Amazon Nova Canvas now supports fine-tuning through Amazon Bedrock, enabling customers to adapt the model to their unique datasets and brand characteristics. With custom model fine-tuning, customers can train the model on their proprietary data to generate fully customized images that align with their specific requirements and style guidelines. Fine-tuned models can be tested and deployed with provisioned throughput for consistent performance.

Text-to-image models are transforming how businesses across industries create and edit visual content. From architects visualizing floor plans to fashion designers iterating on new concepts, these models accelerate innovation by enabling rapid visualization of ideas through simple text descriptions. The technology streamlines creative workflows in manufacturing, retail, gaming, and advertising while enabling personalized customer experiences through interactive visual AI.

Fine-tuning for Amazon Nova Canvas is available in US East (N. Virginia).

To learn more about Amazon Nova Canvas, see the Amazon Nova creative models page and learn about Amazon Nova creative models responsible use of AI. To get started with Amazon Nova on Amazon Bedrock, visit the Amazon Bedrock console.

 

​Amazon Nova Canvas now supports fine-tuning through Amazon Bedrock, enabling customers to adapt the model to their unique datasets and brand characteristics. With custom model fine-tuning, customers can train the model on their proprietary data to generate fully customized images that align with their specific requirements and style guidelines. Fine-tuned models can be tested and deployed with provisioned throughput for consistent performance. Text-to-image models are transforming how businesses across industries create and edit visual content. From architects visualizing floor plans to fashion designers iterating on new concepts, these models accelerate innovation by enabling rapid visualization of ideas through simple text descriptions. The technology streamlines creative workflows in manufacturing, retail, gaming, and advertising while enabling personalized customer experiences through interactive visual AI. Fine-tuning for Amazon Nova Canvas is available in US East (N. Virginia). To learn more about Amazon Nova Canvas, see the Amazon Nova creative models page and learn about Amazon Nova creative models responsible use of AI. To get started with Amazon Nova on Amazon Bedrock, visit the Amazon Bedrock console.  

Amazon FSx for NetApp ONTAP, a service that provides fully managed shared storage built on NetApp’s popular ONTAP file system, now supports ONTAP Autonomous Ransomware Protection (ARP). ARP is a NetApp ONTAP feature that proactively monitors your file system for unusual activity and automatically generates ONTAP snapshots when a potential attack is detected, helping you protect your business-critical data against a broader set of ransomware and malware attacks.

When enabled on your FSx for ONTAP storage volumes, ARP analyzes your workload access patterns to proactively detect suspicious activity – including changes in the randomness of data in files, the usage of unusual file extensions, and surges in abnormal volume activity with encrypted data – that might indicate a potential ransomware or malware attack. If activity is detected, ARP will automatically create a snapshot of the affected storage volume and generate alerts that you can monitor via EMS messages or the ONTAP CLI and REST API. By helping protect your file system against ransomware and malware attacks, ARP helps you maintain business continuity and improve data protection for your business-critical data stored on FSx for ONTAP.

NetApp Autonomous Ransomware Protection is now available at no additional cost for all FSx for ONTAP file systems in all AWS Regions where the service is available. For more information on how to enable ARP on your file system, see Amazon FSx for NetApp ONTAP documentation. For detailed information on ARP, see NetApp ONTAP ARP documentation.
 

 

​Amazon FSx for NetApp ONTAP, a service that provides fully managed shared storage built on NetApp’s popular ONTAP file system, now supports ONTAP Autonomous Ransomware Protection (ARP). ARP is a NetApp ONTAP feature that proactively monitors your file system for unusual activity and automatically generates ONTAP snapshots when a potential attack is detected, helping you protect your business-critical data against a broader set of ransomware and malware attacks. When enabled on your FSx for ONTAP storage volumes, ARP analyzes your workload access patterns to proactively detect suspicious activity – including changes in the randomness of data in files, the usage of unusual file extensions, and surges in abnormal volume activity with encrypted data – that might indicate a potential ransomware or malware attack. If activity is detected, ARP will automatically create a snapshot of the affected storage volume and generate alerts that you can monitor via EMS messages or the ONTAP CLI and REST API. By helping protect your file system against ransomware and malware attacks, ARP helps you maintain business continuity and improve data protection for your business-critical data stored on FSx for ONTAP. NetApp Autonomous Ransomware Protection is now available at no additional cost for all FSx for ONTAP file systems in all AWS Regions where the service is available. For more information on how to enable ARP on your file system, see Amazon FSx for NetApp ONTAP documentation. For detailed information on ARP, see NetApp ONTAP ARP documentation.    

