Last Week In AWS Podcast

AWS Morning Brief Extras edition for the week of September 13, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/why-your-cpu-based-utilisation-metric-is-absolute-nonsense/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of September 11, 2023, with Corey Quinn.

Links:

• Amazon Aurora and Amazon RDS announces Extended Support for MySQL and PostgreSQL databases
• Amazon CloudWatch adds Amazon EKS control plane logs as Vended Logs
• Amazon CloudWatch Logs announces regular expression filter pattern syntax support
• As SwiftOnSecurity pointed out a week or two ago, a lot of folks can now discover firsthand just how many of their rules allow all 10* traffic
• Introducing Amazon EC2 R7iz instances 
• AWS Marketplace now supports AWS CloudTrail to improve procurement activity monitoring 
• AWS Step Functions launches enhanced error handling
• AWS Trusted Advisor adds 1 new fault tolerance check
• Announcing daily disbursements for AWS Marketplace sellers 
• Embracing FinOps to Maximize Cloud Value and Control Costs with the Deloitte FinOps Framework 
• Transforming Aviation Maintenance with the Infosys Generative AI Solution Built on Amazon Bedrock 
• How Vercel Shipped Cron Jobs in 2 Months Using Amazon EventBridge Scheduler
• How contact center leaders can prepare for generative AI 
• A Culture of Resilience 
• How generative AI is energizing the beauty industry
• Migrating AWS Direct Connect to a new location
• Reduce the security and compliance risks of messaging apps with AWS Wickr 
• AWS Guild Tournament builds cloud skills and innovative customer solutions
• From chocolate sales to a career in cloud with training from AWS re/Start
• Amazon to Discontinue Honeycode App-Building Service 

Last week in security news: Barracuda thought it drove 0-day hackers out of customers’ networks, A terrific guide for getting started with AWS security research, “Zukey” or “Amazon Basics Yubikey”, and more!

Links:

• Barracuda thought it drove 0-day hackers out of customers’ networks.
• A terrific guide for getting started with AWS security research. 
• Amazon Basics Yubikey
• Two real-life examples of why limiting permissions works: Lessons from AWS CIRT
• Validate IAM policies by using IAM Policy Validator for AWS CloudFormation and GitHub Actions
• From the world of tools: wapalyzer

Last Week In AWS for the week of September 4, 2023, with Corey Quinn.

Links:

• Amazon QuickSight adds scheduled and programmatic export to Excel format 
• Amazon S3 now supports multivalue answer in response to DNS queries
• AWS Backup now supports local time zone selections 
• AWS Lambda Functions powered by AWS Graviton2 now available in 6 additional regions 
• AWS Neuron adds support for Llama 2, GPT-NeoX, and SDXL generative AI models 
• AWS Private CA launches Connector for Active Directory 
• Streamlining Prior Authorization with Treatline’s Generative AI Platform for Healthcare and Insurance Providers
• Updating AWS CloudFormation Stacks Without Service Disruption to Support Rapid Business Innovation
• Why AWS Customers Choose to Procure Software Through Channel Partners in AWS Marketplace 
• Announcing Amazon Managed Service for Apache Flink Renamed from Amazon Kinesis Data Analytics
• Deploy Amazon OpenSearch Serverless with Terraform 
• How AWS AppFabric helps companies overcome tech overload 
• Reinventing the in-store experience with Smart Store solutions
• Automatically generate impressions from findings in radiology reports using generative AI on AWS 
• How MongoDB and AWS Collaborated to Enable Running the Open Source MongoDB Kafka Connector in Managed Environments
• Embracing our broad responsibility for securing digital infrastructure in the European Union 

Last week in security news: How AWS built the Security Guardians program, Network Load Balancers now support Security groups, the Tool of the week, and more!

Links:

• David Linthicum stakes out the position that in a multi-cloud world, centralized cloud security is now a must-have.
• Network Load Balancers now support Security groups 
• How AWS built the Security Guardians program, a mechanism to distribute security ownership
• Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3893) 
• Tool of the week: SSOFixer 

AWS Morning Brief Extras edition for the week of August 30, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/us-west-1-the-flagship-region-that-isn-t

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of August 28, 2023, with Corey Quinn.

