Amazon Web Services (AWS)

AWS Budgets now supports resource and tag-based access controls for easy management and access. You can now add tags to your AWS Budgets resources and define AWS Identity and Access Management (IAM) policies to specify fine-grained permissions for AWS Budgets resources based on their resource names and tags, improving governance and information security through these two granular access control features. With resource-level access controls, you can configure IAM policies that reference budgets using Amazon Resource Names (ARNs) or wildcards, and specify the users, roles and actions that are permitted on the resources. Using tag-based permissions, you can define IAM polici…

Starting today, AWS Cost Anomaly Detection will detect cost anomalies up to 30% faster. Customers can now identify and respond to spending changes more quickly. Cost Anomaly Detection leverages advanced machine learning to identify unusual changes in spend, enabling customers to quickly take action to avoid unexpected costs. With this new capability, AWS Cost Anomaly Detection analyzes cost and usage data up to three times a day, instead of daily, to detect anomalies. This means customers can receive notifications, understand root causes, and take action on unexpected spend changes much faster to avoid unplanned spend and optimize cost. The reduced anomaly detection laten…

Today, we are announcing the preview launch of Amazon Bedrock Studio, an SSO-enabled web interface that provides the easiest way for developers across an organization to collaborate and build generative AI applications. Developers can login to Bedrock Studio using their company credentials to build, evaluate, and share generative AI apps. Bedrock Studio offers a rapid prototyping environment and streamlines access to multiple Foundation Models (FMs) in and tools like Knowledge Bases, Agents, and Guardrails. To enable Bedrock Studio, AWS administrators can configure one or more workspaces for their organization in the AWS Management Console for Bedrock, and grant permissio…

Agents for Amazon Bedrock enable developers to create generative AI-based applications that can complete complex tasks for a wide range of use cases and deliver answers based on company knowledge sources. As agentic applications scale, they require higher input and output model throughput compared to on-demand limits. Today, we are launching support for Provisioned Throughput with Agents for Amazon Bedrock. With Provisioned Throughput, you can purchase model units for the specific base model. A model unit provides a certain guaranteed throughput, which is measured by the maximum number of input or output tokens processed per minute. You are charged by the hour for each mo…

Amazon Lightsail now offers a larger instance bundle with 16 vCPUs and 64 GB memory. The new instance bundle is available with Linux operating system (OS) and application blueprints, for both IPv6-only and dual-stack networking types. You can create instances using the new bundle with pre-configured Linux OS and application blueprints including WordPress, Drupal, Magento, MEAN, LAMP, Node.js, Amazon Linux, Ubuntu, CentOS Stream, and AlmaLinux. The new larger instance bundle enables you to scale your web applications and run more compute and memory intensive workloads in Lightsail. This higher performance instance bundle is ideal for general purpose workloads that require…

Today, Amazon MemoryDB launched two new condition keys for IAM policies that enable you to control user authentication and encryption in transit settings during cluster creation. The new condition keys let you create IAM policies or Service Control Policies (SCPs) to enhance security and meet compliance requirements. The first condition key called, memorydb:TLSEnabled, enables you to require a specific encryption in transit setting in your AWS Accounts. For example, you can use the new memorydb:TLSEnabled condition key to enforce that MemoryDB clusters can only be created with encryption in transit enabled. The second condition key called, memorydb:UserAuthenticationMode,…

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2024 Release Update (RU) for Oracle Database versions 19c and 21c. View the full article

AWS IoT TwinMaker makes it easier to create digital twins of real-world systems such as buildings, factories, industrial equipment, and production lines. Today, AWS announced enhancements to AWS IoT TwinMaker Knowledge Graph that enable faster and more flexible entity metadata query capabilities for industrial customers. These optimizations provide faster entity-metadata queries using full-text search and wildcard search, addressing the data engineering needs of customers requiring efficient entity metadata access. View the full article

Amazon Connect Contact Lens now provides support for personally identifiable information (PII) redaction in the Spanish (US) language, enabling contact centers to help identify and redact sensitive information on contact transcripts such as social security numbers, credit card details, bank account information, and personal contact information (i.e. name, email address, phone number, and mailing address). View the full article

Starting today, you can use Amazon EMR Studio in the Asia Pacific (Melbourne) and Israel (Tel Aviv) regions to run interactive workloads on EMR. View the full article

AWS Amplify Gen 2, the code-first developer experience for building full-stack apps using TypeScript, is now generally available. Amplify Gen 2 enables developers to express app requirements like the data models, business logic, and authorization rules in TypeScript. The necessary cloud infrastructure is then automatically provisioned, without needing explicit infrastructure definitions. This streamlined approach accelerates full-stack development for teams of all sizes. View the full article

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. Today, we are excited to announce detailed performance monitoring of Apache Spark jobs with Amazon Managed Service for Prometheus, allowing you to analyze, monitor, and optimize your jobs using job-specific engine metrics and information about Spark event timelines, stages, tasks, and executors. View the full article

Amazon Connect Cases now provides APIs that make it easy to upload files, check file details, and delete files from cases. Contact center administrators can use these APIs to automate the attachment of files to cases. In addition, these APIs also enable you to use case attachments in a custom agent desktop. View the full article

April has been packed with new releases! Last week continued that trend with many new releases supporting a variety of domains such as security, analytics, devops, and many more, as well as more exciting new capabilities within generative AI. If you missed the AWS Summit London 2024, you can now watch the sessions on demand, including the keynote by Tanuja Randery, VP & Marketing Director, EMEA, and many of the break-out sessions which will continue to be released over the coming weeks. Last week’s launches Here are some of the highlights that caught my attention this week: Manual and automatic rollback from any stage in AWS CodePipeline – You can now rollback …

