diff --git a/SECURITY.md b/SECURITY.md index 75a3b51..929cbfa 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,11 +1,11 @@ ## Reporting Security Issues -We take all security reports seriously. -When we receive such reports, -we will investigate and subsequently address -any potential vulnerabilities as quickly as possible. -If you discover a potential security issue in this project, -please notify AWS/Amazon Security via our -[vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) -or directly via email to [AWS Security](mailto:aws-security@amazon.com). -Please do *not* create a public GitHub issue in this project. +Amazon Web Services (AWS) is dedicated to the responsible disclosure of security vulnerabilities. + +We kindly ask that you **do not** open a public GitHub issue to report security concerns. + +Instead, please submit the issue to the AWS Vulnerability Disclosure Program via [HackerOne](https://hackerone.com/aws_vdp) or send your report via [email](mailto:aws-security@amazon.com). + +For more details, visit the [AWS Vulnerability Reporting Page](http://aws.amazon.com/security/vulnerability-reporting/). + +Thank you in advance for collaborating with us to help protect our customers. diff --git a/profile/README.md b/profile/README.md new file mode 100644 index 0000000..2f4448f --- /dev/null +++ b/profile/README.md @@ -0,0 +1,3 @@ +Since its inception, Amazon Web Services (AWS) has been the best place for customers to build and run open source software in the cloud. AWS is proud to support open source projects, foundations, and partners. We believe that open source is good for everyone and we are committed to bringing the value of open source to our customers, and the operational excellence of AWS to open source communities. + +This GitHub organization provides a wide range of open source solutions in repositories. We recommend reviewing the [AWS Well-Architected Framework](https://docs.aws.amazon.com/wellarchitected/latest/framework/welcome.html) and the [AWS Shared Responsibility Model](https://aws.amazon.com/compliance/shared-responsibility-model/) for guidance on building secure, reliable, and efficient workloads when adopting these solutions.