Showing posts with label Amazon API Gateway. Show all posts
Showing posts with label Amazon API Gateway. Show all posts

Tuesday, 27 November 2018

New sam build command introduced by AWS SAM

The AWS Serverless Application Model (SAM) is an open-source layout for creating serverless applications. AWS SAM offers shorthand syntax to show functions, APIs, databases, and event source linkings. You can describe the application you require and model it with the YAML by only few lines per resource. While execution, AWS SAM converts and widens the SAM syntax into AWS CloudFormation syntax, allowing you to create serverless applications quicker.

The AWS SAM CLI is a command line tool which runs on an AWS Serverless Application Model template and application code. You can call Lambda functions locally, build an execution package for your serverless application, execute your serverless application to the AWS Cloud with the AWS Serverless Application Model Command Line Interface. With the utilization of AWS SAM CLI commands, you can build, test, and deploy your serverless applications to the AWS Cloud.

Now sam build command can utilize to compile deployment packages for AWS Lambda functions inscribed in Python Language with the help of AWS Serverless Application Model (AWS SAM) Command Line Interface (CLI). This new sam build command allows you to seamlessly build deployment artifacts which object AWS Lambda's performance domain. This sam build command allows the functions you create locally to execute in a homogeneous in the cloud. This command iterates via the functions in your application, looks for a manifest file like requirements.txt which includes dependencies, and automatically creates deployment artifacts that you can deploy to Lambda with the sam package and sam deploy commands.

Monday, 26 November 2018

Faster performance by AWS CodePipeline assists further Pipeline actions each phase

AWS CodePipeline is quite organized continuous delivery service which offers you to automate your release pipelines for swift and reliable application and infrastructure updates. There is a code modification related to the release model you describe when CodePipeline automates the build, test, and deploy stages of your release process each time. AWS CodePipeline allows you to quickly and reliably provide features and updates. AWS CodePipeline is compatible with third-party services like GitHub or with your personal custom plugin. It permits you to model the disparate phases of your software release process using the console interface, the AWS CLI, AWS CloudFormation, or the AWS SDKs. AWS CodePipeline automates your software release process, permitting you to quickly release new features to your users. And with this, you can swiftly iterate on feedback and get new features to your users quick.

Your pipelines will operate brisker so you will get build and check solutions earlier and you can iterate faster on more features due to the decreased time in between pipeline tasks of AWS CodePipeline. These tasks are like creating code or deploying to a region. Formerly, the basic limit was of 20 total tasks each phase containing limits of 10 for both sequential and equivalent tasks. Now, this AWS CodePipeline lifted the standard limit on actions each phase to 50 for all action types. The newly added limits allows you to create more tangled pipelines without troubling about limits on the number of tasks each phase. There is no additional charges or long-term commitments with AWS CodePipeline, you just need to pay other resources what you use. Each current and new pipelines in all region is accessible where AWS CodePipeline is available.

Amazon ElastiCache for Redis offers auto-failover and backup/restore assistance for T2 nodes

Amazon ElastiCache for Redis is a rapid Redis-compatible in-memory data structure service which can be utilized as a data store or cache that gives sub-millisecond latency to command real-time internet-scale applications. This is constructed on Open Source Redis and compatible with the Redis APIs, ElastiCache for Redis operates with your Redis clients and uses the open Redis data format to save your data. Your self-organized Redis applications can work smoothly with ElastiCache for Redis without any code modification. It delivers the ease-of-use and power of Redis along with the availability, reliability, scalability, security, and performance suitable for the most demanding applications. Amazon ElasticCache offers potential of Redis with security, performance, scalability, reliablity, and availability best fitted for the very challenging real-time applications like Gaming, Ad-Tech, E-Commerce, Healthcare, Financial Services, and IoT.

Amazon ElastiCache for Redis aids Redis cluster mode and offers high availability through support for automatic failover by finding the first node failure and upgrading the copy to be the first with least influence. It enables for read availability for your application by assisting read copies over availability zones, to allow the reads to be performed when the first is occupied with the high workload. Amazon ElastiCache for Redis now offers auto-failover and backup/restore for T2 node types. This introduction allows you to create development and test domains related to T2 nodes that have equivalent setups as production general-purpose M and compute-optimized R node domains. You can generate snapshots of your ElastiCache for Redis clusters executing on T2 nodes that can be utilized for restore operations. This feature is accessible in every regions and for each current and new ElastiCache for Redis T2 Clusters. To create a new cluster or alter your current cluster, refer AWS Management Console.

