Integrated Hybrid Cloud Service VMware Cloud on AWS

Receive guidance and best practices on all security relating to networking, data encryption, role-based access control, authentication, and more. 

Information System Security Management and Assessment Program (ISMAP) is a compliance program mandated by the Japanese authorities to work with the public sector agencies in Japan.

Customers can use IPv6 for their VMware Cloud on AWS workload VMs to communicate within and outside the SDDC.

Users will be able to choose which notifications they receive and through which supported channels. This functionality, while also provided as an API, will be present in the VMC Console. These preferences are controlled at a user level, giving you the power to control which notifications you receive, reducing the noise often caused by different events that take place within one environment.

IPv6 for workload communication.

Support for DFW IPFIX that enables the vRNI solution within VMware Cloud on AWS. The vRNI solution provides support for operationalizing DFW interms in planning the day to day monitoring and troubleshooting.

SDDC save and restore capability that reduces configuration time by allowing customers to save their VMware Cloud on AWS SDDC configurations upon deletion and re-deploy an SDDC using these saved configurations if they need to at a later date.

Enabling customers to see a particular day and time of the week for VMware Cloud on AWS SDDC maintenance.

Enabling download of VMware Cloud on AWS bill in a csv format consistent with AWS bills via RESTful API.

The 3 Guidelines from 3 Ministries is a collection of security and compliance guidelines published by the three ministries in Japan - Ministry of Health, Labor and Welfare, the Ministry of Internal Affairs and Communications, and the Ministry of Economy, Trade and Industry. In Japan, medical institutions that store medical data such as patient records and medical images in an external facility such as a public cloud should align with the requirements specified in these guidelines.

DHCP Relay can be configured within VMware Cloud on AWS so DHCP requests can be forwarded to an external/3rd party DHCP server. Customers can use the native NSX DHCP capabilities in VMware Cloud on AWS or use DHCP Relay to leverage an advanced external/3rd party DHCP server.

Enables customers to migrate their workloads from non-VMware to VMware environments

VMware Cloud on AWS allows cloud-side VMs on the extended network to route traffic optimally through the cloud-side first-hop gateway instead of being routed through the source environment router. Hence, organizations can avoid traffic tromboning via policy based forwarding on the cloud router.

Enables customers to move workloads between clouds seamlessly

Improving VMware Cloud DR's existing ransomware recovery capabilities, Enhanced Ransomware Recovery adds a dedicated ransomware recovery workflow, restore point selection assistance, pre-defined and custom VM isolation levels, and embedded security and vulnerability scanning.

VMware Cloud on AWS service availability in AWS Europe (Zurich), enabling the provisioning of VMware SDDCs in that region.

Protect vSphere workloads running on Google Cloud VMware Engine. Workloads will continue to be recovered to VMware Cloud on AWS.

Confidently protect your most critical virtual machines running on VMware Cloud on AWS with VMware Cloud Disaster Recovery by configuring protection schedules with Recovery Point Objectives (RPOs) for as low as 15 minutes so that the data loss from unforeseen DR events is minimized.

Protect vSphere workloads running on VMware Cloud on AWS Outposts. Workloads will continue to be recovered to VMware Cloud on AWS.

Use Transit Connect to carry replication, failback, and management traffic between your on-premises protected site and VMware Cloud Disaster Recovery.

Scale-up and protect your workloads across multiple VMware Cloud organizations. 

The existing legacy view is deprecating. The new dashboard view provides a summary of your networking status with improved performance.

Protect vSphere workloads running on VMware Cloud on Dell EMC. Workloads will continue to be recovered to VMware Cloud on AWS

VMware Cloud on AWS service level costs at SDDC level are distributed to resource level, so that users can perform showback to consumer entities, leveraging the perspective construct in CloudHealth. This granular costing methodology should also factor in amortized subscription cost of committed hosts.

Protect vSphere workloads running on Azure VMware solution. Workloads will continue to be recovered to VMware Cloud on AWS.

Use public RESTFUL APIs to monitor DR operations, set up protection, recover workloads, and manage the lifecycle of VMware Cloud DR instances.

