Amazon CloudWatch Internet Monitor is now available in all standard AWS Regions. Internet Monitor is a feature of Amazon CloudWatch that helps you monitor internet performance and availability metrics between your AWS-hosted applications and your application’s end users. It can help reduce the time it takes to diagnose internet issues from days to minutes, and it also provides recommendations to help you improve your end users’ experience. Internet Monitor publishes internet measurements to CloudWatch Logs and CloudWatch Metrics, and optionally to Amazon S3, and sends health events to Amazon EventBridge so that you can set up notifications.
Announcing the general availability of AWS Local Zones in Manila
AWS Local Zones is now available in Manila, Philippines. You can now use AWS Local Zones in Manila to deliver applications that require single-digit millisecond latency or local data processing.
EMR on EKS now supports custom job scheduling
We are excited to announce the addition of Volcano and Apache Yunikorn as job schedulers when running EMR on EKS using Spark operator and spark-submit. Amazon EMR on EKS enables customers to run open-source big data frameworks such as Apache Spark on Amazon EKS. Using a custom job scheduler for Spark jobs enables fine-grained capacity management and faster pod provisioning at scale.
AWS Verified Access adds a new logging functionality to improve troubleshooting
AWS Verified Access now provides improved logging functionality, making it easier to author and troubleshoot application access policies. Verified Access enables you to provide secure access to your corporate application using zero-trust principles. You can use end-user context, such as user groups and device risk score, from your existing third-party identity and device security services to define access policies. Starting today, you can log all the end-user context received from third-party services, simplifying policy authoring and troubleshooting.
Announcing general availability of AWS Control Tower's integration with Security Hub
Today we are excited to announce the general availability of the integration between AWS Control Tower and AWS Security Hub. You can now enable over 170 Security Hub detective controls that map to related control objectives from AWS Control Tower. AWS Control Tower now detects when you disable a control from Security Hub which results in a ‘Drifted’ control state. With this drift detection capability, it is simpler for you to monitor the deployment state of your controls and take appropriate actions to manage the security posture of your AWS Control Tower environment.
Amazon Kinesis Data Firehose adds support for data stream delivery to Amazon Redshift Serverless
Amazon Kinesis Data Firehose can now deliver streaming data to Amazon Redshift Serverless. With few clicks, you can more easily ingest, transform, and reliably deliver streaming data into Amazon Redshift Serverless without building and managing your own data ingestion and delivery infrastructure. Kinesis Data Firehose is a fully managed service that automatically scales to match the throughput of your data and without ongoing administration.
Amazon VPC CNI now supports IPv6 Egress for Pods in IPv4 enabled Kubernetes Clusters
Starting with Amazon VPC CNI version 1.13 , Amazon Elastic Kubernetes Service (EKS) allows clusters in IPv4 address space to connect with end points in IPv6 address space. This enables customers to operate services in mixed IPv4 and IPv6 environments while migrating to IPv6 only address space-based services. The native support in Amazon VPC CNI reduces the overhead of managing dual-stack cluster configurations and alleviates operational challenges in maintaining application compatibility with dual-stack networking.
Announcing simplified cross-account management of operational issues in AWS Systems Manager OpsCenter
Today, OpsCenter, a capability of AWS Systems Manager, announces simplified cross-account management of operational issues (OpsItems). In just a few clicks, customers can configure OpsCenter to centrally create, view, and manage operational issues across all accounts in their AWS Organization.
AWS Lake Formation and Glue Data Catalog now support cross-Region table access
AWS Lake Formation now supports accessing Glue Data Catalog databases and tables across Regions. Previously, in order to access the Glue Data Catalog databases and tables from a different Region, you had to replicate the catalog items and/or underlying data from the source Region to the local Region. Now, with the cross-Region support in Lake Formation, you can access the Glue catalog databases and tables from any Region that Lake Formation is available. Each feature of Lake Formation, such as LF-Tags based access control, fine grained access permissions at the row and column level, data filters, and sharing to direct IAM principals across accounts are available with cross-Region table access. Lastly, you can also run queries that join tables between local Region tables and cross-Region tables.
AWS Systems Manager Quick Setup enables automatic updates for EC2 launch agents
Today, AWS Systems Manager announces auto-update support for the Amazon EC2 Windows, Linux, and Mac launch agents in Quick Setup. With this launch, customers can enable automatic upgrades with a few clicks in the console in order to get the latest bug fixes, security patches, and feature updates for their EC2 launch agents across accounts and Regions in their Organization.