AWS Key Management Service (AWS KMS) is introducing multi-Region keys, a new capability that lets you replicate keys from one AWS Region into another. With multi-Region keys, you can more easily move encrypted data between Regions without having to decrypt and re-encrypt with different keys in each Region. Multi-Region keys are supported for client-side encryption in the AWS Encryption SDK, AWS S3 Encryption Client, and AWS DynamoDB Encryption Client. They simplify any process that copies protected data into multiple Regions, such as disaster recovery/backup, DynamoDB global tables, or for digital signature applications that require the same signing key in multiple Regions.

AWS Amplify CLI now supports IAM permission boundaries to limit Amplify-generated IAM roles. The AWS Amplify CLI is a command line toolchain that helps frontend developers create app backends in the cloud that include IAM roles controlling access to AWS resources. With IAM permissions boundaries, Amplify-generated IAM roles can perform only the actions that are allowed by both the roles’ policies and permissions boundary.

Amazon MQ is now available in a total of 24 regions, with the addition of both AWS GovCloud (US) Regions. AWS GovCloud (US) Regions are isolated AWS Regions designed to host sensitive data and regulated workloads in the cloud, assisting customers who have United States federal, state, or local government compliance requirements.

Starting today, AWS customers can use Amazon Kendra to build intelligent search applications in the Canada (Central) and US East (Ohio) AWS Regions.

AWS Gateway Load Balancer is now available in both AWS GovCloud (US) Regions. The expansion into the AWS GovCloud (US) Regions enables U.S. government agencies and contractors to move more sensitive workloads into the cloud by helping them to address certain regulatory and compliance requirements. With this launch, AWS Gateway Load Balancer is now available in 25 regions.

AWS EC2 F1 instances have been used by customers to accelerate a growing set of applications from genomic processing, data analytics, security, image/video analytics, machine learning and more. Developers have taken advantage of the FPGA developer kit  and current standard F1.X.1.4 shells to easily build and deploy their applications.

Workflow Studio is a new visual workflow designer for AWS Step Functions that makes it faster and easier to build workflows using a drag and drop interface in the AWS console.

Starting today, Amazon EC2 D3 instances, the latest generation of the dense HDD-storage instances, are available in the AWS GovCloud (US-West) Region.

Amazon Aurora PostgreSQL-Compatible Edition supports the Partition Manager (pg_partman) extension. pg_partman is a PostgreSQL extension that helps you to manage both time series and serial-based table partition sets, including automatic management of partition creation and runtime maintenance. pg_partman works with PostgreSQL native partitioning so users can benefit from significant performance enhancements.

Amazon Aurora PostgreSQL-Compatible Edition adds support for the pg_cron extension. pg_cron allows you to use cron syntax to schedule PostgreSQL commands directly within your database. You can use pg_cron to schedule tasks such as periodically rolling up data for analytic reports, refreshing materialized views, and scheduling vacuum jobs to reclaim storage. pg_cron includes an AWS open source contribution that adds an audit table so that you can query the outcome of each scheduled job.