By default, Amazon Cognito refresh tokens expire 30 days after a user signs in to a user pool. When you create an app, you can set the app’s refresh token expiration to any value between 60 minutes and 10 years. Amazon Cognito now enables you to revoke refresh tokens in real time so that those refresh tokens cannot be used to generate additional access tokens.

AWS Client VPN is now available in AWS GovCloud (US). You can now provide VPN access to your remote workforce to securely access resources in AWS GovCloud (US) regions. 

Today, Amazon Lex increased the default service limits for intents and slot types. With the increased limits, you can expand the bot to support additional conversation flows. You can now create up to 1,000 intents and 250 slot types for English locales, an increase from previous limits of 100 each.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector now enable you to use AD authentication with AWS Transfer Family, a fully managed service for transferring files over Secure File Transfer Protocol (SFTP), File Transfer Protocol over SSL (FTPS), and File Transfer Protocol (FTP) for Amazon Simple Storage Service (S3) and Amazon Elastic File System (EFS). This makes it easy for you to securely provide permissions for file transfers to users in your AD groups.

You can now specify a new property called ‘DeprecationTime’ on your Amazon Machine Images (AMIs)  to indicate when the AMI will become outdated.

Today, we are excited to announce increased customer control of AWS Elemental MediaConnect input source selection and failover behavior.

Effective Jun 11, 2021, AWS has extended per second billing to Windows Server and SQL Server instances running on Amazon EC2. Customers will only pay for Windows Server and SQL Server instances that are launched in On-Demand, Reserved, and Spot form running on Amazon EC2 in one second increments, with a minimum of 1 minute.

Starting today, AWS Transit Gateway supports internet group management protocol (IGMP) multicast in AWS GovCloud (US) Regions.

AWS IoT Analytics now supports custom partitioning on AWS IoT Analytics data stores, enabling customers to partition their data stores based on both timestamp and non-timestamp attributes. You can use this feature to create partitioned data stores so that your queries can run more efficiently as they will scan less data and hence run faster. The option to define a custom partition scheme on an AWS IoT Analytics data store will be made available at the time of creation for both customer managed and service managed data stores. Partitions can be created either on top of channel message attributes or data store attributes resulting from pipeline activities.

The AWS App Mesh introduces enhanced ingress traffic management capabilities. Now you can control how App Mesh rewrites external requests, so that they reach the correct destination within your mesh. You also have greater flexibility controlling how the requests are matched to the destinations in the Gateway and Virtual Router Routes. AWS App Mesh is a service mesh that provides application-level networking to standardize how your services communicate, giving you end-to-end visibility and options to tune for high-availability of your applications.