AWS Certificate Manager (ACM) Private Certificate Authority (CA) now emits Amazon CloudWatch Events. CloudWatch Events delivers a near real-time stream of system events that describe changes in Amazon Web Services (AWS) resources, enabling you to react selectively to events in the cloud. With this feature you can configure alerts, build event-driven workflows, and trigger custom logic based on events that are sent for certificate issuance, revocation, and other CA operations. For example, you can send a CloudWatch Event to notify you that something unexpected occurred, such as if a certificate is issued from a protected root CA with limited access or if your certificate revocation list (CRL) fails to update. With this feature, AWS publishes CloudWatch events for CA creation, certificate issuance, certificate revocation, audit report generation , and CRL generation.

Amazon Elastic Container Service released a new command line interface (CLI) with an emphasis on usability and developer productivity to quickly launch and easily manage applications on ECS powered by AWS Fargate. The new ECS CLI in preview provides a simple declarative set of commands including examples and guided experiences built in to help customers deploy quickly. The CLI creates all resources and artifacts required to deploy to ECS and configures best practices on behalf of the user, allowing them to focus on writing application code.

AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS EU (Paris) Region

Customers in the AWS China (Beijing) region operated by SINNET and the AWS China (Ningxia) region operated by NWCD can now use AWS Secrets Manager to manage secrets such as database passwords and API keys needed to access their applications, services, and IT resources.  

Today, Amazon Elastic File System (Amazon EFS) is introducing support for using AWS Identity and Access Management (IAM) service-linked roles , a type of IAM role that allows you to easily delegate permissions to AWS services and gain additional transparency into when they are used on your behalf.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports Apache Kafka version 2.3.1 for new clusters. Apache Kafka version 2.3.1 includes several new features and bug fixes. Apache Kafka version 2.3.1 is offered in all regions where Amazon MSK is available. For more information, see the Apache Kafka release notes for 2.3.0 and 2.3.1 .

You can now copy snapshots across regions using Data Lifecycle Manager (DLM). You can enable policies which, along with create, can now also copy snapshots to one or more AWS region(s). Copies can be scheduled for up to three regions from a single policy and retention periods are set for each region separately.

AWS WAF has added a new log field, terminatingRuleMatchDetails, that allows you to identify the area within a request deemed to be suspicious by SQLi or XSS detection rules.

Amazon Transcribe is an automatic speech recognition (ASR) service that makes it easy for you to add speech-to-text capability to your applications. By default, each AWS account has a service limit of 100 concurrent transcription jobs in an AWS region. Until now, when the concurrency quota was exhausted, you had to wait for existing jobs to finish before submitting more jobs. Starting today, job queuing will allow you to submit up to 10,000 jobs and queue your jobs for execution until slots become available. When slots become available, the jobs are processed from the queue in FIFO order (first in, first out).  

If you use Amazon Corretto, you can now use Corretto Yum and Corretto Apt repositories for a convenient and familiar way of keeping these installations up-to-date and easy to work into your existing processes. Alternatively, if you prefer tools like cURL you can now rely on the Corretto Permanent URLs to ensure your scripts always download the latest Corretto release. Finally, although you can download your Docker images from Docker Hub, if you want to remain inside the AWS cloud you can now use the Corretto Amazon Elastic Container Registry (ECR) Instance as your source of Docker images.