AWS Notes

​​Kubernetes 1.22 для EKS, EKS Distro и EKS Anywhere:

https://aws.amazon.com/blogs/containers/amazon-eks-now-supports-kubernetes-1-22/

Спустя официального релиза 1.22 прошло 8 месяцев и в результате сделанный в прошлый раз прогноз на эту версию был неточен аж на четыре с половиной месяца! Что лишь подчёркивает, как много изменений в новой версии:

https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html#kubernetes-1.22

Точней уже не новой, т.к. ещё четыре месяца назад вышла 1.23. 😐

Несмотря на такую задержку, всё же, предположу, что 1.23 появится на AWS ещё летом, поставлю на 15 августа.

Отдельно стоит отметить, что поддержка версии EKS 1.18 была совсем недавно прекращена - 31 марта.

#EKS

​​Weekly Summary on AWS (March 27 - April 2)

🔸 Aurora PostgreSQL + TDS Protocol
🔸 Backup
➖ Restore individual VMware virtual disks
➖ VMware Cloud on AWS Outposts
🔸 CloudFront + Server Timing headers
🔸 Connect + Contact Lens
🔸 EC2 + automatic recovery of instances by default 👈
🔸 EC2 AMI + reducing visibility of public AMIs older than two years ⚠️
🔸 ECS + container instances per cluster 2000 → 5000
🔸 EKS + EBS CSI Driver add-on GA 👀
🔸 EMR Managed Scaling + Spark shuffle data awareness
🔸 EventBridge Schema Registry + Golang 👍
🔸 Firewall Manager + Palo Alto Networks Cloud NGFW 💥
🔸 FSx for NetApp ONTAP + change the throughput capacity
🔸 Glue 2.0 + fuzzy matching and deduplication
🔸 Glue DataBrew + ORC file format
🔸 Lambda console + bulk update of layers
🔸 License Manager + AWS Marketplace
🔸 Organizations + central AWS account closure 🎉
🔸 SageMaker Data Wrangler + Databricks
🔸 Security Hub 👇
➖ 12 controls for security posture monitoring
➖ Company and product names for custom integrations
🔸 Storage Gateway + VMware ESXi 7.0 and Microsoft Hyper-V 2022 and 2019 hypervisors
🔸 Well-Architected Tool + Sustainability Pillar
🔸 WorkSpace + branding 👀

🔹 Aurora PostgreSQL 13.6, 12.10, 11.15, 10.20 and Babelfish for Aurora PostgreSQL 1.2.0
🔹 Hadoop S3A connector + S3 Access Points
🔹 RDS for Oracle + January 2022 PSU for 12.1 and RU for 12.2 and 19c

#AWS_week

Новое видео от Михаила Голубева:
Добавление компьютерного зрения в ваше приложение используя Amazon Rekognition
https://youtu.be/SrW_rG9IrfI

Reduce encryption costs by using S3 Bucket Keys on existing objects:

https://aws.amazon.com/blogs/storage/reduce-encryption-costs-by-using-amazon-s3-bucket-keys-on-existing-objects/

In this blog, we’ve walked through the steps to implement S3 Bucket Keys for objects with different KMS keys within same bucket. By doing so, we were able to significantly reduce request traffic from S3 to KMS, decreasing KMS costs by 80 percent.

#S3 #KMS

The official AWS blog about closing AWS accounts using the AWS CLI or AWS SDK:

https://aws.amazon.com/blogs/mt/aws-organizations-now-provides-a-simple-scalable-and-more-secure-way-to-close-your-member-accounts/

You can use the AWS Organizations console, CLI or API/SDK to efficiently and more securely close the member accounts in your organization, saving you significant overhead in managing these administrative tasks while ensuring resource efficiency and overall security.

#Organizations

Закрытие AWS account через AWS SDK & AWS CLI:

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_close.html#aws-cli-&-aws-sdks

aws organizations close-account --account-id 123456789012

Не прошло и пять лет. Ан нет, прошло.

Нужно учитывать следующие особенности закрытия (на самом деле сначала приостановки - SUSPENDED) AWS аккаунтов в Organizations:

▫️ Закрыть можно любой аккаунт (member account, иногда называются как sub-account) кроме главного (management account, ранее master account).
▫️ Пока команда выполнения закрытия аккаунта находится в процессе (обычно несколько минут), аккаунт будет в состоянии PENDING_CLOSURE. По её отработке он переходит в состояние SUSPENDED, в котором будет висеть ещё три месяца, прежде, чем окончательно удалится.
▫️ Закрыть сразу все аккаунты не получится. Можно закрыть лишь 10% от общего количества в течение месяца.
▫️ Случайно закрытый нужный аккаунт можно восстановить в течение 90 дней через Support (пока аккаунт находится в состоянии SUSPENDED).

