EC2 Image Builder now allows customers to stream logs to AWS CloudWatch, which can help examine and troubleshoot issues with building, customizing, securing, patching, testing, and distribution of Amazon Machine Images (AMIs). It also allows customers to maintain continuous visibility into the activity of Image Builder pipelines. 

Amazon Athena customers can now register and manage their data catalogs in Athena using the AWS CloudFormation AWS::Athena::DataCatalog resource.

Amazon Neptune now provides the flexibility to specify conditions in IAM policies using tags. Tags can be added to a Neptune resource such as a DB cluster or instance. Using tags, you can restrict management operations on the cluster without using the cluster or instance resource identifiers.

AWS Launch Wizard for SAP is now integrated with Amazon Route53 as the Domain name system. Starting today, you can choose a Route53 hosted zone as the domain name system for SAP systems deployed with AWS Launch Wizard. Launch Wizard creates DNS records in the chosen Route53 hosted zone eliminating the need to maintain /etc/hosts file entries for each of the EC2 instances being deployed as part of the deployment. Since it’s not possible for two instances in the same domain to have same hostname, Launch Wizard validates the user input to ensure that the record does not exist already, thereby avoiding deployment failures. 

AWS Managed Services (AMS) now supports launching Amazon EC2 instances of Oracle Linux 7.5 and later minor versions. Enterprises can now migrate their workloads using Oracle Linux 7.5 into AMS using workload ingest process or by creating new EC2 instances. AMS performs patching, monitoring, back-up management, log aggregation, security management, incident management, and problem management for these EC2 instances.  

Amazon Neptune is now available in the AWS US West (N. California) Region. You can now create Neptune clusters using R5 and T3 instance types in this region for your graph applications.  

AWS Service Catalog now supports obtaining outputs from a Service Catalog provisioned product in an AWS CloudFormation template. Product outputs provide the interface from one product to another. With this new feature, administrators and developers can easily refer to those outputs in order to combine the products needed for their applications, which saves time building applications that use more than one product, such as a three-tier web application. 

The AWS Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across AWS accounts securely and easily. The Secrets Manager console also uses Zelkova , an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across AWS accounts. This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access .

AWS Secrets Manager now enables you to search secrets based on attributes such as secret name, description, tag keys, and tag values. With this launch, you can easily identify, arrange, and manage your secrets in to logical groups that are used by specific applications, departments, or employees. You can use this functionality through the Secrets Manager console or the List Secrets API to quickly find a subset of all your secrets managed in AWS Secrets Manager. 

Amazon AppFlow is a fully managed integration service that enables customers securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks. Amazon AppFlow now integrates with Amazon CloudWatch Events to publish events related to the status of a flow including start of a flow run, completion of a flow run with status (success or failure) and error messages, AppFlow initiated deactivation of a scheduled or event triggered flow, and the number of third-party events that triggered flow runs in a 5 minute interval.