Neste episódio Raphael Bottino e Tales Casagrande falam sobre Hanson Ransom no S3. Sabia que a nuvem traz novos desafios quanto a proteção de Ransomware? Dá o play aí, prometo que ninguém vai cantar no seu ouvido. 🌚

• Links de referência

• https://www.halcyon.ai/blog/abusing-aws-native-services-ransomware-encrypting-s3-buckets-with-sse-c

• https://raphabot.medium.com/simulating-detecting-and-responding-to-s3-ransomware-attacks-9f85b2a97086?source=friends_link&sk=712f94cf48b7bc46aa29aa652efacaab 

• https://www.sentinelone.com/blog/the-state-of-cloud-ransomware-in-2024/

• https://www.trendmicro.com/en_us/research/24/j/fake-lockbit-real-damage-ransomware-samples-abuse-aws-s3-to-stea.html

• https://repost.aws/knowledge-center/potential-account-compromise

Neste episódio Raphael Bottino e Tales Casagrande falam sobre construção, pilares mas não é construção civil é nuvem! Dá o play ai :)

• Links de referência

• AWS Well Architected Framework: https://aws.amazon.com/architecture/well-architected/ 

• AWS Well-Architected Tool https://aws.amazon.com/pt/well-architected-tool/

• Azure Well-Architected Framework: https://learn.microsoft.com/en-us/azure/well-architected/

• Azure Well-Architected Review https://learn.microsoft.com/en-us/assessments/azure-architecture-review/

• Google Cloud Well-Architected Framework:  https://cloud.google.com/architecture/framework

• OCI Well-Architected Framework: https://docs.oracle.com/en/solutions/oci-best-practices/index.html 

• OCI Well-Architected Assessment https://well-architected.oracle.com/apex/r/owwa/well-architected-assessment/home

• Uma analogia sobre o AWS Well-Architected Framework https://medium.com/@100HnoMeuNome/uma-analogia-sobre-o-aws-well-architected-framework-237449062823

• Mapa do AWS Well Architected https://wa.aws.amazon.com/wat.map.en.html

• Well Architected Labs: https://www.wellarchitectedlabs.com/ 

• Skill Builder - AWS Well-Architected Foundations: https://explore.skillbuilder.aws/learn/courses/108/aws-well-architected-foundations 

  
  

• Recomendações

• Bottino: https://www.thefrugalarchitect.com/ 

• Tales: https://github.com/infracost/infracost

  
  

Neste episódio Raphael Bottino e Tales Casagrande falam sobre jornada para nuvem, pizza e o modelo de responsabilidade compartilhada! Mas me responde, qual o seu sabor favorito de pizza?

Referência

• PaaS x IaaS x SaaS x CaaS: qual é a diferença entre elas? ⁠https://cloud.google.com/learn/paas-vs-iaas-vs-saas?hl=pt-BR⁠

• Understanding Cloud Misconfigurations — With Pizza and Lego ⁠https://www.trendmicro.com/en_us/research/21/b/understanding-cloud-misconfigurations-with-pizza-and-lego.html⁠

• HashiCorp 2024 State of Cloud Strategy Survey ⁠https://www.hashicorp.com/pt/state-of-the-cloud⁠

• Modelo de arquitetura do Google Cloud ⁠https://cloud.google.com/architecture/framework?hl=pt-br⁠

• AWS Well-Architected  ⁠https://aws.amazon.com/pt/architecture/well-architected/⁠

• Azure Well-Architected Framework ⁠https://learn.microsoft.com/en-us/azure/well-architected⁠

• Oracle Acknowledges Data Breach and Starts Informing Affected Clients ⁠⁠https://cybersecuritynews-com.cdn.ampproject.org/c/s/cybersecuritynews.com/oracle-acknowledges-data-breach/amp/⁠⁠

• What is lift and shift cloud migration? ⁠⁠⁠https://www.pluralsight.com/resources/blog/business-and-leadership/what-is-lift-and-shift-cloud-migration⁠⁠⁠

  
  

  Links das Indicações:

  
  

• AWS Cloud Quest: Cloud Practitioner ⁠https://explore.skillbuilder.aws/learn/courses/11458/aws-cloud-quest-cloud-practitioner/lessons/42651/play-cloud-quest-cloud-practitioner⁠

• Manual de DevOps: Como Obter Agilidade, Confiabilidade e Segurança em Organizações Tecnológicas ⁠https://a.co/d/2qm3fpq

Hoje é primeiro de abril, mas, nesta conversa, só tem verdades!Raphael Bottino e Tales Casagrande falam sobre conceitos e a utilização do tão falado Cloud Security Posture Management.

Referência

• Modelo de responsabilidade compartilhada https://aws.amazon.com/pt/compliance/shared-responsibility-model/

Links das Indicações:

• CloudFox https://github.com/BishopFox/cloudfox
• Cloudsploit https://github.com/aquasecurity/cloudsploit
• Falco https://github.com/falcosecurity/falco
• AWS Security Digest https://awssecuritydigest.com/

Um podcast sobre Cloud e Application Security! Agora me diz, a culpa é da Segurança ou não?"