6/6/2024, 12:00:00 AM ~ 6/7/2024, 12:00:00 AM (UTC)

Recent Announcements

AWS AppFabric now supports JumpCloud

AWS AppFabric, a no-code service that quickly integrates with software-as-a-service (SaaS) applications to enhance an organization’s security posture, now supports JumpCloud. AppFabric provides aggregated and normalized audit logs from popular SaaS applications like Slack, Zoom, Salesforce, Atlassian Jira suite, Google Workspace, and Microsoft 365. By centralizing SaaS application data, AppFabric helps teams gain greater visibility into vulnerabilities in a customer’s SaaS environment, enabling them to monitor threats more effectively and respond to incidents faster. IT and security teams no longer need to manage point-to-point SaaS integrations that take time away from higher value tasks, like standardizing alerts or setting common security policies.\n AppFabric’s support for JumpCloud means that customers can now seamlessly ingest JumpCloud log data, along with over 35 other supported applications.

Amazon EC2 C6id instances are now available in South America (São Paulo) region

Starting today, Amazon Elastic Compute Cloud (Amazon EC2) C6id instances are available in the South America (Sao Paulo) Region. These instances are powered by 3rd generation Intel Xeon Scalable Ice Lake processors with an all-core turbo frequency of 3.5 GHz and up to 7.6 TB of local NVMe-based SSD block-level storage. C6id instances are built on AWS Nitro System, a combination of dedicated hardware and lightweight hypervisor, which delivers practically all of the compute and memory resources of the host hardware to your instances for better overall performance and security. Customers can take advantage of access to high-speed, low-latency local storage for compute-intensive workloads, such as batch processing, distributed analytics, high performance computing (HPC), ad serving, highly scalable multiplayer gaming, and video encoding.

Amazon Inspector container image scanning is now available for Amazon CodeCatalyst and GitHub actions

Amazon Inspector now offers native integration with Amazon CodeCatalyst and GitHub actions for container image scanning, allowing customers to assess their container images for software vulnerabilities within their Continuous Integration and Continuous Delivery (CI/CD) tools, pushing security earlier in the software development lifecycle. With this expansion, Inspector now natively integrates with four developer tools including, Jenkins, TeamCity, GitHub actions, and Amazon CodeCatalyst for container image scanning. This feature works with CI/CD tools hosted anywhere in AWS, as well as in on-premise environments and hybrid clouds, providing consistency for developers to use a single solution across all their development pipelines.\n Amazon Inspector is a vulnerability management service that continually scans AWS workloads for software vulnerabilities, code vulnerabilities, and unintended network exposure across your entire AWS Organization. Customers can also use Amazon Inspector to scan container images and other archives, such as zip and TAR, for software vulnerabilities directly from local developer laptops and machines. To learn more about scanning container images hosted anywhere, click here.

Announcing the common control library in AWS Audit Manager

AWS Audit Manager has introduced a common control library that simplifies the process of automating risk and compliance assessments against enterprise controls. This new library enables Governance, Risk, and Compliance (GRC) teams to efficiently map their controls into Audit Manager for evidence collection.\n The new common control library provides pre-defined and pre-mapped AWS data sources, eliminating the need to identify which AWS resources to assess for various controls. It defines AWS-managed common controls based on extensive mapping and reviews by AWS certified auditors, determining the appropriate data sources for evidence collection. With this launch, Audit Manager will also deliver more evidence mappings for controls, including 140 newly supported API calls for additional evidence. You can customize and update all evidence mappings as appropriate for your objectives. The library also reduces the need to implement different compliance standard requirements individually and review data multiple times across different compliance regimes. It identifies common requirements across controls, helping customers understand their audit readiness across multiple frameworks simultaneously. As AWS Audit Manager updates or adds data sources (e.g., additional CloudTrail events or API calls, or newly launched AWS Config rules) or maps additional compliance frameworks to the common controls, customers automatically inherit these improvements. This removes the need for constant updating and provides the benefit of additional compliance frameworks added to the Audit Manager library.

AWS launches Tax Settings API to programmatically manage tax registration information

Today AWS launches AWS Tax Settings API, a new public API service that enables customers to programmatically view, set, and modify tax registration information and associated business legal name and address. This launch allows you to automate tax registration updates as an enhanced offering to the AWS Tax Settings page.\n Previously, customers managing tax registration information could only update tax information from the Tax Settings Page on the AWS Billing Console. Now, the API enables customers to automate setting their tax information while creating bulk accounts instead of manually setting tax registration information for accounts manually. This programmatic support allows customers to build automation around setting and modifying tax registration information. Customers creating accounts using the AWS Account Creation API and other AWS services can now fully automate their account creation process by integrating the tax registration workflow into their overall programmatic account creation process. For further details, visit here.

Amazon OpenSearch Ingestion now supports ingesting streaming data from Amazon MSK Serverless

Amazon OpenSearch Ingestion now allows you to ingest streaming data from Amazon Managed Streaming for Apache Kafka (MSK) Serverless, enabling you to seamlessly index the data from Amazon MSK Serverless clusters in Amazon OpenSearch Service managed clusters or Serverless collections without the need for any third-party data connectors. With this integration, you can now use Amazon OpenSearch Ingestion to perform near- real-time aggregations, sampling and anomaly detection on data ingested from Amazon MSK Serverless, helping you to build efficient data pipelines to power your complex observability and analytics use cases.\n Amazon OpenSearch Ingestion pipelines can consume data from one or more topics in an Amazon MSK Serverless cluster and transform the data before writing it to Amazon OpenSearch Service or Amazon S3. While reading data from Amazon MSK Serverless via Amazon OpenSearch Ingestion, you can configure the number of consumers per topic and tune different fetch parameters for high and low priority data. Furthermore, you can also optionally use AWS Glue Schema Registry to specify your data schema to dynamically read custom data schema at ingest time.

Amazon EC2 instance type finder capability is generally available in AWS Console

Today, Amazon Web Services, announced the availability of Amazon EC2 instance type finder, enabling you to select the ideal Amazon EC2 instance types for your workload. It uses machine learning to help customers make quick and cost-effective selections for instance types, before provisioning workloads. Using the AWS Management Console, customers can specify their workload requirements and get trusted recommendations. Amazon EC2 instance type finder is integrated with Amazon Q, allowing customers to use natural language to specify requirements and get instance family suggestions.\n EC2 has more than 750 instance types and EC2 instance type finder enables customers to easily choose the best option for their workload requirements. It helps customers stay up to date with the latest instance types and allows them to optimize price-performance for their workloads. By using the EC2 instance type finder in Amazon Q and other console experiences, customers can make informed decisions on the best instance types for their workloads, thereby speeding up their AWS development. Customers can get instance family suggestions while in an activity, such as launching an instance. EC2 instance type finder is available in all commercial AWS regions (learn more here). Amazon Q experience is available everywhere builders need it. You can find Amazon Q in the AWS Management Console, documentation, AWS website, your IDE through Amazon CodeWhisperer, or through AWS Chatbot in team chat rooms on Slack or Microsoft Teams. For Regional availability for specific Amazon Q in AWS capabilities, visit the Amazon Q FAQs page.

AWS IoT Device Management adds a unified connectivity metrics monitoring dashboard

Today, AWS IoT Device Management announced the launch of a new connectivity metrics dashboard, enabling customers to easily identify connectivity patterns and configure operational alarms for their device fleet through a unified view. AWS IoT Device Management is a fully managed cloud service that helps you register, organize, monitor, and remotely manage Internet of Things (IoT) devices at scale. With this launch, you can now select and view a range of connectivity metrics sourced from AWS IoT Core and AWS IoT Device Management on a single page.\n The connectivity metrics dashboard consolidates frequently used metrics from AWS IoT Core, such as successful connections, inbound/outbound messages published, and connection request authorization failures. Additionally, you can use the guided workflow to enable AWS IoT Device Management’s Fleet Indexing feature and add widgets for connected device counts, percentage of devices disconnected, and disconnect reasons to the same page. Using the unified dashboard, you can quickly identify potential connectivity and operational problems to reduce the time associated with fleet troubleshooting procedures. To get started with the connectivity metrics dashboard, visit the ‘Monitor’ tab in the AWS IoT console and then select the new ‘Connectivity metrics’ page.

To learn more, visit the AWS IoT Device Management developer guide.

