Links:

• S3 Bucket Negligence Award
• Mandoogle on how AWS's instance metadata service can be abused by attackers
• Heroku apparently had its entire database breached last week
• Wiz Research discovered a new vulnerability in Azure’s PostgreSQL Flexible Server service.
• AWS deleted packages they'd pushed to public repositories
• A guide to Cloud Security Orienteering

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/aws-s-deprecation-policy-is-like-a-platypus

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

•  SELinux is unmanageable; just turn it off if it gets in your way
• AWS welcomes new Trans-Atlantic Data Privacy Framework
• How to control access to AWS resources based on AWS account, OU, or organization
• AWS has an article that explains what the confused deputy problem
• The CloudGoat pentest training tool now supports Lambda

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/how-to-win-in-cloud

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Summit Route's AWS SCP Best Practices 
• Reported Apache Log4j Hotpatch Issues
• cloudtrail-partioner

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/aws-s-open-source-problem

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill