IAM policy types: How and when to use them

This AWS Security Blog feed includes multiple operational and threat updates. Most notable: Amazon Threat Intelligence identified an active Interlock ransomware campaign exploiting CVE-2026-20131 (a critical Cisco Secure Firewall Management Center vulnerability allowing unauthenticated remote arbitrary Java code execution as root) being exploited post-disclosure. The feed also documents AI-augmented large-scale compromises of FortiGate devices, new IAM policy guidance and IAM Identity Center multi-Region replication, enhanced access-denied messages that include denying policy ARNs, SecurityHub