AWS re:Invent 2021 - All the Cloud Security Updates so far

<p>Cloud Security News this week 2 December 2021</p> <ul> <li>AWS has launched some improvements to a few of their existing services and no new Security service has been announced yet. <a href="https://www.googlecloudpresscorner.com/2021-10-12-Google-Announces-Cybersecurity-Action-Team-to-Support-the-Security-Transformations-of-Public-and-Private-Sector-Organizations"><u>With Google Cloud announcing their CyberSecurity Action team earlier this year</u></a>, we were hoping for a similar response or better from AWS but nothing so far.</li> <li>Updates to <a href="https://aws.amazon.com/blogs/aws/aws-shield-advanced-update-automatic-application-layer-ddos-mitigation/">AWS Shield</a>, <a href="https://aws.amazon.com/blogs/aws/codeguru-reviewer-secrets-detector-identify-hardcoded-secrets/">Amazon Cloud Guru</a> and <a href="https://aws.amazon.com/blogs/aws/improved-automated-vulnerability-management-for-cloud-workloads-with-a-new-amazon-inspector/">Amazon Inspector.&nbsp;</a></li> <li>For those storing CloudTrail logs or other important logs to help with &nbsp;incident response in S3 buckets, you can now use EventBridge to build applications that react quickly and efficiently to changes in your S3 objects. This will deliver responses to potential Events/incidents of interest in a &nbsp;faster, more reliable, and in a more developer-friendly way than ever. More on this<a href="https://aws.amazon.com/blogs/aws/new-use-amazon-s3-event-notifications-with-amazon-eventbridge/"><u> here</u></a></li> <li>If you use AWS Control Tower and care about Data Residency, now you will be able to apply Preventive and detective controls that prevent provisioning resources in unwanted AWS Regions by restricting access to AWS APIs through service control policies (SCPs) built and managed by AWS Control Tower. This means that content cannot be created or transferred outside of your selected Regions at the infrastructure level. More on this <a href="https://aws.amazon.com/blogs/aws/new-for-aws-control-tower-region-deny-and-guardrails-