Links:

• Poisoned Python and PHP packages purloin passwords for AWS access
• No, your cloud environment doesn't need a sandbox
• Spring 2022 SOC reports are now available with 150 services in scope
• Canary Tokens

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-aurora-serverless-road-not-taken/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Google Cloud Build deep dive
• Andrea Brancaleoni found an ELB header security issue
• An article on You Can't Opt Out of Citizen Development
•  DOJ Announces It Won’t Prosecute White Hat Security Researchers
• Choosing the right certificate revocation method in ACM Private CA
• a somewhat... controversial AWS Security Maturity Model
•  AWS API calls that return credentials on GitHub

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an-aws-free-tier-bill-shock-your-next-steps

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• "Hacking the Cloud" is a community-built encyclopedia
•  npm dependency confusion attack.
• Windows Event Logs
• F5 appliance (software or hardware) full remote code execution with privileged access
• Wiz has a blog post up about securing AWS Lambda function URLs
• Build a strong identity foundation that uses your existing on-premises Active Directory
• How to use new Amazon GuardDuty EKS Protection findings
• Poro (an open source project) scans for publicly accessible assets in your AWS environment

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an-aws-free-tier-bill-shock-your-next-steps/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill