Transport Layer Security (TLS) is an industry-standard protocol for securing network connections. You can now use TLS version 1.2 to establish a secure network connection to all editions of Amazon Relational Database Service (RDS) for Oracle.

AWS CloudFormation StackSets now allows you to create multiple execution roles in target accounts. This allows you to control resource types users can create or update in their stack sets. For example, you can restrict a group to create or update only Amazon S3 related resources in StackSets, while another group can only access Amazon DynamoDB resources.  

Starting today, Amazon QuickSight will offer pay-per-session pricing, a first among business analytics services. With pay-per-session pricing, you can enable everyone in the organization with interactive, data driven dashboards and pay only when users access these dashboards. This makes Amazon QuickSight an even more cost-effective way for you to make personalized business analytics available to everyone, whether you have tens, hundreds, or thousands of users. Pay-per-session pricing starts at $0.30 per session, up to a maximum of $5 per user, per month, and is available in Amazon QuickSight Enterprise Edition in all supported AWS regions. With pay-per-session pricing there are no upfront costs, no annual commitments, and no charges for inactive users.

PostgreSQL 11 Beta 1 is now available in the Amazon RDS Database Preview Environment, allowing customers to test the beta version of PostgreSQL 11 on Amazon RDS. 

Today we are adding Amazon Elastic File System (Amazon EFS) to our list of HIPAA Eligible Services.

The Media Analysis Solution is a reference implementation that helps customers process, analyze, and extract meaningful data from their audio, image, and video files. The solution combines Amazon Rekognition, to provide highly accurate object, scene and activity detection; facial analysis and recognition; and celebrity detection in videos and images, Amazon Transcribe, an automatic speech recognition service, and Amazon Comprehend, which provides automatic transcription of audio files and extraction of key phrases and entities from transcripts, to quickly and seamlessly obtain key details from their media files in their AWS accounts without machine learning expertise. The solution also includes a web-based user interface that customers can use to upload and search their media files in their AWS accounts.

This Quick Start deploys AWX on the AWS Cloud, for users who want to run and manage an Ansible infrastructure on AWS.

Application Load Balancer now supports authentication of user requests when accessing web-based applications through social Identity Providers such as Facebook, Google, and Amazon or enterprise Identity Providers such as ActiveDirectory and PingFederate. With this, developers can now focus on building applications for their customers by offloading the responsibility of authentication to the Application Load Balancer, while benefiting from its scale, availability, and reliability.

As enterprises are enabling their employees to access cloud-based apps from any location, identity-based security has become even more crucial. With authentication available on Application Load Balancer and integrated with Amazon Cognito , users can now be authenticated through any identity provider that supports OpenID Connect protocol or SAML2.0 or social identity providers such as Facebook, Google, and Amazon. If you already have a custom identity provider solution that is OpenID Connect-compatible, Application Load Balancer can also authenticate users by directly connecting with that Identity Provider. To learn more about the feature, please try the Elastic Load Balancing demo .

Support for user authentication in Application Load Balancer with Cognito-supported Identity Providers is available in all AWS regions that are supported by Amazon Cognito . Support for user authentication by directly integrating your OpenID Connect Identity Provider with Application Load Balancer is available in all AWS regions globally except in the China regions (Beijing and Ningxia). To learn more, please visit the Elastic Load Balancing documentation page .

Amazon Neptune — now generally available — is a fast, reliable graph database service that makes it easy to build and run applications that work with highly connected datasets. Neptune supports popular graph models Property Graph and W3C’s Resource Description Framework (RDF), and their respective query languages Apache TinkerPop Gremlin 3.3.2 and SPARQL 1.1.

You can now use Amazon CloudWatch to monitor the performance of Amazon Simple Notification Service (SNS) when using subscription filter policies.