I must say that AWS has brought out some really interesting features and announcements in April. Let's take a look at some of the announcements that made my top pick.

1. AWS Config
AWS Config has added support for 35 new resource types within its advanced queries. This brings in the versatility of being able to search the current configuration state of AWS resources either in a single account, region, or even AWS Config aggregator.

Here are some of the newly supported resource types, But take a look at the AWS release notes for the complete list.

AWS::Cognito::UserPoolClient
AWS::Cognito::UserPoolGroup
AWS::Connect::Instance
AWS::Connect::QuickConnect
AWS::EC2::CarrierGateway
AWS::EC2::IPAMPool
AWS::EC2::NetworkInsightsAccessScope
AWS::EC2::NetworkInsightsPath
AWS::EC2::TransitGatewayConnect
AWS::EC2::TransitGatewayMulticastDomain
AWS::ECS::CapacityProvider

2. Amazon Inspector
AWS now lets customers run vulnerability assessments on EC2 instances that do not have the Amazon Inspector agent installed. With the introduction of the agentless vulnerability assessments for Amazon EC2, Amazon Inspector takes a snapshot of the EBS volumes to collect the software inventory where Amazon Inspector will start looking for any known software vulnerabilities.

If you already have the SSM agent installed on your EC2 instances, then Amazon Inspector uses the agent for scanning.

3. AWS Firewall Manager
AWS Firewall Manager enabled customers to manage various policies such as WAF, Shield, and security groups. With this latest update, AWS Firewall Manager now allows customers to manage VPC NACLs with common NACL policies.

This brings an exciting opportunity for customers to implement baselines for protecting their resources such as pre-defined block rules that block certain traffic across multiple accounts. It also enables customers to centrally manage and apply these policies across multiple accounts.

Now customers can also enforce NACLs by configuring automatic remediation to revert unintended or unwanted changes and maintain compliance with the security posture baselines set by the organization.

Wrapping Up

It's truly intriguing to see the innovations and updates set in motion by the team at AWS.

Within this article, I've highlighted some of the major service announcements and feature introductions that were noteworthy. There may have been some announcements that I didn't cover in this month's announcement, therefore feel free to mention what you think was important in the comment section.

Stay Tuned for the next edition of "What's New With AWS Security"!

Thank you for reading. I hope you found this useful.

What's New With AWS Security? | April Edition

Introduction

What's New With AWS Security Now?

Noteworthy Updates To Services

Wrapping Up