Amazon Web Services (AWS)

You can now create Amazon Managed Streaming for Apache Kafka (Amazon MSK) provisioned clusters running on AWS Graviton3-based M7g instances or upgrade your existing x-86 based based M5 or T3 instances and replace them with AWS Graviton3-based M7G instances with a single click of a button in the Europe (London) AWS Region. AWS Graviton3 processor based M7G instances on Amazon MSK provisioned clusters allows you to achieve up to 24% compute cost savings and up to 29% higher write and read throughput over comparable MSK clusters running on M5 instances. Additionally, these instances lower energy consumption by up to 60% than comparable instances, making your Kafka cluster…

This post was co-written with Amy Flanagan, Vice President of Architecture and leader of the Virtual Architecture Team (VAT) at athenahealth, and Anusha Dharmalingam, Executive Director and Senior Architect at athenahealth. athenahealth has embarked on an ambitious journey to modernize its technology stack by leveraging AWS’s hybrid cloud solutions. This transformation aims to enhance scalability, performance, and developer productivity, ultimately improving the quality of care provided to its patients. athenahealth’s core products, including revenue cycle management, electronic health records, and patient engagement portals, have been built and refined over 25 years.…

Solution overview When you create your applications and want to expose internal API endpoints, you can build your microservices using different compute options such as AWS Lambda, Amazon Elastic Container Service (ECS), and Amazon Elastic Kubernetes Service (Amazon EKS). Then, you can deploy your applications across multiple AWS accounts and multiple Amazon Virtual Private Clouds (VPCs), at which point you need a secure way to connect them. Amazon VPC Lattice enables east-west traffic across accounts, offers service discovery, traffic management, and access controls. When working on Amazon EKS, Amazon VPC Lattice comes with the AWS Gateway API Controller that implements …

AWS CodeBuild now supports managed GitLab self-hosted runners. Customers can configure their CodeBuild projects to receive GitLab CI/CD job events and run them on CodeBuild ephemeral hosts. AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages ready for deployment. This feature allows GitLab jobs to integrate natively with AWS, providing security and convenience through features such as IAM, AWS Secrets Manager, AWS CloudTrail, and Amazon VPC. Customers can access all compute platforms that CodeBuild offers, including Lambda, GPU-enhanced and Arm-based instances. CodeBuild's integration …

Amazon S3 Express One Zone now supports server-side encryption with AWS Key Management Service (SSE-KMS) using customer managed keys. By default, S3 Express One Zone encrypts all objects with server-side encryption using S3 managed keys (SSE-S3). With S3 Express One Zone support for customer managed keys, you have more options to encrypt and manage the security of your data. S3 Bucket Keys are always enabled when you use SSE-KMS with S3 Express One Zone, at no additional cost. With customer managed keys, you can set key policies that govern which IAM roles can decrypt your data and see a full accounting in AWS CloudTrail of the specific keys used to encrypt and decrypt…

Today, AWS announces the general availability of the AWS SDK for Swift, the official AWS solution for accessing Amazon Web Services from applications built with the Swift programming language. Customers can now use AWS SDK for Swift for production workloads. AWS SDK for Swift provides a modern, user-friendly, and native Swift interface for accessing Amazon Web Services from Apple platforms, AWS Lambda, and Linux-based Swift on Server applications. Swift is the modern language of choice for developing natively on Apple devices, and is also widely used on Linux for server and utility purposes. AWS SDK for Swift fully embraces modern Swift language features and provides a…

Today, AWS launched volume discount pricing for AWS Elemental MediaConvert, providing customers with on-demand pricing which scales down as usage of the service goes up. Volume discount pricing takes effect during the September, 2024 billing cycle. With on-demand volume discount pricing, you can save up to 75% off list prices based on your monthly usage. During each monthly billing cycle, your usage will automatically flow through increasingly discounted rates which correspond to usage thresholds of MediaConvert. Basic Tier and Pro Tier usage accrue separately to meet volume discount thresholds each month per region, and each billing cycle restarts the accumulation of …

Today, AWS announces the release of Neuron 2.20, introducing Neuron Kernel Interface (NKI) (beta), a programming interface for AWS Trainium and Inferentia, enabling developers to build optimized compute kernels for new functionalities, optimizations, and science innovations. Additionally, this release introduces NxD Training (beta), a PyTorch-based library enabling efficient distributed training, with a user-friendly interface compatible with NeMo. This release also introduces support for the JAX framework (beta). AWS Neuron is the SDK for AWS Inferentia and Trainium based instances purpose-built for generative AI. Neuron integrates with popular ML frameworks like PyTo…

