You can now encrypt AWS X-Ray data with your own keys that you manage through AWS Key Management Service (KMS).
Amazon CloudFront announces the addition of a third Edge Location in Singapore and second Edge location in Taipei, Taiwan. Every Edge Location that we add to the AWS infrastructure increases CloudFront's capacity to serve secure content with low latency and high availability, around the world. A full list of CloudFront’s global infrastructure can be seen on the CloudFront Details webpage.
Amazon Redshift announces Dense Compute (DC2) nodes in the AWS GovCloud (US) Region with twice the performance as DC1 at the same price
You can now launch Amazon Redshift clusters on our second-generation Dense Compute (DC2) nodes in the AWS GovCloud (US) Region. DC2 nodes deliver up to twice the performance as the previous generation DC1 nodes, at the same price.
Amazon Polly is a service that turns text into lifelike speech, allowing you to create applications that talk, and to build entirely new categories of speech-enabled products. The Text-to-Speech API is now an AWS HIPAA Eligible Service
You can now record configuration changes to AWS Elastic Beanstalk resource types using AWS Config. AWS Elastic Beanstalk is a service for deploying and scaling web applications and services developed in multiple languages. You upload your code and Elastic Beanstalk automatically handles the deployment from capacity provisioning, load balancing, auto-scaling to application health monitoring. With Config, you can track changes to Elastic Beanstalk applications, application versions, environments, and all the resources configured within that environment. For example, you can view changes to your environment platform version, deployment and scaling policies, health policies, and tags. This information is useful for audit and compliance use cases in enterprises.
You can now use AWS Glue in the Asia Pacific (Mumbai) AWS region.
Today, AWS Auto Scaling is introducing two enhancements to provide more flexibility and visibility when you scale application resources: scaling plans based on resource tags and a new scaling dashboard.
The AWS Certified Security – Specialty exam is here. This new exam allows experienced cloud security professionals to demonstrate and validate their knowledge of how to secure the AWS platform.
About the exam
The security exam covers incident response, logging and monitoring, infrastructure security, identity and access management, and data protection. It validates understanding of specialized data classifications, data encryption methods, and secure Internet protocol, and the AWS mechanisms to implement them.
The exam is open to anyone who currently holds a Cloud Practitioner or Associate-level certification. We recommend candidates have five years of IT security experience designing and implementing security solutions, and at least two years of hands-on experience securing AWS workloads.
Please contact us if you have questions about exam registration.
AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud. With this launch, CloudHSM is now available in AWS GovCloud (US). With CloudHSM, you can manage your own encryption keys using FIPS 140-2 Level 3 validated HSMs.
AWS Blockchain Templates provide a fast and easy way to create and deploy secure blockchain networks using open source frameworks. Blockchain is a technology that makes it possible to build applications where multiple parties can record transactions without the need for a trusted, central authority to ensure that transactions are verified and secure. Blockchain enables this by establishing a peer-to-peer network where each participant in the network has access to a shared ledger where the transactions are recorded. These transactions are by design, immutable and independently verifiable.
Amazon Athena is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. Athena is serverless, so there is no infrastructure to manage, and you pay only for the queries that you run. Today, we are releasing a new JDBC driver with features such as Array data type support, bug fixes, and performance improvements.
The 2.x version of the driver is a major version upgrade from the last version. A complete list of enhancements is available in the release notes. We recommend that you review the changes between the old (1.x) and the new (2.x) driver documented in the migration guide before using it on production systems. In addition to the JDBC driver, customers can connect to Amazon Athena using an ODBC Driver, an API, or via the AWS Console.
Identify Opportunities for Amazon RDS Cost Savings Using AWS Cost Explorer's Reserved Instance (RI) Purchase Recommendations
Starting today, you can access custom Amazon RDS RI purchase recommendations via AWS Cost Explorer, in addition to Amazon EC2 recommendations.
Amazon EC2 now offers License Included (LI) Amazon Machine Images (AMIs) for Microsoft SQL Server 2017 with Ubuntu and Amazon Linux 2. These AMIs add to the list of previously launched SQL Server 2017 AMIs with Windows Server and Red Hat Enterprise Linux, giving you more flexibility to run SQL Server workloads on your preferred operating system in Amazon EC2. To get started with SQL Server on Linux, you can follow the steps listed here.
Starting today, Amazon DynamoDB encryption at rest is available in 10 additional regions: US West (N. California), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), EU (London), EU (Frankfurt), and South America (Sao Paulo). With the latest release, DynamoDB encryption at rest is now available in 14 regions including EU (Ireland), US East (N. Virginia), US East (Ohio), and US West (Oregon).
Starting today, AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, simplifies Domain Name System (DNS) troubleshooting by enabling access to its DNS Audit event logs. You can now audit your AWS Managed Microsoft AD DNS events, making it easier to identify and troubleshoot DNS issues.
AWS Config and AWS Firewall Manager now support new multi-account features by integrating with AWS Organizations. With the new AWS Config multi-account data aggregation capability, Organizations administrators can now get an organization-wide view of their compliance status. AWS Firewall Manager enables Organizations administrators to centrally configure and manage AWS WAF rules across accounts in their organization.
The Registry of Open Data on AWS (RODA) makes it easy for people to find datasets that are publicly available through AWS. When data is shared on AWS, anyone can analyze it without needing to download or store it, which allows users to spend more time on analysis rather than acquisition. RODA is available now at https://registry.opendata.aws/
With AWS Elemental MediaLive you can now output live channels as RTMP (Real-Time Messaging Protocol) and RTMPS, which is the encrypted version of the protocol (Secure, over SSL/TLS). RTMP is the preferred protocol for sending live streams to popular social platforms which means you can send live channel content to social and sharing platforms in a secure and reliable way while continuing to stream to your own website, app or network.
Web and React Native developers can now easily integrate multiple AWS data sources into their apps via AWS AppSync, and utilize real-time data synchronization capabilities in their apps using the new GraphQL capabilities of the API category in AWS Amplify.
GraphQL is a descriptive data query language for APIs, and it simplifies creating frontend applications that interact with backend services. AWS Amplify can integrate with any GraphQL provider to perform queries and real-time data subscriptions via it's easy to use GraphQL client.
GraphQL support is the latest addition to AWS Amplify's service categories, which help developers to build cloud-connected apps easily, iterate quickly and deliver world-class user experiences.
Read more about AWS Amplify GraphQL support in the AWS Amplify Developer Guide.
Starting today, AWS AppSync is generally available (GA). AWS AppSync is an enterprise ready GraphQL service with realtime data and offline programming capabilities.
We are excited to announce the addition of four new free digital courses to our online training portfolio. These courses introduce security and machine learning services launched at April's AWS Summit in San Francisco.
Users of the PostgreSQL-compatible edition of Amazon Aurora can now create quick, efficient database clones. Cloning is useful for a number of purposes including application development, testing, database updates, and running analytical queries.
Amazon CloudWatch Events now supports Amazon SQS FIFO enabling you to natively route events to SQS FIFO queues. To learn more about using Targets with CloudWatch Events, please visit documentation here.
AWS Glue updated its Apache Spark infrastructure to support Apache Spark 2.2.1. This allows you to take advantage of stability fixes and new features available in this version of Apache Spark.
AWS Glue now enables you to set a timeout value on extract, transform, and load (ETL) jobs as a safeguard against runaway jobs.