today, you can enable Amazon Route 53 Profiles in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD, to define a standard DNS configuration, in the form of a Profile, that may include Route 53 private hosted zone (PHZ) associations, Route 53 Resolver rules, and Route 53 Resolver DNS Firewall rule groups, and apply this configuration to multiple VPCs in your account. Profiles can also be used to enforce DNS settings for your VPCs, with configurations for DNSSEC validations, Resolver reverse DNS lookups, and the DNS Firewall failure mode. You can share Profiles with Amazon Web Services accounts in your organization using Amazon Resource Access Manager (RAM). Route 53 Profiles simplifies the association of Route 53 resources and VPC-level settings for DNS across VPCs and Amazon Web Services accounts in a Region with a single configuration, minimizing the complexity of having to manage each resource association and setting per VPC.  

Amazon Aurora Serverless v2 now supports database capacity of up to 256 Aurora Capacity Units (ACUs). Aurora Serverless v2 measures capacity in ACUs where each ACU is a combination of approximately 2 gibibytes (GiB) of memory, corresponding CPU, and networking. You specify the capacity range and the database scales within this range to support your application’s needs.

Today, we announce Express brokers for Amazon Managed Streaming for Apache Kafka (Amazon MSK) are available in Amazon Web Services China Regions. Express brokers are a new broker type for Amazon MSK Provisioned designed to deliver up to 3x more throughput per broker, scale up to 20x faster, and reduce recovery time by 90% as compared to standard Apache Kafka brokers. Express brokers come preconfigured with Kafka best practices by default, support all Kafka APIs, and provide the same low-latency performance that Amazon MSK customers expect, so they can continue using existing client applications without any changes.

Today, a new Amazon Web Services Local Zone is available in Beijing, China (Beijing Local Zone), which is designed to help support the workloads related to intelligent automotive technology for car manufacturers and automotive companies. NavInfo, an intelligent automotive solutions provider, is collaborating with Amazon Web Services to offer the automotive solutions for processing the intelligent automotive related workloads in the Beijing Local Zone. The Beijing Local Zone offers services such as Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Block Store (Amazon EBS), Amazon Virtual Private Cloud (VPC), Amazon Simple Storage Service (S3), Amazon Direct Connect, Amazon Elastic Container Service (Amazon ECS), Amazon Elastic Kubernetes Service (Amazon EKS), and Amazon EMR. With the Beijing Local Zone, car manufacturers and automotive companies can develop and deploy a wide range of innovative intelligent automotive technology workloads by utilizing Amazon Web Services in China, and through the automotive solutions from NavInfo.

Amazon Elastic Block Store (EBS) now supports additional resource-level permissions for copying EBS snapshots . When moving your data across Regions, accounts, and Availability Zones, you can copy any snapshot accessible to you to another Region or account, including snapshots created by you or shared with you. With this launch, you have more granular controls to set resource-level permissions for the snapshot copy and selection of the source snapshot. This allows you to control the IAM identities that can copy EBS snapshot from source snapshots, and the conditions that they can use these source snapshots for the snapshot copy operation.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.9, which allows users to retain tiered data when disabling Tiered Storage at the topic level. Consumer applications can continue to read historical data from the remote log start offset (Rx) while maintaining continuous log offsets across both local and remote storage.
Along with this feature, Apache Kafka version 3.9 includes various bug fixes and improvements. For more details, please refer to the Apache Kafka release notes for version 3.9. 
 

Amazon CloudTrail adds support for new advanced event selectors for data events in Trails. Advanced event selectors give you control over which CloudTrail events to log thereby enhancing the efficiency and precision of your security, compliance, and operational investigations while helping reduce costs. With the new selectors, you can further fine tune your logging requirements for data events based on the following attributes:

Amazon MemoryDB clusters now support the IPv6 protocol, allowing clients to connect to MemoryDB clusters using IPv6. You can now configure your cluster to accept only IPv6 connections or to accept both IPv4 and IPv6 connections. This allows you to work to meet IPv6 compliance requirements and more efficiently integrate with existing IPv6-based applications.

Today, Amazon ElastiCache introduces the ability to perform vertical scaling on self-designed Memcached caches on ElastiCache. Amazon ElastiCache is a fully managed, Valkey-, Memcached- and Redis OSS-compatible service that delivers real-time, cost-optimized performance for modern applications with 99.99% availability. With this launch, you can now dynamically adjust the compute and memory resources of your ElastiCache for Memcached clusters, providing greater flexibility and scalability.

Amazon EventBridge announces support for Amazon Key Management Service (KMS) Customer Managed Keys (CMK) in API destinations connections. This enhancement enables you to encrypt your HTTPS endpoint authentication credentials managed by API destinations with your own keys instead of an Amazon Web Services China Regions owned key (which is used by default). With CMK support, you now have more granular security control over your authentication credentials used in API destinations, helping you meet your organization's security requirements and governance policies.