AWS Firewall Manager is now available in the AWS Canada West (Calgary) region, enabling customers to create policies for AWS WAF and manage web application security for applications running in this region. Support for other policy types will be available in the coming months. Firewall Manager is now available in a total of 31 AWS commercial regions, 2 GovCloud regions, and all Amazon CloudFront edge locations. AWS Firewall Manager is a security management service that enables customers to centrally configure and manage firewall rules across their accounts and resources. Using AWS Firewall Manager, customers can manage AWS WAF rules, AWS Shield Advanced protections, AWS Ne…

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. Today, we are excited to announce detailed performance monitoring of Apache Spark jobs with Amazon Managed Service for Prometheus, allowing you to analyze, monitor, and optimize your jobs using job-specific engine metrics and information about Spark event timelines, stages, tasks, and executors. Apache Spark provides detailed performance metrics for the driver and executors for jobs such as JVM heap memory, GC, shuffle information etc. These me…

Amazon Connect Cases now provides APIs that make it easy to upload files, check file details, and delete files from cases. Contact center administrators can use these APIs to automate the attachment of files to cases. In addition, these APIs also enable you to use case attachments in a custom agent desktop. Amazon Connect Cases is available in the following AWS Regions: US East (N. Virginia), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Europe (Frankfurt), and Europe (London). To learn more and get started, visit the webpage and documentation.View the full article

AWS IoT TwinMaker makes it easier to create digital twins of real-world systems such as buildings, factories, industrial equipment, and production lines. Today, AWS announced enhancements to AWS IoT TwinMaker Knowledge Graph that enable faster and more flexible entity metadata query capabilities for industrial customers. These optimizations provide faster entity-metadata queries using full-text search and wildcard search, addressing the data engineering needs of customers requiring efficient entity metadata access. Industrial customers often deal with large number of entities and require quick, flexible ways to search and retrieve information about their entities. The new…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R7i instances powered by custom 4th Gen Intel Xeon Scalable processors (code-named Sapphire Rapids) are available in AWS GovCloud (US-East) region. These custom processors, available only on AWS, offer up to 15% better performance over comparable x86-based Intel processors utilized by other cloud providers. R7i instances delivers up to 15% better price-performance compared to prior generation R6i. They offer larger instance sizes up to 48xlarge, can attach up to 128 EBS volumes and two bare metal sizes (metal-24xl, metal-48xl). These bare-metal sizes support built-in Intel accelerators: Data Streaming Accelerator, …

Customers can now create Amazon FSx for Windows File Server file systems in the AWS Canada West (Calgary) Region. Amazon FSx makes it easier and more cost effective to launch, run, and scale feature-rich, high-performance file systems in the cloud. It supports a wide range of workloads with its reliability, security, scalability, and broad set of capabilities. Amazon FSx for Windows File Server provides fully managed, highly reliable file storage built on Windows Server and can be accessed via the industry-standard Server Message Block (SMB) protocol. To learn more about Amazon FSx for Windows File Server, visit our product page, and see the AWS Region Table for complete…

Customers can now create Amazon FSx for OpenZFS file systems in the AWS Canada West (Calgary) Region. Amazon FSx makes it easier and more cost effective to launch, run, and scale feature-rich, high-performance file systems in the cloud. It supports a wide range of workloads with its reliability, security, scalability, and broad set of capabilities. Amazon FSx for OpenZFS provides fully managed, cost-effective, shared file storage powered by the popular OpenZFS file system, and is designed to deliver sub-millisecond latencies and multi-GB/s throughput along with rich ZFS-powered data management capabilities (like snapshots, data cloning, and compression). To learn more abo…

Customers can now create Amazon FSx for NetApp ONTAP file systems in the AWS Canada West (Calgary) Region. Amazon FSx makes it easier and more cost effective to launch, run, and scale feature-rich, high-performance file systems in the cloud. It supports a wide range of workloads with its reliability, security, scalability, and broad set of capabilities. Amazon FSx for NetApp ONTAP provides the first and only complete, fully managed NetApp ONTAP file systems in the cloud. It offers the familiar features, performance, capabilities, and APIs of ONTAP with the agility, scalability, and simplicity of an AWS service. To learn more about Amazon FSx for NetApp ONTAP, visit our pr…

Customers can now create Amazon FSx for Lustre file systems in the AWS Canada West (Calgary) Region. Amazon FSx makes it easier and more cost effective to launch, run, and scale feature-rich, high-performance file systems in the cloud. It supports a wide range of workloads with its reliability, security, scalability, and broad set of capabilities. Amazon FSx for Lustre provides fully managed shared storage built on the world’s most popular high-performance file system, designed for fast processing of workloads such as machine learning, high performance computing (HPC), video processing, financial modeling, and electronic design automation (EDA). To learn more about Amazo…

AWS Amplify Gen 2, the code-first developer experience for building full-stack apps using TypeScript, is now generally available. Amplify Gen 2 enables developers to express app requirements like the data models, business logic, and authorization rules in TypeScript. The necessary cloud infrastructure is then automatically provisioned, without needing explicit infrastructure definitions. This streamlined approach accelerates full-stack development for teams of all sizes. Since the public preview, we have added a number of features since the Gen 2 preview : Storage support with revamped authorization capabilities, a file manager TypeScript Functions support with environme…

Starting today, you can use Amazon EMR Studio in the Asia Pacific (Melbourne) and Israel (Tel Aviv) regions to run interactive workloads on EMR. Amazon EMR Studio is an integrated development environment (IDE) that makes it easy for data scientists and data engineers to develop, visualize, and debug big data and analytics applications written in PySpark, Python, Scala, and R. EMR Studio provides fully managed Jupyter Notebooks and tools such as Spark UI and YARN Timeline Service to simplify debugging. You can also enable single sign-on using AWS IAM Identity Center that allows you to log in directly with your corporate credentials without logging into the AWS console. You…

Amazon Connect Contact Lens now provides support for personally identifiable information (PII) redaction in the Spanish (US) language, enabling contact centers to help identify and redact sensitive information on contact transcripts such as social security numbers, credit card details, bank account information, and personal contact information (i.e. name, email address, phone number, and mailing address). PII redaction for Spanish (US) language is available in all regions where Contact Lens conversational analytics is supported. To learn more, please visit our documentation. This feature is included with Contact Lens conversational analytics at no additional charge. For …

