最后更新于2023年12月20日(星期三)16:00:00 GMT

It seems like it was just yesterday that we were in Las Vegas for AWS Re:Invent, but it’s already been almost two weeks since the conference wrapped up. 情况总是如此, 上周，AWS推出了一系列新服务, 包括围绕无服务器的进步, 人工智能(AI)和机器学习(ML), security and more.

There were a ton of really exciting announcements, but a few stood out to me. Before we dive into the new and updated services we now support in InsightCloudSec, let’s take a second to highlight a few of them and why they’re of note.

Re:Invent期间AWS新服务公告的亮点

Amazon Bedrock 早在10月份就宣布了全面上市, re:Invent brought with it announcements of new capabilities including customized models, GenAI应用程序执行多步骤任务, and Guardrails 预览发布. New Security Hub 介绍了功能, 包括集中治理, 自定义控件和仪表板的刷新.

Serverless创新 包括对亚马逊极光无限数据库的更新, Amazon ElasticCache无服务器, and AI-driven Amazon Redshift Serverless adding greater scaling and efficiency to their database and analytics offerings. 无服务器架构带来了可伸缩性和灵活性, however security and risk considerations shift away from traditional network traffic inspection and access control lists, 促进IAM卫生, system identity behavioral analysis along with code integrity and validation.

Amazon Datazone 一般可用性, like Bedrock, was originally announced in October and got some new innovations showcased during Re:Invent including business driven domains and data catalog, 项目和环境, and the ability for data workers to publish and data consumers to subscribe to workflows. 可用的开放预览的Datazone是自动的, AI-driven recommendations for metadata-driven business descriptions and specific columns and analytical applications based on business units.

Re:Invent今年最令人兴奋的公告之一是 Amazon Q, 亚马逊新推出的genai虚拟助手. Q was also integrated into Amazon’s Business Intelligence (BI) service, QuickSight, 在InsightCloudSec中已经支持了一段时间了吗.

发布了我们的支持 Amazon OpenSearch last year, this year’s re:Invent brought some exciting updates that are worth mentioning here. 现在普遍可用的是OpenSearch Serverless的Vector Engine, which enables users to store and quickly search vector embeddings for GenAI applications. AWS还宣布了OR1实例家族, which is compute optimized specifically for OpenSearch and also a new zero-ETL integration with S3.

在InsightCloudSec中扩展了资源覆盖

It’s very important to us here at Rapid7 that we provide our customers with the peace of mind to know when their teams leave these events and begin implementing new innovations from AWS that they’re doing so securely. To that end, Re:Invent之后的几天或几周总是有点冲刺, 今年也不例外.

覆盖和分析团队喜欢挑战, and in my totally unbiased opinion — we’ve delivered something special. Our latest release featured new support for a variety of the new services announced during Re:Invent, as well as, a number of existing services we’ve expanded support for in relation to updates announced by AWS. We’ve added support for 6 new services that were either announced or updated during the show. We’ve also added 25 new Insights, all of which have been applied to our existing AWS基础安全最佳实践 pack, AWS互联网安全中心(CIS.0 合规包，以及新的AWS相关更新 NIST SP800-53 (Rev 5).

新支援的服务包括:

  • Bedrock, a fully managed service that allows users to build generative AI applications in the cloud by providing a set of foundational models both from AWS and 3rd party vendors.
  • Clean Rooms, which enables customers to collaborate and analyze data securely in ‘clean rooms’ in minutes with any other company on joint initiatives without sharing real raw data.
  • AWS Control Tower (2024年1月发布), a management service that can be used to create and orchestrate a multi-account AWS environment in accordance with AWS best practices including the 良好的框架.

以及对新增服务的支持, we’ve also expanded our coverage around the host of existing services as well. We’ve added or expanded support for the following security and serverless solutions:

  • Network Firewall, 哪个提供了对网络流量的细粒度控制.
  • Security Hub, an AWS’ native service that provides CSPM functionality, aggregating security and compliance checks.
  • Glue, a serverless data integration service that makes it easy for analytics users to discover, prepare, move, 并集成来自多个来源的数据, 增强你的分析和机器学习项目.

帮助团队在云中安全地构建AI/ML应用程序

One of the most exciting elements to come out of the past few weeks with the addition of AWS Bedrock, is our extended coverage for AI and ML solutions that we are now able to provide across cloud providers for our customers. 支持AWS Bedrock, along with GCP Vertex and Azure OpenAI Service has enabled us to build a very exciting new feature as part of our Compliance Packs.

Machine learning, 人工智能, 分析是今年会议的主要主题, so it makes me very happy to announce that we now offer a dedicated Rapid7 AI/ML安全最佳实践 compliance pack. If interested, I highly recommend you keep an eye out in the coming days for my colleague 凯瑟琳Lynas-Blunt’s blog discussing how Rapid7 enables teams to securely build AI applications in the cloud.

作为一个云计算爱好者, AWS re:Invent始终致力于实现创新, 兴奋和分享学习经验. As we continue 我们与AWS的合作对于2024年即将到来的一切，我感到非常兴奋. Until next year!