[nonane]

> Cloud trail, guard duty, VPCs, proper least privilege and IAM rules

We use all these. I guess this could be considered IDS + IPS?

[PenguinCoder]

I wouldn't put that level of logging as the same as an IDS/IPS, just alternatives.

[spydum]

Not IPS, those tools don't block access.