The Amazon EventBridge connector for Apache Kafka Connect is now generally available. This open-source connector streamlines event integration of Kafka environments with dozens of Amazon Web Services services and partner integrations without writing custom integration code or running multiple connectors for each target. The connector includes built-in support for Kafka schema registries, offloading large event payloads to Amazon S3, and IAM role-based authentication, and is available under the Apache 2.0 license in the Amazon Web Services GitHub organization.

Amazon Elastic Container Services (Amazon ECS) is introducing a new account setting , defaultLogDriverMode, allowing you to define whether tasks in your account use "blocking" or "non-blocking" log driver mode by default, when you do not specify or omit it in your applications’ Task Definitions.

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports new minor versions for SQL Server 2019 (CU32 - 15.0.4430.1) and SQL Server 2022 (CU18 - 16.0.4185.3) in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. These minor versions include performance improvements and bug fixes, and are available for SQL Server Express, Web, Standard, and Enterprise editions. Review the Microsoft release notes for CU32  and CU18  for details.

Amazon Elastic Beanstalk now enables customers to reference Amazon Systems Manager Parameter Store parameters and Amazon Secrets Manager secrets in environment variables. This new integration provides developers with a native method for accessing data from these services in their application.

Amazon Relational Database Service (RDS) for PostgreSQL announces Amazon RDS Extended Support minor version 11.22-rds.20250220 and 12.22-rds.20250220. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of PostgreSQL.  

Amazon Transfer Family web apps are now available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Starting today, we are making it easier for customers to understand their inter-availability zone (AZ) VPC Peering usage within the same Amazon Web Services Region by introducing a new usage type in their bill. These changes won’t affect customers’ charges and will help them easily understand their VPC Peering costs, enabling them to choose the right architecture based on cost, performance, and ease of management.

Today, we are excited to announce the general availability of Amazon Glue 5.0. With Amazon Glue 5.0, you get improved performance, enhanced security, support for Amazon Sagemaker Unified Studio and Sagemaker Lakehouse, and more. Amazon Glue 5.0 enables you to develop, run, and scale your data integration workloads and get insights faster.  

Amazon CloudTrail now supports VPC endpoint policies to control access to your CloudTrail resources. When you create a VPC endpoint for CloudTrail, you can attach an endpoint policy to define the CloudTrail actions that can be performed, the IAM user or role that can perform the actions, and the CloudTrail resources these actions can be performed on.

Amazon Data Lifecycle Manager now supports Amazon PrivateLink to connect directly to the Amazon Data Lifecycle Manager APIs in your virtual private cloud (VPC) instead of connecting over the internet.

Today, Amazon EMR on EKS announces support for Amazon EKS Pod Identity, simplifying the setup of IAM permissions required by EMR on EKS jobs to access other Amazon Web Services resources. With this launch, you can configure IAM permissions through a single API call, significantly reducing complexity and potential for errors. The new feature also allows you to leverage IAM roles across multiple clusters without the need to update IAM trust policies for use in new clusters, improving reusability and operational efficiency.

Amazon Relational Database Service (Amazon RDS) for SQL Server now supports linked servers to Teradata database in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. Linked server is a SQL Server feature that enables customers to read data and execute commands on remote database servers outside of the SQL Server instance. With this launch, customers can link their RDS for SQL Server instance to a Teradata database running on Amazon Web Services or on premises.

Amazon Transfer Family now enables customers to delete, rename, or move files and folders on remote SFTP servers using SFTP connectors. This enhancement allows you to easily manage your remote SFTP file systems and execute post-processing actions on the source files once they have been successfully transferred.

Amazon FSx for NetApp ONTAP, a service that provides fully managed shared storage built on NetApp’s popular ONTAP file system, now supports Autonomous Ransomware Protection (ARP). ARP is a NetApp ONTAP feature that proactively monitors your file system for unusual activity and automatically generates ONTAP snapshots when a potential attack is detected, helping you protect your business-critical data against a broader set of ransomware and malware attacks.

Amazon DynamoDB now supports percentile statistics for the SuccessfulRequestLatency Amazon CloudWatch metric. The percentile statistic enables you to understand the latency distribution of your successful requests to DynamoDB, complementing the existing average, minimum, and maximum statistics.  

Amazon API Gateway (APIGW) introduces dual-stack support for all endpoint types, custom domains and APIGW management APIs. You can now configure your REST, HTTP or WebSocket APIs as well as custom domains, to accept calls from IPv6 clients alongside the existing IPv4 support. You can also call APIGW management APIs from dual-stack clients.  

Amazon Relational Database Service (RDS) for PostgreSQL now supports modifying the ssl_ciphers parameter. SSL Ciphers (or cipher suites) are combinations of algorithms used to secure network connections between a client and server. They handle key exchange, authentication, encryption, and message integrity verification to ensure secure and confidential communication.

Amazon Relational Database Service (RDS) Proxy now supports version 1.3 of the Transport Layer Security (TLS) protocol for Proxy connections to Amazon Aurora PostgreSQL and RDS for PostgreSQL database instances. TLS 1.3 provides improved security through stronger cryptographic algorithms and simplified handshake process as compared to older TLS versions.  

