You can now use AWS Key Management Service (KMS) keys to provide envelope encryption of Kubernetes secrets stored in Amazon Elastic Kubernetes Service (EKS). Implementing envelope encryption is considered a security best practice for applications that store sensitive data and is part of a defense in depth security strategy .

Amazon Elasticsearch Service now offers k-Nearest Neighbor (k-NN) search which can enhance search by similarity use cases like product recommendations, fraud detection, and image, video and semantic document retrieval. Built using the lightweight and efficient Non-Metric Space Library (NMSLIB), k-NN enables high scale, low latency nearest neighbor search on billions of documents across thousands of dimensions with the same ease as running any regular Elasticsearch query.  

Amazon Elastic Container Registry (ECR) today introduced three new enhancements that help you see and proactively manage API usage when pushing and pulling container images. First, you now get up-to-the minute API metrics in Amazon CloudWatch Usage Metrics for the number of times you push and pull images, giving you the operational visibility you need. Second, you can now view approved account-level API quotas (also known as limits) using AWS Service Quotas, making it easier to see and request quota increases from the same place. Third, these new API metrics are automatically tracked against your quotas so you can trend and alarm as usage approaches limits, helping you manage utilization and identify anomalous activity. 

With Amazon CloudWatch composite alarms, you can now combine multiple alarms to reduce alarm noise and focus on critical operational issues. You can easily combine multiple alarms together into alarm hierarchies that only trigger once when multiple alarms fire at the same time. This helps you stay focused on finding the root cause of operational issues to reduce system and application downtime.

AWS ParallelCluster is a fully supported and maintained open source cluster management tool that makes it easy for scientists, researchers, and IT administrators to deploy and manage High Performance Computing (HPC) clusters in the AWS cloud. HPC clusters are collections of tightly coupled compute, storage, and networking resources that enable customers to run large scale scientific and engineering workloads. 

AWS CodeCommit, a fully-managed source control service, released a new Git remote helper that supports customers using CodeCommit with multiple accounts, or with short-lived credentials. This remote helper, git-remote-codecommit, uses the profile information configured for the AWS CLI. It also introduces a new protocol (codecommit://) that enables a URL pattern that uniquely identifies CodeCommit repositories.

Today, Amazon Pinpoint launched a new feature that helps customers to personalize their email, SMS and push messaging templates using dynamic message variables. Customers can add dynamic message variables as placeholders within their templates and then populate them with content specific to each user. Content can come from either user attributes stored in Pinpoint or a machine learning model created with Amazon Personalize. Customers wanting to deliver relevant product recommendations or targeted marketing promotions can now use machine learning to select the right content for each of their users.

NoSQL Workbench for Amazon DynamoDB is now generally available. NoSQL Workbench is a client-side application, available for Windows and macOS, that helps developers build scalable, high-performance data models, and simplifies query development and testing.  

Following the recent announcement of updates to the PostgreSQL database , we have updated Amazon Aurora with PostgreSQL compatibility to support PostgreSQL minor version 10.7. This release fixes PostgreSQL security vulnerabilities included in the 10.7 minor release by the PostgreSQL community and contains additional bug fixes and improvements .

Amazon Elasticsearch Service now enables you to automate recurring index management activities. In the past you had to use additional tools to manage the data lifecycle inside Elasticsearch. For example, customers often setup daily indexes for their operational logs, roll them over nightly, and after 30 days delete the oldest index. With Index State Management, you can now create a policy that will automate these operations based on index age, size, and other conditions, all from within your Amazon Elasticsearch Service domain.