AWS CodeBuild now allows you to access Docker images from any private registry as the build environment. Previously, you could only use Docker images from public DockerHub or Amazon ECR in CodeBuild.  

You can now use the CloudWatch Agent procstat plugin to monitor system utilization of individual processes. You can also create multiple configuration files for greater flexibility in defining core and custom configurations to collect metrics and logs from your Amazon EC2 instances and on-premise servers. 

Elastic Load Balancing now supports TLS termination on Network Load Balancers. With this new feature, you can offload the decryption/encryption of TLS traffic from your application servers to the Network Load Balancer, which helps you optimize the performance of your backend application servers while keeping your workloads secure. Additionally, Network Load Balancers preserve the source IP of the clients to the back-end applications, while terminating TLS on the load balancer.

Now, AWS Identity and Access Management (IAM) makes it easier for IAM users to view, update and understand all their security credentials from one place using the My Security Credentials page in the AWS Management Console.  

The AWS Storage Gateway’s Tape Gateway configuration now provides increased throughput performance for virtual tape backups to AWS. Your on-premises backup applications can now write data to the local gateway cache at up to 2.7 Gbps, and read data from the cloud at up to 0.7 Gbps, by following published best practices .

AWS Storage Gateway customers using the Volume Gateway configuration for block storage can now detach and attach volumes, from and to a Volume Gateway. You can use this feature to migrate volumes between gateways to refresh underlying server hardware, switch between virtual machine types, and move volumes to better host platforms or newer Amazon EC2 instances, as your data and performance demands grow.

AWS Config is pleased to announce increased default limits for AWS Config rules for all customers in all Regions. Customers can now create 150 AWS Config rules per account per Region by default, increased from 50 AWS Config rules per account per Region. The full list of AWS service limits can be found on the AWS Service Limits page.

Amazon Cognito is now available in the AWS Canada (Central) Region. Amazon Cognito is the easiest way to add authentication, authorization, and user management to your web and mobile apps. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0.

AWS has published a service level agreement (SLA) for Amazon Cognito, which provides availability guarantees.