Starting today, customers can run Apple macOS Sonoma (version 14) as Amazon Machine Images (AMIs) on Amazon EC2 Mac instances. macOS Sonoma is the latest major macOS version from Apple, and introduces multiple new features and performance improvements over prior macOS versions including support for running Xcode version 15.0 and later, which includes the latest SDKs for iOS, iPadOS, macOS, tvOS, watchOS, and visionOS.

Amazon QuickSight now supports filtering of embedded dashboards and visuals at runtime that can help you seamlessly integrate your SaaS application with Amazon QuickSight embedded dashboards and visuals. You can use new methods in the embedded SDK to create customized filter controls in your application, apply filter presets based on data from your application, and personalize filter configurations for users. To learn more about embedded runtime filtering, read this blog post and click here .

Starting today, customers can identify probable root causes of incidents in Incident Manager, a capability of AWS Systems Manager. When an alarm or event triggers an incident, Incident Manager now identifies recent AWS CloudFormation and AWS CodeDeploy deployments that included the affected resource and likely caused the incident. Incident responders will see deployment details and a direct link to the deployment, accelerating root cause diagnosis and reducing mean time to resolution (MTTR).

Amazon Verified Permissions now supports batch authorization, allowing you to process up to 30 authorization decisions for a single principal or resource in a single API call. Batch authorization allows you to filter for authorized actions that a given principal can take on a resource. It also enables developers to simplify building applications where a single user action requires multiple actions to be authorized. Verified Permissions optimizes authorizing multiple requests when the principal or resource is fixed. 

You can now monitor network throughput between your Outpost rack service link virtual interfaces (VIFs) and your local network devices using Amazon CloudWatch IfTrafficIn and IfTrafficOut metrics for Outposts. Outpost rack service link VIFs establish IP connectivity and BGP sessions between your Outpost and your local network devices for service link connectivity.

AWS Glue announces a new capability that allows users to configure the detection sensitivity and actions such as partial or full redaction, and encryption, at an entity level to improve security posture along with improved data interpretability. 

Amazon Athena has released new Amazon CloudWatch metrics that provide insight on the compute resources your queries use. Starting today, you can use CloudWatch to analyze, chart, and monitor the utilization of Provisioned Capacity resources which helps you make informed adjustments to capacity and optimize cost. You can also inspect query-level metrics, which now include the compute used, measured in Data Processing Units (DPU), to understand how much capacity is used by each query that you run.

You can now run OpenSearch version 2.11 in Amazon OpenSearch Service. With OpenSearch 2.11, we have made several improvements to search, observability, security analytics, and OpenSearch Dashboards. This version includes features that were launched as part of open source OpenSearch versions 2.10 and 2.11. This launch includes the introduction of hybrid search queries , which uses normalization processors to improve search relevance, by combining relevance scores of lexical queries with natural language-based k-NN vector search queries. It also includes multimodal search , which allows users to search image and text pairs like product catalog items, and the introduction of neural sparse retrieval in addition to existing dense retrieval for semantic search applications. Search practitioners can test out these new search methods with the new search comparison tool which lets you compare the results of two different search queries side by side in OpenSearch Dashboards. 

Today, AWS announced a new EC2 capability to configure idle timeouts for instance connection tracking. This will allow customers to manage their instance’s connection tracking resources and providing them the ability to configure optimal timeouts to manage connection scale. EC2 utilizes Connection Tracking (conntrack) to implement Security Groups and to enforce rules. With this new feature, idle timeouts for connections in the TCP Established, UDP stream and UDP unidirectional sessions on EC2 instances are now configurable on a per Elastic Network Interface (ENI) basis and can be edited from their default timeout settings. Prior to today, all idle connections in TCP and UDP states were tracked for a pre-defined default period or until they were closed. 

Amazon Redshift Serverless, which allows you to run and scale analytics without having to provision and manage data warehouse clusters, is now generally available in the AWS China (Beijing) region. With Amazon Redshift Serverless, all users—including data analysts, developers, and data scientists—can now use Amazon Redshift to get insights from data in seconds. Amazon Redshift Serverless automatically provisions and intelligently scales data warehouse capacity to deliver high performance for all your analytics. You only pay for the compute used for the duration of the workloads on a per-second basis. You can benefit from this simplicity without making any changes to your existing analytics and business intelligence applications.