Подробности API для Organizations - CloseAccount:

https://docs.aws.amazon.com/organizations/latest/APIReference/API_CloseAccount.html

Особенности закрытия аккаунтов для AWS GovCloud (US):

https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/Closing-govcloud-account.html

⚠️ На момент публикации документация на команду AWS CLI close-account пока ещё не доступна.

#Organizations

​​Weekly Summary on AWS (March 20-26)

🔸 ACM Private CA + custom subject names, extensions, and name constraints
🔸 Amplify + @mapsTo to rename models while retaining data
🔸 Billing + detailed break down of costs for RDS 👀
🔸 Chime SDK + 10 000 live participants
🔸 Comprehend + extract custom entities from images and Textract JSON files
🔸 Connect forecasting, capacity planning, and scheduling
🔸 Cost Anomaly Detection + resource and tag based access management
🔸 Cost Categories + resource and tag based access controls
🔸 EC2 Metadata + autoscaling/target-lifecycle-state
🔸 ECS + warm pools for EC2 Auto Scaling
🔸 GameKit for Unreal Game Engine 🎉
🔸 GameSparks 💥
🔸 Kendra + Slack Connector
🔸 Lambda + /tmp ephemeral storage: 512 MB → 10 GB 👍
🔸 Lex + grammar slot type
🔸 Panorama
➖ CloudWatch alarms
➖ Receiving inbound messages over the local area network
➖ TensorFlow, PyTorch, and OpenCV
🔸 Proton + Terraform GA
🔸 QuickSight + Groups Management UI
🔸 RDS for PostgreSQL + tds_fdw to connect to a SQL Server
🔸 RDS Service APIs + IPv6 👈
🔸 Service Management Connector for JSM (Jira) + AWS Support
🔸 Transcribe Call Analytics + call summarization

🔹 Corretto 18
🔹 Free Tier + db.t3.micro/db.t4g.micro for RDS 💪

#AWS_week

AWS Customers Build to Create, Entertain, and Make History - 2021

https://youtu.be/0fEZABac-LU

We are excited to share that today we announced the General Availability of AWS GameKit for Unreal Engine during the Game Developers Conference (GDC). AWS GameKit is an open-source solution that allows game developers to deploy and customize cloud-connected game backend features directly from Unreal Engine. Today, we are launching four game backend features on AWS GameKit to support PC games built on Unreal Engine. These four features are - Identity and Authentication, Achievements, Game State Cloud Saving, and User Gameplay Data. AWS GameKit uses AWS CloudFormation templates to provision and connect all the necessary AWS resources together into a cohesive solution to power these features. With AWS GameKit, game developers can get started with the AWS GameKit templates and then customize and build out their backend to meet the needs of their game.

Customer Problem
Game development has two aspects, creating engaging game play experiences and building undifferentiated yet important backend game features. Game developers, while experts at game play development, don’t always have cloud expertise and have to spend months researching cloud services and writing undifferentiated code to build backend game features. While familiar with the game engine’s integrated development environment, developers still have to spend cycles learning how to integrate their backend into the engine. This slows a game developer’s ability to innovate quickly and bring new games to market.

Customer Value
AWS GameKit enables game developers to quickly build AWS-based backend game features without requiring advanced knowledge of AWS cloud services. With the AWS GameKit, game developers can build AWS-powered game features directly from the Unreal game with just a few clicks. Here are the three key customer benefits:
1. Ease of use: AWS GameKit makes it easy to build game features without requiring prior experience with core AWS services.
2. Complete customization: AWS GameKit includes the source code for the game features allowing developers to see how the AWS services work and allowing full customization.
3. Fast prototyping: AWS GameKit sample assets, including visual code and UIs for each feature, provide ready-made elements for game project integration and customization. The GameKit API and documentation make it easy to trace and debug from the engine.
https://aws.amazon.com/about-aws/whats-new/2022/03/aws-gamekit-unreal-engine/

What did we launch?
Today, at the Game Developers Conference 2022, we announced the preview launch of Amazon GameSparks, a managed AWS service that provides game developers with features for building, running, and scaling the backend for their games. Amazon GameSparks was launched as a part of AWS for Games, an initiative that aligns purpose-built game development capabilities—including AWS services, AWS solutions, and AWS Partners—against solution areas to help developers build, run, and grow their games.