Amazon Relational Database Service (Amazon RDS) for Oracle now supports the April 2024 Release Update (RU) for Oracle Database versions 19c and 21c. To learn more about Oracle RUs supported on Amazon RDS for each engine version, see the Amazon RDS for Oracle Release notes. If the auto minor version upgrade (AmVU) option is enabled, your DB instance is upgraded to the latest quarterly RU six to eight weeks after it is made available by Amazon RDS for Oracle in your AWS Region. These upgrades will happen during the maintenance window. To learn more, see the Amazon RDS maintenance window documentation. For more information about the AWS Regions where Amazon RDS for Oracle is…

Today, AWS introduces a new EC2 API to retrieve the public endorsement key (EkPub) for the Nitro Trusted Platform Module (NitroTPM) of an Amazon EC2 instance. View the full article

Amazon Pinpoint now offers country rules, a new feature that allows developers to control the specific countries they send SMS and voice messages to. This enhancement helps organizations align their message sending activities to the precise list of countries where they operate. View the full article

Amazon Personalize now makes it easier than ever to remove users from your datasets with a new deletion API. Amazon Personalize uses datasets provided by customers to train custom personalization models on their behalf. This new capability allows you to delete records about users from your datasets including user metadata and user interactions. This helps to maintain data for your compliance programs and keep your data current as your user base changes. Once the deletion is complete, Personalize will no longer store information about the deleted users and therefore will not consider the user for model training. View the full article

Amazon CloudWatch Internet Monitor, an internet traffic monitoring service for AWS applications that gives you a global view of traffic patterns and health events, now displays IPv4 prefixes in its console dashboard. Using this data in Internet Monitor, you can get more details about your application traffic and health events. For example, you can do the following: View the IPv4 prefixes associated with a client location that is impacted by a health event View IPv4 prefixes associated with a client location Filter and search traffic data by the network associated with an IPv4 prefix or IPv4 address View the full article

Bedrock – Slack’s internal Kubernetes platform Slack is the AI-powered platform for work that connects people, conversations, apps, and systems together in one place. Slack adopted Amazon Elastic Kubernetes Service (Amazon ) to build “Bedrock,” the codename for an internal compute orchestration platform that simplifies container deployment and management. Bedrock handles build, deploy, and runtime environments through a single YAML file, significantly reducing complexity for internal developers at Slack. It also leverages tools such as Jenkins, FQDN service discovery, and Nebula overlay network for efficient operations. With over 80% of Slack applications now operating o…

Amazon DynamoDB on-demand is a serverless, pay-per-request billing option that can serve thousands of requests per second without capacity planning. Previously, the on-demand request rate was only limited by the default throughput quota (40K read request units and 40K write request units), which uniformly applied to all tables within the account, and could not be customized or tailored for diverse workloads and differing requirements. Since on-demand mode scales instantly to accommodate varying traffic patterns, a piece of hastily written or unoptimized code could rapidly scale up and consume resources, making it difficult to keep costs and usage bounded. Starting today, …

Amazon CloudWatch Internet Monitor, an internet traffic monitoring service for AWS applications that gives you a global view of traffic patterns and health events, now displays IPv4 prefixes in its console dashboard. Using this data in Internet Monitor, you can get more details about your application traffic and health events. For example, you can do the following: View the IPv4 prefixes associated with a client location that is impacted by a health event View IPv4 prefixes associated with a client location Filter and search traffic data by the network associated with an IPv4 prefix or IPv4 address This feature gives you added flexibility for learning more about the speci…

Starting today, customers can use AWS Control Tower in the AWS Canada West (Calgary) Region. With this launch, AWS Control Tower is available in 29 AWS Regions and the AWS GovCloud (US) Regions. AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It simplifies AWS experiences by orchestrating multiple AWS services on your behalf while maintaining the security and compliance needs of your organization. You can set up a multi-account AWS environment within 30 minutes or less, govern new or existing account configurations, gain visibility into compliance status, and enforce controls at scale. If you are new to AWS Control To…

Today, AWS introduces a new EC2 API to retrieve the public endorsement key (EkPub) for the Nitro Trusted Platform Module (NitroTPM) of an Amazon EC2 instance. Amazon EC2 customers can now programmatically retrieve the unique public endorsement key from the NitroTPM of their EC2 instance using the GetInstanceTPMEkPub API. There is no additional cost for using this API other than the cost for the usage of an EC2 instance. NitroTPM EkPub retrieval is available in AWS GovCloud (US) and all AWS Commercial Regions with the exception of Amazon Web Services China (Beijing) Region, operated by Sinnet, Amazon Web Services China (Ningxia) Region, operated by NWCD. To learn more abou…

Amazon RDS for SQL Server now supports SQL Server Analysis Services (SSAS) in Multidimensional mode for SQL Server 2019. There is no additional cost to install SSAS directly on your Amazon RDS for SQL Server DB instance. SSAS is a Microsoft Business Intelligence tool for developing enterprise-level Online Analytical Processing (OLAP) solutions. You can now configure Microsoft SQL Server Analysis Services (SSAS) in Multidimensional mode on Amazon RDS for SQL Server with SQL Server 2019 version 15.00.4153 or higher. Amazon RDS supports SSAS in the Single-AZ configuration for SQL Server Standard and Enterprise Editions. Learn more about how to configure SSAS in RDS from thi…

Amazon Personalize now makes it easier than ever to remove users from your datasets with a new deletion API. Amazon Personalize uses datasets provided by customers to train custom personalization models on their behalf. This new capability allows you to delete records about users from your datasets including user metadata and user interactions. This helps to maintain data for your compliance programs and keep your data current as your user base changes. Once the deletion is complete, Personalize will no longer store information about the deleted users and therefore will not consider the user for model training. Using the new deletion API is easy. Simply upload a CSV file…

