Can GuardDuty trigger Lambda directly?

Can Security Hub findings directly trigger Lambda directly?

Do IAM Access Analyzer findings publish to CloudWatch and EventBridge?

Can AWS managed KMS key be used in multiple regions?

Is it possible to change AWS KMS without updating application code?

Is it possible to create VPC endpoint for another account's S3?

Is S3 Object Lock configuration inherited to secondary region?