Last Week In AWS Podcast

AWS Morning Brief Extras edition for the week of August 16, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-amazon-prime-day-2023-aws-bill/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of August 14, 2023, with Corey Quinn.

Links:

• Amazon's approach to RTO
• Amazon Interactive Video Service announces Real-Time Streaming 
• Amazon MSK Serverless expands availability to three additional AWS Regions
• Amazon VPC now supports primary IPv6 address on an elastic network interface
• AWS Artifact launches email notifications 
• Announcing AWS Backup logically air-gapped vault (Preview) 
• Mountpoint for Amazon S3 is now generally available 
• Network Load Balancer now supports security groups 
• Using response streaming with AWS Lambda Web Adapter to optimize performance 
• AWS recognized as a Leader in 2023 Gartner Magic Quadrant for Contact Center as a Service with Amazon Connect 

Last week in security news: People are still discovering some effects of the latest Azure security breach, Introducing the first AWS Security Heroes, How to Receive Alerts When Your IAM Configuration Changes, and more!

Links:

• Following the latest Azure breach, the CEO of Tenable says they can see banking customer credentials even now.
• Introducing the first AWS Security Heroes
• How to Receive Alerts When Your IAM Configuration Changes 
• Perform continuous vulnerability scanning of AWS Lambda functions with Amazon Inspector
• Recent Software-based Power Side-Channel Security Research 
• You can totally use AWS's SSM agent as post-exploitation RAT malware

AWS Morning Brief Extras edition for the week of August 8, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/breaking-aws-begins-charging-for-public-ipv4-addresses/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of August 7, 2023 with Corey Quinn. 

Links:

• In Amazon's earnings call, Andy Jassy said that every Amazon team is working on Generative AI
• Amazon Route 53 adds support for 14 additional Top-Level Domains 
• AWS NAT Gateway is now available in the AWS US West Phoenix Local Zone
• Amazon EBS announces up to 128 volume attachments per EC2 instance
• Introducing Amazon EC2 M7i-flex and M7i instances
• Amazon EventBridge Scheduler adds schedule deletion after completion
• AWS Application Composer updates: Undo and Redo, Export Canvas, and Local Sync Mode
• Now Open – AWS Israel (Tel Aviv ) Region
• Prime Day 2023 Powered by AWS – All the Numbers 
• Estimate cost savings for the Amazon Aurora I/O-Optimized feature using Amazon CloudWatch 
• Empowering your workforce with Amazon WorkSpaces services and Microsoft 365
• Exploring Fn::ForEach and Fn::FindInMap enhancements in AWS CloudFormation 
• Identify and optimize public IPv4 address usage on AWS 

Last week in security news: Patch your Ubuntu cloud workloads, Azure faces backlash following that stolen Microsoft signing key, IAM Roles Anywhere credential helper adds support for OS certificate stores, and more!

Links:

• You almost certainly want to patch your Ubuntu cloud workloads
• If you care about what that stolen Microsoft signing key was capable of, Azure really wishes you would stop asking
• Senator Wyden is calling for Azure to be held responsible.
• In a frantic scramble, Azure is expanding access to cloud logging data for free 
• IAM Roles Anywhere credential helper adds support for OS certificate stores
• CVE-2023-20593
• This handy script fetches SSO permission assignments.

AWS Morning Brief for the week of July 31, 2023, with Corey Quinn. 

Links:

• The new Amazon Chime 5 on Windows, macOS, and web is coming soon - Amazon Chime Help Center 
• Access and Query are now generally available for Amazon Managed Blockchain 
• AWS Lambda adds support for Python 3.11 
• AWS Entity Resolution: Match and Link Related Records from Multiple Applications and Data Stores
• New – Amazon EC2 P5 Instances Powered by NVIDIA H100 Tensor Core GPUs for Accelerating Generative AI and HPC Applications
• New – AWS Public IPv4 Address Charge + Public IP Insights 
• Preview – Enable Foundation Models to Complete Tasks With Agents for Amazon Bedrock 
• Migrating AWS Lambda functions from the Go1.x runtime to the custom runtime on Amazon Linux 2 
• Introducing Smithy for Python  
• Introducing AWS HealthScribe – automatically generate clinical notes from patient-clinician conversations using AWS HealthScribe
• Analyze rodent infestation using Amazon SageMaker geospatial capabilities
• AWS Reaffirms its Commitment to Responsible Generative AI 
• Amazon SageMaker Canvas announces SOME THINGS I AM NOT GOING TO TELL YOU ABOUT 

Last week in security news: A Guide to S3 Logging, Optimize AWS Config for AWS Security Hub, Amazon Told Drivers Not to Worry About In-Van Surveillance Cameras. Now Footage Is Leaking Online, and More!

Links:

• Guide to S3 Logging 
• Good on JumpCloud for disclosing a breach by some state-backed APT hacking group, but I learned about it from this article, and I'm a JumpCloud customer.
• Charlie Bel issued a security roadmap for Microsoft: Protect Azure DevOps secrets is the first item on it. What a novel idea!
• Amazon Told Drivers Not to Worry About In-Van Surveillance Cameras. Now Footage Is Leaking Online
• Yes, the compromised Microsoft key that they glossed over is incredibly important and Microsoft is downplaying it something fierce.
• Optimize AWS Config for AWS Security Hub to effectively manage your cloud security posture
• Tool of the Week: IAMActionHunter lets you query IAM permission policies

AWS Morning Brief for the week of July 24 2023 with Corey Quinn. 

Links:

• Amazon CodeCatalyst now supports workflows triggered by GitHub pull
• Amazon S3 Inventory can include ACLs as object metadata in inventory reports 
• Amazon SNS can now deliver mobile push notifications in twelve new regions 
• Introducing Analytics on Amazon Lex 
• AWS Mainframe Modernization service is now PCI DSS Compliant 
• Best Practices for Developing an AWS Co-Sell Program 
• Amazon Route 53 Resolver Now Available on AWS Outposts Rack
• Reimagine Software Development With CodeWhisperer as Your AI Coding Companion 
• Orca Security’s journey to a petabyte-scale data lake with Apache Iceberg and AWS Analytics 
• Capture clickstream data using AWS serverless services 
• Amazon Simple Email Service adds email delivery features to revised free tier 
• Service Quota Observability Across Regions and Accounts
• Removing Unassociated Elastic IPs
• Navigating common use cases spanning AWS GovCloud (US) and standard AWS

Last week in security news: An Amazon senior security engineer was indicted in a $9M digital currency heist, Microsoft had one heck of a breach, this week’s S3 Bucket Negligence Award, and more!

Links:

• A write-up of someone's experience going through the publicly available flAWS 1&2 labs
• Signs of the recent Microsoft breach in your account are tied to an enhanced level of license.
• An Amazon senior security engineer was indicted in a $9M digital currency heist
• A far-right publisher earned this week's S3 Bucket Negligence Award
• Amazon FSx for NetApp ONTAP supports write once, read many (WORM) protection with SnapLock 
• IAM Policies and Bucket Policies and ACLs! Oh, My! (Controlling Access to S3 Resources) was updated.
• Tool of the week: AWS IAM Data has launched.