CuraDevOps

tag: Network-Security · 2 items

Plan AWS Network Firewall adds Route 53 IP validation for non-HTTP protocols
2026-10-22 · AWS What's New · source ↗ #aws#network-security#firewall
  • Platform/SRE — Plan: This GA capability closes a real security gap by validating destination IPs against Route 53-resolved addresses, extending domain-based filtering to SFTP, SSH, and other protocols beyond HTTP/HTTPS. Evaluate adding Route 53 Resolved IP Validation to existing Network Firewall policies to harden egress controls and prevent SNI spoofing.
  • CI/CD — Skip
  • Leader — Skip
Plan AWS IAM Identity Center adds network access controls for Identity Store API
2026-10-06 · AWS What's New · source ↗ #aws#iam#network-security
  • Platform/SRE — Plan: New GA capability to restrict Identity Store and SCIM API access by VPC endpoint or IP allowlist; evaluate enforcing VPC-endpoint-only access for the Identity Store API as part of your AWS SSO hardening roadmap this quarter.
  • CI/CD — Skip
  • Leader — Learn: AWS now allows network-level perimeter controls around the APIs that manage SSO users and groups; worth noting as an available hardening option when setting identity-security standards across accounts.