Starting today, you can perform an in-place upgrade of your Amazon Aurora database cluster from PostgreSQL major version 11 to 12. Instead of backing up and restoring the database to the new version, you can upgrade with just a few clicks in the Amazon RDS Management Console or by using the AWS SDK or CLI.

You can now extend AWS Control Tower governance to existing AWS organizational units (OUs) from within the AWS Control Tower console. This feature allows you to bring your top-level OUs and included accounts under AWS Control Tower governance. When you register an Organizational Unit, AWS Control Tower will perform a series of checks to ensure successful extension of governance and enrollment of accounts within the OU.

AWS announces the availability of Fluent Bit support for Amazon CloudWatch, a fully managed, pay-as-you-go monitoring and observability service for resources running on AWS and on-premises. CloudWatch Container Insights and Log Insights enables you to explore, analyze, and visualize your container logs collected from the Fluent Bit processor. Container Insights also provides access to the automated dashboards that summarize the performance and availability of the FluentBit Daemon set running on Amazon Elastic Kubernetes Service (EKS) and Kubernetes.

AWS RoboMaker now supports data upload configurations in simulation jobs, which allows developers to define the type of simulation data they want to upload, choose the upload behavior, and reliably upload the simulation data to their preferred Amazon S3 output location. This functionality makes it easier for developers to review or analyze application output generated during a simulation run or reuse artifacts.

AWS Control Tower now includes the ability for you to update up to 300 accounts in a registered AWS organizational unit (OU) with a single click from the AWS Control Tower console. This is particularly useful in cases where you update your AWS Control Tower landing zone and must also update your enrolled accounts to align them to the current landing zone version.

AWS Glue DataBrew now supports the following delimiter options for its datasets giving you flexibility to bring in a variety of .csv and .tsv files into DataBrew for data preparation. The supported delimiters include:

• comma (,)
• colon (:)
• semi-colon (;)
• pipe (|)
• tab (t)
• caret (^)
• space ( )

AWS Glue DataBrew, a visual data preparation tool that makes it easy for data analysts and data scientists to clean and normalize data for analytics and machine learning, is now available in the following six additional AWS Regions:

• US West (N. California)
• Asia Pacific (Singapore)
• Asia Pacific (Mumbai)
• EU (Stockholm)
• EU (London)
• EU (Paris)

AWS Security Hub is now integrated with Cloud Storage Security: Antivirus for Amazon S3. Cloud Storage Security uses the AWS Security Finding Format (ASFF) to send findings to Security Hub. Security Hub’s integrations with Forcepoint CASB (Cloud Access Security Broker), Forcepoint DLP (Data Loss Prevention), Forcepoint NGFW (Next-Generation Firewall), Palo Alto Networks Prisma Cloud Compute and Palo Alto Networks Prisma Cloud Enterprise are now available in AWS GovCloud (US) Regions. Forcepoint CASB, Forcepoint DLP, Forcepoint NGFW, Palo Alto Networks Prisma Compute and Palo Alto Networks Prisma Enterprise now send findings to Security Hub using the ASFF. To learn more, visit the Integration pages in the Security Hub console and click on the “Configuration” link for the integration to learn more about the integration and how to set it up.

Starting today, you can launch
Amazon Relational Database Service (Amazon RDS) for SQL Server on Amazon EC2 R5d and Amazon EC2 M5d instance types with tempdb configured to use local instance storage. By placing tempdb data files and log files locally, you can achieve lower read and write latencies when compared to the standard EBS based offerings.

AWS Identity and Access Management (IAM) Access Analyzer now analyzes AWS Secrets Manager resource-based policies to help you discover secrets that can be accessed publicly or from other accounts or organizations. IAM Access Analyzer makes it easier to identify and remediate unintended public, cross-account, or cross-organization sharing of your Secrets Manager secrets. This helps you reduce access to your secrets and adhere to the security best practice of least privilege.