11/8/2024, 12:00:00 AM ~ 11/11/2024, 12:00:00 AM (UTC)

Recent Announcements

Network connections is now discoverable with AWS Application Discovery Service Agentless Collector

Starting today, the AWS Application Discovery Service Agentless Collector supports the discovery of on-premises network connections, allowing you to understand your on-premises dependencies and plan your AWS migration. With the Agentless Collector, one virtual appliance deployed within your on-premises data center can discover and monitor the performance of VMware virtual machines, database metadata and utilization metrics, and now network connections.\n Using network connection data to build applications is an important step when building a migration plan to the AWS cloud. By using AWS Migration Hub to explore the relationship and dependencies between servers, migration practitioners can be confident which servers should be part of a migration wave or application. The network connections capability is now generally available, and can be used in all AWS Regions where AWS Application Discovery Service is available. Customers already running the Agentless Collector with active auto-updates only need to provide read-only credentials to enable the feature. To learn more, read the user guide. Accelerate your migration with AWS Application Discovery Service today.

Amazon DataZone now supports meaning-based Semantic search

Amazon DataZone now supports meaning-based Semantic search in its business data catalog, enhancing how data users search and discover assets. With this new capability, users can search by concept and related terms, in addition to the existing keyword-based search. Amazon DataZone is a data management service for customers to catalog, discover, share, and govern data at scale across organizational boundaries with governance and access controls.\n As data users are looking to solve their analytics use cases, they start their journey with the search in the business data catalog to understand what data is available. With this launch, users can discover related datasets in Amazon DataZone based on the intent of the user’s query. For example, a search for “profit” now returns data assets related to sales, costs, revenue in addition to the keyword profit. This significantly improves the relevance and quality of the search results and helps support the desired analytics use case. Amazon DataZone’s semantic search feature is powered by a GenAI search engine. This search engine uses an embedded language model to generate sparse vectors which enrich assets with semantically related terms. Semantic search is available in all AWS Regions where Amazon DataZone is available. To learn more, visit Amazon DataZone and get started using the guide in documentation.

Amazon SNS delivers to Amazon Data Firehose endpoints in six new regions

Amazon Simple Notification Services (Amazon SNS) now delivers to Amazon Data Firehose endpoints in Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Europe (Zurich), Europe (Spain), Middle East (UAE).\n You can now use Amazon SNS to deliver notifications to Amazon Data Firehose (Firehose) endpoints for archiving and analysis. Through Firehose delivery streams, you can deliver events to AWS destinations such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, and Amazon OpenSearch Service, or to third-party destinations such as Datadog, New Relic, MongoDB, and Splunk. For more information, see Fanout to Firehose delivery streams. To get started, see the following resources:

Create Firehose Stream in the Amazon Data Firehose Developer Guide.

Subscribe a Firehose delivery stream to an Amazon SNS topic in the Amazon SNS Developer Guide.

SNS pricing for deliveries to Amazon Data Firehose in the Amazon SNS Pricing Page.

Blog post on how to use Amazon Data Firehose for archive and replay into an existing Serverless architecture.

AWS Firewall Manager is now available in the AWS Asia Pacific (Malaysia) Region

AWS Firewall Manager is now available in the AWS Asia Pacific (Malaysia) region, enabling customers to create policies to manage their VPC Security Groups, VPC network access control lists (NACLs), and AWS WAF protections for applications running in this region. Support for other policy types will be available in the coming months. Firewall Manager is now available in a total of 32 AWS commercial regions, 2 GovCloud regions, and all Amazon CloudFront edge locations.\n AWS Firewall Manager is a security management service that enables customers to centrally configure and manage firewall rules across their accounts and resources. Using AWS Firewall Manager, customers can manage AWS WAF rules, AWS Shield Advanced protections, AWS Network Firewall, Amazon Route53 Resolver DNS Firewall, VPC security groups, and VPC network access control lists (NACLs) across their AWS Organizations. AWS Firewall Manager makes it easier for customers to ensure that all firewall rules are consistently enforced and compliant, even as new accounts and resources are created.

To get started, see the AWS Firewall Manager documentation for more details and the AWS Region Table for the list of regions where AWS Firewall Manager is currently available. To learn more about AWS Firewall Manager, its features, and its pricing, visit the AWS Firewall Manager website.

