The Multi-Region Infrastructure Deployment solution helps make it easier to set up a multi-region, high reliability architecture and ensure the consistency of a workload by automatically validating and deploying AWS CloudFormation stacks into a pre-production and production environment across a primary and secondary AWS Region. This solution automatically provisions and configures AWS CodePipeline to automate the continuous integration/continuous delivery (CI/CD) pipeline for CloudFormation templates in the AWS Cloud.
You can now use AWS Control Tower to set up new multi-account AWS environments in AWS Organizations
AWS Organizations customers can now use AWS Control Tower to manage newly created organizational units (OUs) and accounts. This allows cloud administrators and architects to set up an AWS Control Tower landing zone with an existing Organization.
Announcing cost controls for Amazon Redshift Spectrum and Concurrency Scaling
You can now monitor and control your usage and associated cost for Amazon Redshift Spectrum and Concurrency Scaling features. You can create daily, weekly, and monthly usage limits, and define actions that Amazon Redshift automatically takes if those limits are reached to maintain your budget with predictability. Actions include: logging an event to a system table, alerting with a CloudWatch alarm, notifying an administrator with SNS, and disabling further usage. Amazon Redshift Spectrum enables you to power a lake house architecture to directly query and join data across your data warehouse and data lake, and Concurrency Scaling enables you to support thousands of concurrent users and queries with consistently fast query performance.
Amazon Detective is now available in the AWS Canada (Central) Region
Amazon Detective is now available in the AWS Canada (Central) Region. You can now easily analyze, investigate, and quickly identify the root cause of potential security issues or suspicious activities in the AWS Canada (Central) region.
Now easily identify the identity responsible for the actions performed using IAM roles
AWS Identity and Access Management (IAM ) now makes it easier to identify who is responsible for an AWS action performed by an IAM role when viewing AWS CloudTrail logs. Adding the new service-specific condition , sts:RoleSessionName, in an IAM policy, enables you to define the role session name that must be set when an IAM principal (user or role) or application assumes the IAM role. AWS adds the role session name to the AWS CloudTrail log when the IAM role performs an action, making it easy to determine who performed the action.
Amazon GuardDuty simplifies multi-account threat detection with support for AWS Organizations
Amazon GuardDuty adds support for AWS Organizations to simplify threat detection across all existing and future accounts in an organization. With this launch, new and existing GuardDuty customers can delegate any account in their organization as the GuardDuty administrator and manage GuardDuty for up to 5,000 AWS accounts. Customers using GuardDuty’s existing multi-account feature can transition to AWS Organizations supported multi-account management without any disruption to existing GuardDuty operations. When managing GuardDuty with AWS Organizations, customers can automatically apply GuardDuty’s threat detection to new accounts added to the organization. This support is available today in all GuardDuty supported AWS regions . To learn more, see the Amazon GuardDuty account management User Guide .
Amazon Connect now enables customers to interrupt Amazon Lex Chatbots
Starting today, customers can interrupt a Lex chatbot in mid-sentence to quickly provide a voice input without waiting for it to finish speaking. Amazon Lex chatbots can be used in Amazon Connect flows to provide conversational interactions using the same machine learning technologies like Alexa, enabling companies to offer automated self-service to their customers using natural language. Today, customers who know what they want to say, can immediately speak without having to listen to the entire prompt being played. For example, when a customer calls to schedule a tune-up for their car, they no longer have to listen to a complete menu of options like “Thanks for calling our Seattle car dealership location, would you like to speak with sales, finance, parts, or service.” Instead, they can immediately say, “Put me through to service,” as soon as the prompt starts playing.
Custom dictionary files now supported on Amazon Elasticsearch Service
Amazon Elasticsearch Service now offers support for adding custom dictionary files to your domains. Now you can specify synonyms, stop words, and segmentation files to improve your indexing, matching, and search relevancy. Previously, you could only include these types of customizations directly in your mapping which could make them unwieldy and difficult to manage.
Amazon Route 53 supports Domain Name Transfer between AWS accounts
CloudWatch Application Insights for .NET and SQL Server now supports AWS Lambda and CloudWatch Events
Amazon CloudWatch has added new features to the Application Insights for .NET and SQL Server capability to further enhance observability for your .NET and SQL Server based applications. Starting today, if you are running your .NET Core applications on AWS Lambda, CloudWatch Application Insights sets up automated alarms based on dynamically identified thresholds for your Lambda metrics, and provides out-of-the-box analysis for the logs and application traces associated with your Lambda functions. In addition, you can now use CloudWatch Application Insights to detect and troubleshoot problems in your applications due to AWS Health events across your AWS account, Amazon EC2 state changes, and deployment events on AWS CodeDeploy, enabling you to further reduce your mean time to resolution (MTTR)