AWS Elastic Disaster Recovery (AWS DRS) now supports recovery to AWS Local Zones. This feature allows you to set your recovery target to be within an AWS Local Zone. AWS DRS minimizes downtime and data loss with fast, reliable recovery of on-premises and cloud-based applications using affordable storage, minimal compute, and point-in-time recovery. With this release, customers can launch recovered instances in a geography closer to their end users and data sources, which means lower latency and maintenance of data residency. This new capability adds support for all AWS Local Zones that are available in AWS Regions where AWS DRS is available. See the AWS Regional Ser…

Amazon Keyspaces (for Apache Cassandra) is a scalable, serverless, highly available, and fully managed Apache Cassandra-compatible database service that offers 99.999% availability. Today, Amazon Keyspaces added the capability to add columns to existing multi-Region tables. With this launch, you can modify the schema of your existing multi-Region tables to add new columns. You only have to modify the schema of a multi-Region table in one of its replica regions and Keyspaces will replicate the new schema to the other regions where the table exists. Adding columns to multi-Region tables gives you the flexibility to update your data model seamlessly as your business and a…

AWS Amplify now supports asynchronous AWS Lambda invocations from your AWS AppSync API. This new feature allows you to invoke Lambda functions asynchronously, enabling your API to handle more complex, long-running processes without blocking the response to the client. With asynchronous Lambda invocations, developers can initiate operations like generative AI model inferences, batch processing jobs, or message queuing without blocking the GraphQL API response. This improves application responsiveness and scalability, especially for scenarios where immediate responses are not required or where long-running tasks need to be offloaded. The asynchronous Lambda invocation…

AWS Transfer Family announces higher performance limits for SFTP connectors, with maximum supported file size increased to 150 GB and maximum throughput increased to 100 files per second. SFTP connectors provide fully managed and low-code capability to copy files between remote SFTP servers and Amazon S3. With today’s enhancements, customers can use connectors to easily scale workflows such as media files processing and database migrations that involve transferring large volume of files or larger file sizes over SFTP. Additionally, customers can achieve higher performance using SFTP connectors with remote SFTP servers that support concurrent sessions Increased limit…

AWS Chatbot now enables customers to interact with Amazon Bedrock agents from Slack and Microsoft Teams chat channels. Prior to today, customers had to implement their own ad-hoc ways to integrate their Bedrock agents with their Microsoft Teams and Slack. They needed to develop custom chat applications and integrate it with Bedrock agents. Now with this launch, they can invoke their Bedrock agents from chat channels by connecting the Bedrock agent alias with an AWS Chatbot channel configuration. Once connected, channel members can start using the agent by tagging the agent such as “@aws ask connectorname ...”. AWS Chatbot support for Amazon Bedrock agents in chat ap…

AWS Private Certificate Authority (AWS Private CA) launches General Availability of the Connector for SCEP, which lets you use a managed and secure cloud certificate authority (CA) to enroll mobile devices securely and at scale. Simple Certificate Enrollment Protocol (SCEP) is a protocol widely adopted by mobile device management (MDM) solutions to obtain digital identity certificates from a CA and enroll corporate-issued and bring-your-own-device (BYOD) mobile devices. The Connector for SCEP helps you to reduce your PKI operational costs by using AWS Private CA with SCEP-compatible MDM solutions including, but not limited to, Microsoft Intune and Jamf Pro. The Connect…

Zero-ETL integrations help you derive holistic insights across many applications and break down data silos in your organization, making it simpler to analyze data from different operational databases. Amazon Redshift zero-ETL integrations now support Redshift clusters and Serverless workgroups configured with enhanced VPC routing (EVR). When you use Amazon Redshift enhanced VPC routing, Amazon Redshift forces all COPY and UNLOAD traffic between your warehouse and data repositories through your virtual private cloud (VPC) based on the Amazon VPC service. To learn more and get started with zero-ETL integration, visit the getting started guides for Amazon Redshift. To lea…

Amazon Redshift announces the general availability of Amazon Q generative SQL in Amazon Redshift Query Editor, an out-of-the-box web-based SQL editor for Amazon Redshift. Amazon Q generative SQL simplifies query authoring and increases productivity by allowing you to express queries in natural language and receive SQL code recommendations. Furthermore, it enables you to get insights faster without extensive knowledge of your organization’s complex database schema and metadata. Amazon Q generative SQL uses generative AI to analyze user intent, query patterns, and schema metadata to identify common SQL query patterns directly within Amazon Redshift, accelerating the quer…