Enabling deployment of scalable applications requiring a load balancer powered by VMware NSX.

It helps manage user teams more efficiently with Property Groups. Property groups let users templatize their VMware Cloud on AWS environment properties and reuse them for new catalog requests within a VMware Cloud Template

It reduces the exposure of sensitive data by keeping them encrypted in the database. vRealize Automation Cloud helps users create and encrypt secret variables for VMware Cloud on AWS and consume them as part of VMware Cloud Templates or extensibility workflows (e.g., with ABX or vRealize Orchestrator).

Supports authentication with external identity providers for the vCenter Server on VMware Cloud on AWS. This will also enable Single Sign-On across the VMWare Cloud console and the vCenter Server running on VMWare Cloud on AWS.

Reducing configuration time by persisting VMware SDDC networking configuration as a template that can be used to deploy a new VMware SDDC.

Protect and recover your vSphere virtual machines using VMware Cloud DR in additional regions.

Dynamic SDDC scale up to large SDDC.

Deliver in-service guided walk-throughs for on-boarding and common configuration tasks to accelerate time to value.

Customers can provision and scale file shares alongside block volumes on vSAN datastore on VMware Cloud on AWS.

Using Active Directory as a federated authentication provider for VMware Cloud on AWS Console login (console.cloud.vmware.com).

Simplifying the creation of the required firewall rules in VMware Cloud on AWS Console, to allow communication across on-premises networks and VMware Cloud on AWS SDDC components. For example, automated configuration of the firewall rules allow necessary ports for vCenter, SRM, and other service communication for Hybrid Linked Mode and VMware Site Recovery use cases.

vSphere Client plugins can be enabled on VMware Cloud on AWS, allowing VMware Cloud Admin customers to register VMware Cloud-certified vSphere Client plugins securely to the VMware Cloud SDDC(s) they manage.

Integrated data protection for your VMware Cloud on AWS workloads with VM-level protection policies.

The Plugin Marketplace and the integration with Cloud Marketplace is available in the vSphere Client interface, showing available plugins, lifecycle management, notification on available updates.

Achieve faster failover times and failback sooner by recovering your virtual machines directly onthe Scale Out Cloud File System and skipping the storage migration to VMware Cloud on AWS.The virtual machine storage continues to be served from the cloud filesystem.

A new consumption model for VMware Cloud on AWS with which VMware will partition the hosts and provide smaller consumable slices, lowering the price and removing the complexity of the SDDC. A slice is a resource pool comprising of compute, memory, network and storage. You will be able to purchase and consume multiple slices per your requirements.

VMware Cloud on AWS enables customers to add a vTPM device to a virtual machine.  Customers can add a vTPM device to virtual machines running Windows Server 2008 and later, Windows desktop 7 and later, or Linux. To support vTPMs in VMware Cloud on AWS, SDDCs created using version 1.19 and later will automatically include the provisioning of vSphere Native Key Provider in vCenter.  Customers can opt-in to deploy new SDDCs with 1.19. This feature is available as PREVIEW and will be enabled on a request basis. Please contact your account team if you are interested in having this feature enabled for a new 1.19 SDDC.

Microsoft introduced new minimum virtual hardware requirements with the Windows 11 operating system.  Microsoft requires a vTPM device to be present during Windows 11 virtual machine installation and upgrades.  In SDDC version 1.19, VMware Cloud on AWS is introducing a new feature to enable adding a Virtual Trusted Platform Module together with the vSphere Native Key Provider in vCenter. 

Customers can opt-in to deploy new SDDCs with 1.19. This feature is available as PREVIEW and will be enabled on a request basis. Please contact your account team if you are interested in having this feature enabled for a new 1.19 SDDC.

Provide the option for select VMware Cloud on AWS customers to 'Activate' vRealize Operations Cloud from within VMware Cloud console within the 'Add-Ons' section in the VMware Cloud console UI. When customer 'activates' vRealize Operations Cloud, all the integration tasks needed will be programmatically performed for the user in the background such as: 

• Automatically provision a vRealize Operations Cloud instances 
• Automatically map the vRealize Operations Cloud instance to the correct org 
• Automatically configuring to the VMware Cloud on AWS account 
• Launch the vRealize Operations Cloud UI showing a custom-built dashboard to show the value of vRealize Operations Cloud-VMware Cloud on AWS integration 

Allows you to manage VMware Cloud on AWS users, roles, and permissions via RESTful API.

