We are excited to announce the launch of 22 new proactive controls and 10 AWS Security Hub detective controls in the AWS Control Tower controls library to help you meet regulatory requirements. These new controls are managed by AWS Control Tower and help you meet control objectives such as encrypt data in transit, encrypt data at rest, or use strong authentication. Proactive controls block non-compliant resources before they are provisioned for services such as Amazon Athena, Amazon EMR, AWS Glue, Amazon DynamoDB Accelerator (DAX) and Amazon Neptune. The AWS Security Hub detective controls for services such as Amazon Neptune, Amazon Athena and Amazon RDS help you detect noncompliance of resources within your accounts.
Source:: Amazon AWS