We announce support for Amazon Redshift Serverless in Amazon Backup, making it easier for you to centrally manage data protection of your Amazon Redshift Serverless data warehouse. You can now use Amazon Backup to automate backup and restore of both Amazon Redshift Serverless and Amazon Redshift provisioned cluster snapshots, along with other Amazon Web Services services for compute, storage, and database.  

Amazon Resource Access Manager (Amazon RAM) customers can now use Internet Protocol version 6 (IPv6) addresses, via our new dual-stack endpoints to create and manage RAM resource shares in your accounts. The existing RAM endpoints supporting IPv4 will remain available for backwards compatibility. The new dual-stack domains are available either from the internet or from within an Amazon Virtual Private Cloud (VPC) using Amazon PrivateLink.  

Amazon Identity and Access Management (IAM) announces a new dual-stack public endpoint, enabling customers to connect to IAM over the public internet using IPv6, IPv4, or dual-stack clients. Dual-stack support is also available when customers access the new IAM endpoint privately from their Amazon Virtual Private Cloud (VPC) using Amazon PrivateLink. With simultaneous support for both IPv4 and IPv6 clients on IAM endpoint, customers can gradually transition from IPv4 to IPv6-based systems and applications.

Amazon Lambda now supports creating serverless applications using Ruby 3.4 in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Developers can use Ruby 3.4 as both a managed runtime and a container base image, and we will automatically apply updates to the managed runtime and base image as they become available.

Amazon DynamoDB Streams now comes with Amazon PrivateLink support, allowing you to invoke DynamoDB Streams APIs from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet.

Today, Amazon CloudFormation introduced a new resource scanning workflow for the CloudFormation IaC generator, further simplifying the process of generating Infrastructure-as-Code (IaC) templates for existing resources in your Amazon Web Services account. IaC generator allows you to onboard existing resources to CloudFormation in three easy steps. First, you initiate a scan of resources in your Amazon Web Services account. Second, you select resources for template generation and review suggestions for related resources. Third, a CloudFormation template is generated for selected resources. You can then import resources into a CloudFormation stack, download the template for deployment, or convert the template into a CDK app in your preferred programming language, such as TypeScript or Python.  

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. We are excited to announce a new streaming job mode on Amazon EMR Serverless, enabling you to continuously analyze and process streaming data.

Amazon Aurora PostgreSQL zero-ETL integration with Amazon Redshift is now supported in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Aurora zero-ETL integration with Amazon Redshift enables near real-time analytics and machine learning (ML) using Amazon Redshift on petabytes of transactional data. Within seconds of transactional data being written into Aurora, zero-ETL seamlessly makes the data available in Amazon Redshift, removing the need to build and manage complex data pipelines that perform extract, transform, and load (ETL) operations.  

Amazon CloudWatch Synthetics now allows canaries running in a VPC to make outbound requests to IPv6 endpoints allowing monitoring of IPv6-only and dual stack enabled endpoints over IPv6. You can also access CloudWatch Synthetics APIs over both IPv4 and IPv6 through new dual stack compatible regional endpoints. Additionally, PrivateLink access to Synthetics within VPCs is now available over IPv6 connections.

The Amazon DAX SDK for JavaScript, version 3 (v3) is now available. You can use this new DAX SDK to build JavaScript applications that benefit from accelerated access to DynamoDB with minimal configuration changes. The Amazon SDK for JavaScript v3 offers a modular architecture and features that improve developer productivity.

The Amazon DAX SDK for Go, version 2 (v2) is now available and is compatible with the Amazon SDK for Go v2. The Amazon DAX SDK for Go v2 offers a modular architecture and features that improve developer productivity.

Today, NVIDIA's Multi-Instance GPU (MIG) feature support for Bottlerocket, the Linux-based operating system purpose-built for hosting containers, with a focus on security, minimal footprint, and safe updates, is now available in Amazon Web Services China Regions, enabling customers to partition NVIDIA GPUs into multiple GPU instances on Kubernetes nodes. This capability allows system administrators to maximize GPU resource utilization by running multiple workloads simultaneously on a single GPU while maintaining hardware-level isolation between workloads.

Flexible Payment Scheduler*, a new feature in Amazon Web Services Marketplace China is launched today. This feature enables sellers to extend private offer with flexible payment plan tailored to buyers’ operational needs, including negotiated number of units, payment amounts and payment dates.  

Allowed AMIs, an account-wide Amazon EC2 setting that enables you to limit the discovery and use of Amazon Machine Images (AMIs) within your Amazon Web Services accounts, now integrates with Amazon Config. You can now use Amazon Config rules to automatically monitor, detect, and report instances launched using AMIs that have not been allowed by Allowed AMIs.

Today, a default bootstrap container image for Bottlerocket, the Linux-based operating system purpose-built for containers, that simplifies system setup tasks, eliminating the need for most customers to maintain their own container images for initial configuration is now available in Amazon Web Services China Regions. Bootstrap containers  are special-purpose containers that handle pre-startup operations such as directory creation, environment variable setup, and node-specific configurations before the main application containers start.

