AWS WAF now supports configuring the HTTP status code and the response body returned to the user when a request is blocked. Until today, AWS WAF could only return HTTP status code 403 (forbidden) when the user request was blocked by WAF. With Custom Response, you can now configure AWS WAF to send out a different HTTP status code, such as 3xx (redirects), 4xx (client errors), or 5xx (server errors). These codes can be used to redirect users to different parts of your application or provide users a specific response code based on the reason they were blocked by WAF. In addition, you can use Custom Response to include a response body to present a customized error message back to the user.

AWS WAF now supports inserting HTTP headers to the user request when WAF allows the request to reach your application. You can use the Request Header Insertion feature to help validate that requests made to your application were evaluated by WAF and configure your application to only allow requests that contain the custom header values that you specify. You can also insert headers so your application can process the request differently based on the presence of the header, or simply log the header in your application logs for reporting and analytics.

AWS Config advanced queries feature now supports pagination for queries that contain aggregate functions, such as COUNT and SUM. For example, getting the total number of resources in each AWS account requires the COUNT aggregate function. You can now use advanced queries to get complete results for your aggregate queries through pagination, which were previously limited to 500 rows. Pagination is a technique that is used to divide large results into “pages,” where each page contains a subset of results. You can process the first page of results, then the second page, and so on.

AWS Security Hub is now available in the new AWS Asia Pacific (Osaka) Region. You can now centrally view and manage the security posture of your AWS accounts in AWS Asia Pacific (Osaka) Region.

We’re excited to announce the launch of AWS DevOps Monitoring Dashboard, a reference implementation that automates the setup of DevOps metrics dashboards so that customers developing on AWS can measure development activity and identify areas for continued improvement.

Amazon SageMaker now supports adding authentication to requests for pulling images stored in your private Docker Registry to build containers for real-time inference. Amazon SageMaker makes it easy to deploy your trained models to production with a single click, so you can start generating real-time inferences with low latency. You can bring your own code for performing real-time inference using container images stored in Amazon Elastic Container Registry (Amazon ECR) or a private Docker registry of your choice. SageMaker can now authenticate with your private Docker registry so you can have an additional layer of security and the peace of mind that requests to your container images are serviced only for authorized entities.

Amazon Forecast adds support for AWS Resource Groups and AWS Resource Groups Tag Editor. Amazon Forecast uses machine learning (ML) to generate more accurate demand forecasts, without requiring any prior ML experience. Forecast brings the same technology used at Amazon.com to developers as a fully managed service, removing the need to manage resources or rebuild your systems.

WorkSpaces Manager for Amazon WorkSpaces (WSM) is an AWS Solutions Consulting Offer delivered via a consulting engagement from Nuvens Consulting, an AWS Digital Workplace Competency Partner. WSM is ideal for customers looking to optimize, automate, and reduce the day-to-day management of their Amazon WorkSpaces estate. Customers that request this consulting offer will participate in an engagement that delivers automation of the administration, integration into existing support mechanisms, and right-sizing the Amazon WorkSpaces estate to ensure cost efficiency.

You can now use IAM condition keys as part of IAM and Service Control Policies (SCPs) to centrally govern endpoint, authorization, and logging configurations for your APIs in API Gateway.

Starting today, you are now offered additional file and folder sharing controls on your Amazon WorkDocs Android application. With this release, you can now share a folder as well as edit sharing permissions such as adding or removing members of the shared folder. You can also share a link as well as manage shared links for files and folders such as removing your shared link, adding a password to your shared link, or setting expiration dates for your shared link. In addition, you can now manage sharing permissions directly from the Folder List page for documents. These additional controls make it quicker than ever to share with colleagues and partners from your mobile application while also providing full control to manage the sharing workflow securely throughout the Android application.