- Platform/SRE — Plan: GuardDuty Runtime Monitoring now supports 50+ tunable detection rules for EC2, EKS, and ECS workloads, covering MITRE ATT&CK tactics like persistence and privilege escalation. Evaluate and enable relevant rules this quarter, using dry-run mode first to reduce false positives before going live.
- CI/CD — Skip
- Leader — Learn: AWS expanding GuardDuty’s runtime threat detection with granular, MITRE-mapped rules signals a maturing managed-security posture for AWS-native environments; useful context when assessing build-vs-buy decisions around runtime security tooling.