You can now use Amazon Route 53 Resolver endpoints for hybrid cloud configurations in the AWS GovCloud (US) Regions. These AWS Regions are isolated AWS Regions designed to allow U.S. government agencies and customers to move sensitive workloads into the cloud by addressing their specific regulatory and compliance requirements.

AWS Firewall Manager is a security management tool to centrally configure and manage firewall rules across your accounts and Amazon VPCs. AWS Firewall Manager now supports Amazon VPC security groups, making it easier for security administrators to centrally configure security groups across multiple accounts in their organization, and continuously audit them to detect overly permissive or misconfigured rules.

Today, Amazon SageMaker Ground Truth launched built-in workflows for label verification and label adjustment. One way that ML practitioners have improved the accuracy of their labeled data is through using audit workflows. Audit workflows enable a group of reviewers to verify the accuracy of labels (a process called label verification) or adjust them (a process called label adjustment) if needed.

Amazon API Gateway supports secured connectivity between REST APIs and Amazon Virtual Private Clouds (VPCs) in Middle East (BAH). Customers can now isolate traffic between their Amazon VPCs and REST APIs from the internet using Private API and VPC Link features provided by API Gateway.

When using Amazon Relational Database Service (Amazon RDS), you can now view detailed billing at the database instance level. This information is available for RDS automated database backups and manual database snapshots, and can be viewed in AWS Cost Explorer and Cost and Usage Report (CUR).

Amazon Lex now supports checkpoints in session APIs making it easier to manage conversation flows.  

Amazon Web Services (AWS) announces the availability of Amazon EC2 M5n, M5dn, R5n, and R5dn instances that can utilize up to 100 Gbps of network bandwidth, and Elastic Fabric Adapter (EFA) for HPC/ML workloads. These instances offer significantly higher network performance across all instance sizes, ranging from 25 Gbps of network bandwidth on smaller instance sizes to 100 Gbps of network bandwidth on the largest instance size, and support automatic encryption of in-transit traffic between instances. These new instances are designed for workloads such as databases, High Performance Computing, analytics, Big Data, and in-memory cache that can take advantage of improved network bandwidth and packet rate performance.

Amazon Elastic Container Services (ECS) enables you to correlate container images pulled from ECR with scheduled tasks and where it is running, on Amazon EC2 or Fargate. Now you have visibility and an immutable attribute to identify where your container image has been deployed to track application adoption, incident response and lifecycle management.

Starting today, Amazon Textract is a HIPAA eligible service. HIPAA eligibility applies to all AWS Regions where Amazon Textract is available. This means you can use Amazon Textract to help you process protected health information (PHI) extracted from images to power your healthcare applications.

Starting today, you can now use custom certificates in AWS Glue when using JDBC connections to connect to your data sources from Glue ETL jobs and crawlers. You may decide to use custom certificates because you already obtained a certificate from a third-party issuer, or because the default certificates supported by AWS Glue do not meet your requirements. Previously, you were only able to use the default certificates supported by AWS Glue.