The state of security isn't so bad, according to Amazon Web Services (AWS).

Of course, that’s assuming your data lives in AWS and not in any of those other vendors’ clouds — and especially not in on-premises data centers, because “in my world, a data center is a building,” said Stephen Schmidt, vice president and chief information security officer at AWS, kicking off the cloud giant’s inaugural re:Inforce security conference today. “Buildings can fail. It happens all the time.”

But as far as the state of cloud security, “we are in a position of strength in the industry,” Schmidt said in his opening keynote. “Are we perfect? Of course not. But I really object to the sky-is-falling mantra that some security vendors put out there. It is simply not the case.”

That’s not to say that customers don’t need more security services, however.

“We want re:Inforce to be about taking you from that 95% point to that 100% point where you want to be in security,” Schmidt said. And to this end, AWS announced the general availability of Control Tower and Security Hub.

“Control Tower is meant to assist you in setting up and governing multi-account AWS environments,” Schmidt said. The cloud service includes an automated landing zone and is pre-configured according to AWS best-practices and a set of pre-packaged guardrails for continual governance. These are rules for security, operations, and compliance.

AWS says there are no additional charges or upfront commitments required to use Control Tower, and customers only pay for AWS services enabled to set up their landing zone and operate their guardrails.

California State University, Deutsche Börse Group, Edmunds, Slalom Consulting, Uber, VSP Global, and XebiaLabs are among the customers and partners using AWS Control Tower. The new service is available today in US East (N Virginia), US East (Ohio), US West (Oregon), and EU (Ireland), with additional regions coming soon.

Schmidt also announced the general availability of Security Hub, a service that provides a central place to manage security and compliance across an AWS environment. “Now you have a single plane that aggregates, organizes, and prioritizes your security alerts and findings” from AWS services including GuardDuty, Inspector, and Macie, as well as from partners’ products and services, Schmidt said.

Security Hub has 25 different partner integrations from 23 vendors available today. This includes integrations with Barracuda, CheckPoint, F5, McAfee, IBM, Palo Alto Networks, Symantec, Tenable, and Twislock, among others.

Customers can try AWS Security Hub at no additional charge with a 30-day free trial. AWS Security Hub is available today in US East (Ohio), US East (N. Virginia), US West (N California), US West (Oregon), Canada (Central), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), and South America (Sao Paulo).

Schmidt ended his keynote with a few takeaways, one of which is “we have to be at the point where security is not scary,” he said. “Let’s dial down the fear and uncertainty, folks.”