This week's roundup of all the cloud news.
Here's a cloud round up of all things Hava, GCP, Azure and AWS for the week ending Friday 6th May 2022.
Lots happening in cloud computing and especially in the Hava ecosystem. Keep an eye out on Monday for a special announcement.
To stay in the loop, make sure you subscribe using the box on the right of this page.
Of course we'd love to keep in touch at the usual places. Come and say hello on:
AWS Updates and Releases
Amazon SageMaker Canvas is a visual point-and-click interface that enables business analysts to generate accurate ML predictions on their own — without requiring any machine learning experience or having to write a single line of code. SageMaker Canvas makes it easy to access and combine data from a variety of sources, automatically clean data and apply a variety of data adjustments, and build ML models to generate accurate predictions with a few clicks.
This week, Amazon SageMaker Canvas announced new data preparation features that make it easier to manage, explore, and modify datasets before building ML models. Key features include:
- Filtering rows to explore and modify datasets: You can now preview and remove rows with missing values and outliers. You can also specify additional conditions to preview and remove rows from your dataset. For example, for numeric data types, you can specify conditions such as greater than, less than, equal to, in between and more. The list of supported conditions vary by data type and are documented here
- Expanded timestamp formats and transforms to extract date, time: You can now extract date and time information from the timestamp column and create new columns. This makes it easy to prepare and transform your time series data and add the transform to your model recipe with just a few clicks. Additionally, SageMaker Canvas now supports multiple timestamp formats making it easy to work with timeseries data for forecasting problems. For a full list of timestamp formats and date, time extraction capabilities, please see here
In addition to the above listed data preparation and transformation features, you can now rename datasets and columns for ease of use. Other usability updates include improved user facing messages with recommended actions, and visibility into dataset cell count before building an ML model.
The Lenovo ThinkEdge SE70 device, powered by AWS Panorama, is now available for sale. Joining the existing AWS Panorama Appliance, the Lenovo ThinkEdge SE70 device provides customers with another choice in price and performance for computer vision use cases using AWS Panorama. Customers can work with AWS Panorama Partners to build a wide variety of solutions for CV use cases across industries such as transportation, logistics, industrial, hospitality, and more.
Amazon Lex is a service for building conversational interfaces into any application using voice and text. Starting today, you can give Amazon Lex additional information about how to process speech input by creating a custom vocabulary. A custom vocabulary is a list of domain-specific terms or unique words (e.g., brand names, product names) that are more difficult to recognize. You create the list and add it to the bot definition, so Amazon Lex can use these words when determining the user’s intent or collecting information in a conversation. This allows you to enhance speech recognition and deliver an improved end-user experience.
Amazon Interactive Video Service (Amazon IVS) announces its first points of presence (PoPs) in Argentina and Chile located in Buenos Aires and Santiago. The new edge locations will enable streamers and viewers based in Argentina and Chile to enjoy lower latency, better video quality, and increased capacity.
Alongside the new Buenos Aires and Santiago edge locations, AWS have updated pricing to include Argentina and Chile into a new South America region that also includes Brazil. To learn more about Amazon IVS pricing, including pricing for Argentina and Chile, visit the pricing page.
Amazon Connect now supports up to six participants on a customer service call, enabling you to add all of the parties necessary to efficiently resolve the contact. For example, to help close a mortgage transaction, an agent at a financial services company can add a mortgage broker, the customer’s spouse, a translator, and a supervisor to the call to help resolve the issue quickly. This feature is available out-of-the box and can be enabled within the AWS Console.
The new Amazon ElastiCache console provides you with an intuitive way to manage ElastiCache resources with simpler navigation and richer contextual information. The new console provides a more consistent look and feel with other AWS service consoles.
The new ElastiCache dashboard provides an overview of most important actions, resources and information. AWS restructured and simplified the cluster creation experience for ElastiCache for Redis and ElastiCache for Memcached. The new console also helps you perform tasks faster by providing you with contextual information and help panels. AWS have also redesigned the user and user group management pages with new controls, making interaction much more intuitive.
