AWS X-Ray now supports using tags to manage access for creating, updating, and deleting X-Ray Groups and Sampling Rules .

Amazon AppFlow is a fully managed integration service that enables customers to securely transfer data between AWS services and software-as-a-service (SaaS) applications, now can be accessed programmatically. The Amazon AppFlow APIs and SDK enable developers to set up flows between source and destinations supported by Amazon AppFlow, create connector profiles and execute flows programmatically. Using the Amazon AppFlow APIs and the SDK, developers can incorporate Amazon AppFlow directly into their DevOps pipelines for data integrations. Amazon AppFlow API users will be charged at same pricing dimensions and rates as Amazon AppFlow. For pricing, please refer to the Amazon AppFlow pricing page. 

You can now initiate Internet Key Exchange (IKE) negotiations for your VPN connections from AWS. This feature is available for new and existing Site-to-Site VPN connections and can be accessed through the AWS Management console, AWS Cloud Development Kit (CDK), or the AWS Command Line Interface (CLI). AWS Site-to-Site VPN connections offer IPSec tunnels which use the IKE protocol to establish a tunnel. With this feature, AWS VPN endpoints will send the initial IKE message to your Customer Gateway (CGW). AWS endpoints will initiate when new VPNs are created or if the tunnel goes down. For more information, please see the documentation .

AWS Elemental MediaConvert now allows you to create WebM DASH outputs using VP8 or VP9 video. You can use segmented content in a WebM container to support dynamic adaptive streaming over HTTP (DASH). The ability to create WebM DASH outputs using the VP8 and VP9 codecs provides more options for preparing content for VOD delivery. For more information about VP8 and VP9 support in MediaConvert, please see our announcement here.

Today we are announcing the launch of a second Local Zone in Los Angeles (LA), California. You can now design your applications to run in both Local Zones in LA to achieve high availability and even greater fault-tolerance. Both Local Zones in LA are interconnected with high-bandwidth, low-latency networking, over fully redundant, dedicated metro fiber providing high-throughput, low-latency networking between them. 

AWS IoT Core now enables customers to use Custom Authentication to authenticate and authorize messages from IoT devices on MQTT connections. In addition, customers using HTTP or WebSockets to connect to AWS IoT Core can now customize which headers or query parameters they use to pass device credentials to their Authorizers. For example, customers can now pass credentials via the Authorization header or access_token query parameter commonly used in OAuth implementations.

You can now join your Amazon EC2 for Linux instances to a domain configured with AWS Directory Service seamlessly. The new capability automates the previously manual approach for integrating Linux-based EC2 instances to your  AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD), or to an existing on-premises Active Directory (AD) using AD Connector . This makes it easier for you to launch and manage your Amazon EC2 for Linux instances, reducing deployment time and administration effort.

Amazon Simple Notification Service (SNS) now has launched an open-source Extended Client Library for Java that enables you to publish and deliver messages with payloads up to 2GB. Previously, message payloads were supported up to 256KB. Using the Extended Client Library, you can store the message payloads larger than 256KB in an S3 bucket and use SNS to publish and deliver a reference to the payload location.  

Amazon AppFlow, a fully managed integration service that enables customers to securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks, now supports Amazon EventBridge as a destination.

Distributor, a capability of AWS Systems Manager, allows you to select from available popular third-party agents to install and manage on your instances. With this launch, you can select to install the pre-built Dynatrace OneAgent directly from Distributor without having to create or maintain any software packages. AWS will continue to seek opportunities to offer many other popular security and monitoring agents.