Enabling customers to select a particular day and time of the week for VMware Cloud on AWS SDDC maintenance.

Automates monitoring and reporting of VMware SDDC activity using the VMware Cloud on AWS Tasks API.

Automates configuration of your VMware SDDC using Datacenter CLI scripts.

VMware SDDCs can be consumed on-demand or via a 1 or 3-year term commitment. Now we offer the option to pay for the 1 or 3-year commitment also via monthly installments. Continue to enjoy the savings of the 1 or 3-year term commitments without upfront payment. Please note that the monthly billing option is only available to qualified pay by invoice transactions directly through VMware or purchases from a Managed Service Provider (MSP) partner under the VMware Cloud Provider Program. Please contact your VMware sales or MSP partner representative for eligibility.

VMware Site Recovery can be consumed on-demand or via a 1 or 3-year term commitment. Now we offer the option to pay for the 1 or 3-year commitment via monthly installments. Continue to enjoy the savings of the 1 or 3-year term commitments without upfront payment. Please note that the monthly billing option is only available to qualified pay by invoice transactions directly through VMware or purchases from a Managed Service Provider (MSP) partner under the VMware Cloud Provider Program. Please contact your VMware sales or MSP partner representative for eligibility.

VMware Cloud on AWS now provides automated space reclamation support with TRIM and SCSI UNMAP to reclaim previously allocated storage as free space.

Enabling live migration (vMotion) to VMware Cloud on AWS by accelerating migration with vSphere replication.

This feature supports the forwarding of VMware Cloud on AWS SDDC vRLIC logs to forward to either Europe (Frankfurt) or Asia Pacific (Sydney) AWS regions if those SDDCs are deployed to those regions.

Get even more flexibility in purchasing VMware Cloud Disaster Recovery with VM term subscriptions. VM subscriptions can be purchased anytime using the Global DR Console for 1- or 3-year durations.

Telco Cloud Platform Public Cloud is a new Public Cloud platform that caters directly to Telecommunications Service Providers. This platform builds on top of existing Telco-class platforms VMware Cloud on AWS, Telco Cloud Platform and Telco Cloud Infrastructure, catering to Telco Requirements. VMware Telco Cloud Platform – Public Cloud is a cloud-smart solution, tightly integrated with VMware Cloud. The joint solution allows our customers to extend their on-premises telco clouds built with VMware Telco Cloud Platform. This first release is available on VMware Cloud on AWS SDDC Version 16.2.

VMware Transit Connect now supports Intra-Region Peering with AWS Transit Gateway. This simplifies network connectivity between SDDCs and AWS VPCs in the same region.

This feature enables VMware Cloud on AWS SDDC Groups to peer their native Transit Gateways (TGW) with VMware Transit Connect, simplifying access between VMware Cloud on AWS and AWS resources across accounts and across regions, while retaining control over connectivity in the respective environments. 

VMware Cloud on AWS customers can utilize NSX Traceflow to inspect the path of a packet from source to destination in the SDDC. Traceflow also provides visibility for external communication over VMware Transit Connect.

Customers can now protect up to 3000 VMs per SDDC using VMware Site Recovery.

VMware Cloud's Tanzu services is a full-managed and integrated offering containing Tanzu Kubernetes Grid and Tanzu Mission Control Essentials where Customers are responsible for providing and maintaining a basic collection of networks, which are used for deploying both Tanzu infrastructure as well as workloads. VMware is responsible for the management of the Tanzu infrastructure in addition to SDDC software components and the IaaS infrastructure resources. As part of this managed service, VMware also provides tighter integrations in the VMC Console as well as Tanzu Mission Control Essentials.

Activate recovery regions by deploying orchestrator instances and manage subscriptions through a simple global DR Console.

Recover a specific set of files or folders in a VM from a replicated snapshot and download it locally. Use this recovered copy to manually restore it on the source VM on your protected site.