Amazon GuardDuty Extended Threat Detection is now available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. This capability allows you to identify sophisticated, multi-stage attacks targeting your accounts, workloads, and data. You can now use new attack sequence findings that cover multiple resources and data sources over an extensive time period, allowing you to spend less time on first-level analysis and more time responding to critical-severity threats to minimize business impact.  

Amazon CloudWatch Database Insights announces support for Amazon Aurora and RDS databases hosted in Amazon Web Services China Regions. Database Insights is a database observability solution that provides a curated experience designed for DevOps engineers, application developers, and database administrators (DBAs) to expedite database troubleshooting and gain a holistic view into their database fleet health.

Amazon Relational Database Service (RDS) for MySQL announces Amazon RDS Extended Support minor version 5.7.44-RDS.20250213. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of MySQL.

A new minor version of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports this latest minor version of SQL Server 2019 across the Express, Web, Standard, and Enterprise editions. The new minor version is SQL Server 2019 CU31 15.0.4420.2.

Amazon S3 reduces pricing for S3 object tagging by 35% to ¥ 0.04336 per 10,000 tags per month. Object tags are key-value pairs applied to S3 objects that can be created, updated, or deleted at any time during the lifetime of the object.

Starting today, Amazon Route 53 supports geoproximity routing as an additional routing policy for DNS records in public and private hosted zones in Amazon Web Services China Regions. Geoproximity routing improves application responsiveness for your end users and helps organizations apply data residency preferences by routing traffic to the geographically nearest resource. With this release, you can add geoproximity routing to your DNS records via the Route 53 Console, API, SDK, and CLI.

Amazon Elastic Container Service (Amazon ECS) today introduced GPU-optimized Amazon Machine Image (AMI) for Amazon Linux 2023 (AL2023). This new offering enables customers to run GPU-accelerated containerized workloads on Amazon ECS while leveraging improved security features and newer kernel version available in AL2023.

Starting March 5, 2025, Amazon FSx for NetApp ONTAP eliminates SnapLock licensing fees for data stored in SnapLock volumes, making it more cost-effective for customers to protect their business-critical data from ransomware, unauthorized deletions, and malicious modifications.

Amazon FSx for Lustre, a service that provides high-performance, cost-effective, and scalable file storage for compute workloads, now enables you to upgrade the Lustre version of your FSx for Lustre file systems. This feature allows you to benefit from the enhancements available in newer Lustre versions on your existing file systems.

Amazon Elastic Beanstalk now enables customers to build and deploy Tomcat 11 applications on Amazon Linux 2023 (AL2023) platform. This latest platform support allows developers to leverage the newest Tomcat features while benefiting from AL2023's enhanced security and performance features.

Amazon Identity and Access Manager (IAM) Access Analyzer now supports Internet Protocol version 6 (IPv6) addresses via our new dual-stack endpoints. The existing IAM Access Analyzer endpoints supporting IPv4 will remain available for backwards compatibility. The new dual-stack domains are available either from the internet or from within an Amazon Virtual Private Cloud (VPC) using Amazon PrivateLink.

We are excited to announce the general availability of fine-grained data access control (FGAC) via Amazon Lake Formation for Apache Spark with Amazon EMR on EKS. This enables you to enforce full FGAC policies (database, table, column, row, and cell-level) defined in Lake Formation for your data lake tables from EMR on EKS Spark jobs. We are also sharing the general availability of Glue Data Catalog views with EMR on EKS for Spark workflows.

Amazon Elastic Beanstalk now enables customers to build and deploy Ruby 3.4 applications on the Amazon Linux 2023 (AL2023) platform. This latest platform support allows developers to leverage the newest Ruby features while benefiting from AL2023's enhanced security and performance features.

Amazon Transfer Family has reduced the service side login latency from 1-2 seconds to under 500 milliseconds.  

A new minor version of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports this latest minor version of SQL Server 2022 across the Express, Web, Standard, and Enterprise editions. The new minor version is SQL Server 2022 CU17 - 16.0.4175.1.

We are excited to announce the launch of storage scaling functions for Amazon Timestream for InfluxDB, allowing you to scale your allocated storage and change your storage Tiers as needed. With Storage Scaling, in you few simple steps you have greater flexibility and control over your time-series data processing and analysis.

Starting today, EC2 Fleet customers can override the Block Device Mapping specified in the Launch Template when creating a new Fleet request. With this release, customers save the effort of creating and associating new Launch Templates with their Fleet requests, if they need to customize the Block Device Mapping for specific Fleet requests but keep rest of the instance requirement configuration the same.  

Amazon Aurora for MySQL and PostgreSQL expands supports for the Graviton3-based R7g instance type in Amazon Web Services China Regions. R7g instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Graviton3 instances provide up to 30% performance improvement over Graviton2 instances for Aurora depending on database engine, version, and workload.

