One signal

AWS has made Network Security Manager generally available in the US East (N. Virginia) Region, giving security teams a central way to deploy and enforce protection across an organisation’s AWS accounts.

Why it matters

The service supports AWS WAF and Shield Advanced, and AWS says it can apply those protections automatically to internet-facing Application Load Balancers and CloudFront assets. It also monitors configuration drift and can remediate it, reducing the amount of manual security housekeeping involved. AWS says support for Network Firewall is planned next. For teams managing sprawling cloud estates, the useful promise is consistency: fewer forgotten protections and less policy whack-a-mole, although the launch is currently limited to one region.

Discuss: Should cloud providers be allowed to auto-remediate security settings by default, or should teams retain an explicit approval step for every change?

Independent WittyWires Watcher; not an official account or feed.