Links:

• Amazon Aurora Global Database introduces Global Database Failover
• Amazon ElastiCache for Memcached simplifies creating new clusters in the AWS Management Console
• Improvements to multi-account management for Amazon GuardDuty
• AWS Certificate Manager introduces Enterprise Controls to help govern certificate issuance
• AWS Cost Explorer announces support for AWS Billing Conductor
• AWS Microservice Extractor now supports visualizing very large enterprise applications
• AWS re:Post launches an enhanced search experience
• Announcing AWS ROSA console support for the ROSA with hosted control planes preview
• EC2 Hibernate now supports Amazon EC2 M7i and M7i-flex instances
• Manage Cost Allocation Tags with Last-Updated and Last-Used timestamps 
• Protecting an AWS Lambda function URL with Amazon CloudFront and Lambda@Edge 
• Choose AWS Graviton and cloud storage for your Ethereum nodes infrastructure on AWS 
• How Amazon Finance Technologies built an event-driven and scalable remittance service using Amazon DynamoDB
• Upgrade from Amazon Aurora Serverless v1 to v2 with minimal downtime
• Next Big Things for Retail – Generative AI leads the pack but isn’t alone
• Explain medical decisions in clinical settings using Amazon SageMaker Clarify
• Build a serverless store finder site using Amazon Location Service
• Configuring client IP address preservation with a Network Load Balancer in AWS Global Accelerator 
• How to use pulse-level control on OQC’s superconducting quantum computer
• AWS Digital Sovereignty Pledge: Announcing new dedicated infrastructure options

Last week in security news: Short session expiration does not help security, How to use AWS Verified Access logs to write and troubleshoot access policies, This week's S3 Bucket Negligence Award, and more!

Links:

• A UK contractor wins this week's S3 Bucket Negligence Award.
• What happens when a Zero Day and Access Keys Collide in the Cloud.
• Short session expiration does not help security
• How to use AWS Verified Access logs to write and troubleshoot access policies
• IAMbic purports to be able to alert you to changes to IAM polices via consuming CloudTrail logs

AWS Morning Brief for the week of August 21, 2023 with Corey Quinn.
 
Links:

• Corey is performing a live Q&A next month; submit your questions here!
• Amazon Polly launches new Gulf Arabic male NTTS voice
• AWS HealthOmics supports cross-account sharing of omics analytics stores 
• New – Amazon EC2 M7a General Purpose Instances Powered by 4th Gen AMD EPYC Processors
• Amazon OpenSearch Serverless expands support for larger workloads and collections 
• Reduce Lambda cold start times: migrate to AWS SDK for JavaScript v3 
• Architecting for Resilience in the cloud for critical railway systems 
• How Amazon Shopping uses Amazon Rekognition Content Moderation to review harmful images in product reviews
• Zero-shot text classification with Amazon SageMaker JumpStart
• Build a multi-account access notification system with Amazon EventBridge
• Getting Started with CloudWatch agent and collectd 
• Cost considerations and common options for AWS Network Firewall log management
• Addressing gender inequity in the technology industry 

Last week in security news: Cloudonaut has an overview of AWS's security monitoring services, Chris Farris talks about Defining the Sensitive IAM Actions, What’s new in the world of tools, and more!

Links:

• Cloudonaut has an overview of AWS's security monitoring services
• A deep exploration into how you can really screw up integrating GitHub with AWS.
• Chris Farris talks about Defining the Sensitive IAM Actions.
• AWS Security Profile: Get to know the AWS Identity Solutions team 
• CVE-2023-20569 - RAS Poisoning - Inception - Paired with CVE-2022-40982 
• AVID is an AI Vulnerability Database.
• TinderSec threw up a scanner on GitHub so you can see if you've fallen prey to one of the classic OICD permissions blunders.