Links:

Nick Frichette wrote an incredibly handy guide on the ordered steps to take to avoid CloudFront or DNS domain takeovers on AWS.
This handy walkthrough talks about how to configure something that shrieks its head off whenever someone logs into AWS via the root account.
The Center for Internet Security just released an update to the AWS version of their security benchmarks, and this approachable post goes through what's new.

Introducing message data protection for Amazon SNS - This is a bit hard to wrap my head around--then Scott Piper nailed it with "it's Macie for SNS and now I'm wondering what the point of me even is. 
I've talked about Parliament before--it's an AWS IAM linting library. Version 1.6.0 just dropped.
I'll be in the DC area next week; come by Highline at 7PM and let me buy you a drink / swap stories if you're around.