VMware Cloud on AWS has successfully completed the IRAP cloud security assessment. The IRAP Cloud Security Assessment demonstrates our compliance against the Australian Information Security Manual (ISM) and Protective Security Policy Framework (PSPF) and shows VMware Cloud on AWS’s suitability to handle Australian Government data

VMware Cloud on AWS service availability in AWS Asia Pacific (Osaka), enabling the provisioning of VMware SDDCs in that region.

With VMware Carbon Black Workload support for VMware Cloud on AWS, customers can protect the workloads including VMs, containers, and apps running on VMware Cloud on AWS

The seed checkpoint feature provides recoverable migration progress with checkpoint seed data. With this capability, users have the option to retain replica disks at the target datastore if a migration is failed or canceled. Seed checkpoints enable VMware HCX to reuse the disks on the target for seeding replication data, avoiding the need to transfer all the data again.

Maximize your investment in VMware Cloud on AWS by using an existing SDDC created from VMware Cloud console, for recovery with VMware Cloud DR. Clusters and hosts added to VMware Cloud DR from VMware Cloud console are automatically recognized by VMware Cloud DR.

With enterprise federation, enterprises can use their corporate identities and credentials and link their VMware ID (My VMware) accounts to both log in to VMware Cloud Services and manage access to services/organizations/features within VMware Cloud services. With the new enhancement, customers will get self-service experience to setup enterprise federation so that any customer can setup federation without the need of engagement with VMware.

Get additional payment flexibility with a new option to pay for 1-year or 3-year committed term subscriptions in monthly installment rather than paying for it all upfront.

Use AWS Direct Connect with public virtual interfaces (Public VIF) to carry replication, failback,and management traffic between your on-premises protected site and VMware Cloud Disaster Recovery over a high-bandwidth, low-latency network connection.

Expand your DR strategy to include protection of your virtual machines running in VMware Cloud on AWS in addition to those running in your on-premises data center. Confidently migrate your most critical virtual machines to VMware Cloud on AWS with the knowledge that they can be easily protected to another AWS Availability Zone in the same region using VMware Cloud Disaster Recovery.

A fully managed, low cost, high performance external NFS datastore that can be attached to VMware Cloud on AWS host. It is built on NetApp’s ONTAP file system that provides VMware Cloud on AWS customers up to 192TiB Flash Capacity and 2PiB of data storage depending on storage efficiency savings depending on storage efficiency.

VMware Cloud on AWS SKU-based transaction allows distributors to purchase on behalf of a designated reseller and end customer. This 2-tier partner commerce motion for VMware Cloud on AWS enables distributors to streamline the purchase of VMware Cloud on AWS hosts by SKU without purchasing upfront SPP credits or signing a contract. The purchased subscription is activated immediately upon the delivery of the email invitation to onboard the service. Please Note: End customers do NOT have self-service commerce capabilities and must request further VMware Cloud on AWS subscriptions from the reseller/distributor when they want to purchase them.

Protect larger environments by replicating more than 6000 virtual machines to a single AWS region in a VMware Cloud organization.

Have a better pulse on your DR SLAs by receiving email notifications for any SLA violations, including RTO and RPO violations.

Customers can now enable Tanzu services on existing VMware Cloud on AWS SDDCs upgraded to version 1.16 and above. There is no longer a need to create new SDDCs or new Clusters, allowing customers to leverage their existing environments.

Customers can now access Application Transformer for VMware Tanzu through the VMC Console, where they can download and self-deploy the Application Transformer appliance into their VMware Cloud SDDC. Once deployed and configured, Administrators can now use Application Transformer to focus and accelerate their application modernization journey, enabling key workflows that remove the need to manually discover and analyze every workload, automatically building application topologies with all included application dependencies, and ultimately shortening the time needed for planning and execution. After discovering and analyzing the applications within the environment, Application Transformer also offers the ability to containerize a variety of processes and applications, generating OCI-compliance images and deployable Kubernetes YAML manifests, providing administrators the required tools to help their organization begin executing on re-platforming traditional applications.