Amazon EventBridge Archive and Replay now supports AWS Key Management Service (KMS) customer managed keys for encrypting archived events. This expands your encryption options by letting you choose between default AWS owned keys for simpler, automated data protection or customer managed keys to help meet your organization’s specific security and governance requirements.

Amazon EventBridge Event Bus receives and routes events between your applications, SaaS applications, and AWS services. The Archive and Replay feature enhances this capability by allowing you to store events from an event bus and replay them later, helping you build more durable event-driven applications. You can archive events using custom filters, set flexible retention periods, and replay events to specific rules within your chosen time ranges on the original event bus. With customer managed KMS keys, you can help meet your organization’s compliance and governance requirements for encrypting archived events and use AWS CloudTrail to audit and track encryption key usage.

Customer managed key support for EventBridge Archive and Replay is available in all AWS Regions where the Archive and Replay feature is offered. Using this feature incurs no additional cost, but standard AWS KMS pricing applies.

To get started, refer to the EventBridge documentation. For details about customer managed keys, see the AWS Key Management Service documentation.

 

​Amazon EventBridge Archive and Replay now supports AWS Key Management Service (KMS) customer managed keys for encrypting archived events. This expands your encryption options by letting you choose between default AWS owned keys for simpler, automated data protection or customer managed keys to help meet your organization’s specific security and governance requirements. Amazon EventBridge Event Bus receives and routes events between your applications, SaaS applications, and AWS services. The Archive and Replay feature enhances this capability by allowing you to store events from an event bus and replay them later, helping you build more durable event-driven applications. You can archive events using custom filters, set flexible retention periods, and replay events to specific rules within your chosen time ranges on the original event bus. With customer managed KMS keys, you can help meet your organization’s compliance and governance requirements for encrypting archived events and use AWS CloudTrail to audit and track encryption key usage. Customer managed key support for EventBridge Archive and Replay is available in all AWS Regions where the Archive and Replay feature is offered. Using this feature incurs no additional cost, but standard AWS KMS pricing applies. To get started, refer to the EventBridge documentation. For details about customer managed keys, see the AWS Key Management Service documentation.  

The Amazon Route 53 authoritative DNS service for public hosted zones is now generally available in the AWS GovCloud (US-East and US-West) Regions. With today’s release, AWS customers and AWS Partners who rely on public DNS for their applications in the AWS GovCloud (US) Regions can now take advantage of most of the features they have come to expect of Route 53 in commercial AWS Regions.

Previously, customers used Route 53 authoritative DNS served from commercial AWS Regions for routing traffic to their applications in the AWS GovCloud (US) Regions. Now, you can serve DNS queries to your public hosted zones from locations within the AWS GovCloud (US) Regions and without dependency on commercial AWS Region accounts. Features include authoritative DNS query logging, DNSSEC signing on AWS GovCloud (US) public hosted zones, and support for all Route 53 routing types except for IP-based routing. It also includes alias records to the following other AWS services: Amazon API Gateway, Amazon S3, Amazon VPC endpoints, AWS Elastic Beanstalk, and Elastic Load Balancing (ELB) load balancers.

Getting started with Route 53 in the AWS GovCloud (US) Regions is easy. All customers in the AWS GovCloud (US) Regions can use Route 53 authoritative DNS via the AWS Management Console and API in the AWS GovCloud (US-West) Region. For more information, visit the Route 53 documentation or review migration recommendations in the Route 53 Developer Guide. For details on pricing, visit section Authoritative DNS on the Route pricing page.

 

​The Amazon Route 53 authoritative DNS service for public hosted zones is now generally available in the AWS GovCloud (US-East and US-West) Regions. With today’s release, AWS customers and AWS Partners who rely on public DNS for their applications in the AWS GovCloud (US) Regions can now take advantage of most of the features they have come to expect of Route 53 in commercial AWS Regions. Previously, customers used Route 53 authoritative DNS served from commercial AWS Regions for routing traffic to their applications in the AWS GovCloud (US) Regions. Now, you can serve DNS queries to your public hosted zones from locations within the AWS GovCloud (US) Regions and without dependency on commercial AWS Region accounts. Features include authoritative DNS query logging, DNSSEC signing on AWS GovCloud (US) public hosted zones, and support for all Route 53 routing types except for IP-based routing. It also includes alias records to the following other AWS services: Amazon API Gateway, Amazon S3, Amazon VPC endpoints, AWS Elastic Beanstalk, and Elastic Load Balancing (ELB) load balancers. Getting started with Route 53 in the AWS GovCloud (US) Regions is easy. All customers in the AWS GovCloud (US) Regions can use Route 53 authoritative DNS via the AWS Management Console and API in the AWS GovCloud (US-West) Region. For more information, visit the Route 53 documentation or review migration recommendations in the Route 53 Developer Guide. For details on pricing, visit section Authoritative DNS on the Route pricing page.  

