AWS introduces declarative controls for VPC Encryption Controls

AWS introduces declarative policies for VPC Encryption Controls, enabling centralized management of encryption settings across all VPCs in an organization.

• Define and apply VPC Encryption Controls policies centrally across accounts and organizational units
• Operate in monitor or enforce mode to audit and enforce encryption in transit within and across VPCs
• Demonstrate compliance with standards like HIPAA, FedRAMP, and PCI
• Gain central visibility into encryption control status across all accounts and VPCs
• Available in all AWS regions supporting VPC Encryption Controls with no additional charge

Declarative policies simplify encryption management by replacing per-VPC configuration with organization-wide policy enforcement.