Amazon Translate is a neural machine translation service that delivers fast, high-quality, and affordable language translation. The Translate API is now an AWS HIPAA Eligible Service. If you have a Business Associate Addendum (BAA) in place with AWS, you can immediately start using Amazon Translate to translate texts containing protected health information (PHI). If you do not have a BAA in place with AWS or have any other questions about running HIPAA-regulated workloads on AWS, please contact us .

Starting today, AWS Directory Service for Microsoft Active Directory , also known as AWS Managed Microsoft AD, makes it easier for you to monitor and analyze security events of your directory. Now, you can forward security event logs from your directory to Amazon CloudWatch Logs . This helps you to meet your security monitoring, audit, and log retention policy requirements by providing transparency of the security events in your directory. 

You can now reserve Amazon EC2 capacity for any duration with On-Demand Capacity Reservations. Amazon EC2 provides a wide selection of instance types as well as over 50 global Availability Zones where you can run your applications. Some customers however have very specific requirements for portions of their applications around instance type, size, and capability, as well as the Availability Zone the instance needs to run in, and need very high levels of assurance that they will always be able to launch that specific capacity. Previously in order to achieve a capacity reservation, customers had to leverage Zonal Reserved Instances and commit to that capacity for a minimum of one year. Now with On-Demand Capacity Reservations, customers can reserve the exact capacity they need, in the location they need, and can keep it only for as long as they need it.

On-Demand Capacity Reservations are activated as soon as they are requested, and they stay active until cancelled. A Capacity Reservation is tied to a specific Availability Zone and, by default automatically utilized by running instances in that Availability Zone. Instances you have placed Capacity Reservations for are charged at the normal instance rate for as long as you maintain the reservation. Should you no longer need them, you can cancel your Capacity Reservation at any time to stop paying.

If you have Regional RI discounts, they will automatically apply to any matching Capacity Reservation. This gives you the flexibility to selectively add capacity reservations and still get the Regional RI discounts for that usage.

To get started, you can create an On-Demand Capacity Reservation by simply choosing an Availability Zone and quantity (number of instances) along with other instance specifications such as instance type and tenancy. Once created, the Capacity Reservation will ensure that you will always be able to launch that specific EC2 configuration.

On-Demand Capacity Reservations are now available in all public Regions. You can create and manage Capacity Reservations through the AWS Management Console , AWS SDK and CLI. To learn more about Capacity Reservations and how to use them, visit FAQs , Linux or Windows technical documentations.

You can now use the Amazon Elastic Container Service (ECS) Command Line Interface (Amazon ECS-CLI) to create AWS secrets for your private registry credentials.

Previously, in order to use the ECS-CLI to run tasks that used images from a private registry, you had to first create AWS Secrets for your registry credentials.
Now you can provide the ECS-CLI with an input file that includes the the registry names and associated credentials, and the ECS-CLI will create the AWS Secrets  as well as an IAM role for you that can be used by ECS to access the secrets.

To learn more about how ECS-CLI supports creating AWS secrets for private registry credentials, read our documentation .To see where ECS is available, visit our region table .

Amazon Elastic Container Service for Kubernetes (EKS) now allows clusters to be created in a Amazon VPC addressed with additional IPv4 CIDR blocks in the 100.64.0.0/10 and 198.19.0.0/16 ranges. This allows customers additional flexibility in configuring the networking for their EKS clusters.

Today, Amazon AppStream 2.0 adds two new features to simplify development with AppStream 2.0. You can provision AppStream 2.0 resources using AWS CloudFormation and automate user pool management using new APIs.

With CloudFormation, you can automate creating fleets, deploying stacks, adding and managing user pool users, launching image builders, and creating directory configurations alongside your other AWS resources. To learn how to get started, read AWS CloudFormation support for Amazon AppStream 2.0 resources and API enhancements

You can get started with these updates in all AWS Regions where AppStream 2.0 is offered. AppStream 2.0 offers pay-as-you-go pricing. Please see Amazon AppStream 2.0 Pricing for more information, and try our sample applications.

 

AWS CloudHSM is now available in the EU (Paris) and Asia Pacific (Seoul) regions.

CloudHSM provides fully managed hardware security module (HSM) instances in the AWS Cloud. With CloudHSM, you can manage and use your own encryption keys using FIPS 140-2 Level 3 validated HSMs. Applications can be built using using industry-standard APIs, such as PKCS#11, Java Cryptography Extensions (JCE) and Windows Cryptography API: Next Generation (CNG).  

AWS Directory Service for Microsoft Active Directory , also known as AWS Managed Microsoft AD, and AD Connector are now available in the AWS GovCloud (US) Region, an isolated region designed to address specific regulatory and compliance requirements of US Government agencies, as well as contractors, educational institutions, and other US customers that run sensitive workloads in the cloud.

Amazon WorkDocs now provides you with the ability to control the IP addresses from which your WorkDocs site can be accessed. Using IP address-based allow lists, you can define and manage groups of trusted IP addresses, and only permit users to access your WorkDocs site when they’re connected to a trusted network, like corporate networks or an Amazon WorkSpaces environment.

IP address-based allow lists can be added in the WorkDocs Admin Console. You can set the IP address ranges from which you wish to provide access. When a user tries to connect to your WorkDocs site from their browser, WorkDocs drive, mobile device, sync, or companion app, the IP address from which the request originated is evaluated against your allow list. If it is not on the allow list, access will be denied. If you do not filter user access by IP address with an allow list, access will be open to all IP addresses.

This feature is available today in all AWS Regions where WorkDocs is available. To learn more about IP address-based allow lists in WorkDocs, visit our documentation site . To start using IP address-based allow lists, log in to the WorkDocs Admin Console.

Starting today, it’s even easier for you and your users to find the content you need in Amazon WorkDocs with Smart Search. WorkDocs Smart Search lets you query across content, comments, and document labels in addition to searching for files and folders by name.

To get started, access WorkDocs in your web browser and enter the desired search term in the search box in the top navigation bar. Hitting ‘Enter’ or clicking the magnifying glass search icon will automatically search all content to which you have access across file names, content types, comments, and labels. Results will display as a sorted list, with folders listed before files.

You can use the Advanced button in the search bar to further refine your search. Advanced search can scope your search by location of files, limit the time and date range, and specifying file types. Results will display as they would with a regular search, but with your additional parameters applied.

This new search experience is immediately available to all WorkDocs customers. No user or administrator action is required to activate it. Discover more about WorkDocs, or sign up for a 30-day trial today .