Amazon SageMaker Model Registry now supports machine learning (ML) governance information

Amazon SageMaker now integrates Model Cards into Model Registry, making it easier for customers to manage governance information for specific model versions directly in Model Registry in just a few clicks.\n Today, customers register ML models in Model Registry to manage their models. Now, with this launch, they can register ML model versions early in the development lifecycle, including essential business details and technical metadata. This integration allows customers to seamlessly review and govern models across their lifecycle from a single place. By enhancing the discoverability of model governance information, this update offers customers greater visibility into the model lifecycle from experimentation and training to evaluation and deployment. This streamlined experience ensures that model governance is consistent and easily accessible throughout the development process. This new capability is now available in all AWS regions where SageMaker is present except GovCloud regions. To get started, see SageMaker Model Registry developer guide for additional information.

Amazon CloudWatch GetMetricData API now supports AWS CloudTrail data event logging

Amazon CloudWatch now supports AWS CloudTrail data event logging for the GetMetricData and GetMetricWidgetImage APIs. With this launch, customers have greater visibility into metric retrieval activity from their AWS account for best practices in security and operational troubleshooting.\n CloudTrail captures API activities related to Amazon CloudWatch GetMetricData and GetMetricWidgetImage APIs as events. Using the information that CloudTrail collects, you can identify a specific request to CloudWatch GetMetricData or GetMetricWidgetImage APIs, the IP address of the requester, the requester’s identity, and the date and time of the request. Logging CloudWatch GetMetricData and GetMetricWidgetImage APIs using CloudTrail helps you enable operational and risk auditing, governance, and compliance of your AWS account. AWS CloudTrail logging for the GetMetricData and GetMetricWidgetImage API actions is available now in all AWS commercial Regions. Data logging incurs charges according to AWS CloudTrail Pricing. To learn more about this feature, visit the Amazon CloudWatch documentation page. To enable logging for Amazon CloudWatch metrics data events, using the AWS CloudTrail Management Console or the AWS CloudTrail Command Line Interface (CLI), specify CloudWatch metric as the data event type, then choose the APIs that you want to monitor.

Amazon Location Service launches Enhanced Location Integrity features

Amazon Location Service launches enhanced location integrity features, which offer tools to help developers evaluate the accuracy and authenticity of user-reported locations. With enhanced location integrity features, customers can now use predictive tools that anticipate user movements into or out of customer-specified areas, using criteria like time-to-breach and proximity to enhance monitoring and security measures. For instance, a retailer can utilize improved location integrity features to gauge the proximity of a curbside pickup user and optimize operations for a superior customer experience.\n Customers can also use new validation capabilities to help confirm user locations by triangulating WiFi, cellular signals, and IP address information. This is critical for detecting and preventing location spoofing. Lastly, Amazon Location Service now also supports detailed geofences, allowing for the management of complex areas like state boundaries. These improvements provide stronger and more accurate location tracking capabilities, enabling more stringent protocols for location integrity.

Amazon Location Service is available in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Stockholm), South America (São Paulo), and the AWS GovCloud (US-West) Region.

To learn more, visit the Amazon Location Service Developer Guide.

Amazon CodeCatalyst now supports GitHub Cloud source code with blueprints

Amazon CodeCatalyst now supports the use of source code repositories hosted in GitHub Cloud with its blueprints capability. This allows customers to create a project from a CodeCatalyst blueprint into a GitHub Cloud source repository and add a blueprint into an existing project’s GitHub Cloud source repository. It also enables customers to create custom blueprints in a GitHub Cloud repository.\n Customers can use CodeCatalyst blueprints to create a project with a source repository and sample source code, CI/CD workflows, build and test reports, and integrated issue tracking tools. As the blueprint gets updated with the latest best practices or new options, it can regenerate the relevant parts of your codebase in projects containing that blueprint. CodeCatalyst also allows IT Leaders to build custom well-architected blueprints for their developer teams, specifying technology to be used, control access to project resources, set deployment locations and define testing and building methods. These capabilities were earlier available for source code repositories in CodeCatalyst. Customers wanted the flexibility to use blueprints with source code repositories hosted in GitHub Cloud. With this launch, customers can now get the same value from CodeCatalyst blueprints with GitHub Cloud hosted repositories.

AWS Blogs

AWS Japan Blog (Japanese)

AWS News Blog

Business Productivity

Containers

AWS Database Blog

The Internet of Things on AWS – Official Blog

AWS Machine Learning Blog

AWS Messaging & Targeting Blog

AWS Security Blog

AWS Storage Blog

Open Source Project

AWS CLI

OpenSearch

Amplify for JavaScript

Amplify UI

Bottlerocket OS

Amazon EKS Anywhere