Last Week In AWS Podcast

AWS Morning Brief Extras edition for the week of July 19, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/its-extremely-likely-you-should-not-use-govcloud/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of July 17, 2023 with Corey Quinn.

Links:

• Bullying ChatGPT into ranking the US Presidents by absorbency
• AWS CodeBuild now supports GitHub Actions
• AWS Lambda now detects and stops recursive loops in Lambda functions
• AWS Fault Injection Simulator supports chaos engineering experiments on Amazon EKS Pods
• AWS announces inaugural State and Local Government Champions 

Last week in security news: A deep dive into the DomainNetworks Snail Mail Scam by Krebs on Security, Tailscale is putting their terms and conditions on GitHub, The Tool/ Lesson of the Week, and more!

Links:

• A deep dive into who's behind the DomainNetworks Snail Mail Scam by Krebs on Security.
• Tailscale is putting its terms and conditions on GitHub and invites users to subscribe to see diffs instead of legalese.
• Three ways to accelerate incident response in the cloud: insights from re:Inforce 2023
• Tool/ Lesson of the week: git-landmine 

AWS Morning Brief for the week of July 10, 2023 with Corey Quinn.
 
Links:

• Last week I railed against what appeared to be AWS Transfer Family creating a new logging format.
• Last Week in AWS Job Board
• Amazon CloudWatch now supports dashboard variables
• Amazon DynamoDB now simplifies and lowers the cost of handling failed conditional writes
• Mountpoint for Amazon S3 adds support for creating new files 
• AWS Systems Manager Parameter Store increases API throughput limit 
• Announcing DynamoDB local version 2.0 
• Building Generative AI into Marketing Strategies: A Primer 
• How To Build an Email Service on SES 
• Downgrade SQL Server Enterprise edition using AWS Systems Manager Document to reduce cost
• ITSkills4U: From dentistry to IT 

Last week in security news: The Password Game, Customer Compliance Guides Now Available on AWS Artifact, The Tool of the Week, and more!

Links:

• The Password Game
• LastPass has apparently locked customers out due to MFA resets. 
• Customer Compliance Guides now available on AWS Artifact
• Tool of the Week: findmytakeover 

AWS Morning Brief Extras edition for the week of July 5, 2023.

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of July 3, 2023 with Corey Quinn. 

Links:

• AWS Lambda simplifies copying environment variables in the console code editor
• What is a spam trap and why you should care?
• How we learned to program with atoms in 24 hours flat 
• Running an SSH server on AWS RoboMaker
• New training series: Starting your Career with AWS Cloud
• AWS to remove 62,000-message Simple Email Service 'always free' tier from August 2023
• AWS continues to invest in Ohio 
• The INFORM Consumers Act takes effect on June 27. Here's how Amazon is protecting our customers and sellers from bad actors.

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

• This collection of best practices for managing root users at scale in AWS is worth a read
• 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
• 1Health is this week's winner of the S3 Bucket Negligence Award
• Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely. 
• S3 buckets being used in attacks on npm packages
• Issue with AWS Directory Service EnableRoleAccess
• Tool of the week: xeol is an end-of-life package scanner. 

AWS Morning Brief for the week of June 26, 2023 with Corey Quinn. 

Links:

• The FTC comment period about the business of cloud computing ended
• Amazon warehouse practices are now the focus of a senate probe
• The FTC is suing Amazon for its Prime enrollment dark patterns
• Amazon’s iRobot acquisition is now the subject of an EU investigation
• The launch of Amazon Clinic is being delayed after the senate asked some hard questions
• Announcing Amazon EC2 Hpc7g instances 
• AWS Lambda supports starting from timestamp for Kafka event sources
• AWS Step Functions launches Versions and Aliases 
• AWS Transfer Family announces structured JSON log format
• 5 Stages to Building a Successful Partner Practice with AWS
• Say Hello to 176 AWS Competency, Service Delivery, Service Ready, and MSP Partners Added or Renewed in May
• How GoDaddy Implemented a Multi-Region Event-Driven Platform at Scale
• New Amazon EC2 C7gn Instances: Graviton3E Processors and Up To 200 Gbps Network Bandwidth
• For actual technical depth, my thanks to David Cuthbert in the Last Week in AWS Slack Community for surfacing this AnandTech article.
• Stream VPC Flow Logs to Datadog via Amazon Kinesis Data Firehose
• Creating real-time flood alerts with the cloud
• Use AWS Private Certificate Authority to issue device attestation certificates for Matter
• Should I use the hosted UI or create a custom UI in Amazon Cognito? - Trick question, you should use recurring Last Week in AWS sponsor FusionAuth instead. 
• Coming soon: updates to AWS Certified Cloud Practitioner exam
• How I achieved all six specialty AWS Certifications on first attempt
• How to win a $5 Amazon Gift Card, just by signing up for the Amazon News newsletter 

Last week in security news: Videos from fwd:cloudsec are now available on YouTube, AWS announces AWS Payment Cryptography, Amazon CodeGuru Security is now available in preview, and more!

Links:

• There was lots of great content presented at fwd:cloudsec.  The day-long videos are up on YouTube. You can use the schedule to help find the talks you're interested in.
• In contrast to AWS's "Shared Responsibility Model", I appreciate GCP's "Shared Fate Model" where they put their own skin in the game in ensuring their customers are protected.  In their New Cryptomining Protection Program, they offer $1M in what is basically an insurance policy that comes with Security Command Center Premium.
• Bob McMillan from the WSJ reports that North Korean hackers have stolen more than $3 billion in crypto over the last 5 years, and their heists are now funding fully half of its ballistic missile program.
• a16z writes Hiring a Chief Information Security Officer.
• Removing header remapping from Amazon API Gateway, and notes about our work with security researchers - AWS made a breaking change to respond to a security issue. The security researchers that found the issue wrote their side of the story, describing it as AWS API Gateway header smuggling and cache confusion.
• Issue with AWS Directory Service EnableRoleAccess - AWS released a security bulletin for this issue, which they seem to do at random for security issues. Ben Bridts from Cloudar found and reported this issue which AWS has fixed.  He goes into more detail in his blog post and in a talk at fwd:cloudsec.
• Amazon CloudWatch Logs data protection account level policy configuration
• AWS WAF Fraud Control launches account creation fraud prevention and reduced pricing
• AWS announces AWS Payment Cryptography
• AWS Transfer Family announces quantum-safe key exchange for SFTP
• Amazon CodeGuru Security is now available in preview
• Amazon Inspector announces the general availability of Code Scans for AWS Lambda function
• AWS announces Software Bill of Materials export capability in Amazon Inspector
• Amazon EC2 Instance Connect supports SSH and RDP connectivity without public IP address
• Amazon GuardDuty enhances console experience with findings summary view
• Amazon Detective extends finding groups to Amazon Inspector
• Amazon S3 announces dual-layer server-side encryption for compliance workloads
• AWS CloudTrail Lake launches curated dashboards for visualizing top CloudTrail trends
• AWS IAM Identity Center now supports automated user provisioning from Google Workspace