Friday, 23 November 2018

For Swift Streaming, AWS Lambda helps Kinesis Data Streams improved Fan-Out and HTTP/2

AWS Lambda your code without you to provision or manage servers. You just require the code and upload it to Lambda. You can execute code for virtually any type of application or backend service - all with zero administration, with the Amazon Lambda. Your code can automatically activate from other AWS services or run it directly from any web or mobile app. Amazon Kinesis Data Streams (KDS) is a extremely scalable and durable real-time data streaming service. KDS can repeatedly record gigabytes of data per second from hundreds of thousands of sources like website click streams, database event streams, financial transactions, social media feeds, IT logs, and location-tracking events. The data gathered is obtainable in milliseconds to allow real-time analytics use cases like real-time dashboards, real-time anomaly detection, dynamic pricing, and more.

Now, AmazonKinesis Data Streams (KDS) improved fan-out and HTTP/2 data recovery features for Kinesis event sources are supported by the AWS Lambda. The HTTP/2 data recovery API boosts the data sending speed between data producers and Lambda functions with more than 65%. Improved fan-out enables you to process the same KDS stream with several Lambda functions in simultaneous without performance disgrace. Kinesis Data Streams (KDS) improved fan-out and HTTP/2 data recovery features is available in every regions where AWS Lambda is available.

AWS Storage Gateway Virtual Tape Library widens assistance for Common Backup Applications

AWS Storage Gateway is a hybrid storage service which allows your on-premises applications to smoothly utilize AWS cloud storage. You can utilize the service for backup and archiving, trobleshootinbg, cloud data processing, storage tiering, and relocation. Your applications join to the service via a virtual machine or hardware gateway appliance with the basic storage protocols, like NFS, SMB and iSCSI. The gateway joins to AWS storage services, like Amazon S3, Amazon Glacier, and Amazon EBS, giving storage for files, volumes, and virtual tapes in AWS. AWSStorage Gateway service contains a highly-optimized data transfer mechanism, with bandwidth management, automated network resilience, and efficient data transfer, along with a local cache for low-latency on-premises access to your most active data.

Tape Gateway is suitable with latest versions of familiar backup applications, containing Veritas NetBackup 8, Veritas Backup Exec 20, Microsoft System Center Data Protection Manager (DPM) 2016, and Quest NetVault Backup 11 and 12. The Tape Gateway virtual tape library (VTL) aids you relocate your tape-based backup and archiving workflows to the AWS cloud easily, while protecting your current backup applications in place. You can effortlessly relocate your virtual tapes to an archive on Amazon Glacier for long-term control on durable, low-cost storage, with probable recovery in three-to-five hours. Tape Gateway is accessible in entire AWS regions where Storage Gateway is available, excluding South America (São Paulo).

Amazon Route 53 Resolver launched by Amazon Route 53

Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. Amazon Route 53 is created to offer developers and businesses an acutely valid and cost effective way to send end users to Internet applications by converting names like www.example.com into the numeric IP addresses like 192.0.2.1 which systems utilize to join to each other. Amazon Route 53 is entirely adaptable with IPv6 as well. Amazon Route 53 to match domain names to your Amazon EC2 instances, Amazon S3 buckets, Amazon CloudFront distributions, and other AWS resources. It also provides Domain Name Registration – you can buy and handle domain names like example.com and Amazon Route 53 will automatically configure DNS settings for your domains. To enable resolution of DNS namespaces between your on-premises data center and Amazon Virtual Private Cloud (VPC), design DNS endpoints and conditional forwarding rules.

