Amazon Detective now analyzes IAM role sessions so that you can visualize and understand the actions that users and apps have performed using assumed roles. With this new capability, Detective enables you to answer questions such as “which federated user invoked APIs that are associated with a security finding?”, “what API calls did a user invoke across a chain of role assumptions?”, “What API activity did an EC2 instance perform?” and “which of my users use this cross-account role?”, all without manually analyzing CloudTrail logs. By providing answers to these questions, Detective assists security analysts in diagnosing issues and understanding their root cause.

You can now view AWS Step Functions workflows in your AWS Lambda console, making it easier to orchestrate Lambda functions into business critical applications.

Amazon Detective is now available in the Africa (Cape Town) & Europe (Milan) regions. You can now easily analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities in these regions. 

Amazon Connect now provides an API to manage routing profiles in an instance. Using this API, you can programmatically create new routing profiles or update existing routing profiles to adapt to changing traffic patterns in your contact center. For example, you can automatically adjust queue priorities when there are spikes in contact volumes to prioritize contacts with the longest wait times first, and revert to your previous queue priorities when traffic returns to normal. To learn more, see the API reference guide .

Amazon Aurora Parallel Query is now available with MySQL 5.7 compatibility. Parallel Query provides faster analytical queries over your transactional data, speeding up your queries by up to 2 orders of magnitude, while maintaining high throughput for your core transactional workload.

Amazon API Gateway now supports mutual TLS (mTLS) authentication. Customers can now enable mTLS on custom domain names for regional REST and HTTP APIs at no additional cost. Mutual TLS enhances the security of your API and helps protect your data from attacks such as client spoofing or man-in-the middle attacks.  

Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capability to your applications. Amazon Transcribe now expands support for Channel Identification to streaming audio transcription. With Channel Identification, you can process live audio from multiple channels, and produce a single transcript of the conversation with channel labels. 

Amazon Elasticsearch Service now offers a detailed audit log of all Elasticsearch requests. Audit Logs allows customers to record a trail of all user actions, helping meet compliance regulations, improving the overall security posture and providing evidence for security investigations. 

You can now identify and mask personally identifiable information (PII) from text documents using Amazon Comprehend. Amazon Comprehend uses machine learning to detect PII information that can be used to identify any individual such as social security numbers, credit card numbers, and email addresses. You can use Amazon Comprehend’s PII API synchronously and asynchronously to detect PII and mask it from text documents. 

Amazon RDS for SQL Server now supports restoring SQL Server native backups onto DB instances that have read replicas configured. Previously, the read replica would need to be removed before restoring the native backup file onto your Amazon RDS for SQL Server DB instance. SQL Server backup files stored in your Amazon S3 bucket can now be restored directly on DB instances with read replicas.