With the Mountpoint for Amazon S3 Container Storage Interface (CSI) driver, your Kubernetes applications can access Amazon S3 objects through a file system interface, achieving high aggregate throughput without any changes to your application. Built on Mountpoint for Amazon S3, the CSI driver presents an S3 bucket as a volume accessible by containers in Amazon Elastic Kubernetes Service (Amazon EKS) and self-managed Kubernetes clusters. As a result, distributed machine learning training jobs in Amazon EKS and self-managed Kubernetes clusters can read data from Amazon S3 at high throughput to accelerate training times.

Amazon EC2 announces the general availability of Time-based Copy for Amazon Machine Images (AMIs). Similar to Time-based Copy for EBS snapshots , this feature enables customers to meet their compliance objectives by ensuring that AMIs are copied within and across Amazon Web Services Regions within a specified duration.  

Amazon Network Firewall now offers automated domain lists and insights, a feature that enhances visibility into network traffic and simplifies firewall rule configuration. This new capability analyzes HTTP and HTTPS traffic logs from the last 30 days and provides insights into frequently accessed domains, enabling quick rule creation based on observed network traffic patterns.

Amazon RDS for PostgreSQL, MySQL, and MariaDB expands supports for Graviton3-based M7g and R7g instance types in Amazon Web Services China Regions. M7g and R7g instances are available in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD. Graviton3-based instances provide up to a 30% performance improvement over Graviton2-based instances on RDS for open-source databases depending on database engine, version, and workload.

The Amazon Elastic Compute Cloud (Amazon EC2) T4g instance Free Trial are available to use under free trial till December 31, 2025. All new and existing customers can utilize the free trial to automatically deduct up to 750 hours per month with the t4g.small instances through December 31, 2025. You can start building on Graviton-based instances for no charge with the T4g free trial, though charges may apply for surplus CPU credits. Refer to Amazon EC2 FAQs for more details on the free-trial.

Amazon Relational Database Service (RDS) IAM Database Authentication  (IAM DB Auth) now provides enhanced observability through metrics and logs. It enables customers to investigate and resolve authentication errors when connecting to RDS databases.

Amazon Web Services Marketplace China now enables Daily Disbursement to sellers. This allows sellers to set disbursement preferences to receive their outstanding balances on a daily basis, granting increased flexibility. Currently, MPCN sellers can only set regular disbursement frequency as monthly with the disbursements happening on 7th of every month. This limitation sometimes prevented MPCN sellers to align the disbursement frequency with their internal account processes. Monthly disbursements also introduced delays in the disbursement cycle. In the worst case scenario, a seller may have to wait for 30 days for a disbursement on a collected invoice.  

On Feb. 28, 2025, Amazon Web Services Marketplace China  (MPCN) launches a new product type, Professional Services, which include services of assessments, implementation, premium support, managed services, and training. MPCN sellers can publish Professional Services listings to the public catalog and extend offers directly to customers. Customers can find and subscribe to Professional Services alongside their software purchases. Professional Services can support the full lifecycle of third-party cloud software from planning through to deployment and provide 24x7 support, and help customers deploy and manage products purchased through MPCN. Channel partners can also resell ISVs’ professional services to customers using Channel Partner Private Offer (CPPO) feature in MPCN.

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the Spatial Patch Bundle (SPB) for the January 2025 Release Update (RU) for Oracle Database version 19c. This update delivers important fixes for Oracle Spatial and Graph functionality, helping ensure reliable and optimal performance for your spatial operations.

Today, Amazon IoT Device Defender introduced two features to simplify IoT certificate lifecycle management - a new audit check for certificate age and enhancements to the existing device certificate expiring audit check. The new audit check for certificate age allows developers to monitor and receive alerts based on a certificate's age, regardless of its expiration date. Additionally, the device certificate expiring audit check now supports new configuration options, allowing developers to set custom alert durations before certificate expiration.

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 11.4.5, 10.11.11, 10.6.21, and 10.5.28. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.  

Amazon EventBridge expands execution role support to Amazon Lambda, Amazon SNS, and Amazon SQS event bus targets, making this feature available for all target types. We recommend configuring execution roles for all your EventBridge targets to benefit from consistent permissions policies and dedicated invocation throttle limits.  

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 3.8. You can now create new clusters using version 3.8 with either KRAFT or ZooKeeper mode for metadata management or upgrade your existing ZooKeeper based clusters to use version 3.8. Apache Kafka version 3.8 includes several bug fixes and new features that improve performance. Key new features include support for compression level configuration. This allows you to further optimize your performance when using compression types such as lz4, zstd and gzip, by allowing you to change the default compression level. For more details and a complete list of improvements and bug fixes, see the Apache Kafka release notes for version 3.8 .

Amazon Elastic Beanstalk now enables customers to deploy applications on Windows Server 2025 and Windows Server Core 2025 environments. These environments come pre-configured with .NET Framework 4.8.1 and .NET 8.0, providing developers with the latest Long Term Support (LTS) version of .NET alongside the established .NET Framework.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions 17.4, 16.8, 15.12, 14.17, and 13.20. Please note, this release supports the versions released by the PostgreSQL community on February, 20,2025  to address the regression that was part of the February 13, 2025 release. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes added by the PostgreSQL community.

