Update secure dev and AWS guidance

[adonm]

Updated AWS public resources here reference IRAP/ISM and would improve guidance

https://aws.amazon.com/blogs/security/aws-customer-compliance-guides-now-publicly-available/

Also worth increasing references to secure by design guidelines

https://www.cyber.gov.au/resources-business-and-government/governance-and-user-education/secure-by-design

secure configuration guideline / supply chain / standalone software dev? page targets for updates.

[adonm]

Incorporate below:

Standards

• Design
• Implementation
• Build and Deployment
• Verification
• Operation
• Outsourced Development and Managed Services