Amazon Braket, the quantum computing service from AWS, is designed to make it easy for customers to conduct scientific research and software development with quantum computers. This week, AWS are excited to announce that Amazon Braket Hybrid Jobs, the capability to combine quantum and classical compute to explore hybrid algorithms, now supports embedded circuit simulators, improving performance by up to 10X or more. By bringing the quantum simulator closer to your classical algorithm you can reduce the simulator round-trip time compared to using Braket’s on-demand circuit simulators. This new capability can help reduce a performance bottleneck when running large volumes of quantum simulation tasks that each use only a relatively small number of qubits, typically up to ~25 qubits.
AWS Lambda customers can now enable functions to access Amazon Elastic File System (Amazon EFS) in the Asia Pacific (Jakarta) Region. With AWS Lambda support for Amazon EFS, customers can easily share data across function invocations, read large reference data files, and write function output to a persistent and shared data store.
Customers can use AWS Lambda with Amazon EFS to build data-intensive applications, load larger libraries and models, process larger amounts of data in a highly distributed manner, and share data across functions, containers, and instances. AWS Lambda will automatically mount the file system and provide a local path to read and write data at low latency.
New minor versions of Microsoft SQL Server are now available on Amazon RDS for SQL Server, offering performance and security fixes. Amazon RDS for SQL Server supports the new minor versions for Microsoft SQL Server 2016, 2017, and 2019 on the Express, Web, Standard, and Enterprise Editions.
AWS Service Catalog Provisioning constructs for the AWS Cloud Development Kit (AWS CDK) are now available for builders to create application infrastructure in code that provisions cloud resources from their approved Service Catalog products. Service Catalog builders can now create their AWS CDK applications with approved constructs in familiar programming languages like Typescript and Python directly in their Integrated Development Environment. Using cdk-import, builders can access a library of Provisioning constructs in their local development environment for the AWS Service Catalog products they have access to provision which automatically include the governance that their administrators have configured.
Following inline guidance in their local development environment and automatically generated comments within their locally-installed constructs, builders can model complex application infrastructure that meets enterprise requirements with a few lines of code in a few minutes. When deploying CDK applications that contain one or more Provisioning constructs, AWS Service Catalog creates provisioned products reflective of those constructs and their configurations.
AWS Certificate Manager (ACM) Private Certificate Authority (CA) is now available in the Asia Pacific (Jakarta) Region. This regional expansion extends the availability of ACM Private CA across the globe, increasing the number of regions to 24. The Jakarta Region supports CAs with the private key stored in a FIPS 140-2 level 2 HSM. To learn more about the key storage certification level see the AWS Private CA Documentation.
ACM Private CA is a managed private CA service that helps you easily and securely manage the lifecycle of your private certificates. ACM Private CA provides you a highly-available private CA service without the upfront investment and ongoing maintenance costs of operating your own private CA. ACM Private CA extends ACM’s certificate management capabilities to private certificates, enabling you to manage public and private certificates centrally.
Amazon Relational Database Service (Amazon RDS) for PostgreSQL announces support for PostgreSQL 14 with three levels of cascaded read replicas, 5 replicas per instance, supporting a maximum of up to 155 read replicas per source instance. You can now create Single-AZ or Multi-AZ cascaded read replica DB instances in same region or any one cross region from another read replica instance, enabling you to build a more robust disaster recovery architecture.
Starting with Amazon RDS for PostgreSQL 14.1 and higher, read intensive workloads such as data analytics can now benefit from up to 155 cascaded read replicas that offer up to 30 times higher read capacity versus previous versions of PostgreSQL, thereby reducing the load on source instance. You can now also pre-create read replicas for your selected disaster recovery target read replica and utilize read scaling immediately after promoting the target. The cascaded read replicas also come with the option to enable automated backup that allows for a quicker promotion of read replica to source instance since only incremental snapshot is required for the promoted read replica. See Working with PostgreSQL read replicas in Amazon RDS to learn more about cascaded read replicas on RDS PostgreSQL.
Now you can use the AWS Serverless Application Model (AWS SAM) CLI to enable AWS X-Ray tracing in your AWS SAM templates automatically, without manually authoring your AWS SAM templates. This makes it easier to centrally manage AWS X-Ray tracing across your Lambda functions in your serverless application.
