AWS Security Hub has released a new API action called BatchUpdateFindings, and we plan to deprecate the current UpdateFindings API. The UpdateFindings API only supported a few fields in the AWS Security Finding Format (ASFF), and wasn’t integrated with CloudWatch Events. The BatchUpdateFindings API fixes those issues and supports a much larger set of fields that can now be updated, such as severity, criticality, confidence, user defined fields, notes, and workflow status. Also, the fields that BatchUpdateFindings can update cannot be updated by finding providers. Those fields can only be updated by the customer or by SIEM/ticketing/SOAR tools that have access to this API action. This prevents finding providers from overwriting your updates. You can use the BatchUpdateFindings API to complete actions such as creating your own suppression rules, changing severity scores, and adding notes to findings. To learn more about this API, please visit our documentation .

Amazon Elastic Kubernetes Service (EKS) now supports using AWS Identity and Access Management (IAM) service-linked roles to easily delegate cluster management permissions to EKS.

Amazon Managed Streaming for Apache Kafka (Amazon MSK) is now available in AWS China (Beijing) region, operated by Sinnet and AWS China (Ningxia) region, operated by NWCD.  

AWS X-Ray SDK for Go is now generally available, enabling Go developers to get an end to end view of requests as they travel through their applications.  

CloudWatch Logs integration in the AWS Toolkit for JetBrains IDEs (IntelliJ, PyCharm, Rider and WebStorm)  — allows developers to easily view and search for specific error codes or patterns from log streams. The AWS Toolkit for JetBrains is an open source plugin for the integrated development environments (IDEs) from JetBrains. The toolkit makes it easier to create, debug, and deploy Java, Python, JavaScript or .NET applications on Amazon Web Services using JetBrains IDEs. You can get started faster and be more productive with an integrated experience for developing serverless applications, including assistance for getting started, step-through debugging, building, and deploying from the IDE.

Starting today, you can customize the message in any action triggered by an event or a state change using the new AWS IoT Events expression syntax. This allows you to add custom text and remove irrelevant data from the messages sent by AWS IoT Events. With this launch, you can also define timer durations and MQTT topic names unique to each device (or detector instance). 

Amazon Redshift enables you to query data across your operational databases, your data warehouse, and your data lake. With Amazon Redshift Federated Query, you can query live data in Amazon RDS for PostgreSQL and Amazon Aurora PostgreSQL and integrate it with the data in your Amazon Redshift and Amazon S3 environments.  

AWS Certificate Manager (ACM) Private Certificate Authority (CA) now supports increased certificate issuance rate limits and support for encryption of Amazon S3 buckets used for certificate revocation lists and audit reports.

Amazon SageMaker customers can now select ml.g4dn and ml.c5n instances for training machine learning models. Amazon SageMaker is a modular, fully-managed platform that enables developers and data scientists to quickly and easily build, train, and deploy machine learning models at any scale.

30 new or updated AWS Public Datasets from Ford, the Allen Institute, Howard Hughes Medical Institute Janelia, the National Cancer Institute, and others are now available in the following categories: