# Foundational (100) Published articles for Foundational (100). This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## AWS Security Reference Architecture: A deep dive into PCI DSS compliance DevFeed: [AWS Security Reference Architecture: A deep dive into PCI DSS compliance]() Original publisher: [Read original article]() Author: Avik Mukherjee Published: 2026-09-14T17:46:56Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Amazon Web Services](), [Security](), [Architecture & Design](), [Network Segmentation](), [Encryption](), [Logging](), [Access Control](), [Cloud]() Tags: [access-control](), [amazon-web-services](), [announcements](), [architecture](), [compliance](), [encryption](), [foundational-100](), [logging](), [network-segmentation](), [pci-dss](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS announces the AWS Security Reference Architecture (AWS SRA) PCI DSS Deep Dive, a guide that extends the core AWS SRA with prescriptive architecture-level guidance for organizations handling cardholder data on AWS. It explains how AWS SRA patterns address PCI DSS concerns including account scoping, network segmentation, encryption, logging, and access control. ### Source excerpt Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard (DSS) Deep Dive. This new guide extends the core AWS SRA to provide prescriptive, architecture-level guidance for organizations that store, process, or transmit cardholder data on AWS. Organizations subject to [...] ## Announcing 90-minute function timeout on AWS Lambda Managed Instances DevFeed: [Announcing 90-minute function timeout on AWS Lambda Managed Instances]() Original publisher: [Read original article]() Author: Tarun Rai Madan Published: 2026-09-09T19:08:14Z Content type: release Language: en Sources: [AWS Compute Blog]() Topics: [data-processing](), [Transcodings](), [Amazon EC2]() Tags: [ai-inference](), [announcements](), [aws](), [aws-lambda](), [batch](), [data-processing](), [event](), [event-driven](), [foundational-100](), [serverless]() ### AI overview AWS Lambda Managed Instances now support a 90-minute timeout for asynchronous and event source mapping invocations, increasing the previous 15-minute limit by six times. The update targets longer-running data processing, media transcoding, AI inference, and batch workloads. ### Source excerpt AWS Lambda now supports a 90-minute function timeout for asynchronous and event source mapping (ESM) invocations on Lambda Managed Instances, a 6x increase from the previous 15-minute limit. Data processing, media transcoding, AI inference, and batch workloads can now run on Lambda without re-architecting. ## OSPAR 2026 report now available with 167 services in scope DevFeed: [OSPAR 2026 report now available with 167 services in scope]() Original publisher: [Read original article]() Author: James Chang Published: 2026-09-04T18:13:04Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [Security, Privacy and Abuse Prevention](), [Cryptography]() Tags: [amazon-web-services-aws](), [announcements](), [compliance](), [cryptography](), [financial-services](), [foundational-100](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview AWS completed its annual OSPAR assessment under the OSPAR 2.0 framework. The certification covers 167 AWS services in the Asia Pacific (Singapore) Region and is intended to support customer compliance due diligence. ### Source excerpt We're pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider's Audit Report (OSPAR) assessment on July 29, 2026, in line with the OSPAR version 2.0 framework. The Association of Banks in Singapore (ABS) established the Guidelines on Control Objectives and Procedures for Outsourced Service Providers (ABS Guidelines) to [...] ## Agentic security: Detection and response at machine speed DevFeed: [Agentic security: Detection and response at machine speed]() Original publisher: [Read original article]() Author: Gee Rittenhouse Published: 2026-09-02T18:36:37Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Security & compliance, Cloud security](), [workload protection](), [AI Strategy]() Tags: [agentic](), [ai-agents](), [announcements](), [artificial-intelligence](), [autonomous](), [cloud](), [cloud-security](), [foundational-100](), [identity](), [security](), [security-blog](), [security-identity-compliance](), [zero-trust]() ### AI overview AWS discusses why autonomous AI agents require continuous security detection and response at machine speed. It outlines an enterprise framework that extends established practices such as identity governance, least privilege, defense in depth, and backup and recovery to agentic workloads. ### Source excerpt After talking with enterprise security leaders over the past year, one thing has become clear: the rise of autonomous AI agents is the most significant shift in security posture since the move to cloud. Organizations across every industry are adopting AI agents that authenticate on behalf of users, execute multistep workflows, and make decisions across [...] ## We invited a direct competitor into Security Hub Extended. Here's why. DevFeed: [We invited a direct competitor into Security Hub Extended. Here's why.]() Original publisher: [Read original article]() Author: Michael Fuller Published: 2026-08-31T19:00:07Z Content type: opinion Language: en Sources: [AWS Security Blog]() Topics: [AWS Security Hub](), [Security & compliance, Cloud security](), [workload protection](), [vulnerability scanning](), [eBPF](), [Linux Kernel]() Tags: [announcements](), [aws-security-hub](), [cloud-security](), [container](), [ebpf](), [foundational-100](), [linux-kernel](), [security](), [security-blog](), [security-identity-compliance](), [vulnerability-scanning](), [workload-protection]() ### AI overview AWS explains why it invited Upwind, a cloud security competitor, into Security Hub Extended. The post says the partnership responds to customer demand, expands choice between posture management and runtime-first protection, and simplifies integration through AWS billing, support, and operations. ### Source excerpt When customers keep pointing you to a solution that overlaps with parts of your own offering, you have a choice to make. This post is about the choice we made with Upwind, and why we'd make it again. AWS Security Hub Extended exists because customers told us what was working for them in enterprise security [...] ## ICYMI: July 2026 @AWS Security DevFeed: [ICYMI: July 2026 @AWS Security]() Original publisher: [Read original article]() Author: Rodolfo Brenes