Starting today, you can now use workflows in AWS Glue to author directed acyclic graphs (DAGs) of Glue triggers, crawlers and jobs.

Certificate authority (CA) administrators can now create a private CA hierarchy, including root and subordinate CAs. A CA hierarchy is a way to organize CAs that provides strong security and restrictive access controls for the most-trusted root CA at the top of the hierarchy, while allowing more permissive access and bulk certificate issuance for subordinate CAs lower in the trust chain. This feature expands ACM Private CA capabilities from a single level hierarchy that required you to operate your root and intermediate CAs, to an AWS-managed solution that provides a full CA hierarchy without the need to maintain external root CAs.

You can now enforce a minimum Transport Layer Security (TLS) version and cipher suites through a security policy for connecting to your Amazon API Gateway custom domain, allowing you to further improve security for your customers.  

Amazon QuickSight announces the availability of fine-grained access control for AWS Identity and Access Management (IAM) permissioned resources (specifically, Amazon S3, Amazon Athena and Amazon RDS/Redshift database discovery. Fine-grained access control allows administrators of an Amazon QuickSight account to control authors’ default access to connected AWS resources and use IAM policies to scope down access permissions so specific authors can only access specific items within the AWS resources. 

Starting today, you can monitor the Lambda functions associated with your Amazon CloudFront distributions directly from your Amazon CloudFront console for an easier monitoring and debugging experience.

Customers can now use AWS Storage Gateway to provide hybrid cloud storage through their Amazon Virtual Private Cloud (Amazon VPC) using VPC endpoints. With this feature, the network connection between an on-premises Storage Gateway appliance and AWS can be restricted to private network routes, further securing storage workloads and administration activities. VPC endpoints for Storage Gateway are provided by AWS PrivateLink, a highly available, scalable technology that enables customers to privately connect their VPC to supported AWS services. 

This Quick Start helps you deploy a Cohesive Networks VNS3 overlay network on the AWS Cloud in about 15 minutes. It includes AWS CloudFormation templates, which automatically configure the VNS3 environment.

AWS X-Ray, a distributed tracing system that helps developers analyze and debug multi-tiered applications, is now available in AWS’ new Hong Kong region. 

You can now set endpoint policies on AWS interface endpoints . Amazon VPC endpoint policy is an AWS Identity and Access Management (AWS IAM) resource policy that you can attach to an endpoint when you create or modify the endpoint. If you do not attach a policy when you create an endpoint, a default policy gets attached for you to allow full access to the service. The Amazon VPC endpoint policy defines which principal can perform which actions on which resources. An endpoint policy does not override or replace IAM user policies or service-specific policies. It is a separate policy for controlling access from the endpoint to the specified service.

We are excited to release Lumberyard Beta 1.19, which includes over 150 new features, improvements and fixes, so you can create beautiful, dense worlds and iterate faster towards great gameplay – without relying on anyone else.