Route 53 Resolver contains the Amazon DNS Server (AmazonProvidedDNS) that is obtainable automatically in every Amazon VPCs and replies to DNS queries from AWS resources for public records, Amazon VPC-specific DNS names, and Amazon Route 53 private hosted zones. Route 53 Resolver makes hybrid cloud simple for enterprise customers by allowing effortless DNS query resolve over your whole hybrid cloud. Users with workloads leveraging both Amazon VPCs and on-premises resources too require to solve private DNS logs hosted on-premises. Amazon Route 53 Resolver rules grant users to conditionally forward DNS requests from your VPC to an on-premises DNS resolver. For further information, go through the documentation

Thursday, 22 November 2018

AWS Organizations are now under assistance of AWS CloudTrail

AWS CloudTrail is a service which allows governance, compliance, operational auditing, and risk auditing of your AWS account. You can record, constantly check, and maintain account actions associated to actions over your AWS infrastructure with the AWS CloudTrail. AWS CloudTrail gives event record of your AWS account actions, covering actions performed via the AWS Management Console, AWS SDKs, command line tools, and other AWS services and also, this event record clarifies security analysis, resource change tracking, and troubleshooting.

AWS CloudTrail records AWS Management Console actions & API calls that implies enlarge visibility in your user and resource actions and this helps to find which users and accounts invoked AWS. Within one account, you can build, handle and execute AWS CloudTrail track over an Organization. With the combination of AWS CloudTrail and AWS Organizations, this organization track allows you to describe a consistent event recording plan for your organization which is implemented by default to every member account in organization.

By default, AWS CloudTrail clones the track definition to every member account on building and reproduces the modifications to the member account when the track in master account is updated. With the help of organization’s master account, you can frame a track and dot it for execution over the member accounts organization tracks and record them in same Amazon S3 bucket like described by the organization track in the master account.

This service is accessible in the Asia Pacific (Mumbai), Asia Pacific (Osaka-Local), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), EU (Frankfort), EU (Ireland), EU (London), EU (Paris), South America (Sao Paulo), US East (N. Virginia), US East (Ohio), US West (N. California), and US West (Oregon) AWS Regions.

AWS SAM gives assistance to Amazon API Gateway Authorizers

The AWS Serverless Application Model (AWS SAM) is an open-source architecture that you can utilize to create serverless applications on AWS. This framework includes AWS SAM template specification and AWS SAM command line interface (AWS SAM CLI). AWS SAM Template file is used to run on a single, executable, edited unit i.e your serverless application. The CLI gives commands which allow you to validate that AWS SAM template files are written related to the requirements, call Lambda functions locally, step-through debug Lambda functions, package and deploy serverless applications to the AWS Cloud, and more.

A lone property setting can be used to describe Amazon API Gateway Authorizers in the AWS Serverless Application Model SAM that also manage who can access your Amazon API Gateway APIs. AWS SAM widens AWS CloudFormation to offer a rationalized technique of describing the Amazon API Gateway APIs, AWS Lambda functions, and Amazon DynamoDB tables required by your serverless applications.

You can grant permission for your APIs by describing an Amazon Cognito User Pool or an API Gateway Lambda Authorizer as a property of your API inside your SAM template. AWS SAM is obtainable in all regions where AWS Lambda is available. To get more information on how to create serverless applications with AWS SAM, refer documentation and model on GitHub.

Every Hour Replication Intervals provided by AWS SMS

AWS Server Migration Service (SMS) is an agentless service that performs a simple and rapid process for you to relocate thousands of on-premises workloads to AWS from VMware vSphere and Microsoft Hyper-V domains. You can automate, plan, and trace growing replications of existing server volumes with the help of AWS Server Migration Service SMS that makes simple for you to blend with sizeable scale server relocations. AWS SMS will by default clone the existing server volumes to AWS and build Amazon Machine Images (AMI) as required. This AWS SMS service charges zero cost, you need to pay for only the AWS storage resources used during relocation. You can start and handle server relocation within clicks through the AWS Management Console.

This AWS SMS gives assistance for every hour replication intervals that allows users to further reduce the downtime while relocating on-premises servers to Amazon EC2. Earlier, users could only take within 12 and 24 hours as the interval for their incremental replications of existing servers. Hereafter, users will able to execute their incremental replication jobs hourly. This feature is available in all AWS Regions where AWS SMS is now obtainable.