The AWS SAM CLI is a developer tool that makes it easier to initialize, build, package, test on local and cloud, and deploy serverless applications. AWS X-Ray helps you analyze and debug your distributed applications, such as those built using a microservices architecture. AWS X-Ray provides an end-to-end view of requests as they travel through your application, making it easier to monitor and troubleshoot complex serverless architectures. Enabling tracing through the AWS SAM CLI reduces the complexity of setting up tracing on each of your Lambda functions.
AWS Trusted Advisor adds 4 checks automatically ingested from AWS Compute Optimizer. AWS Trusted Advisor provides recommendations that help you follow AWS best practices. Trusted Advisor evaluates your account by using checks to identify opportunities for you to improve security and performance, reduce costs, and monitor service quotas. This week, AWS Compute Optimizer checks are available in the Business Support, Enterprise Support On-Ramp, and Enterprise Support plans. The new checks are:
- Amazon EBS over-provisioned volumes
- Amazon EBS under-provisioned volumes
- AWS Lambda over-provisioned functions for memory size
- AWS Lambda under-provisioned functions for memory size
AWS RoboMaker, a service that makes it easy to simulate robotics applications at scale, is now available in the in the AWS GovCloud (US-West) Region. Support in the GovCloud Region allows U.S. government agencies and contractors to run sensitive simulation workloads in AWS RoboMaker by addressing their specific regulatory and compliance requirements.
AWS RoboMaker provides a robotics simulation service to enable robotics developers to run, scale, and automate simulation without managing any infrastructure. To get started, one can explore the RoboMaker webpage.
Amazon Managed Service for Prometheus is now available in Europe (London) Region. Amazon Managed Service for Prometheus is a fully managed Prometheus-compatible monitoring service that makes it easy to monitor and alarm on operational metrics at scale. Prometheus is a popular Cloud Native Computing Foundation open-source project for monitoring and alerting that is optimized for container environments.
Amazon Managed Service for Prometheus is now generally available in the following regions: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Frankfurt), Europe (Ireland), Europe (Stockholm), and Europe (London) Regions.
AWS IoT Secure Tunneling allows customers to access devices that are deployed behind restricted firewalls at remote sites. When a tunnel is created, a pair of client access tokens (CAT) will be generated and used by the source and destination devices to connect to the Secure Tunneling service. Prior to this week, a token can be stored and reused, making it susceptible to malicious use. Now single-use tokens will be revoked after a successful connection. When the connection drops, instead of saving CATs to a local device and establishing a token re-delivery method, customers can call the RotateTunnelAccessToken API to deliver a new pair of CATs to the source and destination devices to resume connection with the original device in the predefined tunnel period. Once reconnected, customers can securely access and continue troubleshooting remote devices using Secure Tunneling.
This week Amazon Kinesis Video Streams announces new APIs and SDKs to help you extract images from your video streams. This fully-managed capability allows customers to request images via API calls or configure automatic image generation based on metadata tags in ingested video.
AWS customers can use this new functionality to generate images for playback applications such as thumbnails or enhanced timeline scrubbing. They can also generate images for Machine Learning pipelines, including Amazon Sagemaker, Amazon Rekognition, or custom solutions.
Amazon EKS is a fully managed Kubernetes service. Until now, the Amazon EKS console only supported viewing workload specific resources, such as deployments, jobs and DaemonSets running in your cluster. You needed to install and run additional tools to view, understand, and troubleshoot any other Kubernetes resource type.
The updated Amazon EKS console now includes all standard Kubernetes API resource types such as service resources, configuration and storage resources, authorization resources, policy resources and more. You can easily filter your Kubernetes resources by a specific namespace and search by property values, making it quick and easy to find objects, all within a single consistent experience in the console.
In the latest release of the AWS AppConfig Lambda Extension, there is support for Arm/Graviton2 processors. Using AWS AppConfig, a feature of AWS Systems Manager, customers can easily create feature flags or other dynamic/runtime configuration and safely deploy updates. The AWS AppConfig Lambda Extension allows customers to access this feature flag and dynamic configuration data in Lambda functions.
Using Graviton2 processors for your Lambda functions may result in an up-to 34% better price/performance. If you use that processor in AWS Lambda, you can now use the AWS AppConfig Lambda Extension as well.