Customers in AWS Canada West (Calgary) Region can now use AWS Transfer Family. AWS Transfer Family provides fully managed file transfers for Amazon Simple Storage Service (Amazon S3) and Amazon Elastic File System (Amazon EFS) over Secure File Transfer Protocol (SFTP), File Transfer Protocol (FTP), FTP over SSL (FTPS) and Applicability Statement 2 (AS2). In addition to file transfers, Transfer Family offers common file processing steps and enables event-driven automation to modernize managed file transfer (MFT) workflows, helping customers to simplify and migrate their business-to-business file transfer workflows to AWS. To learn more about AWS Transfer Family, visit ou…

Starting today, you can use Amazon Route 53 Resolver DNS Firewall in the Canada West (Calgary) Region. Route 53 Resolver DNS Firewall is a managed firewall that enables customers to block DNS queries made for domains identified as low-reputation or suspected to be malicious, and to allow queries for trusted domains. DNS Firewall is a feature of Route 53 Resolver, which is a recursive DNS server that is available by default in all Amazon Virtual Private Clouds (VPCs) and that responds to DNS queries from AWS resources within a VPC for public DNS records, VPC-specific domain names, and Route 53 private hosted zones. DNS Firewall provides more granular control over the DNS q…

Amazon Pinpoint now offers country rules, a new feature that allows developers to control the specific countries they send SMS and voice messages to. This enhancement helps organizations align their message sending activities to the precise list of countries where they operate. With country rules, developers can tightly manage their message delivery by setting configurations at the account level or by using dedicated configuration sets. This flexibility allows developers to use different country configurations for each API request made through Amazon Pinpoint, ensuring messages are only sent to their approved destinations. The country rules feature is now available in 29 …

AWS Trusted Advisor introduces new API to enable you to programmatically exclude resources from recommendations associated with Trusted Advisor best practice checks. On Nov 17 2023, Trusted Advisor announced the launch of new APIs available to Business, Enterprise On-Ramp, or Enterprise Support customers. This launch adds the BatchUpdateRecommendationResourceExclusions API to this suite of APIs to allow users to exclude specific resources from specific checks programmatically. This capability is only available to via AWS Trusted Advisor APIs, and not available through AWS Support API (SAPI). View the full article

Today, AWS announces the general availability of file commit history in Amazon CodeCatalyst. Customers can now view the file git commit history in the CodeCatalyst’s console. Amazon CodeCatalyst helps teams plan, code, build, test, and deploy applications on AWS. Viewing the history of commits, pertaining to a file, is a way to reduce the effort for developers when trying to understand the history of changes for a codebase. View the full article

Today, Amazon Personalize announces the general availability of two new recipes, User-Personalization-v2 and Personalized-Ranking-v2 (v2 recipes). Built on Transformers architecture, these new recipes support catalogs with up to 5 million items with lower inference latency. Amazon Personalize testing showed that v2 recipes improved recommendation accuracy by up to 9% and recommendation coverage by up to 1.8x compared to previous versions. A higher coverage means Amazon Personalize recommends more of your catalog. These new recipes also support item metadata like genres and descriptions in inference responses, allowing customers to easily enrich recommendations in their us…

Amazon Connect Contact Lens now provides managers with generative AI-powered recommendations for answers to questions in agent evaluation forms, enabling them to perform evaluations faster and more accurately. Managers now receive additional agent behavioral insights (e.g., did the agent show empathy while delivering bad news?) and will get context and justification for the recommended answers (reference points from the transcript that were used to provide answers). View the full article

Amazon Chime SDK Voice Connector audio streaming now supports G.711 A-law encoded audio. With this update, companies can stream audio to AWS from their phone systems using session initiation protocol recording (SIPREC) with G.711 A-law encoded audio. View the full article

Foundational models (FMs) are trained on large volumes of data and use billions of parameters. However, in order to answer customers’ questions related to domain-specific private data, they need to reference an authoritative knowledge base outside of the model’s training data sources. This is commonly achieved using a technique known as Retrieval Augmented Generation (RAG). By fetching data from the organization’s internal or proprietary sources, RAG extends the capabilities of FMs to specific domains, without needing to retrain the model. It is a cost-effective approach to improving model output so it remains relevant, accurate, and useful in various contexts. Knowledg…

Amazon Chime SDK Voice Connector audio streaming now supports G.711 A-law encoded audio. With this update, companies can stream audio to AWS from their phone systems using session initiation protocol recording (SIPREC) with G.711 A-law encoded audio. Businesses use Amazon Chime SDK Voice Connector audio streaming to send call audio from their phone systems to AWS for real-time and post-call analytics, machine learning (ML) and natural language processing, call recording, and other business processes. This helps businesses build analytics and compliance solutions that help improve customer experiences using real-time ML-powered conversation insights derived from their stre…

Amazon Connect Contact Lens now provides managers with generative AI-powered recommendations for answers to questions in agent evaluation forms, enabling them to perform evaluations faster and more accurately. Managers now receive additional agent behavioral insights (e.g., did the agent show empathy while delivering bad news?) and will get context and justification for the recommended answers (reference points from the transcript that were used to provide answers). These generative AI-powered recommendations are built using Amazon Bedrock and are available in US West (Oregon) and US East (North Virginia) regions in the English language. To learn more, please visit our do…

Today, Amazon Personalize announces the general availability of two new recipes, User-Personalization-v2 and Personalized-Ranking-v2 (v2 recipes). Built on Transformers architecture, these new recipes support catalogs with up to 5 million items with lower inference latency. Amazon Personalize testing showed that v2 recipes improved recommendation accuracy by up to 9% and recommendation coverage by up to 1.8x compared to previous versions. A higher coverage means Amazon Personalize recommends more of your catalog. These new recipes also support item metadata like genres and descriptions in inference responses, allowing customers to easily enrich recommendations in their us…

