Today at AWS re:Invent, Amazon Web Services Inc. (AWS) announced support for customer-specific inputs in AWS Security Hub controls that allow you to customize your security posture monitoring in AWS. Security Hub is a cloud security posture management (CSPM) service with hundreds of managed and automated controls that allow you to monitor your cloud resources and ensure they are configured securely. The new enhancements allow security teams to refine the best practices monitored by Security Hub controls to meet more specific security expectations.

Starting today, FreeRTOS roadmap is published on freertos.org and GitHub. With this update, you can transparently access information on specific FreeRTOS features and have a consolidated view of upcoming, ongoing, and shipped FreeRTOS projects to plan your projects accordingly. In addition, you can track the status of your requested FreeRTOS features or the projects you have volunteered to work on.

Amazon Detective now integrates with Amazon Security Lake, enabling security analysts to query and retrieve logs stored in Security Lake. You can use this integration to get additional information from AWS CloudTrail logs and Amazon Virtual Private Cloud (Amazon VPC) Flow Logs stored in Security Lake while conducting security investigations in Detective.

Amazon EventBridge now supports partner integrations with Adobe  I/O events and Stripe , enabling you to route events from these platforms to over 20 AWS services making it easier to build event-driven architectures for handling payments, invoices, ordering, and much more. By leveraging these integrations you can increase developer agility by spending less time writing integration code and build features faster that combine best-in-class Software-as-a-Service (SaaS) capabilities with AWS services.  

Today, Amazon Web Services, Inc. (AWS) announced AWS Console-to-Code is in preview. It is a generative AI capability that makes it simple, fast, and cost-effective to move from prototyping in the AWS Management Console to deploying production code for your workloads. Customers can now generate code for their console actions in their preferred format. The code helps customers get started and bootstrap their automation pipelines for their workloads tasks.

Amazon Detective now supports security investigations for threats detected by Amazon GuardDuty Elastic Container Service (ECS) Runtime Monitoring. Amazon Detective now provides enhanced visualizations and additional context for detections on ECS. You can use the new runtime threat detections from GuardDuty and the investigative capabilities from Detective to improve your detection and response for potential threats to your container workloads.

AWS Identity and Access Manager (IAM) Access Analyzer now provides custom policy checks to validate that IAM policies adhere to your security standards ahead of deployments. Custom policy checks use the power of automated reasoning—security assurance backed by mathematic proof— to help security teams proactively detect nonconformant updates to policies. For example, IAM policy changes that are more permissive than their previous version. Security teams can use these checks to streamline their reviews, automatically approving policies that conform with their security standards, and inspecting more deeply when they don’t. This new kind of validation provides you higher security assurance in the cloud. 

Amazon FSx for NetApp ONTAP, a service that provides fully-managed shared storage built on NetApp’s popular ONTAP file system, now allows you to create, manage, and back up FlexGroup volumes using the AWS Management Console, FSx CLI, and AWS SDK, making it even easier to manage and protect your data at-scale.

Today, AWS announces Amazon GuardDuty ECS Runtime Monitoring, an expansion of Amazon GuardDuty that introduces runtime threat detection for Amazon Elastic Container Service (Amazon ECS) workloads—including serverless container workloads running on AWS Fargate. 

Amazon Inspector code scanning for AWS Lambda functions now includes assisted code remediation using generative artificial intelligence (AI) and automated reasoning. Amazon Inspector code remediation for Lambda function provides in-context code patches for multiples classes of vulnerabilities detected during security scans for AWS Lambda function. It extends the Amazon Inspector capabilities to assess custom proprietary Lambda code for security issues like injection flaws, data leaks, weak cryptography, or missing encryption based on AWS security best practices. Upon discovering vulnerabilities, Amazon Inspector provides actionable security findings, including affected code snippets and remediation suggestions. As part of supported findings, Amazon Inspector provides code patches associated with the vulnerabilities, simplifying the process of updating vulnerable code.