Amazon EBS Snapshots Archive is now available in Asia Pacific (Seoul), Asia Pacific (Osaka), Canada (Central), and South America (São Paulo) Regions. AWS launched EBS Snapshots Archive in 17 commercial regions in November, 2021, to help you save up to 75% on storage costs for EBS Snapshots that you intend to retain for more than 90 days and rarely access. EBS Snapshots are incremental in nature, storing only the changes since the last snapshot. This makes them cost-effective for daily and weekly backups that need to be accessed frequently. If you have snapshots that you access every few months or years, and would like to retain them long-term for legal or regulatory reasons, you can use EBS Snapshot Archive to store full, point-in-time snapshots at a lower cost than what you would incur if stored in the standard tier.
Amazon Managed Blockchain (AMB) announces general availability of Goerli Testnet (Goerli), a proof-of-authority test network for Ethereum. As a fully managed service, AMB's support of Goerli provides customers a stable testing environment for their distributed applications ahead of Ethereum’s upcoming consensus upgrade (The Merge), without having to manage complicated blockchain infrastructure.
With this launch, AMB customers can more easily provision Goerli nodes in minutes and connect to the public Ethereum test network (testnet). With AMB, customers get encryption at rest and transport, secure access to the network via standard open-source Ethereum APIs, fast and reliable synchronization to the Goerli, and durable elastic storage for ledger data. AMB monitors node health, replaces unhealthy nodes, and automates Goerli software upgrades, improving the availability of customers’ Goerli’s infrastructure. In addition to testing their DeFi applications, customers building analytical products such as smart contract monitoring tools and fraud detection software can also benefit from this scalable, highly available, and fully managed Goerli service. Once customers are ready for production launch, they can transition to Ethereum mainnet on AMB.
Amazon Relational Database Service (Amazon RDS) Performance Insights now makes it easier for you to see the database performance metrics for the exact timeframe you want to analyze, by choosing a custom time window within your retention period. Previously, you could only see metrics in Performance Insights by choosing relative time intervals such as the past 1 hour, the past 24 hours, etc. Amazon RDS Performance Insights is a database performance tuning and monitoring feature of Amazon RDS and Amazon Aurora that helps you quickly assess the load on your database and determine when and where to take action. This helps non-experts to measure database performance with an easy-to-understand dashboard that visualizes database load. With one click, you can add a fully-managed performance monitoring solution to your Amazon Aurora clusters and Amazon RDS instances. Amazon RDS Performance Insights automatically gathers all necessary performance metrics and visualizes them in a dynamic dashboard on the Amazon RDS console. You can identify your database’s top performance bottlenecks from a single graph.
Amazon QuickSight now supports 10,000 data points for Line charts. With this update, line chart performance has been improved to support 10,000 data points from the earlier 2500 data point limit and introduces other minor bug fixes.
Amazon Relational Database Service (Amazon RDS) on AWS Outposts now supports manual and automatic storage scaling. AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any datacenter, co-location space, or on-premises facility for a truly consistent hybrid experience. With Amazon RDS on AWS Outposts, you can deploy managed DB instances in your on-premises environments.
Storage autoscaling provides dynamic scaling of your database storage based on your application’s needs. You can now turn on storage autoscaling when you create or modify Amazon RDS on Outposts DB instances by selecting a checkbox to "Enable storage autoscaling" and specifying the maximum database storage size.
Amazon Relational Database Service (Amazon RDS) now offers customers the option to use Internet Protocol version 6 (IPv6) addresses in their Virtual Private Cloud (VPC) on new and existing RDS instances. Customers moving to IPv6 can simplify their network stack by running their databases on a network that supports both IPv4 and IPv6.
The continued growth of the Internet is exhausting available Internet Protocol version 4 (IPv4) addresses. IPv6 increases the number of available addresses several fold and customers no longer need to manage overlapping address spaces in their VPCs. Customers can standardize their applications on the new version of Internet Protocol by moving to IPv6 with a few clicks in the AWS Management Console.
Amazon CodeGuru Reviewer is a developer tool that leverages automated reasoning and machine learning to detect potential code defects that are difficult to find and offers suggestions for improvements. This week, AWS announced the support of file/folder suppression for Amazon CodeGuru Reviewer, a new feature that allows customer to prevent CodeGuru Reviewer from surfacing findings on certain parts of their codebase.