AWS announces Amazon Aurora PostgreSQL Optimized Reads in the AWS GovCloud (US) Regions, a new price-performance capability available on new r6gd and r6id instances that delivers up to 8x improved query latency and up to 30% cost savings compared to instances without it, for applications with large datasets that exceed the memory capacity of a database instance. Optimized Reads uses the local NVMe-based SSD block-level storage available on r6gd and r6id instances to store ephemeral data, reducing the data accesses to/from network-based storage offering improved read latency and throughput. These instances host temporary tables on the local storage (instead of network-b…

I’ve always loved the problem of search. At its core, search is about receiving a question, understanding that question, and then retrieving the best answer for it. A long time ago, I did an AI robotics project for my PhD that married a library of plan fragments to a real-world situation, through search. I’ve worked on and built a commercial search engine from the ground up in a prior job. And in my career at AWS, I’ve worked as a solutions architect, helping our customers adopt our search services in all their incarnations. Like many developers, I share a passion for open source. This stems partly from my academic background, where scholars work for the greater good, b…

This post discusses Bottlerocket, a Linux-based open source operating system (OS) that is purpose-built for running containers. We walk through fleet management at scale and how users can benefit from it. We also share how the product roadmap of Bottlerocket is driven based on community and user feedback. The challenges of fleet management with General-Purpose host Operating Systems General-Purpose Operating Systems (GPOS) are designed to accommodate a wide range of applications and use cases, providing a versatile environment for diverse computing needs. However, this inclusivity presents challenges in terms of optimization and fleet management. In environments with a…

Amazon Connect now provides AWS CloudFormation for configuring agent hierarchy structures. You can use CloudFormation templates to programmatically deploy Amazon Connect hierarchy levels in a secure, efficient, and repeatable way, reducing the risk of human error from manual configuration. CloudFormation allows you to track changes over time, apply updates in a controlled and automated manner, and includes version controls so you can easy roll back changes if needed. CloudFormation support for agent hierarchies is available in all AWS regions where Amazon Connect is offered. To learn more about Amazon Connect, the AWS cloud-based contact center, please visit the Amazon…

AWS WAF introduces a new version of Bot Control Managed Rule Group with enhanced features to help customers better manage and protect their web applications from bot activity. This includes: Token reuse detection: Identifies the reuse of WAF tokens across autonomous system numbers (ASNs) and geographic locations, in addition to existing IP-based detection. Customizable sensitivity levels – High, Medium, and Low – enable you to take mitigation actions based on your use cases. For example, customers with mobile users who frequently change IPs may allow higher token reuse, while those with more static applications can enforce stricter controls at lower thresholds. Exp…

Today, Amazon QuickSight is announcing the general availability of Direct Query feature for its Google BigQuery data source. This launch is an extension of the feature here wherein QuickSight launched BigQuery connector support through SPICE (Super-fast, Parallel, In-memory Calculation Engine). Direct Query mode allows customers to perform near real-time querying of their BigQuery data. The feature doesn’t have a limitation on the number of rows or the data size that could be imported for a dataset. Direct queries also enable customers to extract data directly from BigQuery instead of having to cache it in SPICE. Google BigQuery Direct Query functionality in QuickSi…

AWS customers often process petabytes of data using Amazon EMR on EKS. In enterprise environments with diverse workloads or varying operational requirements, customers frequently choose a multi-cluster setup due to the following advantages: Better resiliency and no single point of failure – If one cluster fails, other clusters can continue processing critical workloads, maintaining business continuity Better security and isolation – Increased isolation between jobs enhances security and simplifies compliance Better scalability – Distributing workloads across clusters enables horizontal scaling to handle peak demands Performance benefits – Minimizing Kubernetes …

Amazon Connect now supports AWS CloudFormation for agent status, in addition to other resources used to configure a contact center like routing profiles, queues, Amazon S3 buckets, and AWS Lambda. You can use CloudFormation templates to programmatically deploy Amazon Connect agent statuses in a secure, efficient, and repeatable way, allowing you to ensure consistent configurations. CloudFormation allows you to track changes over time, apply updates in a controlled and automated manner, and includes version controls so you can easy roll back changes if needed. CloudFormation support for agent status is available in all AWS regions where Amazon Connect is offered. To lea…

