The AWS Secrets Manager console now supports attaching resource-based policies to your secrets, enabling you to access secrets across AWS accounts securely and easily. The Secrets Manager console also uses Zelkova , an automated reasoning engine, to validate and block automatically policies that may grant broad access to your secrets across AWS accounts. This integration further raises the security bar for your organization and makes it easier to follow the security best practice of granting least privilege access .

AWS Secrets Manager now enables you to search secrets based on attributes such as secret name, description, tag keys, and tag values. With this launch, you can easily identify, arrange, and manage your secrets in to logical groups that are used by specific applications, departments, or employees. You can use this functionality through the Secrets Manager console or the List Secrets API to quickly find a subset of all your secrets managed in AWS Secrets Manager. 

Amazon AppFlow is a fully managed integration service that enables customers securely transfer data between AWS services and software-as-a-service (SaaS) applications in just a few clicks. Amazon AppFlow now integrates with Amazon CloudWatch Events to publish events related to the status of a flow including start of a flow run, completion of a flow run with status (success or failure) and error messages, AppFlow initiated deactivation of a scheduled or event triggered flow, and the number of third-party events that triggered flow runs in a 5 minute interval. 

Starting today you can enable the SPATIAL option for your Amazon RDS instances for Oracle running Standard Edition 2 (SE2). 

AWS Systems Manager now integrates with AWS Config to track configuration changes to inventory files on managed instances collected by AWS Systems Manager Inventory. A managed instance is a virtual machine that is configured for use with AWS Systems Manager. You can now track changes to file type inventory data from managed instances with the file attributes, such as name, version, installation directory, description, and so on. For example, you can now track changes to a license version file for an installed application on a managed instance. 

Amazon QuickSight’s SPICE engine now supports data sets up to 250M rows and 500GB. Customers love using SPICE to accelerate their dashboards, and this increase—from 100M rows and 200GB—is the most frequent request we get. Today we’re happy to announce support for larger data sets, letting you accelerate dashboards with more data.

Starting today, Amazon EC2 C5n and I3en instances are available in the AWS Europe (Stockholm) and Asia Pacific (Hong Kong) regions.  

The latest update to the AWS Well-Architected Framework is now available and reflects the latest best practice guidance for designing and deploying cloud workloads. An integral part of the AWS Well-Architected Tool (AWS WA Tool), the AWS Well-Architected Framework has been a guide for building secure, efficient, reliable, cost-effective, and high-performance workloads on AWS since 2015. It continues to evolve and improve as new cloud services and capabilities are introduced. 

You can now use the new Amazon Redshift console Amazon Redshift in the AWS GovCloud (US) Regions. The new user interface and new features simplify management and improve insights into the health and performance of your Amazon Redshift clusters and workloads.  

Amazon SageMaker Ground Truth is a fully managed data labeling service that makes it easy to build highly accurate training datasets for machine learning. Starting today, SageMaker Ground Truth now supports common video labeling use cases with new built-in workflows.