Amazon Relational Database Service (Amazon RDS) for MySQL now supports MySQL minor versions 8.0.41 and 8.4.4. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MySQL, and to benefit from the numerous bug fixes, performance improvements, and new functionality added by the MySQL community and Amazon RDS. Learn more about the enhancements in RDS for MySQL 8.0.41 and 8.4.4 in the Amazon RDS user guide .

Amazon Elastic Container Service (Amazon ECS) now supports CPU limits of up to 192 vCPU for ECS tasks deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances, an increase from the previous 10 vCPU limit. This enhancement allows customers to more effectively manage resource allocation on larger Amazon EC2 instances.

Amazon Budgets now supports resource and tag-based access controls for easy management and access. You can now define Amazon Identity and Access Management (IAM)  policies to specify fine-grained permissions for Amazon Budgets resources based on their resource names and tags, improving governance and information security through these two granular access control features.

Amazon Price List API now supports Amazon PrivateLink. With Amazon PrivateLink, you can simplify private network connectivity between virtual private clouds (VPCs), the Amazon Price List API, and your on-premises data centers by using interface VPC endpoints and private IP addresses.

Kubernetes version 1.32 introduces several new features and bug fixes, and we are excited to announce that you can now use Amazon Elastic Kubernetes Service (EKS) and Amazon EKS Distro  to run Kubernetes version 1.32. Starting today, you can create new EKS clusters using version 1.32 and upgrade existing clusters to version 1.32 using the EKS console, the eksctl command line interface, or through an infrastructure-as-code tool.

Amazon Elastic Block Store (Amazon EBS) now displays the full snapshot size for EBS Snapshots. With this enhancement, customers can now retrieve full snapshot sizes programmatically through the DescribeSnapshots API using the new field, full-snapshot-size-in-bytes. The full snapshot size is also displayed in the EBS Snapshots console under the new 'Full snapshot size' column.

Amazon Relational Database Service (RDS) for PostgreSQL now supports the latest minor versions 17.3, 16.7, 15.11, 14.16, and 13.19. We recommend that you upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of PostgreSQL, and to benefit from the bug fixes added by the PostgreSQL community. This release also includes updates for PostgreSQL extensions such as pg_active 2.1.4, pg_cron 1.6.5, pg_partman 5.2.4, and others.

Amazon Aurora PostgreSQL-Compatible Edition now supports PostgreSQL versions 16.6, 15.10, 14.15, 13.18, and 12.22.  Please note, this release supports the versions released by the PostgreSQL community on November 21,2024  and not the previous November 14,2024 release . These releases contain product improvements and bug fixes made by the PostgreSQL community, along with Aurora-specific security and feature improvements such as improved read replica upgrades for reduced downtime, new features for Babelfish  and improved Global Database cross-region resiliency for better read availability during unplanned events.  

Amazon Relational Database Service (RDS) for MySQL announces Amazon RDS Extended Support minor version 5.7.44-RDS.20250103. We recommend that you upgrade to this version to fix known security vulnerabilities and bugs in prior versions of MySQL.

Amazon Step Functions has increased the default quota for the maximum number of registered state machines and activities from 10,000 to 100,000. This tenfold increase enables customers to create and manage significantly more workflows within a single Amazon Web Services account, providing greater scalability and flexibility.

Amazon Elastic Beanstalk improves scaling and deployment speeds for Windows instance with EC2 Fast Launch.

Amazon Timestream for InfluxDB now offers customers the options to create instances with Internet Protocol version 6 (IPv6) addresses. Timestream for InfluxDB makes it easy for application developers and DevOps teams to run fully managed InfluxDB databases on Amazon Web Services for real-time time-series applications using open-source APIs. Customers moving to IPv6 can now simplify their network stack by creating their Timestream for InfluxDB instances on a network that supports both IPv4 and IPv6.  

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the January 2025 Release Update (RU) for Oracle Database versions 19c and 21c.

We are excited to announce the general availability of fine-grained data access control (FGAC) via Amazon Lake Formation for Apache Spark with Amazon EMR Serverless. This enables you to enforce full FGAC (database, table, column, row and cell-level) policies defined in Lake Formation to take effect for your data lake tables from your EMR Serverless Spark jobs and interactive sessions.  

The Amazon EventBridge console now displays the source and detail type of all available Amazon Web Services service events when you create a rule in the EventBridge console. This makes it easier for customers to discover and utilize the full range of Amazon Web Services service events when building event-driven architectures. Additionally, the EventBridge documentation now includes an automatically updated list of all Amazon Web Services service events, facilitating access to the most current information.

You can now request for Amazon DynamoDB account-level and table-level throughput quota adjustments using Amazon Web Services Service Quotas  and get auto-approved within minutes.  

Amazon Step Functions now supports additional data sources and output options for Distributed Map, enabling more flexible large-scale parallel processing workflows. Distributed map can now process data from JSON Lines (JSONL) and a broader range of delimited file formats stored in Amazon S3. Additionally, distributed map offers new output transformations for greater control over result formatting.