New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server, providing performance enhancements and security fixes. Amazon RDS for SQL Server now supports these latest minor versions of SQL Server 2019 and 2022 across the Express, Web, Standard, and Enterprise editions. We encourage you to upgrade your Amazon RDS for SQL Server database instances at your convenience. You can upgrade with just a few clicks in the Amazon RDS Management Console or by using the AWS CLI. Learn more about upgrading your database instances from the Amazon RDS User Guide. The new minor versions include: SQL Server 2019 CU28 - 15.0.4385.2 SQL Server 2022 CU14…

Amazon Neptune Database is now available in the AWS Asia Pacific (Jakarta) Region on engine versions 1.1.0.0 and later. You can now create Neptune clusters using R5, R5d, R6g, R6i, X2idn, T3, and T4 instance types in the AWS Asia Pacific (Jakarta) Region. Amazon Neptune Database is a fast, reliable, and fully managed graph database as a service that makes it easy to build and run applications work with highly connected datasets. You can build applications using Apache TinkerPop Gremlin or openCypher on the Property Graph model, or using the SPARQL query language on W3C Resource Description Framework (RDF). Neptune also offers enterprise features such as high availabili…

Amazon Neptune Database is now available in the AWS Europe (Spain) Region on engine versions 1.1.0.0 and later. You can now create Neptune clusters using R5, R5d, R6g, R6i, X2idn, T3, and T4 instance types in the AWS Europe (Spain) Region. Amazon Neptune Database is a fast, reliable, and fully managed graph database as a service that makes it easy to build and run applications work with highly connected datasets. You can build applications using Apache TinkerPop Gremlin or openCypher on the Property Graph model, or using the SPARQL query language on W3C Resource Description Framework (RDF). Neptune also offers enterprise features such as high availability, automated ba…

Amazon Bedrock Knowledge Bases announces support for cross-region inference, an optional feature that enables developers to seamlessly manage traffic bursts by utilizing compute across different AWS Regions. By using cross-region inference, Amazon Bedrock Knowledge Base customers using RetrieveAndGenerate API will be able to get higher throughput limits and enhanced resilience during periods of peak demand. By opting in, developers no longer have to spend time and effort predicting demand fluctuations. Instead, cross-region inference dynamically routes traffic across multiple regions, ensuring optimal availability for each request and smoother performance during high-u…

Amazon Cognito has expanded multi-factor authentication (MFA) functionality to include email as an additional factor. You now have a choice of delivering one-time passwords (OTP) using email, in addition to the preexisting support for text messages (SMS) and time-based one-time passwords (TOTP). You can enable email MFA either as part of the sign in process or as a challenge for adaptive authentication. With Amazon Cognito, it's easier to integrate authentication, authorization, and user management into your web and mobile apps. Amazon Cognito provides authentication for applications with millions of users and supports sign-in with social identity providers such as App…

Amazon Redshift Serverless now allows you to set a higher data warehouse base capacity configuration up to 1024 Redshift Processing Units (RPUs). Amazon Redshift Serverless measures data warehouse capacity in RPUs, and you pay only for the duration of workloads run in RPU-hours on a per-second basis. Previously, the highest base capacity was 512 RPUs. With the new higher base capacity of 1024 RPUs, you now have even more flexibility to support workloads of large complexity, processing terabytes or petabytes in size to accelerate data loading and querying based on your price performance requirements. You now have a base capacity range from 8 to 1024 RPUs. The large base…

This post is co-written with Julien Lafaye from CFM. Capital Fund Management (CFM) is an alternative investment management company based in Paris with staff in New York City and London. CFM takes a scientific approach to finance, using quantitative and systematic techniques to develop the best investment strategies. Over the years, CFM has received many awards for their flagship product Stratus, a multi-strategy investment program that delivers decorrelated returns through a diversified investment approach while seeking a risk profile that is less volatile than traditional market indexes. It was first opened to investors in 1995. CFM assets under management are now $13 …

Amazon Relational Database Service (Amazon RDS) for MySQL zero-ETL integration with Amazon Redshift is now generally available, enabling near real-time analytics and machine learning (ML) on petabytes of transactional data. With this launch, you can create multiple zero-ETL integrations from a single Amazon RDS database, and you can apply data filtering for each integration to include or exclude specific databases and tables, tailoring replication to your needs. You can also use AWS CloudFormation to automate the configuration and deployment of resources needed for zero-ETL integration. Zero-ETL integrations make it simpler to analyze data from Amazon RDS to Amazon Reds…

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available in the AWS Asia Pacific (Hong Kong) and Israel (Tel Aviv) regions. With Amazon Redshift Serverless, all users, including data analysts, developers, and data scientists, can use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity witho…

