AWS ANNOUNCES DECLARATIVE POLICIES

Summary from the TLDR InfoSec newsletter

AWS has announced a new type of management policy for AWS Organizations. Declarative policies enforce a security baseline that persists even when services add new APIs or features and when new principals or accounts are added to an Organization. Currently, declarative policies support blocking public access to VPCs, blocking public access to EBS snapshots, and various configurations for EC2 such as restricting available AMIs.