Amazon GuardDuty broadens threat detection coverage to monitor for highly-suspicious data access and anomaly detection to help you better protect your data residing in Amazon Simple Storage Service (Amazon S3). This new capability adds S3 data events (LISTs/PUTs/GETs) as a new log and event source that GuardDuty continuously profiles to monitor data access behavior, combine it with GuardDuty threat intelligence, and identify suspicious activity such as data access from an unusual geo-location, API calls from a known malicious IP address, or unusual API calls consistent with malicious data discovery attempts.  

Customers can now connect their OneLogin Identity Management Platform (OneLogin) to AWS Single Sign-On (SSO) once, manage access to AWS centrally in AWS SSO, and enable end users to sign in using OneLogin to access all their assigned AWS accounts. The integration helps customers simplify AWS access management across multiple accounts while maintaining familiar OneLogin experiences for administrators who manage identities, and for end users as they sign in. AWS SSO and OneLogin use standards-based automation to provision users and groups into AWS SSO, saving administration time and increasing security.  

Amazon GuardDuty is now available in the AWS Africa (Cape Town) and Europe (Milan) Regions. You can now continuously monitor and detect security threats in these regions to help protect your AWS accounts, workloads, and data stored in Amazon S3.

Starting today, you can use enhanced premigration assessments to identify potential database migration problems before initiating your migration. Once the migration task is set up, a premigration assessment scans both the source and target database schemas and the migration task settings to identify a list of potential issues ranging from a data type mismatch to possible performance issues. You can select one or more premigration assessments to run on your database migration tasks and review the results on the console or in an AWS S3 bucket.  

Amazon RDS for Oracle now supports 20.1 version of Oracle Application Express (APEX) for 11.2, 12.1, 12.2, 18c and 19c versions of Oracle Database. Using APEX, developers can build applications entirely within their web browser.

Amazon Lightsail now provides you with the ability to create instances with cPanel & WHM preinstalled. With this addition, Amazon Lightsail expands its curated selection of preconfigured application stacks and makes it easier to streamline and automate your server management tasks.

AWS Security Hub has released 7 new automated security controls for the AWS Foundational Security Best Practices standard and 12 new controls to our Payment Card Industry Data Security Standard (PCI DSS).  

You can now register Amazon EC2 instances in AWS Cloud Map by providing EC2 instance identifiers instead of the IP address when using HTTP namespaces. AWS Cloud Map is a cloud resource discovery service. Using AWS Cloud Map, you can define custom names for your application resources, such as Amazon EC2 instances, Amazon ECS tasks, Amazon S3 buckets, or any other cloud resource. Your application can then discover the location and metadata of cloud resources associated with these custom names via AWS SDK or by making authenticated API calls.

Amazon Translate – a fully managed neural machine translation service that delivers high-quality, and affordable language translation in fifty-five languages – is now supporting translation of Office open XML documents in docx, pptx, and xlsx format. Amazon Translate also increased the file size limit for each document in Batch Translation from 1 MB to 20 MB. Starting today, customers have the option to translate a large collection of docx, pptx, xlsx, HTML and plain text documents stored in a folder in Amazon Simple Storage Service (S3) bucket using the new asynchronous Batch Translation service. This is in addition to the real-time (synchronous) translation service that is already available, giving you options that best fit your needs. 

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS Africa (Cape Town) and AWS Europe (Milan) Regions.