VMware Site Recovery received the highest level of PCI certification (PCI DSS Level 1 provider status). By being certified as PCI DSS compliant level 1 service provider, VMware Site Recovery service operates in compliance with PCI DSS compliant security measures and controls, thereby potentially addressing the needs of a broad range of customers and workloads that need to store, process, or transmit cardholder or sensitive authentication data

Introduces the VMware NSX Manager user interface with a streamlined layout and separate tabs for Networking, Security and Troubleshooting.

CloudHealth add-on provides summarized dashboard of VMware Cloud on AWS spend and inventory with ability to slice-and-dice VMware Cloud on AWS spend for past 13 months using various parameters and intervals. Usage reports provide granular visibility into service level usage for host, elastic IP and data transfer. 

Continuous export of log of user actions, replication/recovery events, and site health to various log analysis and monitoring solutions via vRealize Log Insight Cloud.

The OSPAR report demonstrates VMware Cloud on AWS compliance against the outsourcing guidelines prescribed for by the Association of Banks in Singapore.

Use VMware Transit Connect to get high-speed and resilient connections between VMware Cloud on AWS SDDCs across different AWS regions for DR replication traffic.

VMware Cloud DR is a Cloud Security Alliance (CSA) Trusted Cloud Provider and registered as a Security, Trust, Assurance and Risk (STAR) Level One service. CSA is an organization dedicated to defining best practices to help ensure a secure cloud computing environment. STAR Registry is a publicly accessibly registry that documents the security and privacy controls.

Extend on-premises Horizon Pods to directly manage virtual desktop capacity in VMware Cloud on AWS by leveraging the Horizon Remote Agent feature.  No need to create a separate Horizon Pod on VMware Cloud on AWS.

Protection groups now support quiesced snapshots, which ensure that a snapshot represents a consistent state of the guest file systems of VMs in the group. From a quiesced snapshots, you can restore the VM and its application to the same state as before when a snapshot was taken. VMware Tools are required. Not supported with high-frequency snapshots.

Purchase VMware Cloud Disaster Recovery instantaneously with a credit card.

The VMware Cloud service will automatically scale up any stretched cluster on AZ failure. This capability is added free of charge and will attempt to maintain the Compute resources in the event of an AZ failure by adding non-billable hosts to the surviving AZ until the cluster has returned to its original host count. Upon AZ recovery the cluster will automatically Scale-In as soon as the burst capacity is no longer needed. This functionality is dependent on free capacity and therefore carries no guarantee.
This protection extends to partial failures as well. Should an instance fail on a Stretched Cluster and Auto-Remediation is unable to recover or replace the host. The service will add the instance to the other AZ until a new host can be recovered in the original AZ. This capability is added free of charge and will attempt to maintain the Compute resources in the event of a partial AZ failure by adding non-billable hosts to the surviving AZ until the cluster has returned to its original host count.

You can now take advantage of updated content, which provides an overview of the VMware Tanzu services you can use with VMware Cloud today. These services include vSphere 7 with Tanzu (in Preview), Tanzu Kubernetes Grid, and Tanzu Mission Control. Customers who are part of the vSphere 7 with Tanzu preview on VMware Cloud, can enable a managed Kubernetes service through Launchpad. Customers with Application Modernization initiatives can take advantage of the VMware App Navigator content under Resources.

Discover and learn about the virtual desktops solution via VMware Cloud Launchpad. The overview, journey, and resource pages will get you the information you need to start your journey with VMware Horizon.

Start your vRealize Cloud Management journey from VMware Cloud launchpad. Leverage launchpad to discover and learn more about vRealize Cloud Management services.

Stretch cluster is now supporting a 2 host configuration across multi-AZ. A customer who wants a 2-host configuration can choose to deploy it across AZs. 

Confidently protect your most critical virtual machines running on VMware Cloud on AWS with VMware Cloud Disaster Recovery by configuring protection schedules with Recovery Point Objectives (RPOs) as low as 30 minutes so that the risk of data loss from unforeseen DR events is minimized.

