Links:

• Nick Jones' review of the AWS Security Model I linked to previously.
• Microsoft Azure has seen 6 'nightmare' cloud security flaws over the past year. 
• Unsecured Elasticsearch Data Replaced with Ransom Note
• AWS Systems Manager announces support for port forwarding to remote hosts using Session Manager 
• When and where to use IAM permissions boundaries 
• Security vulnerability in AWS's Managed Workflows for Apache Airflow

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-strange-too-familiar-tale-of-uncle-suitcase/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/x70EypnAH1Y

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Poisoned Python and PHP packages purloin passwords for AWS access
• No, your cloud environment doesn't need a sandbox
• Spring 2022 SOC reports are now available with 150 services in scope
• Canary Tokens

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-aurora-serverless-road-not-taken/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Google Cloud Build deep dive
• Andrea Brancaleoni found an ELB header security issue
• An article on You Can't Opt Out of Citizen Development
•  DOJ Announces It Won’t Prosecute White Hat Security Researchers
• Choosing the right certificate revocation method in ACM Private CA
• a somewhat... controversial AWS Security Maturity Model
•  AWS API calls that return credentials on GitHub

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an-aws-free-tier-bill-shock-your-next-steps

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• "Hacking the Cloud" is a community-built encyclopedia
•  npm dependency confusion attack.
• Windows Event Logs
• F5 appliance (software or hardware) full remote code execution with privileged access
• Wiz has a blog post up about securing AWS Lambda function URLs
• Build a strong identity foundation that uses your existing on-premises Active Directory
• How to use new Amazon GuardDuty EKS Protection findings
• Poro (an open source project) scans for publicly accessible assets in your AWS environment