Wednesday, 21 November 2018

With the help of Tags, control your IAM Users and Roles

AWS Identity and Access Management (IAM) is a web service which aids you safely manage access of AWS resources. AWS Identity and Access Management (IAM) can be utilized to handle who is verified (signed in) and approved (has permissions) to utilize AWS resources. You can create and organize AWS users and groups, and use authorization to accept and reject their access to AWS resources. IAM is a feature do not charge extra for your AWS account. You will pay only for use of any AWS services by your users.

Now, AWS Identity and Access Management (IAM) provides you an simplest way to control your IAM resources by allowing you to affix tags to your IAM users and roles known as IAM principals. These tags permit you to attach customizable key-value pairs to resources, offering preferable resource management for AWS services which assist tagging of AWS resources. As you can affix the project labels to roles, users get authorization to suppose those roles automatically. To get more information about tags addition to IAM users and roles, refer Tagging IAM Identities.

AWS Elastic Beanstalk assists for Node.js 10

AWS Elastic Beanstalk is a service that provides rapid and easiest technique to deploy your application on AWS. You don't have to waste the time or develop the proficiency as AWS Elastic Beanstalk delivers and runs the infrastructure and controls the application stack (platform) for you. Elastic Beanstalk automatically ranges your application up and down founded on your application's particular requirements with the simple variable Auto Scaling settings. AWS Elastic Beanstalk automatically manages the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring, you just need to upload your code. AWS Elastic Beanstalk charges only for the AWS resources required to save and execute your applications, no extra charges required.

AWS Elastic Beanstalk services can be developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers like Apache, Nginx, Passenger, and IIS. Elastic Beanstalk applications using Node.js 10 can be developed now. The latest version of Node.js 10 offers improved stability and various enhancements like entire support for N-API (an API for building native Addons), time-travel debugging functionality through a new Visual Studio Code Extension and support for Inspector protocol. To get list of features offered with Node.js 10, visit the official Node.js 10 release announcement.

Proposing extra layer of immunity for your accounts and buckets via Amazon S3 Block Public Access

Amazon Simple Storage Service S3 is object storage created to save and fetch ample of data from anywhere – web sites and mobile apps, corporate applications, and data from IoT sensors or devices. Amazon S3 gives an extremely long-lasting, scalable, and safe place for backing up and archiving your condemnatory data. Amazon S3 is the cloud storage service, with integration from the immense community of third-party solutions, systems integrator partners, and other AWS services. Besides, S3 offers the most versatile group of storage management and administration potentials.

Amazon S3 offers Block Public Access settings for buckets and accounts to aid you handle public access to Amazon S3 resources. New buckets and objects don't permit public access, but users can alter bucket policies or object authorization to grant public access. Amazon S3 Block Public Access gives settings which overrule these policies and authorization so that you can edge public access to these resources. Account administrators and bucket owners can simply planned centralized commands to edge public access to their Amazon S3 resources which are obligatory nevertheless of how the resources are created by Amazon S3 Block Public Access.

Protecting your S3 data has never been uncomplicated with the presentation of Amazon S3 Block Public Access. You can add S3 Block Public Access to each bucket in your account within clicks using S3 management console, both current and forthcoming buckets created in the future. New S3 bucket settings do not give public access by default but you can alter settings to allow public access using policies or object-level authorization. Amazon S3 Block Public Access can be utilized in any commercial AWS Regions and AWS GovCloud (US). To read more information on Amazon S3 Block Public Access, click the Amazon S3 Developer Guide

Tuesday, 20 November 2018

AWS Elemental MediaLive annexes Input Switching for Live Channels

AWS Elemental MediaLive is a broadcast-grade live video processing service. It allows you to make high-quality video streams for delivery to transmit televisions and internet-connected multi-screen devices, such as connected TVs, tablets, smart phones, and set-top boxes. This AWS Elemental MediaLive service operates through encoding your live video streams in real-time, taking a vast in sized live video source and compacting it into mini versions for dispensation to your audiences. You can simply organize streams for both live events and 24x7 channels with improved relaying attributes, high availability, and pay-as-you-go estimate with the AWS Elemental MediaLive.AWS Elemental MediaLive allows you concentrates on designing captivating live video experiences for your audiences with an ease of constructing and operating broadcast-grade video processing infrastructure.

