🥖 Palate Cleanser

Hello again loyal diners. Thank you, Cynthia Cheung, for putting together last week's issues while I was celebrating my n+1 wedding anniversary. I can confirm I am not divorced and ASD will continue as planned!

The pre:invent announcements have been coming thick and fast and they aren't all AI related. John Misczak wrote a deeper summary but here's what you need to know:

• Root account management in Organizations - Instead of dealing with root creds in every account, AssumeRoot.
• VPC Block Public Access - If you like how this works in S3, you might like it in VPCs too. There's some finer-grained control that makes the VPC version more flexible but also more complicated.
• Cognito overhaul - Lots of quality of life improvements but my favourite part is support for passwordless login, including passkey authentication.
• Improved SSM experience - The sneaky best change is the ability to identify all unmanaged nodes.
• Resource Control Policies (mentioned last week) - Check out Jason Kao's guide on how to apply them to KMS.

Have feedback about AWS Security Digest? Tell us here. This issue is also available to share online.