Today, we are launching two significant updates to AWS Elemental MediaTailor pricing:

A new VOD ad insertion usage type priced at a 50% discount to live. The new pricing model aligns better with how streaming providers monetize their content. By pricing VOD ad insertion at 50% of the cost of live workflows, you can expand your ad-supported VOD libraries more cost-effectively using MediaTailor.

Elimination of the $0.75 per 1000 ads pricing tier, so live ad insertion now has a single tier at $0.50 per 1000 ads. By removing the tiered pricing model of 1 to 5M insertions and greater than 5M insertions per month, this makes it easier for you to predict your bill and get started with MediaTailor.
The following summary illustrates the changes:

Previously, ad insertion pricing was tiered:

• $0.75 per 1,000 ad insertions for the first 5 million insertions per month
• $0.50 per 1,000 ad insertions for volumes exceeding 5 million per month

Under the new pricing model:

• Live streaming ad insertions: $0.50 per 1,000 insertions
• VOD streaming ad insertions: $0.25 per 1,000 insertions

Both rates now apply regardless of volume.

The new pricing is effective immediately and will be applied automatically to your bill. Customers willing to make minimum commitments of more than 60 million ad insertions per month qualify for additional discounted pricing. Contact us or your account manager to learn more.

This new pricing structure is available in all AWS Regions where MediaTailor is available. To learn more, please visit the MediaTailor product page.

 

​Today, we are launching two significant updates to AWS Elemental MediaTailor pricing: A new VOD ad insertion usage type priced at a 50% discount to live. The new pricing model aligns better with how streaming providers monetize their content. By pricing VOD ad insertion at 50% of the cost of live workflows, you can expand your ad-supported VOD libraries more cost-effectively using MediaTailor. Elimination of the $0.75 per 1000 ads pricing tier, so live ad insertion now has a single tier at $0.50 per 1000 ads. By removing the tiered pricing model of 1 to 5M insertions and greater than 5M insertions per month, this makes it easier for you to predict your bill and get started with MediaTailor. The following summary illustrates the changes: Previously, ad insertion pricing was tiered:

$0.75 per 1,000 ad insertions for the first 5 million insertions per month
$0.50 per 1,000 ad insertions for volumes exceeding 5 million per month

Under the new pricing model:

Live streaming ad insertions: $0.50 per 1,000 insertions
VOD streaming ad insertions: $0.25 per 1,000 insertions

Both rates now apply regardless of volume. The new pricing is effective immediately and will be applied automatically to your bill. Customers willing to make minimum commitments of more than 60 million ad insertions per month qualify for additional discounted pricing. Contact us or your account manager to learn more. This new pricing structure is available in all AWS Regions where MediaTailor is available. To learn more, please visit the MediaTailor product page.  

Amazon Elastic Kubernetes Service (Amazon EKS) now offers Bottlerocket FIPS (Federal Information Processing Standards) AMIs for EKS managed node groups, helping customers to meet federal compliance requirements while leveraging the security of Bottlerocket and the operational benefits of EKS managed node groups.

Bottlerocket is a Linux-based operating system optimized for running containers that follows a minimal, immutable design for enhanced security and performance. The FIPS-enabled Bottlerocket AMIs for EKS include FIPS 140-3 validated cryptographic modules and are configured by default to use FIPS-enabled AWS service endpoints, making it easier for customers in regulated industries to run containerized workloads while maintaining compliance with federal standards.

This feature is available in all AWS Regions where Amazon EKS is available. There are no additional charges for using Bottlerocket FIPS AMIs with EKS managed node groups beyond standard EKS and EC2 pricing.

To learn more, visit the Amazon EKS documentation for the Bottlerocket FIPS AMI.
 

