Last week in security news: Creating an AWS Backup Account, Azure had another cross-tenant access vulnerability, Security Hub Hurts My Self-Esteem, and more!

Links:

• Corey hosted a partner panel at AWS Container Day at KubeCon 
• This post on using OIDC to secure your CI/CD pipelines mirrors what I did with GitHub actions a year or so ago.
• Teri Radichel has a piece on Creating an AWS Backup Account
• Slack is conducting an absolute masterclass in how to screw up messaging to your target audience.
• Azure had another cross-tenant access vulnerability
• Security Hub Hurts My Self-Esteem
• AWS Security Profile: Matt Luttrell, Principal Solutions Architect for AWS Identity
• Tool of the Week: iamlive 

AWS Morning Brief for the week of April 17, 2023 with Corey Quinn.

This week is RSA in San Francisco; I'll be haunting the expo hall at some point, so if you're in town say hi.

Links:

• The Last Week in AWS Job Board continues to thrive; thanks for your ongoing support.
• Amazon Chime SDK updates Service Level Agreement
• Amazon CodeWhisperer is now generally available
• Amazon Connect now enables agents to handle voice calls, chats, and tasks concurrently
• Amazon EC2 Serial Console is now available on EC2 bare metal instances 
• Amazon RDS for MySQL now supports up to 15 read replicas for RDS Multi-AZ deployment option with two readable standby database instances
• AWS Graviton2-based Amazon EC2 instances are available in additional regions 
• AWS Ground Station now supports Wideband Digital Intermediate Frequency
• AWS Lambda adds support for Node.js 18 in the AWS GovCloud (US) Regions 
• Introducing AWS Lambda response streaming 
• Understanding Amazon DynamoDB latency 
• Announcing New Tools for Building with Generative AI on AWS
• AWS Now Supports Credentials-fetcher for gMSA on Amazon Linux 2023 
• AWS investment in South Africa results in economic ripple effect 
• New Global AWS Data Processing Addendum 
• 15 cool things we found inside the Spheres, Amazon’s urban rainforest in downtown Seattle 

Last week in security news: Logging strategies for security incident response, A Department of Energy report shows some rather serious gaps in security monitoring, A dedicated repository of winners of the S3 Bucket Negligence Awards, and more!

Links:

• Zoom took an outage and the message was clearly AWS generated. Root cause? Misconfigured SCP.
• A Department of Energy report shows some rather serious gaps in the security monitoring of their cloud environments.
• Logging strategies for security incident response
• Reduce triage time for security investigations with Amazon Detective visualizations and export data
• TLS inspection configuration for encrypted traffic and AWS Network Firewall
• A dedicated repository of winners of the S3 Bucket Negligence Awards.

AWS Morning Brief Extras edition for the week of April 12, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/localstack-why-local-development-for-cloud-workloads-makes-sense

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of April 10, 2023 with Corey Quinn.

Links:

• Console Toolbar is now generally available for AWS CloudShell
• Announcing CSV Export for AWS Resource Explorer Search Results
• Announcing Utilization Notifications for EC2 On-Demand Capacity
• Everything you need to know about AWS Billing Conductor’s new pricing model
• How to use Amazon CloudWatch to monitor Amazon DynamoDB table size and item count metrics
• Implement resource counters with Amazon DynamoDB
• AWS Organizations, moving an organization member account to another organization: Part 3
• Build secure multi-account multi-VPC connectivity for your applications with Amazon VPC Lattice 
• Higher education cloud financial planning: A former CFO’s perspective
• How the Think Big for Small Business program helps small businesses win big contracts
• Amazon started passing out Small Business labels to giant companies.
• Perfect imperfections: how AWS is innovating on diamond materials for quantum communication with Element Six

Last week in security news: Gain insights and knowledge at AWS re:Inforce 2023, InvalidClientTokenId, a repository of AWS customer breaches, and more!

Links:

• If you're in New York City proper, I hope to see you tonight at 7PM at Vol de Nuit
• We're hiring an Account Exec to handle media sales for this very podcast. Should you be the person who refers the successful candidate, we'll give you a $3K USD referral fee.
• Nick Frichette has found an undocumented Amplify API and used it to leak AWS Account IDs.
• Friend of the newsletter Chris Farris has started an AWS security consulting practice.
• Gain insights and knowledge at AWS re:Inforce 2023 
• How to use Amazon GuardDuty and AWS WAF v2 to automatically block suspicious hosts
• InvalidClientTokenId: The security token included in the request is invalid error
• Someone is curating this repository of AWS customer breaches.

AWS Morning Brief for the week of April 3, 2023 with Corey Quinn. 

Links:

• Amazon Kendra launches Featured Results 
• AWS Chatbot now supports search of AWS resources and AWS content 
• AWS Copilot adds support for full customization with AWS CDK or YAML overrides 
• AWS re:Post now includes AWS Knowledge Center articles
• New Cost Explorer users now get Cost Anomaly Detection by default
• Introducing Data on EKS – Modernize Data Workloads on Amazon EKS
• Friend microservices using Amazon DynamoDB and event filtering 

Last week in security news: Github accidentally published its RSA host keys for SSH, Automate IAM credential reports for large AWS Organizations, The Tool of the Week, and more!

Links:

• Sad news; infosec luminary Kelly ‘Aloria’ Lum has regrettably passed away.
• Automate IAM credential reports for large AWS Organizations
• Github accidentally published its RSA host keys for SSH.
• How to use Amazon Macie to reduce the cost of discovering sensitive data
• Use backups to recover from security incidents
• Tool of the Week: Chekov 

AWS Morning Brief Extras edition for the week of March 29, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/s3-as-an-eternal-service

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of March 27, 2023 with Corey Quinn. 

Links:

• Allow Listing tool for testing new Billing, Cost Management and Account console permissions 
• Amazon CloudWatch Logs adds support for new Amazon VPC Flow Logs metadata 
• Amazon EC2 C6in, M6in, M6idn, R6in, and R6idn metal instances are now available
• Amazon SNS (pronounced "Snizz") announces support for setting content-type request headers for HTTP/S notifications
• AWS CodeBuild now supports a small GPU machine type
• Configuring .NET Garbage Collection for Amazon ECS and AWS Lambda
• Integrating with GitHub Actions – Amazon CodeGuru in your DevSecOps Pipeline
• Delete Empty CloudWatch Log Steams
• Growing AWS internet peering with 400 GbE