AWS B2B Data Interchange now automatically generates 997 functional acknowledgements and TA1 interchange acknowledgements in response to all relevant inbound X12 electronic data interchange (EDI) transactions. These acknowledgements are used to confirm receipt of individual transactions and to report errors. With this launch, you can now automate delivery of 997 and TA1 acknowledgements to trading partners that require them. Each acknowledgement generated by AWS B2B Data Interchange is stored in Amazon S3, alongside your transformed EDI, and emits an Amazon EventBridge event. You can use these events to automatically send the acknowledgement generated by AWS B2B Data Inte…

Beginning today, customers can use Amazon Bedrock in the Asia Pacific (Mumbai) region to easily build and scale generative AI applications using a variety of foundation models (FMs) as well as powerful tools to build generative AI applications. Amazon Bedrock is a fully managed service that offers a choice of high-performing large language models (LLMs) and other FMs from leading AI companies like AI21 Labs, Anthropic, Cohere, Meta, Mistral AI, Stability AI, as well as Amazon via a single API. Amazon Bedrock also provides a broad set of capabilities customers need to build generative AI applications with security, privacy, and responsible AI built in. These capabilities h…

Knowledge Bases for Amazon Bedrock securely connects foundation models (FMs) to internal company data sources for Retrieval Augmented Generation (RAG), to deliver more relevant and accurate responses. Today, we are announcing vector storage support for MongoDB Atlas in Knowledge Bases (KB) for Amazon Bedrock. Knowledge Bases’ native integration with vector databases allows you to innovate and create unique vector search based experiences, mitigating the need to build custom data source integrations. Vector search allows you to generate deep and accurate insights and find specific information from a corpus of documents. With this launch, your MongoDB Atlas vector database…

AWS Trusted Advisor introduces new API to enable you to programmatically exclude resources from recommendations associated with Trusted Advisor best practice checks. On Nov 17 2023, Trusted Advisor announced the launch of new APIs available to Business, Enterprise On-Ramp, or Enterprise Support customers. This launch adds the BatchUpdateRecommendationResourceExclusions API to this suite of APIs to allow users to exclude specific resources from specific checks programmatically. This capability is only available to via AWS Trusted Advisor APIs, and not available through AWS Support API (SAPI). Trusted Advisor continuously evaluates your AWS environment using best practice …

Today, AWS announces the general availability of file commit history in Amazon CodeCatalyst. Customers can now view the file git commit history in the CodeCatalyst’s console. Amazon CodeCatalyst helps teams plan, code, build, test, and deploy applications on AWS. Viewing the history of commits, pertaining to a file, is a way to reduce the effort for developers when trying to understand the history of changes for a codebase. To learn more, check out our documentation on or visit our webpage.View the full article

Starting today, you can check when your Amazon Machine Images (AMIs) were last used to launch EC2 instances by simply describing your AMIs, enabling you to efficiently filter and track your active AMIs. View the full article

Starting today, you can prevent Amazon Machine Images (AMIs) from accidental deregistration by marking them as protected. A protected AMI cannot be deregistered until you explicitly disable deregistration protection. View the full article

Today, Amazon Pinpoint announces support for outbound multimedia messaging service (MMS) within the United States and Canada. The addition of MMS allows Amazon Pinpoint users to enhance their customer communication experiences with the ability to combine traditional text-only messaging with rich media content such as images, audio, and video files. View the full article

Starting today, you can enable Route 53 Resolver DNS Firewall to automatically skip the inspection of domains included in a domain redirection chain, such as Canonical Name (CNAME) and Delegation Name (DNAME), thus avoiding the need to explicitly specify each domain from the chain in your Route 53 DNS Firewall rules when allow-listing domains. View the full article

Amazon CodeCatalyst integrates continuous integration and deployment (CI/CD) by bringing key development tools together on one platform. With the entire application lifecycle managed in one tool, CodeCatalyst empowers rapid, dependable software delivery. CodeCatalyst offers a range of actions which is the main building block of a workflow, and defines a logical unit of work to perform during a workflow run. Typically, a workflow includes multiple actions that run sequentially or in parallel depending on how you’ve configured them. Introduction Infrastructure as code (IaC) has become a best practice for managing IT infrastructure. IaC uses code to provision and manage y…

You can now enable agent screen recording when your VDI environment is configured to allow multiple agents to connect concurrently to the same Windows instance (multi-session VDI). This makes it even easier and more cost effective for you to help agents improve their performance when using Amazon Connect in a multi-session VDI environment. View the full article

Amazon EFS file systems now support up to 1.5 GiB/s of throughput per client, a 3x increase over the previous limit of 500 MiB/s. With this launch, you now have a simpler way to run throughput-intensive file workloads on AWS. View the full article

Starting today, you can configure your DNS Firewall to automatically trust all domains in a resolution chain (such as aCNAME, DNAME, or Alias chain). Let’s walk through this in nontechnical terms for those unfamiliar with DNS. Why use DNS Firewall? DNS Firewall provides protection for outbound DNS requests from your private network in the cloud (Amazon Virtual Private Cloud (Amazon VPC)). These requests route through Amazon Route 53 Resolver for domain name resolution. Firewall administrators can configure rules to filter and regulate the outbound DNS traffic. DNS Firewall helps to protect against multiple security risks. Let’s imagine a malicious actor managed t…

Starting today, you can check when your Amazon Machine Images (AMIs) were last used to launch EC2 instances by simply describing your AMIs, enabling you to efficiently filter and track your active AMIs. Prior to today, you had to write complex scripts to query which of your AMIs were actively used to launch instances. These scripts became increasingly cumbersome and error-prone as the number of AMIs grew. Now you can easily verify if your AMIs are active - based on when they were used to launch instances - by simply describing those AMIs. You can now easily create advanced filtering scripts through which you can track your active AMIs at-scale and make informed decisions …

