Update readme with security notification blurb (#49)

README.md

@@ -28,6 +28,9 @@ See the [example sample application](https://github.com/aws-observability/aws-ot
 
 Please note that as per policy, we're providing support via GitHub on a best effort basis. However, if you have AWS Enterprise Support you can create a ticket and we will provide direct support within the respective SLAs. 
 
+## Security issue notifications
+If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue.
+
 ## License
 
 This project is licensed under the Apache-2.0 License.