Organization-Level Assessments

We have added organization-level assessments to our security assessments engine. This release enables you to:

1. Onboard multiple AWS Accounts under an Organizations quickly by deploying permissions in one go with CloudFormation StackSets
2. View a comprehensive view of all security findings and recommendations for all managed AWS accounts under an Organization
3. View Organization specific recommendations (such as SCP suggestions) 

Updated Compliance View

We also updated our compliance standards view to make it easier for auditors and security teams to map AWS findings to the control.

• New configuration templates for KMS Multi-Region Keys and KMS Replica Keys
• New Open Source Solutions:
  • Trends Dashboard with AWS Cost and Usage Reports, Amazon Athena and Amazon QuickSight
  • How-to Enable Single Sign-On Between OneLogin and AWS
  • How-to Integrate Active Directory Federation Service (ADFS) with AWS Single Sign-On (SSO)
  • Hands-on Walkthrough of the AWS Network Firewall Flexible Rules Engine
  • How-to Monitor Expirations of Imported Certificates in AWS Certificate Manager (ACM)
  • How-to Use EC2 Instance Connect to Provide Secure SSH Access to EC2 Instances with Private IP Addresses
  • How-to Import AWS IoT Device Defender Audit Findings into Security Hub
  • How-to Implement a Hybrid PKI Solution on AWS
  • How-to Create a Notification Workflow from Sensitive Data Discover with Amazon Macie, Amazon EventBridge, AWS Lambda,
  and Slack
  • Encrypt Global Data Client-Side with AWS KMS Multi-Region Keys