CuraDevOps

tag: Aws-Security · 2 items

Plan GuardDuty RDS Protection adds ML-based data exfiltration and destruction detection
2026-10-09 · AWS What's New · source ↗ #guardduty#aws-security#rds-protection
  • Platform/SRE — Plan: New GA capability for Aurora PostgreSQL and RDS for PostgreSQL that detects post-credential-compromise data exfiltration and destruction with no agent or config changes required; platform teams running RDS/Aurora should evaluate enabling the add-on for their organization this quarter via the GuardDuty console or CloudFormation.
  • CI/CD — Skip
  • Leader — Learn: GuardDuty now extends RDS threat detection beyond login anomalies to query-pattern behavior using ML, relevant for understanding current AWS-native security coverage breadth — no strategic decision or policy change is immediately required.
Plan archived AWS Automated Security Response adds AI remediation toolkit and expanded coverage
2026-09-01 · AWS What's New · source ↗ #aws-security#remediation#automation
  • Platform/SRE — Plan: Teams using ASR on AWS should evaluate the AI Toolkit and expanded GuardDuty/Inspector/Macie coverage; the enhanced console replaces manual DynamoDB/SSM config, making this a worthwhile platform security upgrade to schedule this quarter.
  • CI/CD — Skip
  • Leader — Learn: The shift from manual SSM Automation expertise to AI-guided remediation generation signals a meaningful reduction in barrier-to-entry for automated security response — worth tracking as an indicator of where cloud-native security tooling is heading.