Amazon Redshift introduces support for natively storing and processing HyperLogLog (HLL) sketches. HyperLogLog is a novel algorithm that efficiently estimates the approximate number of distinct values in a data set. HLL sketch is a construct that encapsulates the information about the distinct values in the data set. You can use HLL sketches to achieve significant performance benefits for queries that compute approximate cardinality over large data sets, with an average relative error between 0.01–0.6%. 

AWS Transfer Family now offers Federal Information Processing Standards (FIPS) 140-2 compliant endpoints in AWS GovCloud (US) Regions to protect sensitive information. These endpoints terminate Transport Layer Security (TLS) sessions using a FIPS 140-2 compliant cryptographic software module, making it easier for you to use Transfer Family for regulated workloads.  

You can now run Kubernetes pods as part of your Amazon EKS Kubernetes clusters in the two AWS Local Zones in Los Angeles. With Amazon EKS and Local Zones, you can run latency-sensitive Kubernetes applications closer to end-users in Los Angeles. Once you have opted-in for using AWS Local Zones, you can create a VPC and subnet in the local zone to deploy EC2 resources into it and attach them to your EKS clusters running in AWS US West (Oregon) parent region.  

AWS Batch now supports new parameters when specifying AWS Batch job definitions, including custom logging configurations, swap space, and shared memory. AWS Batch enables developers, scientists, and engineers to easily and efficiently run hundreds of thousands of batch computing jobs on AWS. AWS Batch dynamically provisions the optimal quantity and type of compute resources (e.g., GPU, CPU, or memory optimized instances) based on the volume and specific resource requirements of the batch jobs submitted. With AWS Batch, there is no need to install and manage batch computing software or server clusters that you use to run your jobs, allowing you to focus on analyzing results and solving problems.  

Amazon Elastic Kubernetes Service (EKS) now supports running containers on AWS Fargate in ten additional AWS regions: US West (Northern California), Canada (Central), South America (São Paulo), Europe (London), Europe (Paris), Europe (Stockholm), Middle East (Bahrain), Asia Pacific (Mumbai), Asia Pacific (Seoul), and Asia Pacific (Hong Kong) regions. 

Amazon CloudWatch Logs now supports two subscription filters per log group, enabling you to deliver a real-time feed of log events from CloudWatch Logs to an Amazon Kinesis Data Stream, Amazon Kinesis Data Firehose, or AWS Lambda for custom processing, analysis, or delivery to other systems.  

AWS Security Hub is now authorized as FedRAMP Moderate in the following AWS Regions: US East (N. Virginia), US East (Ohio), US West (N. California), and US West (Oregon). The Federal Risk and Authorization Management Program (FedRAMP) is a US government-wide program that delivers a standard approach to the security assessment, authorization, and continuous monitoring for cloud products and services. FedRAMP uses the National Institute of Standards and Technology (NIST) Special Publication 800 series and requires cloud service providers to receive an independent security assessment conducted by a third-party assessment organization (3PAO) to ensure that authorizations are compliant with the Federal Information Security Management Act (FISMA). We are also now approved as Department of Defense Cloud Computing Security Requirements Guide Impact Level 2 (DoD SRG IL-2 ) in those regions.

Amazon S3 Object Ownership is a new S3 feature that enables bucket owners to automatically assume ownership of objects that are uploaded to their buckets by other AWS Accounts. This helps you to standardize ownership of new objects in your bucket, and to share and manage access to these objects at scale via resource-based policies such as a bucket policy or an access point policy. Whether your S3 bucket receives data from other AWS accounts, or stores output from AWS services like AWS CloudTrail, S3 Object Ownership simplifies the work of creating and maintaining shared data sets on Amazon S3.  

Amazon Personalize enables you to personalize your website, app, ads, emails, and more, using the same machine learning technology as used by Amazon.com, without requiring any prior machine learning experience. Using Amazon Personalize, you can generate personalized recommendations for your users through a simple API interface. Amazon Personalize now makes it easier to manage your growing item and user catalogs with new APIs for incrementally adding items and users in the datasets that you use in Personalize to create personalized recommendations. 

AWS Config now offers 15 additional sample conformance pack templates that can help you verify your cloud infrastructure’s compliance with one or more frameworks for configuration best practices. With conformance packs, you can package a collection of AWS Config rules and remediation actions that can be deployed together as a single entity across an entire organization. This is particularly useful if you need to quickly establish a common baseline for resource configuration policies and best practices across multiple accounts in your organization in a scalable and efficient way.