In the era of digital transformation and data-driven decision making, organizations must rapidly harness insights from their data to deliver exceptional customer experiences and gain competitive advantage. Salesforce and Amazon have collaborated to help customers unlock value from unified data and accelerate time to insights with bidirectional Zero Copy data sharing between Salesforce Data Cloud and Amazon Redshift. In the Part 1 of this series, we discussed how to configure data sharing between Salesforce Data Cloud and customers’ AWS accounts in the same AWS Region. In this post, we discuss the architecture and implementation details of cross-Region data sharing betwe…

The AWS Glue Data Catalog now enhances managed table optimization of Apache Iceberg tables by automatically removing data files that are no longer needed. Along with the Glue Data Catalog’s automated compaction feature, these storage optimizations can help you reduce metadata overhead, control storage costs, and improve query performance. Iceberg creates a new version called a snapshot for every change to the data in the table. Iceberg has features like time travel and rollback that allow you to query data lake snapshots or roll back to previous versions. As more table changes are made, more data files are created. In addition, any failures during writing to Iceberg tab…

Today, we are announcing the availability of sticky session routing on Amazon SageMaker Inference which helps customers improve the performance and user experience of their generative AI applications by leveraging their previously processed information. Amazon SageMaker makes it easier to deploy ML models including foundation models (FMs) to make inference requests at the best price performance for any use case. By enabling sticky sessions, all requests for the same session will be routed to the same instance, allowing your ML application to reuse previously processed information to reduce latency and improve user experience. This is particularly valuable when customer…

AWS Network Firewall now supports AWS PrivateLink. Customers can now access and manage their Network Firewalls privately, without going through the public internet. AWS PrivateLink provides private connectivity between VPCs, AWS services, and on-premises applications, securely over the Amazon network. When AWS PrivateLink is used with AWS Network Firewall, all management and control traffic between clients and Network Firewall flows over a private network. AWS Network Firewall is a managed firewall service that makes it easy to deploy essential network protections for all your Amazon VPCs. Customers can use AWS PrivateLink with Network Firewall in regions where AWS Net…

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) R6in and R6idn instances are available in AWS Region Asia Pacific (Sydney). These sixth-generation network optimized instances, powered by 3rd Generation Intel Xeon Scalable processors and built on the AWS Nitro System, deliver up to 200Gbps network bandwidth, 2x more network bandwidth, and up to 2x higher packet-processing performance over comparable fifth-generation instances. Customers can use R6in and R6idn instances to scale the performance and throughput of network-intensive workloads such as memory-intensive SQL and NoSQL databases, distributed web scale in-memory caches (Memcached, Redis), in-memory databas…

AWS Glue Data Catalog now supports storage optimization of Apache Iceberg tables by automatically removing data files that are no longer needed. Each write to an Iceberg table creates a new snapshot, or version, of a table. In addition, any failures during writing to Iceberg tables will create data files that aren't referenced in snapshots known as “orphan” files that further increases storage costs. AWS Glue catalog’s new storage optimizations along with automated compaction will help you reduce metadata overhead, control storage costs and improve query performance. With this launch, you can enable AWS Glue catalog table optimization to include snapshot and orphan dat…

Today, AWS Backup announces a new AWS Backup Audit Manager control, allowing you to audit and check if a resource's backup data is in a logically air-gapped vault. With this launch, you can assess if a backup was copied inside a logically air-gapped within a specified time frame, and evaluate whether it meets your business or compliance requirements. To use the new AWS Backup Audit Manager control, resources are inside a logically air-gapped vault, simply enable it in your existing AWS Backup Audit Manager frameworks or create a new framework. Once you enable this control, AWS Backup Audit Manager automatically runs it on a daily basis, monitoring if a backup was succ…

Amazon Elastic Container Registry (ECR) now supports dual-layer server-side encryption in the AWS GovCloud (US) Regions. This capability allows you to apply two independent layers of server-side encryption to images stored in Amazon ECR. Dual-layer server-side encryption with keys stored in AWS Key Management Service (DSSE-KMS) enables you to meet stronger compliance and regulatory requirements of applying multiple layers of encryption to your container images. ECR supports server-side encryption of ECR images using either Amazon S3-managed encryption keys or keys stored in Amazon Key Management Service (KMS). This often meets your security requirements as it protects …

