• Prevent Users from Deleting and Changing AWS Backup Policies and Vaults
• Prevent Modifications to Specific CloudFormation Stacks
• Prevent Users from Disabling EBS Default Encryption
• Prevent Modifications to Specific Lambda Functions
• Restrict AWS Marketplace Product Subscription Changes to a Privileged Role
• Restrict Region Enable/Disable Actions to a Privileged Role
• Deny ACL Disablement for All New S3 Buckets
• Prevent Modifications to Specific SNS Topics
• Prevent Users from Creating Default VPC and Subnet

• The assessment engine has been updated with the following rules (All rules can be customized to match your environment): 
  • GuardDuty RDS Protection is Enabled
  • GuardDuty Malware Protection Protection is Enabled
  • GuardDuty RDS Protection Auto-Enable is Configured
  • GuardDuty EC2 Malware Protection Auto-Enable is Configured
  • Security Hub Cross-Region Aggregation is Configured
• Updates to the Encryption At-Rest and Unused Resources Reports

• The assessment engine has been updated with the following rules (All rules can be customized to match your environment): 
  • Check that security contact information has been configured for the AWS account
  • API Gateway (v2) access logging is enabled
  • CodeBuild S3 logs bucket has encryption enabled
  • EC2 Launch Templates do not assign public IP addresses
  • SageMaker instances are deployed in custom VPCs
  • No Unused Internet Gateways
  • No Empty WAFv2 Web ACLs
• Updates to the Encryption At-Rest and Unused Resources Reports

CloudAdvisor is an AI-powered assistant trained in AWS documentation. We have expanded the supported AWS services list to 51 AWS services, and we will continue to add more services in the coming weeks. We have also enabled direct integration with your assessment results view to enable you to ask questions directly about recommendations and remediation steps!

CloudAdvisor is an AI-powered assistant trained on AWS documentation. The initial release includes support for a limited number of AWS services and we will be extending support to more AWS services and features over the coming weeks.