Customers can now refresh test environments with recent production data in separate AWS accounts while keeping control of encryption and audit trails.