Why is this important?
Game developers have told us they want to spend less time on building and scaling backend services, and more time delivering the best player experience possible. Building and scaling backend features requires expertise with managing cloud infrastructure such as compute, storage, and networking to reach players globally and scale to millions of players. Amazon GameSparks addresses these challenges with a serverless game backend that makes it easy for developers to create and manage custom game features without having to think about underlying servers or infrastructure. Amazon GameSparks makes building a game backend easy for game developers who have little to no cloud experience since it comes with out-of-the-box backend features such as authentication and player data management and offers integration with the Unity game engine.

The preview launch of Amazon GameSparks enables game developers to begin developing and testing their games. The preview supports mobile (iOS and Android) and PC gaming platforms. Additional features and benefits include:
• Cloud Code: Add custom logic, integrate with other AWS services, and extend pre-built game features
• Test Harness: Quickly validate Cloud Code logic directly in the console
• Messaging: Send messages and events between game clients and Amazon GameSparks over WebSocket connections
• Integration with AWS Lambda: Invoke AWS Lambda functions from Cloud Code to access any AWS service
• Integration with DynamoDB: Connect to Amazon DynamoDB from Cloud Code to store and manage game data

https://aws.amazon.com/blogs/gametech/amazon-gamesparks/

Всем привет!
Если кто-то готовится получить AWS сертификацию, здесь есть возможность получить ваучер на бесплатный Practice Exam https://pages.awscloud.com/global-ln-gc-traincert-certification-associate-challenge-2022-reg

​​Weekly Summary on AWS (March 13-19)

🔸 AppConfig Feature Flags + GA
🔸 App Mesh Envoy Management Service (EMS) + CloudTrail
🔸 Backup Audit Manager + 'cross-Region copy', 'cross-account copy', and 'backups protected by AWS Backup Vault Lock' controls
🔸 Billing Conductor
🔸 Chatbot + GA for management of AWS resources from Slack
🔸 Chime SDK
➖ Amazon Lex voice bots
➖ Amazon Voice Focus
🔸 Cognito + in-region SES/SNS integration
🔸 Connect + rich formatting in chat messages
🔸 Cost Anomaly Detection + AWS Chatbot
🔸 ECS Anywhere + Windows
🔸 EKS 1.21 + containerd on Windows nodes
🔸 Kendra FSx Connector for Windows File Server
🔸 KMS & ACM + latest hybrid post-quantum TLS ciphers
🔸 Lambda console + sharing test events
🔸 Location Service + HERE Explore & HERE Explore Truck map stypes
🔸 Lookout for Vision + GA & Starter Kit
🔸 RDS for PostgreSQL + mysql_fdw
🔸 Route 53 Private DNS + Geolocation and Latency-Based Routing
🔸 Route 53 Resolver DNS Firewall + reducing the cost
🔸 PrivateLink + RoboMaker
🔸 Service Catalog + VPC Endpoint Policies

#AWS_week

Тем кто смотрит в сторону AWS Architect сертификации - будет очень полезно

​​AWS Cloud Quest — Cloud Practitioner:

https://explore.skillbuilder.aws/learn/course/external/view/elearning/11458/aws-cloud-quest-cloud-practitioner

▫️ AWS Cloud Quest: Cloud Practitioner is a role-playing learning game that helps you develop practical cloud skills through interactive learning and hands-on activities using AWS services.
▫️ You will solve problems throughout the virtual Cloud Quest city by completing learning exercises like labs, quizzes, and puzzles.
▫️ Through hands-on learning in a live AWS environment, you will learn and apply cloud concepts to real business problems while earning rewards and transforming the city. Ready to begin? Enroll to start your quest.

#AWS_Certification

Hello all!

The EMEA Specialist Solutions Architects team is organizing an EMEA Analytics Learning series. These series will be comprised of 5 different tracks covering the key analytics technologies:

The first three sessions belonging to the MSK, Redshift and Quicksight tracks are already planed and awaiting for you to join!!

Below you can find the dates and registration links for each of the sessions:

• 22 March – 15:45 – 16:30 GMT: Introduction to Amazon Managed Streaming for Apache Kafka (Amazon MSK) – Registration link here - https://emea-introduction-amazon-managed-streaming.splashthat.com/

[LEVEL 200 - Webinar] Introduction to Amazon Managed Streaming for Apache Kafka (Amazon MSK). Amazon MSK makes it easy to ingest and process streaming data in real time with fully managed Apache Kafka. This is an introductory webinar to MSK, explaining what it is, why it is useful, and how it can help organizations.