This capability helps with migration of non-VMware workloads (KVM and Hyper-V) to VMware Cloud on AWS

Accelerate your Disaster Recovery implementation with step-by-step guidance, relevant tools and a rich set of resources using VMware Cloud Launchpad. Click on "Learn More" under "Disaster Recovery" to navigate to launch your DR journey. This experience is available to everyone without requiring login to VMware Cloud.

Protect larger environments by replicating up to 2500 virtual machines to a single AWS region in a VMware Cloud organization. You might need to split 2500 VMs across multiple VMware Cloud DR file systems for larger protected capacity scale. See VMware Configuration Maximum tool for operational scale limits of VMware Cloud DR.

Flexible Subscription is a new subscription type for VMware Cloud on AWS now available. It is available for redemption in the VMware Cloud Console as part of the subscription purchasing flow. The benefit of flexible subscription is that it allows for customers to exchange their VMware Cloud on AWS flexible subscription for any new VMware Cloud on AWS term subscription. When requesting an exchange, the leftover value of the VMware Cloud on AWS flexible subscription will be used towards purchasing a new VMware Cloud on AWS full term subscription. Flexible subscription is available for i3.metal and i3en.metal instance type in all regions. Customers can exchange an instance type, region, or duration of their Flexible Subscription. Flexible subscriptions allow customers to commit to VMware Cloud on AWS but maintain flexibility when their business needs change.

Provides capabilities such as networking limit-based alerts and intents, alert categories, alert types, setting max limits, current usage, criticality, description, fix recommendations, and "VMware Cloud on AWS Limit" alert types. 

These alerts will allow the VMware Cloud on AWS users in their VMware Cloud on AWS SDDC planning and troubleshooting efforts. 

Users will be able to create VMware Cloud on AWS networking intents in vRealize Network Insight for properly designing and managing their VMware Cloud on AWS network. 

Deploy the Cloud File System for replication and recovery using a self-service wizard in the VMware Cloud Disaster Recovery UI.

Cyber Essentials is a UK Government-backed, industry-supported scheme to help organizations protect themselves against common online threats. Certification of Cyber Essentials will demonstrate our commitment to preventing and protecting against the vast majority of common cyber attacks.

Try out VMware Cloud Disaster Recovery as a "pilot" before committing to a term subscription. Pilot deployments are charged at a fixed hourly rate and include 5 TiB of protected capacity and 25 protected virtual machines. Any usage beyond these limits will incur charges at the applicable per-TiB overage and per-VM on-demand rates. Once you are done with your evaluation, create a 1-year or 3-year committed term subscription to seamlessly convert this to a standard deployment and continue using the service.

VMware Transit Connect supports SDDC Group connectivity to Transit VPC. Customers can manually configure routes pointing to a VPC attachment in the same region.

Replication performance has been optimized such that replication throughput is up to 3X higher when using high bandwidth and low latency connectivity between the protected and recovery sites. This capability requires at least vSphere 7.0 Update 2 and vSphere Replication 8.4 at the recovery site.

Re-protect your virtual machines significantly faster after a planned recovery. The re-protection operation is especially quick when run shortly after the planned recovery such that the delta between the data on the source and recovery sites is not large. VMware Site Recovery now automatically starts tracking changes on the recovered virtual machine after failover. Only those changes are then replicated to the original protected site when re-protect is run and checksum comparisons can be completely avoided. This capability requires at least vSphere 7.0 Update 2 and vSphere Replication 8.4 in both sites.

System & Organization Control (SOC) Reports are independent third-party examination reports that demonstrate how VMware Cloud on AWS achieves key compliance controls and objectives to meet SOC 2, Type 2 requirements. The purpose of these reports is to demonstrate the design and testing of SOC 2 controls over a period of time.

VMware Transit Connect now provides network connectivity among SDDC Group members in multiple AWS regions. 

VMware Cloud on AWS dashboards allow you to track the capacity, cost, and inventory overviews of the VMware SDDCs. You can also track the monitoring of virtual machines and the utilization and performance of these SDDCs. This functionality is available in vRealize Operations as well..

Each host comes with self-encrypting NVMe disk-attached storage.

