Links:

• SELinux is unmanageable; just turn it off if it gets in your way
• AWS welcomes new Trans-Atlantic Data Privacy Framework
• How to control access to AWS resources based on AWS account, OU, or organization
• AWS has an article that explains what the confused deputy problem
• The CloudGoat pentest training tool now supports Lambda