Amazon Config now supports 4 additional resource types. This expansion provides greater coverage over your Amazon Web Services environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources.

Amazon Data Lifecycle Manager now offers customers the option to use Internet Protocol version 6 (IPv6) addresses for their new and existing endpoints. Customers moving to IPv6 can simplify their networks stack by running their Data Lifecycle Manager dual-stack endpoints on a network supporting both IPv4 and IPv6, depending on the protocol used by their network and client.

Amazon MQ now provides support Amazon PrivateLink  (interface VPC endpoint) to connect directly to the Amazon MQ API in your virtual private cloud (VPC) instead of connecting over the internet.

Amazon WAF’s console dashboard now includes richer visualizations that give you insights into the top sources of traffic. With this feature, customers with CloudWatch logging destinations can view a new top insights section within the all traffic dashboard.  

Amazon Elastic Block Store (EBS) now supports additional resource-level permissions for creating EBS volumes  from snapshots . With this launch, you now have more granular controls to set resource-level permissions for the creation of a volume and selection of the source snapshot when calling the CreateVolume  action in your IAM policy. This allows you to control the IAM identities that can create EBS volumes from source snapshots, and the conditions that they can use these snapshots to create EBS volumes.

Today, Amazon Identity and Access Management (IAM) announced support for encrypted SAML assertions. SAML is an open standard that many identity providers (IdPs) use for federated single sign-on (SSO), enabling users or applications in your company to log into the Amazon Web Services Management Console or call Amazon API operations. You can now configure your identity provider to encrypt the SAML assertions that it sends to IAM. This ensures that your assertions are encrypted when passed through intermediaries (for example, the end user’s web browser).  

Amazon DataSync now supports Kerberos authentication for self-managed file servers that use the Server Message Block (SMB) network protocol. This update provides enhanced security options for connecting to SMB file servers commonly found in Microsoft Windows environments.

Amazon Elastic Beanstalk now enables customers to build and deploy Python 3.13 applications on Amazon Linux 2023 (AL2023) platform. This latest platform support allows developers to leverage the newest features and improvements in Python while taking advantage of the enhanced security and performance of AL2023.

A new minor version of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports this latest minor version of SQL Server 2019 across the Express, Web, Standard, and Enterprise editions. The new minor version is SQL Server 2019 CU30 - 15.0.4415.2.

Amazon Elastic Beanstalk now enables customers to build and deploy .NET 9 applications on Amazon Linux 2023 (AL2023) platform. This latest platform support allows developers to leverage the newest .NET features while benefiting from AL2023's enhanced security and performance features.

Amazon Elastic Beanstalk now enables customers to build and deploy PHP 8.4 applications on Amazon Linux 2023 (AL2023) platform. This latest platform support allows developers to take advantage of the newest PHP features while leveraging the enhanced security and performance of AL2023.

Today, Amazon CloudTrail announced support for Amazon Virtual Private Cloud (VPC) endpoints in Amazon Web Services China (Beijing) Region, operated by Sinnet and Amazon Web Services China (Ningxia) Region, operated by NWCD.  

Amazon CloudWatch now lets customers evaluate metrics data for an extended duration of up to 7 days, a 7x increase from the previous limit of 24 hours.

Amazon Elastic Beanstalk will add the support of EC2 Launch Template by default when creating environments for all accounts.

Amazon Security Hub now supports Amazon Route 53 Resolver DNS Firewall, allowing you to receive security findings for DNS queries made from your Amazon VPCs for domains suspected as malicious or identified as low-reputation. Route 53 Resolver DNS Firewall is a managed firewall that enables you to block DNS queries made for malicious domains and to allow queries for trusted domains.  

Amazon Elastic Beanstalk is expanding its Spot allocation strategy options to include capacity-optimized-prioritized, lowest-price and price-capacity-optimized, in addition to the existing default capacity-optimized strategy.

Today, we are pleased to announce a new version of Amazon SageMaker Studio, which starts in seconds and offers a broader selection of IDEs for ML development.  

Amazon EventBridge Event Bus now allows you to deliver events directly to Amazon Web Services services in another account. This feature enables you to use multiple accounts to improve security and streamline business processes while reducing the overall cost and complexity of your architecture.  

Amazon CloudTrail introduces dual stack support for the CloudTrail API endpoints, enabling you to connect using Internet Protocol Version 6 (IPv6), Internet Protocol Version 4 (IPv4), or dual stack clients.

Today, we are excited to announce support for new protocols in Amazon Network Firewall so you can protect your Amazon VPCs using application-specific inspection rules in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. With this launch, Amazon Network Firewall will detect protocols like HTTP2, QUIC, BitTorrent, and PostgreSQL so you can apply firewall inspection rules to these protocols. You can also use new rule keywords in TLS, SNMP, DHCP, and Kerberos rules to apply granular security controls to your stateful inspection rules.

Today, we announced Virtual Private Cloud (VPC) Block Public Access (BPA), a new centralized declarative control that enables network and security administrators to authoritatively block Internet traffic for their VPCs. VPC BPA supersedes any other setting and ensures your VPC resources are protected from unfettered Internet access in compliance with your organizations security and governance policy.  