Previously, every full repository analysis performed by CodeGuru Reviewer would scan every file/folder within a customer’s repository. Now, with the launch of CodeGuru Reviewer’s file/folder suppression, customers can specify the files and/or folders they want to be suppressed from their full repository scans. Findings can be suppressed files or folders during incremental scans (i.e. scans initiated by a pull request) as well. Customers are not charged for the lines of code within suppressed files or folders. This new feature helps customers prevent CodeGuru Reviewer from generating unwanted findings on certain files, like test files, autogenerated files, or files that have not been recently updated.
Amazon Connect now allows you to programmatically stop queued callbacks using the StopContact API. Queued callbacks reduce the time callers have to wait by enabling them to provide a phone number to be called back when an agent becomes available. In some situations, customers can end up calling repeatedly and registering for multiple callbacks. You can now use the StopContact API to prevent duplicate callback requests, improving customer experience and reducing contact center costs as callers will no longer receive multiple callbacks for the same issue.
Amazon Elastic Kubernetes Service (EKS) customers can now create and manage clusters in the AWS Asia Pacific (Jakarta) Region.
Amazon EKS is a managed Kubernetes service that makes it easy for you to run Kubernetes on AWS without needing to install, operate, and maintain your own Kubernetes control plane or worker nodes. Amazon EKS is certified Kubernetes conformant, so existing applications running on upstream Kubernetes are compatible with Amazon EKS. You can also easily migrate any standard Kubernetes application to EKS without needing to refactor your code.
Google Cloud Releases and Updates
Anthos Clusters on bare metal
- April 12, 2022: security bulletin
- April 27, 2022: 1.9.7 patch release
- April 28, 2022: security bulletin
Anthos Clusters on VMWare
Anthos Clusters on AWS (previous generation)
Anthos Clusters on AWS aws-1.11.0-gke.6 (previous generation) is now available. Clusters in this release support the following Kubernetes versions:
Anthos Service Mesh
Version 1.13 is now available for managed Anthos Service Mesh and is rolling out into the Rapid Release Channel.
Version 1.12 is being promoted to the Regular Release Channel, and version 1.11 is being promoted to the Stable Release Channel.
See Select a managed Anthos Service Mesh release channel for more information.
In addition to the existing labels, you can now use the "istio-injection" label as an alias. For more information, see Injection labels.
Enabling endpoint discovery multi-cluster installations with declarative API is now available as a preview feature in all release channels. For more information, see Enable endpoint discovery between public clusters with declarative API.
Apigee API hub
On May 4, 2022 Apigee API hub began the release of a new version of the software for Public Preview.
At Public Preview, products or features are ready for testing by customers. Preview offerings are often publicly announced, but are not necessarily feature-complete, and no SLAs or technical support commitments are provided for these. Unless stated otherwise by Google, Preview offerings are intended for use in test environments only.
API Hub label in the Apigee community.
Added provisioning instructions.
Documentation: Provision API hub
Added instructions on how to get support.
Documentation: Get support
Action buttons in the UI are now disabled if you do not have appropriate permissions to perform the action.
App Engine standard environment Ruby
Artifact Registry is now available in the
europe-west9 region (Paris, France).
Getting and listing Artifact Registry locations in a project now requires the following permissions:
You can grant these permissions with the Artifact Registry Reader role (
roles/artifactregistry.reader) role or another role that includes these permissions.
Case-insensitive collation support for BigQuery is now available for Preview. Collation determines how strings are sorted and compared in collation-supported operations. If case-insensitive collation is used, case is ignored in comparison and sorting operations.
- You can use ML.EVALUATE to calculate new forecasting accuracy metrics such as MAPE, SMAPE, and MSE.
- You can perform fast model training with little or no loss of forecasting accuracy by using the
To learn how to achieve one hundred times higher scalability with the
ARIMA_PLUS model while using the new forecasting accuracy metrics, see the Accelerate
ARIMA_PLUS to forecast 1 million time series within hours. You can also read
ARIMA_PLUS best practices.
Rebilling is now available in the Partner Sales Console and Cloud Channel API. This new billing data service helps you simplify your customer billing process by configuring discounts and exporting your billing data to a BigQuery dataset.
Cloud Asset Inventory
Cloud Bigtable is available in the
europe-west9 (Paris) region.