AWS IAM now supports PrivateLink in the AWS GovCloud (US) Regions

Starting today, AWS Identity and Access Management (IAM) now supports AWS PrivateLink in the AWS GovCloud (US) Regions. With IAM, you can specify who or what can access services and resources in AWS by creating and managing resources such as IAM roles and policies. You can now establish a private connection between your virtual private cloud (VPC) and IAM to manage IAM resources, helping you meet your compliance and regulatory requirements to limit public internet connectivity.\n By using PrivateLink with both IAM and the AWS Security Token Service (STS), which already supports PrivateLink, you can now manage your IAM resources such as IAM roles and request temporary credentials to access your AWS resources end to end without going through the public Internet. Interface VPC endpoints for IAM in the AWS GovCloud (US) Regions can only be created in the AWS GovCloud (US-West) Region, where the IAM control plane is located. If your VPC is in a different Region, use AWS Transit Gateway to allow access to the IAM interface VPC endpoint from another Region. For more information about AWS PrivateLink and IAM, please see the IAM User Guide.

Amazon SNS delivers to Amazon Data Firehose endpoints in the AWS GovCloud (US) Regions

Amazon Simple Notification Service (Amazon SNS) now delivers to Amazon Data Firehose endpoints in the AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions.\n You can now use Amazon SNS to deliver notifications to Amazon Data Firehose (Firehose) endpoints for archiving and analysis. Through Firehose delivery streams, you can deliver events to AWS destinations such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, and Amazon OpenSearch Service, or to third-party destinations such as Datadog, New Relic, MongoDB, and Splunk. For more information, see Fanout to Firehose delivery streams. To get started, see the following resources:

Create Firehose Stream in the Amazon Data Firehose Developer Guide.

Subscribe a Firehose delivery stream to an Amazon SNS topic in the Amazon SNS Developer Guide.

SNS pricing for deliveries to Amazon Data Firehose in the Amazon SNS Pricing Page.

Blog post on how to use Amazon Data Firehose for archive and replay into an existing Serverless architecture.

Amazon QuickSight now supports Client Credentials OAuth for Snowflake through API/CLI

Today, Amazon QuickSight is announcing the general availability of Client Credentials flow based OAuth through API/CLI to connect to Snowflake data sources. This launch enables you to create Snowflake connections as part of your Infrastructure as Code (IaC) efforts with full support for AWS CloudFormation.\n This type of OAuth solution is used to obtain an access token for machine-to-machine communication. This flow is suitable for scenarios where a client (e.g., a server-side application or a script) needs to access resources hosted on a server without the involvement of a user. The launch includes support for Token (Client Secrets Based OAuth) & X509 (Client Private Key JWT) based OAuth. This launch also includes support for Role Based Access Control (RBAC). RBAC is used to display the corresponding schema/table information tied to that role during dataset creation by QuickSight authors. This feature is now available in all supported Amazon QuickSight regions here. For more details, click here.

AWS CodePipeline open source starter templates for simplified getting started experience

Today, AWS CodePipeline open-sourced its starter templates library, which allows you to view the CloudFormation templates that power the different pipeline scenarios available in CodePipeline.\n The starter template library is a valuable resource if you are new to CodePipeline. With the starter templates, you can see the resources being provisioned, understand how different pipeline stages are configured, and use these templates as a starting point for building more advanced pipelines. This increased transparency allows you to take a more hands-on approach to your CI/CD workflows and align them with your specific business requirements. AWS CodePipeline starter templates library is released as an open-source project under the Apache 2.0 license. You can access the source code in the GitHub repository here. For more information about AWS CodePipeline, visit our product page.

Amazon DataZone updates pricing and removes the user-level subscription fee

Today, Amazon DataZone has announced updates to its pricing, which will make the service more accessible and cost-effective for customers. Customers will no longer be charged monthly subscription fee for every configured user. Instead, Amazon DataZone now offers a pay-as-you-go model, where you are charged only for the resources you use. Additionally, DataZone has reduced the price for metadata storage from $0.417 per GB to $0.40 per GB. Finally, Amazon DataZone has also introduced free access to some of the core DataZone APIs that power the key user experiences such as creating and managing their domains, blueprints, and projects.\n These price updates are part of Amazon’s ongoing commitment to providing flexible, transparent, and cost-effective data management and data governance capabilities to customers. Customers can now scale their usage without being constrained by per-user costs, and make the service accessible to a wider user base. These pricing changes will be applicable starting Nov 1, 2024 in all AWS Regions where Amazon DataZone is available, including: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Asia Pacific (Seoul), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (Stockholm), Europe (London), and South America (São Paulo). Visit Amazon DataZone’s pricing page for more details.

