Amazon Elastic Container Service for Kubernetes (EKS) now allows clusters to be created in a Amazon VPC addressed with additional IPv4 CIDR blocks in the 100.64.0.0/10 and 198.19.0.0/16 ranges. This allows customers additional flexibility in configuring the networking for their EKS clusters.
Amazon ECS-CLI Supports Private Registry Authentication
You can now use the Amazon Elastic Container Service (ECS) Command Line Interface (Amazon ECS-CLI) to create AWS secrets for your private registry credentials.
Previously, in order to use the ECS-CLI to run tasks that used images from a private registry, you had to first create AWS Secrets for your registry credentials.
Now you can provide the ECS-CLI with an input file that includes the the registry names and associated credentials, and the ECS-CLI will create the AWS Secrets as well as an IAM role for you that can be used by ECS to access the secrets.
To learn more about how ECS-CLI supports creating AWS secrets for private registry credentials, read our documentation .To see where ECS is available, visit our region table .
Introducing Amazon AppStream 2.0 AWS CloudFormation Support and User Pool APIs
Today, Amazon AppStream 2.0 adds two new features to simplify development with AppStream 2.0. You can provision AppStream 2.0 resources using AWS CloudFormation and automate user pool management using new APIs.
With CloudFormation, you can automate creating fleets, deploying stacks, adding and managing user pool users, launching image builders, and creating directory configurations alongside your other AWS resources. To learn how to get started, read AWS CloudFormation support for Amazon AppStream 2.0 resources and API enhancements
You can get started with these updates in all AWS Regions where AppStream 2.0 is offered. AppStream 2.0 offers pay-as-you-go pricing. Please see Amazon AppStream 2.0 Pricing for more information, and try our sample applications.
AWS CloudHSM is Now Available in the EU (Paris) and Asia Pacific (Seoul) Regions
AWS CloudHSM is now available in the EU (Paris) and Asia Pacific (Seoul) regions.
CloudHSM provides fully managed hardware security module (HSM) instances in the AWS Cloud. With CloudHSM, you can manage and use your own encryption keys using FIPS 140-2 Level 3 validated HSMs. Applications can be built using using industry-standard APIs, such as PKCS#11, Java Cryptography Extensions (JCE) and Windows Cryptography API: Next Generation (CNG).
Amazon WorkDocs Now Lets You Control IP Address Access to Your Site
Amazon WorkDocs now provides you with the ability to control the IP addresses from which your WorkDocs site can be accessed. Using IP address-based allow lists, you can define and manage groups of trusted IP addresses, and only permit users to access your WorkDocs site when they’re connected to a trusted network, like corporate networks or an Amazon WorkSpaces environment.
IP address-based allow lists can be added in the WorkDocs Admin Console. You can set the IP address ranges from which you wish to provide access. When a user tries to connect to your WorkDocs site from their browser, WorkDocs drive, mobile device, sync, or companion app, the IP address from which the request originated is evaluated against your allow list. If it is not on the allow list, access will be denied. If you do not filter user access by IP address with an allow list, access will be open to all IP addresses.
This feature is available today in all AWS Regions where WorkDocs is available. To learn more about IP address-based allow lists in WorkDocs, visit our documentation site . To start using IP address-based allow lists, log in to the WorkDocs Admin Console.
AWS Directory Service for Microsoft Active Directory and AD Connector are now available in the AWS GovCloud (US) Region
AWS Directory Service for Microsoft Active Directory , also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS GovCloud (US) Region, an isolated region designed to address specific regulatory and compliance requirements of US Government agencies, as well as contractors, educational institutions, and other US customers that run sensitive workloads in the cloud.
Deploy Autodesk Forge on AWS with New Quick Start
This Quick Start builds an Autodesk Forge environment on the Amazon Web Services (AWS) Cloud for customizable building blocks in the form of web service application programming interfaces (APIs), tools, and services. The deployment takes about 15 minutes.
Amazon WorkDocs Smart Search Makes It Easier to Find Your Content
Starting today, it’s even easier for you and your users to find the content you need in Amazon WorkDocs with Smart Search. WorkDocs Smart Search lets you query across content, comments, and document labels in addition to searching for files and folders by name.
To get started, access WorkDocs in your web browser and enter the desired search term in the search box in the top navigation bar. Hitting ‘Enter’ or clicking the magnifying glass search icon will automatically search all content to which you have access across file names, content types, comments, and labels. Results will display as a sorted list, with folders listed before files.
You can use the Advanced button in the search bar to further refine your search. Advanced search can scope your search by location of files, limit the time and date range, and specifying file types. Results will display as they would with a regular search, but with your additional parameters applied.
This new search experience is immediately available to all WorkDocs customers. No user or administrator action is required to activate it. Discover more about WorkDocs, or sign up for a 30-day trial today .
PostgreSQL 11 is Now Available in Amazon RDS Database Preview Environment
PostgreSQL 11 is now available in the Amazon RDS Database Preview Environment , allowing customers to test the early production version of PostgreSQL 11 on Amazon RDS including 40+ extensions like PostGIS and support for hash partitioning. PostgreSQL 11 can now be deployed for development and performance testing in the Amazon RDS Database Preview Environment without the hassle of installing, provisioning, and managing the database.
The PostgreSQL community released PostgreSQL 11 on October 18, 2018 . PostgreSQL 11 provides users with improvements to overall performance of the database system, particularly for very large databases and high computational workloads. Further, PostgreSQL 11 makes significant improvements to the table partitioning system, adds support for stored procedures capable of transaction management, improves query parallelism, adds parallelized data definition capabilities, and introduces just-in-time (JIT) compilation for accelerating the execution of expressions in queries.
Amazon RDS Database Preview Environment database instances are priced the same as production RDS instances created in the US East (Ohio) Region . The RDS Database Preview Environment supports both Single-AZ and Multi-AZ deployments on the latest generation of instance classes (currently T2, M4, and R4), and can be encrypted at rest using KMS keys. Database instances are retained for a maximum period of 60 days and are automatically deleted after the retention period. To move data in and out of the preview environment, customers can either use standard PostgreSQL dump and load functionality or use native PostgreSQL logical replication .
The Amazon RDS Database Preview Environment Forum is available for customers and the Amazon RDS team to share information and concerns about both the early production versions of PostgreSQL 11 and the RDS Database Preview Environment. For details on Amazon RDS Database Preview Environment, refer to https://aws.amazon.com/rds/databasepreview .
Amazon ElastiCache Now Supports the Next Generation General-Purpose and Memory-Optimized Amazon EC2 M5 and R5 Nodes
Amazon ElastiCache now supports the next generation general-purpose and memory-optimized Amazon EC2 M5 and R5 nodes for high-performance applications. Both M5 and R5 nodes are based on the AWS Nitro System and feature Enhanced Networking based on Elastic Network Adapter (ENA), to deliver up to 25 Gbps of aggregate network bandwidth. M5 and R5 nodes are powered by custom Intel® Xeon Scalable processors with a sustained all core frequency of up to 3.1 GHz. These processors also feature Intel’s newest vector processing instruction set, Advanced Vector Extension 512 (AVX-512), for faster processing of high-performance workloads. The general-purpose M5 nodes offer memory size flexibility ranging from 6.38 GiB to 314.32 GiB. The memory optimized R5 nodes offer memory size flexibility of 13.07 GiB to 635.61 GiB.