AWS re:Invent 2025 - AWS detection and response innovations that drive security outcomes (SEC323)

Source: Dev.to

Session Overview

🦄 Making great presentations more accessible.

📖 Session: AWS re:Invent 2025 – AWS detection and response innovations that drive security outcomes (SEC323)

In this video, Marshall Jones and Ryan Holland present AWS detection and response innovations, focusing on three core services:

• Amazon GuardDuty – continuous threat detection and monitoring.
• AWS Security Hub – centralized security findings and compliance checks.
• AWS Detective – investigation and analysis of security data.

The presenters walk through real‑world use cases, demonstrate new features, and explain how these services integrate to provide faster, more automated security outcomes.

Key Takeaways

1. Enhanced Threat Detection – GuardDuty now leverages additional data sources and machine‑learning models to identify sophisticated attacks earlier.
2. Streamlined Incident Response – Security Hub’s new automation capabilities reduce manual effort and improve response times.
3. Deeper Investigation – Detective’s updated visualizations and query tools help analysts pinpoint root causes faster.

Additional Resources

• GuardDuty Documentation: https://docs.aws.amazon.com/guardduty/
• Security Hub Documentation: https://docs.aws.amazon.com/securityhub/
• Detective Documentation: https://docs.aws.amazon.com/detective/

For the full session recording and slides, visit the AWS re:Invent 2025 website.