Starting today, you can prevent Amazon Machine Images (AMIs) from accidental deregistration by marking them as protected. A protected AMI cannot be deregistered until you explicitly disable deregistration protection. Prior to today, you could recover accidentally deregistered AMIs by onboarding onto Recycle Bin. However, if the AMIs were actively being used to launch instances, unintentional deregistrations could lead to production outages until you recovered those AMIs from Recycle Bin. Now by marking your critical AMIs as protected, you can proactively safeguard your AWS environments against accidental AMI deregistrations. To further safeguard your environments, you can…

Amazon EMR Serverless is a serverless option in Amazon EMR that makes it simple for data engineers and data scientists to run open-source big data analytics frameworks without configuring, managing, and scaling clusters or servers. An EMR Serverless application uses workers to execute workloads, allowing users to configure ephemeral storage per worker based on the workload's needs. Today, we are excited to introduce Shuffle-optimized disks on Amazon EMR Serverless, offering increased storage capacity (up to 2TB) and higher IOPS delivering better performance for I/O-intensive Spark and Hive workloads. Shuffle is a fundamental step in an Apache Spark or Apache Hive job, inv…

You can now enable agent screen recording when your VDI environment is configured to allow multiple agents to connect concurrently to the same Windows instance (multi-session VDI). This makes it even easier and more cost effective for you to help agents improve their performance when using Amazon Connect in a multi-session VDI environment. You can enable agent screen recording for multi-session VDI by deploying the latest version of the screen recording client application. Amazon Connect automatically creates separate agent screen recordings for each agent that is logged into the same desktop, which you can view directly in the Amazon Connect web UI, alongside call record…

Today, Amazon Pinpoint announces support for outbound multimedia messaging service (MMS) within the United States and Canada. The addition of MMS allows Amazon Pinpoint users to enhance their customer communication experiences with the ability to combine traditional text-only messaging with rich media content such as images, audio, and video files. To get started, navigate to the phone number page on your Amazon Pinpoint SMS console. This page provides the option to purchase a new phone number with SMS and MMS capability, or to check MMS eligibility on an existing US or Canadian Pinpoint SMS phone number. To submit a new MMS registration request, follow the existing toll…

Amazon EFS file systems now support up to 1.5 GiB/s of throughput per client, a 3x increase over the previous limit of 500 MiB/s. With this launch, you now have a simpler way to run throughput-intensive file workloads on AWS. Amazon EFS provides serverless, fully elastic file storage that simplifies setting up and running file workloads in the AWS cloud. Starting today, Amazon EFS file systems can now deliver up to 1.5 GiB/s of throughput to a single Amazon EC2 instance or Amazon EKS pod. This performance boost especially benefits throughput-intensive workloads – such as financial analytics, genomics, and video transcoding – that drive high levels of throughput from one o…

Starting today, you can enable Route 53 Resolver DNS Firewall to automatically skip the inspection of domains included in a domain redirection chain, such as Canonical Name (CNAME) and Delegation Name (DNAME), thus avoiding the need to explicitly specify each domain from the chain in your Route 53 DNS Firewall rules when allow-listing domains. Before today, when allow-listing domains, Route 53 DNS Firewall compared every DNS query from your VPC against the domains in the allow-list associated to a DNS Firewall rule. If an incoming query was for a domain present in a redirection chain (e.g. CNAME) that was not included in your allow-list of domains, DNS Firewall would bloc…

Amazon CloudWatch is excited to announce a resource filtering capability for cross-account observability, providing customers with the flexibility to share a subset of their logs or metrics across multiple AWS accounts using configurable filters. Cross-account observability in Amazon CloudWatch allows you to seamlessly search, visualize, and analyze all your metrics and logs, without any account boundaries. With today's launch, you can include or exclude logs and metrics shared across accounts, allowing you to make analysis specific to certain logs and metrics to identify trends and insights. This will help customers to efficiently monitor and troubleshoot issues affectin…

AWS Launch Wizard now allows you to automate deployment of SAP Web Dispatcher. This launch expands on existing Launch Wizard capabilities that allow you to automate deployment of SAP HANA, SAP NetWeaver based applications on HANA and ASE databases, SAP BW/4HANA, SAP S/4HANA, and SAP S/4HANA foundations using APIs or a console-based approach. View the full article

We are excited to announce AWS HealthOmics private workflows now support file systems that dynamically scale with your workflow. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data to generate insights to improve health and drive scientific discoveries. With this release, customers can now choose between static and dynamic run storage options. View the full article

Amazon Location Service has released a Places plugin for MapLibre GL JS Geocoder, simplifying the integration of Amazon Location Places Service with MapLibre. Along with the authentication libraries, this plugin provides a frictionless experience to use Amazon Location Places with MapLibre GL JS. View the full article

We are excited to announce AWS HealthOmics now supports the ability to share HealthOmics workflows across AWS accounts. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data, and generate insights to improve health and drive scientific discoveries. With this release, customers can now develop analyses within a single AWS account and share them with other AWS accounts in the same organization or across organizations. View the full article

We are excited to announce public availability of an enhanced dataset discovery workflow for AWS Mainframe Modernization File Transfer with BMC. This new capability makes it easier for users to discover and select mainframe data sets for conversion and transfer to AWS. Users can now browse the mainframe data set catalog directly from the AWS Mainframe Modernization service console, select data sets from one or multiple mainframe volumes for transfer, view extended data set metadata, and choose data set codepage conversions. The enhanced workflow provides an intuitive and unified mechanism for mainframe data access and transfer. View the full article

Today, AWS AppFabric announces support for three new data sources: Salesforce, Azure Monitor, and Google Analytics. Starting now, IT administrators and security analysts can use AppFabric to quickly integrate with 29 supported SaaS applications, aggregate enriched and normalized SaaS audit logs, and audit end-user access across their SaaS apps. View the full article

