Amazon EFS now supports up to 250,000 read IOPS and up to 50,000 write IOPS per file system, making it easier to power IOPS-intensive file workloads on AWS.

Amazon CloudWatch announces (in preview) natural language query generation powered by generative AI for Logs Insights and Metrics Insights. This feature enables you to easily and quickly generate queries in context of your logs and metrics data using plain language. By simplifying the query generation process, you can accelerate insights from your observability data without needing extensive knowledge of the query language.

Amazon Redshift provisioned cluster concurrency scaling and serverless autoscaling now supports CREATE TABLE AS SELECT (CTAS) queries. This allows customers to scale their extract, transform, and load (ETL) and other write workloads with additional compute to more easily meet their SLAs.

We are excited to announce Amazon Managed Service for Prometheus collector, a fully-managed agentless collector customers can use to collect Prometheus metrics from their workloads running on Amazon EKS. Customers can now enable the discovery and collection of Prometheus metrics from their Amazon EKS applications and infrastructure through the EKS console or through an API call, without having to self-manage agents.

Starting today, AWS CloudTrail Lake data is now available for zero-ETL analysis in Amazon Athena. You can use Athena to query your activity logs in CloudTrail Lake without the operational complexity of moving data or building data processing pipelines. CloudTrail Lake is a managed data lake that lets you aggregate, immutably store, and analyze activity logs for audit, security, and operational investigations. Athena is an interactive query service that makes it simple to analyze data in Amazon S3 and other data stores using SQL. Using Athena, security engineers can now correlate activity logs in CloudTrail Lake with application and traffic logs in data stores such as S3 for security incident investigations. Compliance and operation engineers can now visualize activity logs in CloudTrail Lake with Amazon QuickSight and Amazon Managed Grafana for compliance, cost, and usage reporting.

Today, AWS announces the general availability of AWS re:Post Private, a fully managed, secure knowledge service for enterprises to accelerate cloud adoption and improve developer productivity. Using re:Post Private, enterprises can create their own private version of AWS re:Post to collaborate with their company and with AWS. This allows you to streamline collaboration and knowledge sharing within your cloud community through secure community discussion and helps you build reusable knowledge specific to your organization. With re:Post Private, you can up-level builder skills and onboard new team members faster with curated training and technical content from AWS and centralized, scalable knowledge resources. Customers with Enterprise Support and Enterprise On-Ramp Support plans can subscribe to this service.

Amazon Personalize is excited to announce the new Next-Best-Action recipe to help you recommend actions that your users have a high probability to take in real-time. Expanding beyond the items or content that Personalize has allowed customers to recommend, this new recipe assists you in determining the next best actions to suggest to your individual users that will help in increasing brand loyalty and conversion. Similar to other Amazon Personalize recipes, Next Best Action does not require ML expertise and allows you to integrate personalization seamlessly into your applications.

AWS Control Tower customers can now programmatically set up and manage their landing zones. Customers can discover, create, update, and reset their landing zones, as well as manage landing zone customizations, using APIs. A landing zone is a well-architected, multi-account AWS environment based on security and compliance best practices. AWS Control Tower automates the setup of a new landing zone using best-practices blueprints for identity, federated access, logging, and account structure. The landing zone APIs include AWS CloudFormation support, allowing customers to manage their landing zone with infrastructure as code (IaC).

AWS Systems Manager Automation enables you to automate routine operations tasks using runbooks. Starting today, developers can author and edit runbooks using a low-code visual design experience. Simply drag and drop Automation actions and AWS APIs onto a canvas and connect them together as steps to visualize your runbook logic. The visual design experience pre-populates parameters and validates actions in real time so you can build with confidence and efficiency.

Amazon S3 Access Grants map identities in directories such as Active Directory, or AWS Identity and Access Management (IAM) Principals, to datasets in S3. This helps you manage data permissions at scale by automatically granting S3 access to end-users based on their corporate identity. Additionally, S3 Access Grants log end-user identity and the application used to access S3 data in AWS CloudTrail. This helps to provide a detailed audit history down to the end-user identity for all access to the data in your S3 buckets.