Published: 2026-08-26T19:32:55Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [Application Security](), [AI-assisted coding](), [AWS IAM]() Tags: [ai-agent](), [ai-coding](), [ai-security](), [amazon-bedrock](), [announcements](), [aws](), [compliance](), [ddos](), [firewall](), [foundational-100](), [iam](), [secrets](), [security](), [security-blog](), [security-identity-compliance]() ### AI overview A July 2026 AWS Security roundup covering AI-agent security, data protection, supply-chain protection, firewall automation, DDoS mitigation, and compliance readiness. ### Source excerpt If you found time for a bit of vacation this summer, you might be in catch-up mode. Here's a list to help: all the expert blog posts, new service capabilities, code samples, and workshops, in case you missed it, from July 2026. AWS Security Blog post This month's AWS Security Blog posts covered AI agent [...] ## Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS DevFeed: [Fast Track ISM-ready cloud environments and IRAP Assessments with Landing Zone Accelerator on AWS]() Original publisher: [Read original article]() Author: Kevin Donohue Published: 2026-08-25T21:53:49Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [Security & compliance, Cloud security](), [Amazon Web Services](), [Cloud](), [Security](), [Deployment](), [configuration](), [Critical Infrastructure]() Tags: [announcements](), [architecture](), [australia](), [aws](), [cloud](), [cloud-security](), [compliance](), [critical-infrastructure](), [deployment](), [foundational-100](), [governance](), [government](), [infrastructure](), [irap](), [public-sector](), [security](), [security-best-practices](), [security-blog](), [security-identity-compliance]() ### AI overview This AWS security post announces an independent assessment report on Landing Zone Accelerator on AWS (LZA). It explains how LZA can automatically deploy multi-account AWS environments with coverage for Australian Government Information Security Manual (ISM) security controls, and describes configuration-drift testing and compliance documentation intended to support IRAP assessment readiness. ### Source excerpt This post announces the availability of a new independent assessment report available on AWS Artifact analyzing how Landing Zone Accelerator on AWS (LZA) can automatically deploy multi-account environments in Amazon Web Services (AWS) with Australian Government Information Security Manual (ISM) security controls coverage at scale. The report includes findings from an independent third-party analysis conducted [...] ## Security Hub Extended adds Supply Chain Security as its tenth category DevFeed: [Security Hub Extended adds Supply Chain Security as its tenth category]() Original publisher: [Read original article]() Author: Michael Fuller Published: 2026-08-18T17:04:28Z Content type: news Language: en Sources: [AWS Security Blog]() Topics: [supply-chain-security](), [Security](), [Amazon Web Services]() Tags: [amazon-web-services-aws](), [announcements](), [aws](), [aws-security-hub](), [black-hat](), [engineering](), [enterprise](), [foundational-100](), [leadership](), [open-source](), [partners](), [payment](), [pricing](), [security](), [security-blog](), [security-identity-compliance](), [software](), [streaming](), [supply-chain](), [supply-chain-security](), [uncategorized](), [vulnerability]() ### AI overview AWS Security Hub Extended adds Supply Chain Security as its tenth category, with Chainguard and Socket as curated partners. The article frames software supply-chain risk as an enterprise security concern and describes pay-as-you-go and private-offer procurement options. ### Source excerpt Since February, we've grown AWS Security Hub Extended from 14 curated partners across 9 categories to 23 partners across 10. At Black Hat this month, 14 of those partners were at the Amazon Web Services (AWS) booth demoing live. Four of those partners delivered theater talks and ten were featured on SecurityLive streaming. We hosted [...] ## Introducing public preview runtimes on AWS Lambda, starting with Node.js 26 and Python 3.15 DevFeed: [Introducing public preview runtimes on AWS Lambda, starting with Node.js 26 and Python 3.15]() Original publisher: [Read original article]() Author: Jonathan Tuliani Published: 2026-08-15T14:09:35Z Content type: news Language: en Sources: [AWS Compute Blog]() Topics: [AWS Lambda](), [Node.js](), [Python](), [Amazon Web Services]() Tags: [announcements](), [availability](), [aws](), [aws-lambda](), [benchmarking](), [china](), [foundational-100](), [govcloud](), [infrastructure-as-code](), [node-js](), [python](), [release]() ### AI overview AWS Lambda introduces public preview runtimes for Node.js 26 and Python 3.15, allowing developers to test upcoming language versions before general availability and provide feedback while breaking changes remain possible. ### Source excerpt AWS Lambda introduces public preview runtimes, a new way to try upcoming language versions before GA. Start using Node.js 26 and Python 3.15 today, provide feedback, and help shape runtime quality before general availability. ## AWS Certificate Manager will discontinue email validation to prove domain validation for certificates DevFeed: [AWS Certificate Manager will discontinue email validation to prove domain validation for certificates]() Original publisher: [Read original article]() Author: Adam Aboudi Published: 2026-08-13T21:23:00Z Content type: article Language: en Sources: [AWS Security Blog]() Topics: [AWS Certificate Manager](), [Amazon Web Services](), [Command-line interface]() Tags: [announcements](), [aws](), [aws-certificate-manager](), [aws-management-console](), [blog](), [cli](), [dns](), [foundational-100](), [security-blog](), [security-identity-compliance](), [validation]() ### AI overview AWS Certificate Manager will discontinue support for email-validated public certificates by September 30, 2027. Customers using email validation must migrate to DNS validation, ahead of the CA/B Forum's March 15, 2028 deadline. The article explains the rationale, timeline, and how to identify affected certificates in the ACM console or AWS CLI. ### Source excerpt Today, we're announcing that AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027. If you use email validation for your ACM public certificates, you need to migrate to DNS validation before that date. This change aligns with the Certification Authority/Browser (CA/B) Forum's industry-wide deprecation of email-based domain validation and [...]