System & Organization Control (SOC) Reports are independent, third-party examination reports that demonstrate how VMware Cloud DR achieves key compliance controls and objectives to meet SOC 2, Type 1 requirements. The purpose of these reports is to help you and your auditors understand the controls established to support operations and compliance.

System & Organization Control (SOC) Reports are independent, third-party examination reports that demonstrate how VMware Cloud DR achieves key compliance controls and objectives to meet SOC 2, Type 2 requirements. The purpose of these reports is to demonstrate the design and testing of SOC 2 controls over a period of time.

NSX Advanced Firewall introduces NSX Distributed IDS/IPS for VMware Cloud on AWS SDDCs. NSX Distributed IDS/IPS aids in detecting attempts at exploiting vulnerabilities in applications. 

ISO 27017 provides guidance on the information security aspects of cloud computing, recommending the implementation of cloud-specific information security controls that supplement the guidance of the ISO 27002 and ISO 27001 standards.

Enabling Managed Service Providers to manage their customers.

The Migration Solution experience delivers a prescriptive, intuitive and integrated workflow that expedites large-scale, data center-wide migrations to VMware Cloud on AWS. Customers are led through the steps of assessing, building and migrating workloads to VMware Cloud on AWS, with relevant tools such as VMware vRealize Network Insight Cloud and VMware HCX and associated documentation such as on-boarding handbooks.

VMware SDDCs can be deployed and resized hourly for on-demand granularity. Longer-term reservation of hosts gives you up to 50% cost saving compared to on-demand hosts consumed over equivalent period. Host Reservations are available in 1 or 3 year terms. You pay upfront, but maximize your savings.

Enabling Managed Service Providers to download bills in an AWS consistent csv format for their managed SDDCs via API.

Layer 2 VPN - Improve throughput using new transport protocol.

ISO/IEC 27001:2013 specifies the requirements for establishing, implementing, maintaining and continually improving an information security management system within the context of the organization.

ISO 27018 is a code of practice that focuses on protection of personal data in the cloud. It is based on ISO information security standard 27002 and provides implementation guidance on ISO 27002 controls applicable to public cloud Personally Identifiable Information (PII). It also provides a set of additional controls and associated guidance intended to address public cloud PII protection requirements not addressed by the existing ISO 27002 control set.

VMware Tanzu Mission Control simplifies deployment and operation of Kubernetes, centralizing management and governance for many clusters and teams across multiple environments. With Tanzu Kubernetes Grid integrated with Tanzu Mission Control on VMware Cloud on AWS, customers can easily deploy and run Kubernetes on VMware Cloud on AWS with consistent operations and management across clusters and applications to support their infrastructure and app modernization.

End-to-End VM to VM MPLS path visibility for VMware Cloud on AWS Direct Connect using vRealize Network Insight

NSX Identify Firewall with Active Directory enables the protection for VDI/Horizon workloads.

Tool to estimate VMware Cloud on AWS environment size and total cost of ownership (TCO), based on user inputs.

Support for DNS Zones within VMware Cloud on AWS. Allows customer to map different on-premises, AWS and Public domains to different DNS servers.

Enabling Managed Service Providers to download utilization metrics for their managed VMware SDDCs.

Granular networking metrics, data, and telemetry for VMware Cloud on AWS.

Kickstart the VMware Cloud on AWS hybrid cloud experience with a time-bound, single-host configuration, at less than ½ the price of 2-host VMware Cloud on AWS offering. This new consumption option is designed for customers who want to prove the value of VMware Cloud on AWS in their environments before scaling to the production environment. Purchase hourly on-demand payable via US based credit cards or via VMware credit funds. Seamlessly scale-up at any time: At the completion of your 60 days time-bound offering, your single host SDDC will reset. However, you can easily scale-up to the minimum 2-host purchase and continue your cloud expansion without losing any of your data before the time period ends. Take advantage of capabilities that do not require multiple hosts within your VMware Cloud on AWS SDDC, such as cloud migration, evaluating disaster recovery as a service add-on, and hybrid linked mode.

As part of the developer center, users can now browse NSX-T APIs through API Explorer.