• 29 March – 9:00 – 16:45 GMT: Redshift Immersion day – Registration link here - https://emea-redshift-immersion-day.splashthat.com/

[LEVEL 200 - Workshop] A Redshift Immersion Day provides our customers with a deeper understanding of the Amazon Redshift service through presentations and hands-on experience, and is specifically designed to help us accelerate a customer opportunity or further enable an existing Redshift customer.

• 30 March – 9:00 – 10:00 GMT: Discover Amazon QuickSight - Scalable, serverless, cloud-native Business Intelligence – Registration Link here - https://emea-discover-amazon-quicksight.splashthat.com/

[LEVEL 200 - Webinar] This session, will be an introductory level session 150/200 ideal for customers that may not familiar with Quicksight but have BI use cases in AWS. During the session we will be describing the different features of Quicksight along with a live demo where customers will be able to see the service in action.

Всем привет! Сообщение для тех, кому нужно сохранить доступ к AWS.

Selectel — официальный партнер AWS в России. Через нас можно оплачивать сервисы зарубежного провайдера, получая все отчетные документы РФ (при условии потребления от $1000/мес). Также мы предоставляем выделенный канал в обход публичного интернета, который связывает инфраструктуру AWS и Selectel.

Наши сертифицированные специалисты настроят связь с зарубежным провайдером, а также помогут с построением гибридного облака и/или миграцией. Предложение актуально как для представителей бизнеса, так и для физических лиц.

По всем вопросам пишите на почту — sales@selectel.ru. На все ответим и попробуем придумать эффективное в вашей ситуации решение.

Узнать подробнее об услуге — https://slc.tl/2gPx2

Видео по SageMaker Studio Lab от Александра Патрушева (Sr. AI/ML Specialist SA, AWS).

https://www.youtube.com/watch?v=jrNs6c0E0A8

00:00:00 Представление
00:03:30 Что такое Amazon SageMaker Studio Lab
00:06:25 Для чего подходит Amazon SageMaker Studio Lab
00:07:12 Demo
00:25:03 В чем разница между SageMaker Studio Lab и SageMaker

#SageMakerStudioLab #video

​​Weekly Summary on AWS (March 6 - 12)

🔸 Amplify iOS Library + Swift
🔸 Aurora PostgreSQL + Multi Major Version Upgrade
🔸 Braket + OpenQASM 3.0
🔸 Chime SDK + live transcription with automatic language identification
🔸 Comprehend + Targeted Sentiment
🔸 DevOps Guru + CodeGuru Profiler for Lambda
🔸 DynamoDB
➖ Limit request option for PartiQL
➖ Tables Per Account 256 → 2,500
➖ Еnable management operations 50 → 500
🔸 EC2 AMI + LastLaunchedTime
🔸 EC2 + X2idn/X2iedn instances 💥
🔸 ECS Update Service API + loadBalancers, propagateTags, enableECSManagedTags, and serviceRegistries 👀
🔸 Glue DataBrew + cross-account Glue Data Catalog S3 access
🔸 Lambda + PrincipalOrgID 💪
🔸 Lightsail + S3 block public access 🎉
🔸 MSK Connect + Secrets Manager
🔸 Personalize + CloudFormation
🔸 QuickSight + auto refresh
🔸 SSM Change Manager + approve/reject multiple change requests together

🔹 Bottlerocket + NVIDIA GPUs 👍
🔹 Genomics CLI + Snakemake
🔹 RDS for MySQL + 5.7.37 and 8.0.28
🔹 RDS for Oracle + Oracle Database 21c
🔹 RDS for PostgreSQL + 14.2, 👈 13.6, 12.10, 11.15, and 10.20
🔹 RDS for SQL Server + M6i/R6i instances

#AWS_week

AWS Certificate Manager problems for Russia and Belarus:

We are reaching out to inform you about a change to supported top level domains for public certificates. Amazon relies on a third party as part of our process for issuing and renewing certificates issued by Amazon Trust Services. As of March 10, 2022, and until further notice, due to changes implemented by that third party to disallow the issuance and renewal of certificates from the domains specified later, we will no longer be able to issue or renew certificates from the domains specified through ACM. All Amazon certificates for these domains will remain functional until expiration, but will not be renewable and no new certificates from these domains will be issued. Certificates within these domains can still be created by another recognized certificate authority and imported to Amazon:

* .RU
* .BY
* Бел - Belarus
* Рф - Russian Federation
* .moscow
* .москва - Moscow
* .SU - Soviet Union
* (http://ru.com/) .RU.COM
* .РУС
* .RU.NET

#ACM