Amazon EMR now supports Amazon EC2 M6g, C6g and R6g instances with EMR Versions 6.1.0, 5.31.0 and later. These instances are powered by AWS Graviton2 processors that are custom designed by AWS utilizing 64-bit ArmNeoverse cores to deliver the best price performance for cloud workloads running in Amazon EC2. Please read our blog for more information.

AWS CloudTrail now provides more granular control of data event logging with advanced event selectors. Data events provide visibility into the data plane resource operations performed on or within a resource. You can currently log data events on two resource types: Amazon S3 object-level API activity (e.g. GetObject, DeleteObject, and PutObject API operations), and AWS Lambda function execution activity (the Invoke API). With advanced event selectors, you can include or exclude values on fields such as EventSource, EventName, and ResourceARN. Advanced event selectors also support including or excluding values based on the first few characters (where applicable) providing more control over which CloudTrail data events you want to log and pay for. For example, you can log S3 DeleteObject APIs to narrow the CloudTrail events you receive to only destructive actions, enabling you to identify security issues while controlling costs. If you detect unauthorized activity, you can also take immediate action to restrict access.

AWS IoT SiteWise now supports table charts in AWS IoT SiteWise Monitor . With table charts, you can have a compact representation of the latest data from your equipment in a simple table simply by dragging and dropping the data and metrics you are interested in monitoring into a table. For example, you can now easily tabulate and visualize the latest key operational metrics like equipment properties, status, or aggregate functions such as the production lines’ Overall Equipment Effectiveness (OEE) in a single table, making it easy for you to get a bird’s eye view of your plant and also do a side by side comparison of how these assets are performing. You can learn more about table charts here.

AWS Security Hub can now automatically receive findings from the open source tool Kube-bench Kube-bench checks whether your Kubernetes cluster is configured in accordance with the recommendations from the Center for Internet Security (CIS), supporting both the CIS Kubernetes Benchmark and the CIS Amazon Elastic Kubernetes Service (Amazon EKS) Benchmark. Kube-bench’s findings about non-compliant configuration settings can be viewed within Security Hub. In addition, Security Hub’s integration with Cloud Custodian is now available in the AWS China (Beijing) Region operated by Sinnet and in the AWS China (Ningxia) Region operated by NWCD. The open source tool Cloud Custodian can both send and receive findings to/from Security Hub. This brings the total number of AWS service and AWS Partner Network (APN) Technology Partner integrations available in Security Hub to 61.

On December 1, we announced support for Amazon EC2 R5b instance types in the US East (Ohio), Europe (Frankfurt) and Asia Pacific (Singapore) Regions. Starting today, we’re happy to announce you can now launch Amazon EC2 R5b instance types using Amazon RDS for Oracle and Amazon RDS for SQL Server in additional AWS Regions:

North America

• US East (Northern Virginia), US West (Oregon)

Asia Pacific

• Asia Pacific (Tokyo)

Amazon Connect is announcing 10 telephony rate reductions for customers in Argentina, Chile, Mexico, and Peru from the US East (N. Virginia) and US West (Oregon) regions. 

Amazon Elastic Block Store (EBS) io2 volumes are now supported for SAP workloads.  

Starting today Amazon Relational Database Service (RDS) for Oracle supports Amazon RDS Cross-Region Automated Backups. This feature extends the existing RDS backup functionality, giving you the ability to setup automatic replication of system snapshots and transaction logs from a primary AWS Region to a secondary AWS Region.  

Amazon EC2 now allows you to add tags to your Amazon Machine Images (AMIs) and EBS Snapshots during AMI creation. Tags are simple key-value pairs that you can assign to resources to easily organize, search, and identify resources, create cost allocation reports, and control access to resources. You can define fine-grained access controls using tags and AWS Identity and Access Management (IAM) policies to control access to resources and actions.  

Today, AWS announced that managed entitlements for AWS Marketplace is now available in AWS License Manager. Managed entitlements enable buyers to govern, track, and distribute entitlements from a software license. Independent Software Vendors (ISVs) can use AWS License Manager to create, configure, and track licenses for their products used on AWS and on-premises.