AWS Key Management Service (KMS) has integrated with AWS CloudHSM so you now have the option to create your own KMS custom key store. Each custom key store is backed by an AWS CloudHSM cluster and enables you to generate, store, and use your KMS keys in hardware security modules (HSMs) that you control. The KMS custom key store helps satisfy compliance obligations that would otherwise require the use of on-premises HSMs and supports AWS services and encryption toolkits that are integrated with KMS.

Today, Amazon Web Services (AWS) is announcing Firecracker, new virtualization and open source technology that enables service owners to operate secure multi-tenant container-based services by combining the speed, resource efficiency, and performance enabled by containers with the security and isolation offered by traditional VMs. Firecracker implements a virtual machine manager (VMM) based on Linux’s Kernel-based Virtual Machine (KVM), and provides a RESTful API to create and manage microVMs with any combination of vCPU and memory to match application requirements. Firecracker is built with minimal device emulation that enables faster startup time, provides a reduced memory footprint for each microVM, and offers a trusted sandboxed environment for each container. 

AWS IoT Events is a new, fully managed IoT service that makes it easy to detect and respond to events from IoT sensors and applications. AWS IoT Events recognizes events across multiple sensors to identify operational issues, such as equipment slowdowns, and triggers alerts such as notifying support teams of an issue. AWS IoT Events offers a managed complex event detection service on the AWS cloud.

AWS IoT SiteWise is a new managed service that makes it easy to collect and organize your data from industrial equipment at scale. You can easily monitor equipment across your industrial facilities to identify waste, such as breakdown of equipment and processes, production inefficiencies, and defects in products. 

AWS IoT Greengrass allows you to bring local compute, messaging, data caching, sync, and ML inference capabilities to edge devices. Starting today, you can use new features that extend the capabilities of AWS IoT Greengrass including connectors to third-party applications and AWS services, hardware root of trust private key storage, and isolation and permission settings that increase AWS IoT Greengrass Core configuration options.  

AWS IoT Things Graph is a service that provides an easy way for developers to connect devices and web services to build IoT applications. In AWS IoT Things Graph, devices and web services are represented as reusable components called models that hide low level details and expose states, actions, and events of underlying devices and services as APIs. You can use the drag-and-drop interface to visually connect models and define interactions between them to build multi-step automation applications.

BLE support in Amazon FreeRTOS is now available in beta. You can securely connect Amazon FreeRTOS devices that use BLE to AWS IoT through Android and iOS devices.  

Amazon S3 Object Lock is a new S3 feature that blocks object version deletion during a customer-defined retention period so that you can enforce retention policies as an added layer of data protection or for regulatory compliance. You can migrate workloads from existing write-once-read-many (WORM) systems into Amazon S3, and configure S3 Object Lock at the object- and bucket-levels to prevent object version deletions prior to pre-defined Retain Until Dates or Legal Hold Dates. S3 Object Lock protection is maintained regardless of which storage class the object resides in and throughout S3 Lifecycle transitions between storage classes.

AWS Transit Gateway is a new service that enables customers to connect thousands of Amazon Virtual Private Clouds (VPCs) and their on-premises networks using a single gateway. As you grow the number of workloads in AWS across multiple accounts, you need to scale your networks, control your connectivity policies better and monitor your network effectively. Today, you can connect pairs of Amazon VPCs using peering. However, managing point-to-point connectivity across large number of VPCs, without centrally managing connectivity and routing policies, can be operationally costly and cumbersome. This solution can be hard to manage for hundreds of VPCs.

The AWS Service Delivery Program helps customers identify and choose top APN Partners with a track record of delivering specific AWS services to customers. To receive an AWS Service Delivery designation, APN Partners must undergo a technical validation related to their service delivery expertise.