Customers can now replicate the network traffic from an EC2 instance within their Amazon Virtual Private Cloud (Amazon VPC) and forward that traffic to security and monitoring appliances for use cases such as content inspection, threat monitoring, and troubleshooting. These appliances can be deployed on an individual Amazon EC2 instance or a fleet of instances behind a Network Load Balancer (NLB) with a User Datagram Protocol (UDP) listener. Amazon VPC traffic mirroring also supports traffic filtering and packet truncation, allowing customers to extract only traffic they are interested in monitoring.

Cloud security at AWS is the highest priority and APN Partners offer hundreds of industry-leading products that are equivalent, identical to, or integrate with existing controls in on-premises environments. The APN Security Navigate track provides a prescriptive journey for APN Partners who want to build expertise in cloud security solutions on AWS.

Through this APN Navigate track, APN Partners will be introduced to the AWS approach to security in the cloud, the demand for AWS security services and talent in the current market, common use cases, and best practices for developing a security capability that paves the way for your organization to differentiate and become an AWS Security Competency Partner.

Learn more about the importance of learning security best practices, and how to do that with the APN Navigate Security track here. 

AWS Direct Connect is now live at CDLAN srl Via Caldera 21, Milano. This is the first AWS Direct Connect location in Italy. Customers in Milan can now locally establish a dedicated network connection from their premises to AWS. This location can be found in the Management Console. With global access for AWS Direct Connect, you can reach AWS resources in any global AWS region from any of the above locations using global public VIFs and Direct Connect Gateway. When connecting to any AWS region, your data will not hairpin via the home region if it is not in the shortest path to your desired AWS region. 

Amazon CloudWatch now supports Application Insights for .NET and SQL Server, a new capability that enables observability for .NET and SQL Server application stacks. It sets up and analyses important monitors from across your application resources to discover problems with your applications. For the detected issues, it creates CloudWatch Automatic Dashboards to visualize problem details, helping application owners troubleshoot faster and reduce their mean time to resolution (MTTR). 

Amazon FSx for Windows File Server, a service that provides fully managed native Microsoft Windows file systems, now enables you to use a single AWS Managed Active Directory (AD) with file systems across Amazon Virtual Private Clouds (VPCs) or AWS accounts.

We are excited to announce the availability of Encrypted AMI sharing across accounts in AWS China (Beijing) Region operated by Sinnet, and AWS China (Ningxia) Region operated by NWCD. 

We are excited to announce the capability to launch Encrypted EBS backed EC2 instances from unencrypted AMIs in AWS China (Beijing) Region operated by Sinnet, and AWS China (Ningxia) Region operated by NWCD. 

Amazon EC2 Fleet is a new feature that simplifies the provisioning of Amazon EC2 capacity across different Amazon EC2 instance types, Availability Zones and across On-Demand, Amazon EC2 Reserved Instances (RI) and Amazon EC2 Spot purchase options. With a single API call, now you can provision capacity across EC2 instance types and across purchase options to achieve desired scale, performance and cost.

You can create an EC2 fleet specification defining target capacity, which EC2 instance types work for you, and how much of your fleet should be filled using On-Demand, RI and Spot purchase options. You can also indicate whether EC2 Fleet should take into account the number of cores and amount of memory on each instance or consider all instances equal when scaling. EC2 Fleet then launches the lowest price combination of instances to meet the target capacity based on these preferences.

Amazon EC2 Fleet is now available in the AWS GovCloud (US-West) Region. Visit AWS GovCloud (US) homepage to learn more about these regions. To learn more about Amazon EC2 Spot Instances, visit our documentation .

We are excited to announce the availability of Encryption by Default for all new EBS volumes created in an account within a region in AWS China (Beijing) Region operated by Sinnet, and AWS China (Ningxia) Region operated by NWCD. 

Amazon EC2 Spot Instances let you take advantage of unused EC2 capacity available in the AWS cloud. Spot Instances are available at up to a 90% discount compared to On-Demand prices. You can use Spot Instances for various stateless, fault-tolerant, or flexible applications such as big data, containerized workloads, CI/CD, web servers, high-performance computing (HPC), and other test & development workloads. Spot Instances are easy to launch, scale and manage through AWS services like Amazon ECS and Amazon EMR, or integrated third parties like Terraform and Jenkins.

Spot Instances can be launched via RunInstances API with a single additional parameter. You can also provision compute capacity across Spot Instances, RIs and On-Demand instances to optimize performance and cost using EC2 Fleet and Spot Fleet APIs. Spot Instances launched via these APIs are same as any EC2 instance; they provide the reliability, security, performance, control, and elasticity of Amazon EC2, at low market-driven prices. Spot Instances are now available in the AWS GovCloud (US-West) Region. To learn more about Amazon EC2 Spot Instances, visit our documentation .

AWS GovCloud (US) is Amazon’s isolated cloud infrastructure and services designed to address specific regulatory and compliance requirements of US Government agencies, as well as contractors, educational institutions, and other US customers that run sensitive workloads in the cloud. Visit AWS GovCloud (US) homepage to learn more about these regions.