Amazon Step Functions expands its SDK integrations with support for over 1,000 new API actions from new and existing services such as Amazon Lambda, Amazon EC2, and Amazon Glue. You can leverage our breadth and depth of services in your workflow, without writing additional integration code.

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2016, 2017, 2019, and 2022 across the Express, Web, Standard, and Enterprise editions. The new minor versions include 13.0.6455.2, 14.0.3485.1, 15.0.4410.1, and 16.0.4165.4.

Amazon Redshift is announcing the general availability of Multi-AZ deployments for RA3 clusters in the Amazon Web Services China (Beijing) Region, operated by Sinnet and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Redshift Multi-AZ deployments support running your data warehouse in multiple Amazon Web Services Availability Zones (AZ) simultaneously and continue operating in unforeseen failure scenarios. A Multi-AZ deployment raises the Amazon Redshift Service Level Agreement (SLA) (Beijing|Ningxia) to 99.99% and delivers a highly available data warehouse for the most demanding mission-critical workloads.  

Today, Amazon ElastiCache announces support for Service Quotas. This enhancement provides customers with improved visibility and control over their ElastiCache service quotas, streamlining the quota management process and reducing the need for manual interventions.

Amazon Application Recovery Controller (ARC) zonal shift and zonal autoshift have expanded their capabilities and now support Application Load Balancers (ALB) with cross-zone configuration enabled. ARC zonal shift helps you quickly recover an unhealthy application in an Availability Zone (AZ), and reduce the duration and severity of impact to the application due to events such as power outages and hardware or software failures. ARC zonal autoshift safely and automatically shifts your application’s traffic away from an AZ when we identifies a potential failure affecting that AZ.  

Today, Amazon MemoryDB announces support for Service Quotas. This enhancement provides customers with improved visibility and control over their MemoryDB service quotas, streamlining the quota management process and reducing the need for manual interventions.

Amazon EC2 introduces new capabilities that make it easy for customers to target instance launches on their On-Demand Capacity Reservations (ODCRs) . On-Demand Capacity Reservations help you reserve compute capacity for your workloads in a specified Availability Zone for any duration. You can now ensure instance launches are fulfilled exclusively by ODCRs, or prefer unutilized ODCRs before falling back to On-Demand capacity.  

Amazon RDS for SQL Server now offers enhanced control over backup and restore operations with new custom parameters in Amazon Web Services China (Beijing) Region, operated by Sinnet, and Amazon Web Services China (Ningxia) Region, operated by NWCD. This update allows database administrators to fine-tune their processes, potentially improving efficiency and reducing operation times. The new parameters are available for the rds_backup_database, rds_restore_database, and rds_restore_log stored procedures.

Amazon RDS for MySQL now supports MySQL major version 8.4, the latest long-term support (LTS) release from the MySQL community. RDS for MySQL 8.4 includes support for multi-source replication plugin for analytics, Group Replication plugin for continuous availability, as well as several performance and feature improvements added by the MySQL community. Learn more about the community enhancements in the MySQL 8.4 release notes .

Amazon Relational Database Service (Amazon RDS) for MariaDB now supports MariaDB minor versions 11.4.4, 10.11.10, 10.6.20, and 10.5.27. We recommend that customers upgrade to the latest minor versions to fix known security vulnerabilities in prior versions of MariaDB, and to benefit from the bug fixes, performance improvements, and new functionality added by the MariaDB community.  

Amazon EC2 Auto Scaling now allows users to view applied quota values for Auto Scaling groups and launch configurations per region through Service Quotas . Usage data for Auto Scaling groups per region will also be made available. With Service Quotas, developers can view, manage, and request quota increases, all in one user interface.  

Amazon DataSync now supports configuration updates for all supported storage locations, including Amazon S3, Amazon EFS, Amazon FSx for Lustre, Amazon FSx for NetApp ONTAP, Amazon FSx for OpenZFS, and Amazon FSx for Windows File Server. With this enhancement, you can update storage locations directly, removing the need to delete and create new locations in order to update key parameters.
 

Amazon EC2 introduces Allowed AMIs, a new account-wide setting that enables you to limit the discovery and use of Amazon Machine Images (AMIs) within your Amazon Web Services accounts. You can now simply specify the AMI owner accounts or AMI owner aliases permitted within your account, and only AMIs from these owners will be visible and available to you to launch EC2 instances.  

Amazon DynamoDB now supports a configurable period for point-in-time-recovery (PITR). You can specify the duration for data recoverability using PITR on a per-table basis, ranging from 1 to 35 days.  

Amazon Secrets Manager now supports a single API call to identify and retrieve a group of secrets for your application. The new API, BatchGetSecretValue, offers greater simplicity to common developer workflows where you need to bring multiple secrets into your application. With this feature, you no longer have to make iterative calls to retrieve one secret at a time or account for partial failures when pulling multiple secrets, enhancing the overall efficiency.