Update Security and Compliance docs

[Andriy Knysh (aknysh)]

what

• Added comprehensive documentation for AWS security and compliance components:
  • AWS Config - Configuration compliance monitoring and resource inventory
  • AWS CloudTrail - API activity logging and audit trail
  • AWS GuardDuty - Intelligent threat detection service
  • AWS Security Hub - Centralized security findings aggregation
  • AWS Inspector 2 - Automated vulnerability scanning for EC2, ECR, and Lambda
  • Amazon Macie - Sensitive data discovery in S3
  • IAM Access Analyzer - External and unused access detection
  • AWS Shield - DDoS protection for AWS resources
  • AWS Audit Manager - Compliance evidence collection
• Restructured the Security and Compliance layer overview with clear component descriptions
• Added detailed Setup guide with step-by-step deployment instructions organized by phases
• Added Mermaid architecture diagrams showing deployment models and data flows
• Added FAQ section with common questions and troubleshooting
• Added Mermaid CSS styling for diagram rendering
• Added blog post announcing the new security and compliance documentation

https://pr-837.cloudposse-docs.ue2.dev.plat.cloudposse.org/layers/security-and-compliance/

why

• Security and compliance documentation was incomplete - only had placeholder content
• Users need clear guidance on deploying AWS security services across their organization
• The delegated administrator deployment pattern needed proper documentation
• Architecture diagrams help users understand the relationships between components

references

• AWS Security Hub Documentation
• AWS GuardDuty Documentation
• AWS Config Documentation
• Cloud Posse Terraform Components

[Copilot]

Pull request overview

This PR adds comprehensive documentation for 9 AWS security and compliance components, restructures the Security and Compliance layer with detailed deployment guides, and includes a blog post announcing the new documentation.

Key Changes:

• Added detailed component documentation for AWS Config, CloudTrail, GuardDuty, Security Hub, Inspector 2, Macie, Access Analyzer, Shield, and Audit Manager
• Created a comprehensive setup guide with phased deployment instructions and Mermaid architecture diagrams
• Expanded FAQ with deployment order guidance, error resolution, and multi-region deployment instructions
• Enhanced Mermaid diagram CSS styling for better dark mode visibility
• Updated package dependencies (@babel/runtime to 7.28.4, js-yaml to 4.1.1)

Reviewed changes

Copilot reviewed 17 out of 18 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
src/css/mermaid.css	Enhanced Mermaid diagram styling with padding, dark mode color overrides, and improved text contrast
package.json	Updated @babel/runtime to 7.28.4 and js-yaml to 4.1.1
package-lock.json	Corresponding lockfile updates for dependency version changes and removal of "peer: true" markers
docs/layers/security-and-compliance/tutorials/tutorials.mdx	Adjusted sidebar position from 10 to 15
docs/layers/security-and-compliance/setup.mdx	Complete rewrite with 4-phase deployment guide, prerequisites, verification steps, and troubleshooting
docs/layers/security-and-compliance/security-and-compliance.mdx	Major expansion with component overview table, deployment models, integration architecture, and feature descriptions
docs/layers/security-and-compliance/faq.mdx	Expanded from basic Q&A to comprehensive troubleshooting guide organized by topic
docs/layers/security-and-compliance/aws-*.mdx (9 files)	New comprehensive documentation for each security component with architecture diagrams, deployment steps, and configuration examples
blog/authors.yml	Added aknysh as blog post author
blog/2025-12-18-security-compliance-components.mdx	New blog post announcing security and compliance documentation with component overview and getting started guide

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Dan Miller (milldr)]

a few workflows left