 

​Amazon Elastic Kubernetes Service (Amazon EKS) now offers Bottlerocket FIPS (Federal Information Processing Standards) AMIs for EKS managed node groups, helping customers to meet federal compliance requirements while leveraging the security of Bottlerocket and the operational benefits of EKS managed node groups. Bottlerocket is a Linux-based operating system optimized for running containers that follows a minimal, immutable design for enhanced security and performance. The FIPS-enabled Bottlerocket AMIs for EKS include FIPS 140-3 validated cryptographic modules and are configured by default to use FIPS-enabled AWS service endpoints, making it easier for customers in regulated industries to run containerized workloads while maintaining compliance with federal standards. This feature is available in all AWS Regions where Amazon EKS is available. There are no additional charges for using Bottlerocket FIPS AMIs with EKS managed node groups beyond standard EKS and EC2 pricing. To learn more, visit the Amazon EKS documentation for the Bottlerocket FIPS AMI.    

Today, Amazon Simple Email Service (SES) launched support for adding attachments to emails when sending via SES simple sending v2 APIs. Customers can add attachments such as PDF documents to emails, or include images for rendering inline in email content without requiring image downloads. This makes it easier to send richer email content with the convenience of the SES sending APIs.

Previously, customers could send email content such as text and HTML through SES simple sending APIs. Customers did not have to worry about creating the email data structure which is actually sent to mailbox providers. However, if customers wanted to attach documents or include inline images, they had to use more complex APIs requiring construction of the email document structure prior to sending. Now, customers can add attachments in any of the SES supported MIME types (such as PDF, Word, and GIF), without knowledge of how MIME messages are constructed. This decreases code complexity and reduces time to implement sending over SES.

SES supports attachments in all AWS Regions where SES is available.

For more information, see the documentation for working with email attachments in SES.
 

 

​Today, Amazon Simple Email Service (SES) launched support for adding attachments to emails when sending via SES simple sending v2 APIs. Customers can add attachments such as PDF documents to emails, or include images for rendering inline in email content without requiring image downloads. This makes it easier to send richer email content with the convenience of the SES sending APIs. Previously, customers could send email content such as text and HTML through SES simple sending APIs. Customers did not have to worry about creating the email data structure which is actually sent to mailbox providers. However, if customers wanted to attach documents or include inline images, they had to use more complex APIs requiring construction of the email document structure prior to sending. Now, customers can add attachments in any of the SES supported MIME types (such as PDF, Word, and GIF), without knowledge of how MIME messages are constructed. This decreases code complexity and reduces time to implement sending over SES. SES supports attachments in all AWS Regions where SES is available. For more information, see the documentation for working with email attachments in SES.    

Amazon Relational Database Service (Amazon RDS) Custom for SQL Server now supports a new minor version for SQL Server 2019 (CU32 – 15.0.4430.1). This minor version includes performance improvements and bug fixes, and is available for SQL Server Developer, Web, Standard, and Enterprise editions. Review the Microsoft release notes for CU32 for details.

We recommend that you upgrade to the latest minor version to benefit from the performance improvements and bug fixes. You can upgrade with just a few clicks in the Amazon RDS Management Console or by using the AWS SDK or CLI. Learn more about upgrading your database instances from the Amazon RDS Custom User Guide.

This minor version is available in all AWS commercial regions where Amazon RDS Custom for SQL Server is available.

RDS Custom is a managed database service that allows customization of the underlying operating system and database environment. RDS Custom for SQL Server supports two licensing models: License Included (LI) and Bring Your Own Media (BYOM). By using Bring Your Own Media (BYOM), customers can use their existing SQL Server licenses with Amazon RDS Custom for SQL Server. See Amazon RDS Custom Pricing for pricing details and regional availability.
 

 

​Amazon Relational Database Service (Amazon RDS) Custom for SQL Server now supports a new minor version for SQL Server 2019 (CU32 – 15.0.4430.1). This minor version includes performance improvements and bug fixes, and is available for SQL Server Developer, Web, Standard, and Enterprise editions. Review the Microsoft release notes for CU32 for details. We recommend that you upgrade to the latest minor version to benefit from the performance improvements and bug fixes. You can upgrade with just a few clicks in the Amazon RDS Management Console or by using the AWS SDK or CLI. Learn more about upgrading your database instances from the Amazon RDS Custom User Guide. This minor version is available in all AWS commercial regions where Amazon RDS Custom for SQL Server is available. RDS Custom is a managed database service that allows customization of the underlying operating system and database environment. RDS Custom for SQL Server supports two licensing models: License Included (LI) and Bring Your Own Media (BYOM). By using Bring Your Own Media (BYOM), customers can use their existing SQL Server licenses with Amazon RDS Custom for SQL Server. See Amazon RDS Custom Pricing for pricing details and regional availability.    

