AWS re:Invent 2022 - Automating and evidencing key compliance security controls (STP207-R)