Today, AWS Batch is available in the Africa (Cape Town) and the Asia-Pacific (Osaka) Regions.  

Amazon Corretto 16 is now generally available. This version supports the latest Java feature release JDK 16 and is available on Linux, Windows, and macOS. You can download Corretto 16 from our GitHub Releases .

Starting today, the next generation of memory optimized Amazon EC2 X2gd instances are available. These instances are built on the AWS Nitro System and are powered by AWS-designed, Arm-based AWS Graviton2 processors. They deliver up to 55% better price performance compared to current generation x86-based X1 instances and provide high memory per vCPU at the lowest cost per GiB of memory in Amazon EC2. The higher performance and additional memory of X2gd instances enable customers to run memory-intensive workloads such as in-memory databases (Redis, Memcached), relational databases (MySQL, PostGreSQL), electronic design automation (EDA) workloads, real-time analytics, and real-time caching servers. Customers running containerized workloads can also use X2gd instances to optimize their infrastructure by consolidating more containers on a single instance. X2gd instances also feature local NVMe-based SSD storage for applications that need high speed, low latency access to data.

AWS IoT SiteWise is a managed service that makes it easy to collect, store, organize and monitor data from industrial equipment at scale to help you make better, data-driven decisions.

AWS Identity and Access Management (IAM) Access Analyzer makes it easier to implement least privilege permissions by analyzing resource policies to provide provable security and help you identify unintended public or cross-account access. A recent update allows you to validate public and cross-account access before deploying permissions changes. Now, we are extending policy validation in IAM Access Analyzer by adding over 100 policy checks with actionable recommendations. These checks use static analysis to help you proactively validate your permission policies during policy authoring to set secure and functional permissions. The checks include functional validation like developers might expect from a linter, and go beyond that to evaluate best practices in granting access. These checks analyze your policy and report security warnings, errors, general warnings, and suggestions based on their impact. They provide actionable recommendations that guide you to set secure and functional permissions. For example, IAM Access Analyzer reports a security warning when your policy grants access to pass any role to any service, which is overly permissive. The security warning includes a recommendation that you scope down the permissions to pass specific role(s) instead.

Amazon S3 is reducing the cost to move data to Amazon S3 Glacier by lowering PUT and Lifecycle request charges by 40% for all AWS Regions. You can use the S3 PUT API to directly store compliance and backup data in S3 Glacier that does not require immediate access. You can also use S3 Lifecycle policies to move data from S3 Standard, S3 Standard-Infrequent Access, or S3 One Zone-Infrequent Access to S3 Glacier to save on storage costs when data becomes rarely accessed.

Amazon WorkSpaces bundle management APIs are now available for customers to perform WorkSpaces bundle operations via command-line interface (CLI). The new set of APIs supports creation, deletion, and image association operations for WorkSpaces bundles. These APIs are intended for use by WorkSpaces administrators who want to automate WorkSpaces management workflows.

AWS Glue DataBrew, a visual data preparation tool that makes it easy for data analysts and data scientists to clean and normalize data for analytics and machine learning, is now available in the following three additional AWS Regions:

• Asia Pacific (Seoul)
• North America (Montreal)
• South America (Sao Paulo)

AWS Cost Anomaly Detection now supports provisioning cost monitors and alert subscriptions via AWS CloudFormation templates . You can now set up Cost Anomaly Detection via JSON or YAML commands, enabling quick, consistent, and scalable configurations across AWS accounts.

AWS Config now supports three new AWS Config managed rules to help you verify that your secrets in AWS Secrets Manager are configured in accordance with your organization’s security and compliance requirements. AWS Config records and evaluates configurations of your AWS resources. AWS Config managed rules are predefined rules that AWS Config uses to evaluate whether your AWS resource configurations comply with common best practices. AWS Secrets Manager helps easily rotate, manage, and retrieve database credentials, API keys, and other secrets through their lifecycle.