AWS has announced the launch of "declarative policies," a new capability that simplifies governance by allowing organizations to declare and enforce desired configurations for AWS services across their accounts. This feature addresses the challenges of managing compliance across multiple accounts by providing a centralized way to enforce configuration standards. For example, organizations can now define policies to block public access to Amazon EBS snapshots or specify allowed AMI settings, and these policies will be automatically applied across all accounts. With custom error messages, end-users can understand why their actions were rejected, improving transparency and reducing the complexity of governance management. Declarative policies currently support Amazon EC2, Amazon VPC, and Amazon EBS, with plans to expand support to more services in the future. This feature is a valuable addition for businesses looking to streamline their governance processes and enhance their security on AWS.
Simplify Governance with Declarative Policies
AWS