Cloud Build now supports a
script field, which allows users to specify shell scripts to execute in a build step. This feature is available as a preview release. To learn more, see Using the script field.
Cloud Functions has added support for the following new runtimes at the Preview release level:
Cloud Key Management Service
Cloud KMS is available in the following region:
Cloud Load Balancing
Regional external HTTP(S) load balancers now support Shared VPC configurations where the load balancer's forwarding rule, target proxy, and URL map, can be created in a host or service project, while the backend services and backends can be distributed across multiple service projects in the Shared VPC environment. This is referred to as cross-project service referencing. Cross-project backend services can be referenced from a single URL map.
Cross-project service referencing gives service developers and admins autonomy over the exposure of their services through the centrally managed load balancer.
For details, see:
This feature is available in Preview.
You can now hide large amounts of similar log entries from your query results in the Logs Explorer. To learn more, see Hide similar logs.
Cloud SQL for MySQL
Cloud SQL for PostgreSQL
GCP have switched the "builtin/stable" model back to the original version temporarily while they fix a bug resulting from this migration. The week of May 16th, GCP will update the "builtin/stable" model used for OCR again with the model from "builtin/latest" and create a new release note.
You will be able to use the original model as "builtin/legacy" for 90 more days after they upgrade "builtin/stable".
Generally available: Paris, France
europe-west9-a,b,c has launched with general-purpose E2 and N2 VMs available in all three zones.
See VM instance pricing for details.
Config Controller is now supported in region
--use-private-endpoint flag to
gcloud anthos config controller create to restrict access to the master's private endpoint IP of a config controller instance. Available in gcloud 378.0.0 (release note).
gcloud anthos config controller get-config-connector-identity which prints the default Config Connector identity, to allow easier subsequent permission grant. Available in gcloud 383.0.0 (release notes)
gcloud anthos config controller create prints the default Config Connector identity, to allow easier subsequent permission grant. Available in gcloud 383.0.0 (release notes)
Spot Pods for GKE Autopilot clusters is now generally available. Use Spot Pods to run your fault-tolerant workloads at reduced costs.
Spot VMs on GKE is now generally available. Spot VMs let you run fault-tolerant workloads at lower costs.
Version 1.21.10-gke.2000 is now the default version in the Stable channel.
Memorystore for Memcached
Added new Memorystore for Memcached region: Paris (
Added new Memorystore for Memcached region: Milan (
Pub/Sub is now available in
The resource usage restriction Organization Policy constraint has launched into general availability.
For auto mode VPC networks, added a new subnet
10.200.0.0/20 for the Paris
europe-west9 region. For more information, see Auto mode IP ranges.
Microsoft Azure Releases And Updates
To enforce stricter security measures, you can now configure your Service Bus namespace to require that clients send and receive data with a minimum version of TLS.
With Azure Resource Health, diagnose and get support for service problems that affect Virtual Network NAT (NAT gateway).
Latest updates and new enhancements available for Azure Web Application Firewall (WAF).
Gain a greater security stance by explicitly authorizing a partner to create partner topics or partner destinations in your Azure subscription.
You can now deploy Static Web Apps to staging environments using Azure DevOps.
You can now replicate your block blobs to region of your choice with object replication for premium block blobs and rule limit is increased to 1000 containers per replication policy.
TARGET RETIREMENT DATE: NOVEMBER 30, 2022
Azure Video Analyzer (preview) will be retired on 30 November 2022 – transition to either Dynamics Connected Spaces or Open Source solutions by that date
Label data with text classification using machine learning assist.
New features include multi-class, multi-label, and named entity recognition, search for Azure Machine Learning assets across multiple workspaces, and label with text named entity recognition.
Compartmentalize access to data with identity passthrough and configure email notifications from Azure Learning.
Have you tried Hava automated diagrams for AWS, Azure and GCP. Get back your precious time and sanity and rid yourself of manual drag and drop diagram builders forever.
Hava automatically generates accurate fully interactive cloud infrastructure and security diagrams when connected to your AWS, Azure or GCP accounts. Once diagrams are created, they are kept up to date, hands free.
When changes are detected, new diagrams are auto-generated and the superseded documentation is moved to a version history. Older diagrams are also interactive, so can be opened and individual resources inspected interactively, just like the live diagrams.
Check out the 14 day free trial here: