You can now configure budgets actions to enforce budget limits for your AWS Budgets resources in your AWS CloudFormation templates, stacks, and StackSets. With budget actions, you can define the action you want to take in your account when a budget exceeds the threshold you defined (actual or forecasted amounts). This level of control will allow you to reduce unintentional overspending in your account. You can choose among three action types: Identity and Access Management (IAM) policy, Service Control policy (SCPs), or target running instances (EC2 or RDS). For example, you can choose to apply a custom “Deny EC2 Run Instances” IAM policy to a user, group, or role in your account, once your monthly budget for EC2 has been exceeded. With the same budget threshold, you can configure a second action that shuts down specific EC2 instances within a particular AWS Region.

AWS WAF now lets you generate labels and customize your WAF rules based on those labels. With this feature, you can configure WAF to add descriptive labels to web requests when a WAF rule matches the request, regardless of the action associated with the rule. You can also check for the presence of those labels in subsequent WAF rules and combine with other WAF rules to take action on web requests that include the label. Creating a label also generates a corresponding CloudWatch metric and adds the label to your WAF logs for improved visibility.

AWS Firewall Manager now enables security administrators to deploy the recently launched AWS WAF Bot Control across accounts in their organization, from a central administrator account. AWS WAF Bot Control is a new managed rule group that gives you visibility and control over common and pervasive bot traffic to your applications. You can use Bot Control to protect your web applications from automated bots that consume excess resources, skew metrics, cause downtime, or perform other malicious activities.

Amazon Elastic Kubernetes Service (EKS) clusters running in the AWS GovCloud (US) Regions are now compliant with the Federal Risk and Authorization Management Program (FedRAMP) High baseline.

You can now clean and transform data with an interactive, point-and-click visual interface from Amazon Redshift, Snowflake, Microsoft SQL Server, MySQL, Oracle Database, and PostgreSQL through native JDBC connectors in AWS Glue DataBrew. In just a few clicks, you can configure these JDBC connections from the AWS Management Console to directly explore and experiment with datasets from AWS data lakes, data warehouses, and databases without writing code.

Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to analyze text documents and identify insights such as sentiment, entities, and topics in text. Today, we are announcing support for two security focused features: support for IAM condition keys and support for encrypting custom models with customer managed KMS keys. With AWS Identity and Access Management (IAM) condition keys, you can control the Amazon Virtual Private Cloud (VPC) and encryption settings for your Amazon Comprehend APIs. You can use the new condition keys in IAM policies when granting permissions to create asynchronous jobs and creating custom classification or custom entity training jobs in your organization. For example, As a security requirement, you can now enforce that all Comprehend asynchronous jobs must use VPC endpoints.Additionally, while Amazon Comprehend already supported Customer Managed Keys (CMK) for encrypting your training data and machine learning volumes used for inference, you can now encrypt your custom models in Amazon Comprehend using a Customer Managed Key (CMK).

Starting today, Bring Your Own IP (BYOIP) is available in four additional AWS Regions: GovCloud (US-East), GovCloud (US-West), Asia Pacific (Hong-Kong), and US West (Northern California).  

AMI Factory is an AWS Solutions Consulting Offer delivered via a consulting engagement from Capgemini, an AWS Migration Competency Partner. AMI Factory helps customers integrate and build any type of AMIs with custom configurations, setting security standards for operating system (OS)-level benchmarks and vulnerability scans based on customer requirements within a few hours. Customers that request this consulting offer will participate in an engagement that delivers identification of eligible AMIs, template creation, and deployment.

Today, we are excited to announce the general availability (GA) of Queue notifications for Amazon GameLift. Trusted by some of the most successful game companies in the world like Wargaming, Ubisoft, and more, GameLift deploys, operates, and scales dedicated servers for multiplayer games. With this new update, you as a game developer can now receive automatic notifications when changes take place to the state of your player queues on GameLift.

Amazon SageMaker Autopilot, which makes it easy to create highly accurate machine learning models, now provides a model explainability report generated by Amazon SageMaker Clarify, making it easier to understand and explain how the models you create with SageMaker Autopilot make predictions. Explainability reports include feature importance values so you can understand how each attribute in your training data contributes to the predicted result as a percentage. The higher the percentage, the more strongly that feature impacts your model’s predictions. You can download the explainability report as a human readable file, view model properties including feature importance in Amazon SageMaker Studio, or access feature importance using the SageMaker Autopilot APIs .