AWS Network Firewall adds Route 53 IP validation for non-HTTP protocols

Thu, 22 Oct 2026 15:46:09 +0000

Platform/SRE — Plan: This GA capability closes a real security gap by validating destination IPs against Route 53-resolved addresses, extending domain-based filtering to SFTP, SSH, and other protocols beyond HTTP/HTTPS. Evaluate adding Route 53 Resolved IP Validation to existing Network Firewall policies to harden egress controls and prevent SNI spoofing.
CI/CD — Skip
Leader — Skip

AWS IAM Identity Center adds network access controls for Identity Store API

Tue, 06 Oct 2026 17:01:10 +0000

Platform/SRE — Plan: New GA capability to restrict Identity Store and SCIM API access by VPC endpoint or IP allowlist; evaluate enforcing VPC-endpoint-only access for the Identity Store API as part of your AWS SSO hardening roadmap this quarter.
CI/CD — Skip
Leader — Learn: AWS now allows network-level perimeter controls around the APIs that manage SSO users and groups; worth noting as an available hardening option when setting identity-security standards across accounts.