Today, Amazon Timestream for LiveAnalytics announces Timestream Compute Unit (TCU), serverless compute capacity, for customers to predict and control query costs. With TCUs, you are charged for the duration of compute units (TCU) used by your queries, and there are no minimum bytes metered for queries. View the full article

Amazon EventBridge Pipes now supports event delivery through AWS PrivateLink, allowing you to send events from an event source located in an Amazon Virtual Private Cloud (VPC) to a Pipes target without traversing the public internet. With today’s launch, you can use Pipes to poll from Amazon Managed Streaming for Apache Kafka (MSK), self-managed Kafka, and Amazon MQ sources residing in a private subnet without the need to deploy a NAT gateway, configure firewall rules, or set up proxy servers. View the full article

Editors note April 30, 2024: The information in this post is outdated and the solution has been retired. For more solutions using AWS services, see the AWS Solutions Library. The new version of the AWS Ops Automator, a solution that enables you to automatically manage your AWS resources, features vertical scaling for Amazon EC2 instances. With vertical scaling, the solution automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. The solution can resize your instances by restarting your existing instance with a new size. Or, the solution can resize your instances by replacing your existing instance with a new, resized insta…

Welcome to April’s post announcing new training and certification updates — helping equip you and your teams with the skills to work with AWS services and solutions. This month, we launched 19 new digital training products on AWS Skill Builder, including two new AWS Digital Classroom courses (Digital Classroom – Developing Generative AI Applications on AWS and Digital Classroom – Security Engineering on AWS), nine new digital courses, two new AWS Partner courses (both include an Accreditation Badge to be awarded upon successful completion of the final assessment), and localized versions (Japanese, Korean, Simplified Chinese) of Exam Prep: AWS Certified Advanced Networking…

Today, AWS announces the general availability of RubyGems support in CodeArtifact. Gems, which are used to distribute Ruby libraries, can now be stored in CodeArtifact. Popular tools including the RubyGems and Bundler CLIs can be used to publish and download gems from CodeArtifact repositories. Developers can configure CodeArtifact to fetch gems from RubyGems.org, the Ruby community’s gem hosting service. When a RubyGems package manager is connected to a CodeArtifact repository, CodeArtifact will automatically fetch gems requested by the client from RubyGems.org and store them in the CodeArtifact repository. By storing both private first-party gems and public, third-party…

Today, AWS announces general availability of Amazon Q data integration, a new generative AI–powered capability of Amazon Q Developer that enables you to build data integration pipelines using natural language. Amazon Q Developer is the AWS expert to assist you with all of your development tasks. Amazon Q data integration is a new chat experience specifically for AWS Glue, design for authoring and troubleshooting data integration pipelines. Through conversations with Amazon Q, you can author AWS Glue jobs, troubleshoot issues, and get expert assistance for AWS Glue and data integration. Tell Amazon Q what you need in English and it will generate AWS Glue jobs to integrates…

Amazon EventBridge Pipes now supports event delivery through AWS PrivateLink, allowing you to send events from an event source located in an Amazon Virtual Private Cloud (VPC) to a Pipes target without traversing the public internet. With today’s launch, you can use Pipes to poll from Amazon Managed Streaming for Apache Kafka (MSK), self-managed Kafka, and Amazon MQ sources residing in a private subnet without the need to deploy a NAT gateway, configure firewall rules, or set up proxy servers. Amazon EventBridge lets you use events to connect application components, making it easier to build scalable event-driven applications. EventBridge Pipes provides a simple, consiste…

Amazon Q in QuickSight is now generally available. The Generative BI capabilities of Amazon Q in QuickSight help business analysts and business users easily build and consume insights using natural language. Amazon Q in QuickSight reinvents BI, allowing business users to quickly distill key insights from data to inform business decisions, while accelerating the work of business analysts, so organizations can become data-driven. You can prompt Amazon Q using a few words to generate a sharable document or presentation in moments that explains data, extracts key insights and visuals, and recommends best actions to improve your business. A new data Q&A experience provides…

Today, AWS announces the general availability of Amazon Q Business and the preview of Amazon Q Apps, a new Amazon Q Business capability. Amazon Q Business revolutionizes the way that employees interact with organizational knowledge and enterprise systems. It helps users get comprehensive answers to complex questions and take actions in a unified, intuitive web-based chat experience—all using an enterprise’s existing content, data, and systems. Amazon Q Business connects seamlessly to over 40 popular enterprise systems, including Amazon Simple Storage Service (Amazon S3), Microsoft 365, and Salesforce. It ensures that users access content securely with their existing crede…

AWS Launch Wizard now allows you to automate deployment of SAP Web Dispatcher. This launch expands on existing Launch Wizard capabilities that allow you to automate deployment of SAP HANA, SAP NetWeaver based applications on HANA and ASE databases, SAP BW/4HANA, SAP S/4HANA, and SAP S/4HANA foundations using APIs or a console-based approach. SAP Web Dispatcher helps you achieve optimal utilization of resources including load balancing, session management, and URL filtering for your SAP applications. This launch supports deployment of SAP Web Dispatcher alongside SAP HANA and SAP NetWeaver deployments in single-node, distributed, and high availability(HA) architecture patt…

We are excited to announce AWS HealthOmics private workflows now support file systems that dynamically scale with your workflow. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data to generate insights to improve health and drive scientific discoveries. With this release, customers can now choose between static and dynamic run storage options. Dynamic run storage automatically scales storage up and down based on file system utilization during a private workflow run and ensures your workflow always has sufficient storage provisioned. This enables faster workflow startup times and is ideal fo…

Amazon OpenSearch Service now supports Amazon Route 53 alias records for defining custom domain endpoints. Alias records provide better flexibility when configuring routing to AWS resources. For more information about Route 53 alias records, please see documentation. Previously, customers had to create a CNAME type DNS record to point their custom DNS domain name to the search endpoint exposed by OpenSearch Service. With this launch, along with CNAME support, customers can create a Route 53 alias record of either IPv4 or IPv6 type for their preferred custom endpoint, and point it to their domain’s dual-stack search endpoint. In order to create a Route53 alias record, cust…