Today, AWS announces the general availability of AWS Elemental MediaLive Anywhere, which allows you to run live video transcoding on your on-premises hardware. MediaLive Anywhere brings the cloud control and pay-as-you-go pricing of AWS Elemental MediaLive to compute resources you manage. With MediaLive Anywhere, you can take advantage of MediaLive's centralized configuration, control, and monitoring capabilities while processing live video on premises close to video sources and outputs. With MediaLive Anywhere, you deploy the same broadcast-grade video encoding engine used in AWS Elemental MediaLive on your hardware. MediaLive Anywhere supports a wide range of hardwar…

The AV1 video codec is now supported in the AWS Elemental Media Services. You can use AV1 in AWS Elemental MediaLive, MediaPackage, MediaTailor, and MediaConvert to produce both live and on-demand streams with ad insertion. This launch enables live streaming and packaging of AV1 encoded content, preparation of AV1 VOD assets and ads, and ad insertion into AV1 encoded videos. AV1 provides a lower bitrate with a similar viewing experience when compared to HEVC and AVC, reducing both the bandwidth required to deliver live events and CDN costs. AV1 can also deliver better video quality for viewing on mobile devices and in network constrained environments. AWS Media Serv…

Starting today, AWS Application Migration Service (AWS MGN) provides an action for installing the Trend Micro Vision One Server & Workload Protection Agent on your migrated instances. For each migrated server, you can choose to automatically install the agent to support your security needs. Application Migration Service minimizes time-intensive, error-prone manual processes by automating the conversion of your source servers to run natively on AWS. It also helps simplify modernization of your migrated applications by allowing you to select preconfigured and custom optimization options during migration. This feature is now available in all of the Commercial regio…

While the potential of generative artificial intelligence (AI) is increasingly under evaluation, organizations are at different stages in defining their generative AI vision. In many organizations, the focus is on large language models (LLMs), and foundation models (FMs) more broadly. This is just the tip of the iceberg, because what enables you to obtain differential value from generative AI is your data. Generative AI applications are still applications, so you need the following: Operational databases to support the user experience for interaction steps outside of invoking generative AI models Data lakes to store your domain-specific data, and analytics to exp…

In this blog post, we will highlight how ZS Associates used multiple AWS services to build a highly scalable, highly performant, clinical document search platform. This platform is an advanced information retrieval system engineered to assist healthcare professionals and researchers in navigating vast repositories of medical documents, medical literature, research articles, clinical guidelines, protocol documents, activity logs, and more. The goal of this search platform is to locate specific information efficiently and accurately to support clinical decision-making, research, and other healthcare-related activities by combining queries across all the different types of c…

Amazon EventBridge Pipes now supports AWS Key Management Service (KMS) customer managed keys, allowing you to encrypt Pipes filter patterns, enrichment parameters, and target parameters with your own keys instead of default AWS owned keys. Using keys that you create, own, and manage can satisfy your organization’s security and governance requirements. Amazon EventBridge lets you use events to connect application components, making it easier to build scalable event-driven applications. EventBridge Pipes provides a simple, consistent, and cost-effective way to create point-to-point integrations between event producers and consumers. Pipes enables you to send data from on…

Amazon Redshift now lets you alter sort keys of tables replicated through zero-ETL integration. Sort keys play a crucial role in determining the physical sorting order of rows within a table, and optimizing them can significantly enhance query performance, especially for queries using range-bound filters on sort key columns. Amazon Redshift's zero-ETL integration helps you derive holistic insights across many applications and break down data silos in your organization, making it simpler to analyze data from different operational databases. You can now modify the sort keys of your tables replicated through the zero-ETL integration, and achieve faster and more efficient …

The AWS access portal provides AWS IAM Identity Center users with single sign-on access to all their assigned AWS applications and AWS accounts. Today, AWS IAM Identity Center added support for user preferences on language and visual mode in the AWS access portal. When customers need to access AWS applications and resources through the AWS access portal, having the ability to work with their preferred language and visual mode improves their efficiency and comfort. AWS access portal now supports 12 different language options, allowing users to work in their most natural and comfortable language. Users can now switch the visual mode of their AWS access portal to dark mod…

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is a fully managed service that makes it easy to build and run Kafka clusters on Amazon Web Services (AWS). When working with Amazon MSK, developers are interested in accessing the service locally. This allows developers to test their application with a Kafka cluster that has the same configuration as production and provides an identical infrastructure to the actual environment without needing to run Kafka locally. An Amazon MSK Serverless private DNS endpoint is only accessible from Amazon Virtual Private Cloud (Amazon VPC) connections that have been configured to connect. It isn’t directly resolvable from your loc…