8/21/2024, 12:00:00 AM ~ 8/22/2024, 12:00:00 AM (UTC)

Recent Announcements

AWS Lambda announces support for encryption of filter criteria for event source mappings

AWS Lambda announces support for Amazon Key Management Service (KMS) Customer managed keys (CMK) for filter criteria used with event source mappings (ESMs) to filter records from a queue or stream before sending them to a Lambda function. This capability allows you to encrypt the data included under filter criteria using CMK, giving you fine-grained security control over the criteria used to filter your events.\n Customers building modern event-driven applications on AWS Lambda use event filter criteria to control which records from a stream or queue Lambda sends to their function. If a record from the event source satisfies one or more of the specified event filters, Lambda includes the record in the next event it sends to the function. With today’s announcement, you can encrypt the filter criteria using a Customer managed key (CMK), which gives you the control to meet your organizational security and compliance goals. This feature is generally available in all AWS Commercial Regions where AWS Lambda is available. You can encrypt filter criteria with Customer managed key (CMK) when you create or update an event source mapping, using AWS Lambda event source mapping API, AWS Management Console, AWS Command Line Interface (AWS CLI), AWS SDK, AWS CloudFormation, and AWS Serverless Application Model (AWS SAM). To learn more, read Lambda documentation and KMS documentation.

AWS Backup adds cross-Region, cross-account copy for SAP HANA on Amazon EC2

AWS Backup now supports cross-Region and cross-account backup for SAP HANA on EC2, enabling customers to copy snapshot backups across Regions and accounts within their AWS Organizations. AWS Backup is a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. With this launch, AWS Backup customers can more easily meet business continuity, disaster recovery, and compliance requirements by storing additional SAP HANA snapshot copies in separate AWS Regions and accounts.\n Get started with cross-Region and cross-account backup for SAP HANA using the AWS Backup console, API, or CLI. You can define cross-Region and/or cross-account copies as part of your scheduled backup plan or perform a manual, on-demand copy. You can restore copied snapshots or create cross-Region, cross-account copies as needed, reducing the risk of downtime and ensuring disaster recovery and business continuity requirements are met. Snapshot copies provide you with an additional layer of protection should the source account experience disruption from accidental or malicious deletion, disaster, or ransomware. AWS Backup supports cross-Region backup and cross-account backup for SAP HANA on EC2 in AWS Regions where AWS Backup is offered with the exception of Asia Pacific (Hyderabad, Jakarta), Europe (Spain, Zurich), and Middle East (UAE) Regions. To learn more about AWS Backup support for cross-Region and cross-account backups for SAP HANA on EC2, visit the AWS Backup product page and documentation.

Amazon EventBridge Scheduler now provides higher default service quotas

Amazon EventBridge Scheduler, a serverless scheduler that allows you to create, trigger, and manage millions of scheduled events and tasks, now has higher default service quotas. The default service quota for number of schedules is now 10 million schedules instead of 1 million in all regions, and the invocation throughput quota is now 1000 invocations per second instead of 500 in most regions. Default API request rate quotas for CreateSchedule, DeleteSchedule, GetSchedule, and UpdateSchedule are now set up to 1000 requests per second instead of 50 in most regions. Quotas can be further increased by making a request through the Service Quotas console.\n EventBridge Scheduler allows you to create millions of scheduled events and tasks, to run across more than 270 AWS services, without provisioning or managing the underlying infrastructure. EventBridge Scheduler supports one time and recurring schedules that can be created using cron expressions, rate expressions, or specific times with support for time zones and daylight savings. With today’s increase to default quotas, you can use Scheduler for even higher volume workloads without having to request a quota increase, making it easier to run your applications at scale. Scheduler will scale to the new quotas automatically. You can request increases beyond the new default service quotas in the Service Quotas console. View EventBridge Scheduler service quotas for each region in the service endpoints and quotas documentation or learn more about the EventBridge Scheduler service in the EventBridge Scheduler documentation.

Amazon S3 adds additional context to HTTP 403 Access Denied error messages

Amazon S3 now includes additional context in HTTP 403 Access Denied errors for requests made to resources within the same AWS account. This new context includes the type of policy that denied access, the reason for denial, and information on the AWS IAM user or role that requested access to the resource. This context helps you to troubleshoot access issues, identify the root cause of access denied errors, and fix incorrect access controls by updating the relevant policies. This additional context is also available in AWS CloudTrail logs.\n Enhanced access denied error messages are rolling out in the coming weeks in all AWS Regions, including the AWS GovCloud (US) Regions and the AWS China Regions. To learn more about how to troubleshoot Access Denied errors in Amazon S3, visit the S3 User Guide and the AWS IAM troubleshooting documentation.

Amazon Bedrock offers select FMs for batch inference at 50% of on-demand inference price

Last year, we introduced support for batch inference in preview, allowing you to process prompts in batch to get responses for model evaluation, experimentation, and offline processing. Beginning today, Amazon Bedrock supports batch inference in general availability in all supported AWS regions for supported models. Use batch inference to run multiple inference requests asynchronously, and improve the performance of model inference on large datasets. Amazon Bedrock offers select foundation models (FMs) from leading AI providers like Anthropic, Meta, Mistral AI, and Amazon for batch inference at 50% of on-demand inference pricing. Completion time of batch inference depends on various factors like the size of the job, but you can expect completion timeframe of a typical job within 24 hours. You can learn more in our batch inference documentation and you can also reference our API reference documentation.\n Amazon Bedrock is a fully managed service that offers a choice of high-performing foundation models (FMs) from leading AI companies like AI21 Labs, Anthropic, Cohere, Meta, Mistral AI, Stability AI, as well as Amazon via a single API. Amazon Bedrock also provides a broad set of capabilities customers need to build generative AI applications with security, privacy, and responsible AI built in. These capabilities help you build tailored applications for multiple use cases across different industries, helping organizations unlock sustained growth from generative AI while ensuring customer trust and data governance. To more information about Amazon Bedrock, visit the Amazon Bedrock page and see the Amazon Bedrock documentation for more details.

AWS announces new AWS Direct Connect location and expansion in Kuala Lumpur, Malaysia

Today, AWS announced the opening of a new AWS Direct Connect location within the CSF Telcohub 1 Data Center near Kuala Lumpur, Malaysia. By connecting your network to AWS at the new Kuala Lumpur location, you gain private, direct access to all public AWS Regions (except those in China), AWS GovCloud Regions, and AWS Local Zones. This site is the second AWS Direct Connect location within Malaysia. The new Direct Connect location offers dedicated 10 Gbps and 100 Gbps connections with MACsec encryption available.\n AWS also announced the addition of 10Gbps and 100Gbps MACsec services in the existing Kuala Lumpur Direct Connect location at the Menara AIMS data center. The Direct Connect service enables you to establish a private, physical network connection between AWS and your data center, office, or colocation environment. These private connections can provide a more consistent network experience than those made over the public internet. For more information on the over 145 Direct Connect locations worldwide, visit the locations section of the Direct Connect product detail pages. Or, visit our getting started page to learn more about how to purchase and deploy Direct Connect.

AWS Blogs

AWS Japan Blog (Japanese)

AWS Japan Startup Blog (Japanese)

AWS Cloud Operations & Migrations Blog

AWS Big Data Blog

AWS Machine Learning Blog

AWS for M&E Blog

AWS Security Blog

AWS Storage Blog

Open Source Project

AWS CLI

Amplify for JavaScript