Flow Based Application Discovery with Machine Learning with improved scale for number of VMs and application scale supported

Attach external storage to a SDDC managed by the Managed Service Provider (MSP). The SDDC has three NFS datastores that are backed by the Managed Service Provider (MSP) cloud storage. This capability is currently offered through Faction as the Managed Service Provider (MSP).

Cloud Zone Insights helps maintain visibility of VMware Cloud on AWS consumption and capacity for the cloud zones that users have defined. Combining the power of vRealize Operations Cloud with vRealize Automation Cloud, Cloud Zone Insights bring users the information they need and the actions they need to take on the same platform to tighten up hybrid cloud operations.

The Cloud Management Assessment (CMA) is the next generation assessment offered by vRealize Operations Cloud.  CMA aligns with VMware Cloud on AWS and helps customers prepare for a move to VMware Cloud on AWS as well as guides them to how to best manage VMware Cloud on AWS, including assessing capacity needed, performance optimization and ROI.

Supporting SQL Clusters in Active Passive with shared disk configuration via SCSI 3 PR. This enables customers to cut down on the SQL Server licensing costs, by paying only for active SQL nodes.

With vRealize Operations Cloud and vRealize Operations, VMware Cloud on AWS customers can now measure, alert and report on the key configuration maximums for more predictable costing of their SDDC environments. vRealize Operations Cloud provides a rich set of configuration maximum metrics with limits (both hard limits and soft limits), calculates the provisioned resources and alerts if some of these key configuration limits are being breached. Keys areas of configuration maximums covered with this feature are: - Organization Maximums - SDDC Maximums - vCenter Maximums - vSAN Maximums.

VMware Cloud Partner Navigator support for vRealize Network Insight Cloud so MSPs can utilize a multi-tenant version for network visibility of VMware Cloud on AWS VMware vRealize Network Insight Cloud, now available through VMware Cloud Partner Navigator, takes a flexible and modular SaaS approach to delivering network visibility and analytics. This enables partners to help optimize and secure their tenant’s network infrastructure across hybrid and multi-cloud environments. The cloud-based solution provides a rapid path to monetizing new professional service offerings at scale—like security, network and application assessments—and new ongoing services, like quarterly security assessments or self-service assessments, reducing the time to market.

vCenter Cloud Gateway is a new on-premises virtual appliance that delivers a single logical view and hybrid management of both on-premises and VMware Cloud on AWS resources. It enables customers to manage VMware Cloud on AWS resources as extension of a on-premises data center. Customers can manage both on-premises and VMware Cloud on AWS resources from on-premises using vCenter Cloud Gateway. Simplifed set up for improved user experience with integrated configuration of vCenter Hybrid Linked Mode as part of the Cloud Gateway installation. With Cloud Gateway, customers do not need to configure Active Directory (AD/LDAP) in the cloud vCenter server instance or enter their on-premises vCenter admin credentials.

Simplifies hybrid resource management with a single inventory view between on-premises and VMware Cloud on AWS using vCenter Hybrid Linked Mode. Enhanced single logical view and hybrid management of resources by extending Hybrid Linked Mode to connect a VMware Cloud on AWS environment with multiple linked on-premises vCenter Server instances (external PSC topology).

Customers can use existing VMware purchasing vehicles -- Subscription Purchasing Program (SPP) and Hybrid Purchasing Program (HPP) credits to pay for VMware Cloud on AWS.

Stretch cluster is now supporting a 4-host configuration across multi-AZ. A customer who wants a 4-host configuration can choose to deploy it across AZs.

Expanding Hybrid Linked Mode support for on-premises vCenter Server versions: 6.0u3 or above.

Traditional Horizon Instant Clone maintains internal VMs, called parentVMs, for ease of operation. These parentVMs take up previous memory on each host, which adds to the cost of deployment. With smart provisioning, Horizon can now intelligently choose to provision instant clones with or without parentVMs, depending on the situation. Administrators also have the freedom to choose to provision all instant clones without parentVMs.

Improving application availability and performance by live migrating virtual machines between clusters in the same VMware Cloud on AWS SDDC.

AppVolumes makes it easy to deliver, update, manage and monitor applications and users across virtual desktop infrastructure (VDI) and published application environments.