About This Architecture
AWS security architecture patterns from re:Inforce 2025 with four control layers: Preventive (SCPs, IAM, VPC endpoints), Detective (GuardDuty, Security Hub, Macie, Inspector), Responsive (EventBridge + Lambda auto-remediation, Step Functions incident workflow), and Forensic (CloudTrail Lake, VPC Traffic Mirroring).