Starting today, the Amazon CloudWatch metrics for monitoring AWS Config data usage will display only billable usage. With this enhancement, non-billable usage will no longer be displayed in both the Amazon CloudWatch Config metrics and AWS Config console. This allows you to validate AWS Config setup and usage using Amazon CloudWatch metrics and correlate billable usage with associated costs. AWS Config monitors resource configuration changes by generating a configuration item (CI) for each recorded resource type. Additionally, if a resource is not configured to be recorded, AWS Config captures only the creation and deletion of that resource, and no other details, at no co…

Today, AWS Security Hub announces the release of the AWS Resource Tagging standard. The standard contains 85 new controls which can be used to identify if any of your AWS Resources are missing tag keys required by your organization. With the release of this standard, Security Hub now offers 386 security controls that automatically check the compliance of your AWS resources against pre-defined security principles and best practices. To quickly enable the new standard across your AWS environment, you should use central configuration. This will allow you to enable the standard in some or all of your organization accounts and across all of AWS Regions that are linked to Secur…

Today, AWS announces the general availability of Amazon Q Developer, a generative AI–powered assistant that reimagines your experience across the entire software development lifecycle (SDLC). Amazon Q Developer includes unique, game-changing capabilities that allow developers to offload time-consuming, manual tasks inside or outside of AWS. Amazon Q Developer capabilities include Q&A and diagnosing common errors in the AWS Management Console, Amazon Q data integration which enables you to build data integration pipelines using natural language, conversational coding and inline code generation in the IDE, and Amazon Q Developer Agent for software development in the IDE…

Today, Amazon Timestream for LiveAnalytics announces Timestream Compute Unit (TCU), serverless compute capacity, for customers to predict and control query costs. With TCUs, you are charged for the duration of compute units (TCU) used by your queries, and there are no minimum bytes metered for queries. Amazon Timestream for LiveAnalytics is a serverless time-series database that automatically scales to ingest and analyze gigabytes of time-series data. With Timestream Compute Units, you can leverage the pay-per-use pricing with the ability to control the number of TCUs used by your queries, providing the ability to control query costs and adhere to budgets. As the compute …

Amazon DynamoDB now supports an AWS Fault Injection Service action to pause replication for global tables. FIS is a fully managed service for running controlled fault injection experiments to improve an application’s performance, observability, and resilience. Global tables replicate your Amazon DynamoDB tables automatically across your choice of AWS Regions to achieve fast, local read and write performance. Customers can use the new FIS action to observe how their application responds to a pause in regional replication, and tune their monitoring and recovery process to improve resiliency and application availability. Global tables are designed to meet the needs of high a…

We are excited to announce AWS HealthOmics now supports the ability to share HealthOmics workflows across AWS accounts. AWS HealthOmics is a fully managed service that empowers healthcare and life science organizations to store, query, analyze omics data, and generate insights to improve health and drive scientific discoveries. With this release, customers can now develop analyses within a single AWS account and share them with other AWS accounts in the same organization or across organizations. With this feature, customers can now share analyses that are defined as HealthOmics private workflows with both internal and external collaborators. Users can then start runs with…

Amazon Titan Text Embeddings V2, a new embeddings model in the Amazon Titan family of models, is now generally available in Amazon Bedrock. Using Titan Text Embeddings V2, customers can perform various natural language processing (NLP) tasks by representing text data as numerical vectors, known as embeddings. These embeddings capture the semantic and contextual relationships between words, phrases, or documents in a high-dimensional vector space. This model is optimized for Retrieval-Augmented Generations (RAG) use cases and is also well suited for a variety of other tasks such as information retrieval, question and answer chatbots, classification, and personalized recomm…

Amazon RDS for MySQL now supports MySQL Innovation Release 8.3 in the Amazon RDS Database Preview Environment, allowing you to evaluate the latest Innovation Release on Amazon RDS for MySQL. You can deploy MySQL 8.3 in the Amazon RDS Database Preview Environment that has the benefits of a fully managed database, making it simpler to set up, operate, and monitor databases. MySQL 8.3 is the latest Innovation Release from the MySQL community. MySQL Innovation releases include bug fixes, security patches, as well as new features. MySQL Innovation releases are supported by the community until the next major & minor release, whereas MySQL Long Term Support (LTS) Releases, s…

Today, AWS AppFabric announces support for three new data sources: Salesforce, Azure Monitor, and Google Analytics. Starting now, IT administrators and security analysts can use AppFabric to quickly integrate with 29 supported SaaS applications, aggregate enriched and normalized SaaS audit logs, and audit end-user access across their SaaS apps. AWS AppFabric quickly connects SaaS applications with security tools like Barracuda XDR, Dynatrace, Logz.io, Netskope, NetWitness, Rapid7, and Splunk, or data lakes like Amazon Security Lake. With AppFabric, IT and security teams can more easily manage and secure SaaS applications by aggregating and normalizing log data into a cen…

Starting today, AWS WAF is available in the AWS Canada West (Calgary) Region. This is the second Region in Canada where AWS WAF is available, joining the AWS Canada (Central) Region, and giving customers more choice and flexibility. AWS WAF is a web application firewall that helps you protect your web application resources against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. You can protect Amazon CloudFront distributions and Application Load Balancer in the AWS Canada West (Calgary) Region. Support for other AWS resource types, such as Amazon API Gateway REST APIs, is expected later. With AWS WAF, you can…

Today, AWS announced the opening of a new AWS Direct Connect location within the CyrusOne Aurora data center in Aurora, Illinois. By connecting your network to AWS at the new Illinois location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones. This is the third AWS Direct Connect site within Chicago Metropolitan area and the 43rd site in the United States. The Direct Connect service enables you to establish a private, physical network connection between AWS and your data center, office, or colocation environment. These private connections can provide a more consistent network experience than thos…