Amazon SNS now supports Internet Protocol version 6 (IPv6) for API requests enabling you to communicate with Amazon SNS using Internet Protocol Version 6 (IPv6), Internet Protocol Version 4 (IPv4), or dual stack clients using public endpoints.

Amazon SNS is a fully managed messaging service that enables publish/subscribe messaging between distributed systems, microservices, and event-driven serverless applications. The addition of IPv6 support provides customers with a vastly expanded address space, eliminating concerns about address exhaustion and simplifying network architecture for IPv6-native applications. With simultaneous support for both IPv4 and IPv6 clients on SNS public endpoints, customers can gradually transition from IPv4 to IPv6-based systems and applications without needing to switch all systems at once. This enhancement is particularly valuable for modern cloud-native applications and organizations transitioning to IPv6 as part of their modernization efforts.

To learn more on best practices for configuring IPv6 in your environment, visit the whitepaper on IPv6 in AWS. This feature is now available in all AWS commercial Regions, including AWS China Regions, and can be used at no additional cost.

See here for a full listing of our Regions. To learn more about Amazon SNS, please refer to our Developer Guide.
 

 

​Amazon SNS now supports Internet Protocol version 6 (IPv6) for API requests enabling you to communicate with Amazon SNS using Internet Protocol Version 6 (IPv6), Internet Protocol Version 4 (IPv4), or dual stack clients using public endpoints. Amazon SNS is a fully managed messaging service that enables publish/subscribe messaging between distributed systems, microservices, and event-driven serverless applications. The addition of IPv6 support provides customers with a vastly expanded address space, eliminating concerns about address exhaustion and simplifying network architecture for IPv6-native applications. With simultaneous support for both IPv4 and IPv6 clients on SNS public endpoints, customers can gradually transition from IPv4 to IPv6-based systems and applications without needing to switch all systems at once. This enhancement is particularly valuable for modern cloud-native applications and organizations transitioning to IPv6 as part of their modernization efforts. To learn more on best practices for configuring IPv6 in your environment, visit the whitepaper on IPv6 in AWS. This feature is now available in all AWS commercial Regions, including AWS China Regions, and can be used at no additional cost. See here for a full listing of our Regions. To learn more about Amazon SNS, please refer to our Developer Guide.    

Amazon Security Lake customers can now use Internet Protocol version 6 (IPv6) addresses via new dual-stack endpoints to configure and manage the service. This update addresses the growing need for IPv6 adoption due to the exhaustion of available Internet Protocol version 4 (IPv4) addresses caused by continued internet growth.

Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization. You can also improve the protection of your workloads, applications, and data.

The new dual-stack endpoints support both IPv4 and IPv6 clients, helping you transition from IPv4 to IPv6-based systems and applications at your own pace. This approach can help you work toward IPv6 compliance requirements while reducing the need for additional networking equipment to handle address translation between IPv4 and IPv6.

Support for IPv6 on Amazon Security Lake is available in all commercial Regions and AWS GovCloud (US). To learn more on best practices for configuring IPv6 in your environment, you can visit our whitepaper on IPv6 in AWS. You can start with a 15-day free trial of Amazon Security Lake with a single-click in the AWS Management console. To learn more and get started, see the following resources:

• How to develop an Amazon Security Lake POC
• Understanding Amazon Security Lake Costs
• Amazon Security Lake User Guide

 

​Amazon Security Lake customers can now use Internet Protocol version 6 (IPv6) addresses via new dual-stack endpoints to configure and manage the service. This update addresses the growing need for IPv6 adoption due to the exhaustion of available Internet Protocol version 4 (IPv4) addresses caused by continued internet growth. Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization. You can also improve the protection of your workloads, applications, and data. The new dual-stack endpoints support both IPv4 and IPv6 clients, helping you transition from IPv4 to IPv6-based systems and applications at your own pace. This approach can help you work toward IPv6 compliance requirements while reducing the need for additional networking equipment to handle address translation between IPv4 and IPv6. Support for IPv6 on Amazon Security Lake is available in all commercial Regions and AWS GovCloud (US). To learn more on best practices for configuring IPv6 in your environment, you can visit our whitepaper on IPv6 in AWS. You can start with a 15-day free trial of Amazon Security Lake with a single-click in the AWS Management console. To learn more and get started, see the following resources:

How to develop an Amazon Security Lake POC
Understanding Amazon Security Lake Costs
Amazon Security Lake User Guide