Amazon Redshift Serverless higher base capacity of 1024 RPUs is now available in additional AWS regions

Amazon Redshift Serverless higher base capacity of up to 1024 Redshift Processing Units (RPUs) is now available in the AWS Europe (Frankfurt) and Europe (Ireland) regions. Amazon Redshift Serverless measures data warehouse capacity in RPUs, and you pay only for the duration of workloads run in RPU-hours on a per-second basis. Previously, the highest base capacity was 512 RPUs. With the new higher base capacity of 1024 RPUs, you now have even more flexibility to support workloads of large complexity, processing terabytes or petabytes in size to accelerate data loading and querying based on your price performance requirements. You now have a base capacity range from 8 to 1024 RPUs in the two additional AWS regions.\n The large base capacity of Amazon Redshift Serverless can improve performance for your workloads serving use cases, such as complex and long running queries, queries with large numbers of columns, queries with joins and aggregations requiring high memory, data lake queries scanning large amounts of data, and ingesting large datasets into the data warehouse. To get started, see the Amazon Redshift Serverless feature page, user documentation, and API Reference.

Amazon QuickSight now supports Client Credentials OAuth for Starburst through API/CLI

Today, Amazon QuickSight is announcing the general availability of Client Credentials flow based OAuth through API/CLI to connect to Starburst data sources. This launch enables you to create Starburst connections as part of your Infrastructure as Code (IaC) efforts with full support for AWS CloudFormation.\n This type of OAuth solution is used to obtain an access token for machine-to-machine communication. This flow is suitable for scenarios where a client (e.g., a server-side application or a script) needs to access resources hosted on a server without the involvement of a user. The launch includes the support for Token (Client Secrets Based OAuth) & X509 (Client Private Key JWT) based OAuth. This launch also includes the support for Role Based Access Control (RBAC). RBAC is used to display the corresponding schema/table information tied to that role during dataset creation by QuickSight authors. This feature is now available in all supported Amazon QuickSight regions here. For more details, click here.

Amazon Location Service launches Enhanced Places, Routes, and Maps

Amazon Location Service now offers enhanced Places, Routes, and Maps functionality, enabling developers to add advanced location capabilities into their applications more easily. These improvements introduce new capabilities and a new streamlined developer experience to support location-based use cases across industries such as healthcare, transportation & logistics, and retail.\n The enhancements include powerful search functions like Geocode to search addresses, Search Nearby to find local businesses, and Autocomplete to predict typed addresses, as well as richer places details including opening hours and contact information. This release also introduces advanced route planning capabilities such as Toll Cost calculation, Waypoint Optimization for multi-stop delivery, Isoline or serviceable area calculation, and supporting a variety of travel restrictions. For example, a food delivery app can use Search Nearby to find and recommend local restaurants, Optimize Waypoints to plan efficient driver routes for multiple orders, and Snap-to-Road to visualize the driver’s traveled path on a map. These enhancements are accompanied by new standalone SDKs, making it easier for developers to start new mapping projects, or migrate their existing workloads to Amazon Location Service to benefit from the cost reduction, privacy protection, and ease of integration with other AWS services. Enhanced Places, Routes, and Maps are available in the following AWS Regions: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Stockholm), Europe (Spain), and South America (São Paulo). To learn more, please visit the Developer Guide.

EC2 Auto Scaling introduces provisioning control on strict availability zone balance

Amazon EC2 Auto Scaling Groups (ASG) introduces a new capability for customers to strictly balance their workloads across Availability Zones, enabling greater control over provisioning and management of their EC2 instances.\n Previously, customers that wanted to strictly balance an ASGs EC2 instances across availability zones had to override default behaviors of EC2 Auto Scaling and invest in custom code to modify the ASG’s existing behaviors with life cycle hooks or through maintaining multiple ASGs. With this feature, customers can now to easily achieve strict availability zone balance and ensure higher levels of resiliency for their applications. This capability is now available through the AWS Command Line Interface (CLI), AWS SDKs, or the AWS Console in all AWS Regions. To get started, please refer to the documentation.

AWS Blogs

AWS Japan Blog (Japanese)

AWS Japan Startup Blog (Japanese)

AWS News Blog

AWS Big Data Blog

Containers

AWS Database Blog

AWS for Industries

Open Source Project

AWS CLI

Amazon EKS Anywhere