Today, we are excited to announce the CDK library for Amazon SageMaker Role Manager. This CDK library allows you to define activity based fine-grained permissions in minutes.

Amazon Pinpoint journeys now offers organizations the ability to estimate local time zone and allows them to contact customers at convenient times. Journeys are customized, multi-step engagement experience to send customer communication across channels such as SMS, email, push notifications, and voice.

Amazon Connect now provides the ability to search for existing tags within an instance, both programmatically via API and within the UI. When tagging resources, you can now search from pre-existing key:value pairs before creating new ones. For example, administrators can create a tag such as “Division:ConsumerCredit”, and users with permissions to tag resources within the same instance will be able to view and apply “Division:ConsumerCredit”, to save time and avoid mistakenly creating new variations of the intended tag such as “Division:CC” or “Div:ConsumerCredit”. To learn more about how to search for tags within an instance, see the Administrative Guide .

Amazon Relational Database Service (Amazon RDS) Optimized Writes  now supports m5d, r5d, and m6gd database (DB) instances. With Amazon RDS Optimized Writes, you can improve the write throughput for Amazon RDS for MySQL and MariaDB workloads by up to 2x at no additional cost. This is especially useful for write-intensive database workloads, commonly found in applications, such as digital payments, financial trading, and online gaming.

Amazon MemoryDB for Redis is now in scope for FedRAMP Moderate in the US East (Ohio), US East (N. Virginia), US West (N. California), and US West (Oregon) Regions. You can now use MemoryDB to build applications for workloads that are subject to FedRAMP Moderate compliance.

Today, AWS announces expanded AWS CloudFormation support for AWS Security Hub, which allows you to use CloudFormation to deploy Security Hub and manage its standards and controls. Using the updated AWS::SecurityHub::Hub resource, you can now enable Security Hub, decide if it should be provisioned with default standards (the AWS Foundational Security Best Practices and CIS Foundations Benchmark version 1.2), and opt into its Consolidated Control Findings capability. You can also use the new AWS::SecurityHub::Standard resource to enable specific security standards such as NIST 800-53 or PCI DSS and manage individual controls in them. This expanded integration is available in all AWS Regions where Security Hub and CloudFormation are available.

Sensitive data detection feature in AWS Glue can now detect over 250 sensitive entity types from 50 countries out-of-the-box.

Today, AWS Identity and Access Management (IAM) announces the general availability of support for FIDO2 security keys in the AWS GovCloud (US-East and US-West) Regions. The FIDO2 specifications rely on public key cryptography, enabling cryptographically secure and phishing-resistant multi-factor (MFA) authentication.

AWS Glue now provides data preview for streaming jobs in Glue Studio that helps data engineers accelerate their Streaming ETL job development. 

Amazon SageMaker Inference Recommender is a capability of Amazon SageMaker that reduces time required to get machine learning (ML) models in production by automating load testing and model tuning across SageMaker ML instances. Today, SageMaker Inference Recommender is announcing two key features. First, you can now use Inference Recommender from the AWS console for SageMaker. Second, Inference Recommender now offers recommendations on prospective instances to deploy a model at the time of model creation.