Now you can move a live channel over preconfigured inputs. This means assigned inputs for a running channel can be changed according to a defined schedule. Schedules can be created through the AWS Management Console or API. To read more about Input Switching Documentation. The service can work as separately or a part of AWS Elemental Media Services. AWS Elemental MediaLive is obtainable in the Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), US East (N. Virginia), US West (Oregon), EU (Ireland), EU (Frankfurt), and South America (São Paulo) regions.

Multi-Account and Multi-Region Inventory View supported by AWS Systems Manager

AWS Systems Manager is a cluster of potentials for configuring and handling your Amazon EC2 instances, on-premises servers and virtual machines, and other AWS resources at scale. Systems Manager contains a united interface which grants you to simply centralize operational data and automate functions over your AWS resources. Systems Manager reduces the time to scan and solve operational issues in your infrastructure. Systems Manager provides you a full vision of your infrastructure behavior and configuration, clarifies resource and application management, and makes it simple to execute and handle your infrastructure at scale. You can set resources, like Amazon EC2 instances, Amazon S3 buckets, or Amazon RDS instances, via application, view operational data for monitoring and troubleshooting, and perform an action on your sets of resources.

AWS Systems Manager Inventory unified with Amazon Athena to aid you query inventory data from several AWS Regions and accounts. Athena integration uses Resource Data Sync so that you can view inventory data from all of your managed instances on the Inventory Detail View page in the AWS Systems Manager console. AWS Regions can access System Manager feature where Amazon Athena is available.

Amazon ElastiCache now supports Memcached 1.5

Amazon ElastiCache is a web service which creates it simple to set up, handle, and scale a distributed in-memory data store or cache domain in the cloud. It gives a high-performance, scalable, and cost-effective caching answer, while separating the difficulty related with deploying and organizing a distributed cache domain. Amazon ElastiCache for Memcached is a Memcached-compatible in-memory key-value store service which can be used as a cache or a data store. It gives the performance, ease-of-use, and simplicity of Memcached. ElastiCache for Memcached is quite organized, scalable, and safe - making it an ideal candidate for use cases where regularly accessed data should be in-memory. Memcached is a famous option for use cases like Web, Mobile Apps, Gaming, Ad-Tech, and E-Commerce.

Open Source Memcached 1.5 is now supported by the Amazon ElastiCache which provides important enhancements covering better connection management, better item size management above 1MB and memory above upgrade by decreasing per-item memory needs. Besides, this Memcached 1.5 gives new Memcached attributes like slab re-balancing, rapid hash table look-ups, segmented LRU algorithm, LRU crawler for background memory reclamation, and ASCII protocol aids get and touch commands. Memcached 1.5 support is obtainable in all AWS regions. You can find it on AWS Management Console.

Monday, 19 November 2018

Three new Threat Detection added in Amazon GuardDuty

Amazon GuardDuty is a threat detection service which persistently detects for harmful or forbidden actions to assist you secure your AWS accounts and workloads. It scans for activity like abnormal API calls or potentially prohibited deployments which exhibit a feasible account deal. Amazon GuardDuty too monitors potentially compromised instances or scan by attackers.

New three threat detection added in Amazon GuardDuty, two of them aids to detect suspicious Tor Network-related activity, and the third one aids identify cryptocurrency mining-related actions. The new finding types are: UnauthorizedAccess : EC2/TorClient and UnauthorizedAccess : EC2/TorRelay. The new cryptocurrency searching enlarges the service’s ability to scan Amazon EC2 instances asking IP addresses linked with cryptocurrency-related actions. The new finding type is : CryptoCurrency : EC2/BitcoinTool.B. To know further, visit Amazon GuardDuty Findings.

Copying EBS volume tags to EBS snapshots feasible via Amazon DLM

In AWS Cloud, Amazon Elastic Block Store (Amazon EBS) gives dogged block storage volumes to utilize with Amazon EC2 instances. Every Amazon EBS volume is automatically clone inside its Availability Zone to secure you from component defeat, giving high availability and durability. Amazon EBS volumes provides the uniform and low-latency potential required to execute your workloads. You can range your utilization up or down just in minutes by using Amazon EBS. It require low cost for only what you deliver.

