I hope there will be a blogpost for this too, because this looks awesome: https://t.co/J6s6DOCmrL
- Pre-defined rules
- Mapped to different frameworks
- Support for suppressions
- pre-build docker images and a github action for use in your pipeline
- Detailed contribution docs
👉Watch @ebrandwine, Vice President and Distinguished Engineer at AWS, talk about how AWS finds and develops security engineers, the characteristics and mentality of those engineers, their inclination to break things, and more.
Full video 🎞️ https://t.co/BWRBTec4wt
How does an AWS customer achieve PCI compliance when their AWS API https://t.co/A7kWFrPSyI still supports TLS 1.0 (control 2.3 - non-encrypted console access)?