• New configuration templates for RDS Event Subscriptions which allow users to configure notifications for RDS Events (provided through an SNS topic)

• New configuration templates for ECR Repository

• New configuration templates for EC2 Instances
• New Open Source Tools:
  • cf-signer: Tool for signing and verifying the integrity of CloudFormation templates
  • domain-protect scans Amazon Route53 across an AWS Organization for domain records vulnerable to takeover
  • Patrolaroid snapshots AWS instances and buckets to uncover malware, backdoors, cryptominers, toolkits, and other attacker tomfoolery that you probably don’t want in your prod.

Organization-Level Assessments

We have added organization-level assessments to our security assessments engine. This release enables you to:

1. Onboard multiple AWS Accounts under an Organizations quickly by deploying permissions in one go with CloudFormation StackSets
2. View a comprehensive view of all security findings and recommendations for all managed AWS accounts under an Organization
3. View Organization specific recommendations (such as SCP suggestions) 

Updated Compliance View

We also updated our compliance standards view to make it easier for auditors and security teams to map AWS findings to the control.