You can organize the lifecycle of your AWS resources with Amazon Data Lifecycle Manager (Amazon DLM). You create lifecycle policies, that can be used to automate operations on the specified resources. Amazon DLM supports Amazon EBS volumes and snapshots.

You can add metadata and use access policies to your Amazon EBS resources with Resource tags. Now, you can enable resource tags put on your EBS volumes to be automatically copied to any EBS snapshots which are generated with the use of Amazon Data Lifecycle Manager (DLM). This permits you to effortlessly put snapshot metadata, like access policies, to match the parent volume.

Amazon ECS and Amazon Fargate enables resources tagging

AWS Fargate is a compute engine for Amazon ECS a highly scalable, high-performance Container Service which enables you to execute Containers that gives a standard route to package your application's code, configurations, and dependencies within a single object without having to handle servers or clusters. You do not have to provision, configure, and scale clusters of virtual machines to run containers by using AWS Fargate. AWS Fargate discards the require to pick server types, determine when to scale your clusters, or optimize cluster packing. Additionally, it also detaches the want for you to communicate with or suppose about servers or clusters. AWS Fargate allows you to emphasis on creating and executing your applications rather of handling the infrastructure which executes them.

Now you can label your Amazon ECS and AWS Fargate resources like tasks, services, task definitions, clusters, and container instances. Resource tagging allows you to assign cost, boost visibility into your workloads, effortlessly seek and spot your containerized applications, execute programmatic infrastructure management activities, and explain fine-grained resource-level authorizations. It is easy to handle the whole infrastructure and the underlying cost in a systematic manner with the help of resource tagging. With the ECS APIs and Console, you can label your ECS resources at inception or at execution. You will require to opt-in to new Amazon Resource Names (ARN) and resource identifiers (ID) formats to get benefit of tagging for tasks, container instances and services.

Saturday, 17 November 2018

Amazon Aurora Serverless Accessible in more Regions

Amazon Aurora Serverless is an on-demand, auto-scaling configuration for Amazon Aurora is a MySQL and PostgreSQL-compatible relational database created for the cloud, which merges the performance and availability of conventional enterprise databases with the simplicity and cost-effectiveness of open source databases where the database will automatically start up, shut down, and scale capacity up or down based on your application's requirements. It allows you to execute your database in the cloud without handling any database instances. It's a easy, cost-effective option for rare, irregular, or unsure workloads.

Amazon Aurora Serverless is now accessible in further 9 AWS Regions. With the additions of Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), US West (N.California), Canada (Central), EU (Frankfurt), EU (London), and EU (Paris), now you can pick the Serverless configuration of Amazon Aurora in 14 geographic Regions.

Amazon Cognito allows Centralized Logging for User Authentication

AWS says “Spend your time creating great apps. Let Amazon Cognito handle authentication.”

Amazon Cognito User Pools gives a secure user directory which ranges up-to hundreds of millions of users. Users can sign in through social identity suppliers like Google, Facebook, and Amazon, and by enterprise identity suppliers like Microsoft Active Directory through SAML. Amazon Cognito User Pools is a default Identity supplier which also assists IAM standards, like Oauth 2.0, SAML 2.0, and OpenID Connect. Amazon Cognito provides multi-factor authentication and encryption of data-at-rest and in-transit. Amazon Cognito is HIPAA eligible and PCI DSS, SOC, ISO/EIC27001, ISO/EIC/27017, ISO/EIC/27018, and ISO 9001 compliant. Amazon Cognito offers provision to handle access to back-end resources from your app. You can describe roles and map users to divergent roles so your app can access only the resources which are authorized for each user.

AWS Centralized Logging, is an answer which provisions the services mandatory to gather, analyze, and display logs on AWS over several accounts and AWS Regions. Now the answer leverages the scalability and security features of Amazon Cognito User Pools for Kibana dashboard user authentication, aids Amazon Elasticsearch Service (Amazon ES) version 6.3, containing the choice to encrypt Amazon ES data at rest. To retain more information on Centralized Logging, visit solution webpage.

The Benefits of VyOS Enterprise Subscription: Why Businesses Should Go Pro

In today’s rapidly evolving IT landscape, network reliability, security, and scalability are the cornerstones of enterprise success. Open-so...