Last Week In AWS Podcast

AWS Morning Brief Extras edition for the week of June 21, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/ftc-request-answered-how-cloud-providers-do-business

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of June 20th, 2023 with Scott Piper filling in for Corey Quinn.

Links:

• AWS announces scripts to bulk updates policies per new AWS Billing and Cost Management permissions 
• Amazon QuickSight now supports APIs to automate and accelerate assets deployment
• Amazon Rekognition improves face search accuracy with user vectors
• AWS Config supports recording exclusions by resource type
• Falcon 40B foundation model from TII available on SageMaker JumpStart
• Amazon EMR supports price-capacity-optimized allocation strategy for EC2 Spot Instances
• Amazon Verified Permissions is now generally available
• Announcing Live Tail in Amazon CloudWatch Logs, providing real-time exploration of logs
• aidansteele/rdsconn

Last week in security news: CloudFlare had a Confused Deputy Vulnerability, Moving Away from IAM Identity Center, AWS KMS now supports importing asymmetric and HMAC keys, and more!

Links:

• CloudFlare had a Confused Deputy Vulnerability 
• As I move away from IAM Identity Center, I find it interesting that a lot of folks I respect are doing similar things.
• I was going to drag this otherwise awesome article disclosing the vulnerability they located within AWS CDK's eks.Cluster component.
• AWS KMS now supports importing asymmetric and HMAC keys 
• Tool/ Tip of the week: List of documented and undocumented AWS API models 

AWS Morning Brief for the week of June 12, 2023 with Corey Quinn.

Links:

• AWS CloudTrail Lake now supports selective start or stop ingestion of CloudTrail events 
• AWS Glue for Ray is now generally available 
• AWS Lambda adds support for Ruby 3.2
• AWS Mainframe Modernization service is now HIPAA eligible
• Announcing AWS Snowblade for U.S Department of Defense JWCC
• AWS Trusted Advisor adds new checks for Amazon EFS
• Announcing the general availability of AWS Database Migration Service Serverless
• Announcing Live Tail in Amazon CloudWatch Logs, providing real-time exploration of logs
• AWS announces scripts to bulk updates policies per new AWS Billing and Cost Management permissions 
• Drug Analyzer on AWS Provides Analytics That Inform Treatment Decisions and Support New Therapies
• Selecting cost effective capacity reservations for your business-critical workloads on Amazon EC2
• Announcing Container Image Signing with AWS Signer and Amazon EKS 
• How to deploy workloads in a multicloud environment with AWS developer tools
• How businesses can gain ecommerce capabilities to increase sales 
• A Guide to Maintaining a Healthy Email Database 
• Using Amazon IVS for turnkey town halls
• AWS’s long-term commitment to Virginia
• How AWS data centers reuse retired hardware

Last week in security news: Thinkst Canary's Thinkstscapes, Multiple S3 Bucket Negligence Awards, Credit Card Payment Processing on AWS, and more!

Links:

• Thinkst Canary's Thinkstscapes
• It's been a while since we've seen a strong, confirmed S3 Bucket Negligence Award, but Toyota has a massive one dating back a decade.
• Oof, looks like Google's CloudSQL product had a vulnerability that would allow an attacker to escalate to GCP control plane permissions.
• Holy... Legion malware expands scope to target AWS CloudWatch as well.
• When it rains, it pours; Capita had an S3 Bucket Negligence Award as well!
• Credit Card Payment Processing on AWS - Don't do it. Pay Stripe. 
• Amazon Security Lake is now generally available
• Announcing the AWS Blueprint for Ransomware Defense 
• Get custom data into Amazon Security Lake through ingesting Azure activity logs 
• Tip of the week: When you're starting something new that might turn into a company, use SSO.

AWS Morning Brief Extras edition for the week of June 7, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/17-final-ways-to-run-containers/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of June 5, 2023 with Corey Quinn. 

Links:

• Corey is off to Washington DC tomorrow for the Public Sector summit. If you're in town, he’s hosting a drink up at Highline RxR from 6-8 PM tomorrow (Tuesday) evening. Let him buy you a drink!
• AWS Pricing Calculator now offers visibility of point in time cost estimations
• Invoice Summary is now available 
• Optimize your x86-based Amazon EC2 Workloads 
• New – AWS DMS Serverless: Automatically Provisions and Scales Capacity for Migration and Data Replication
• Build hypothetical indexes in Amazon RDS for PostgreSQL with HypoPG
• Version 1 of the AWS Cloud Development Kit (AWS CDK) has reached end-of-support
• The Retail Race: A Roadmap for Implementing a Smart Store Strategy 
• Get ready for AWS IPv6 day
• Introducing a cost control solution for Amazon Braket 

Last week in security news: Faster AWS cloud connections with TLS 1.3, Belkin is crappy in many ways, the Tool of the Week, and more!

Links:

• Amazon bought Pillpack, since they wanted to get into being our pharmacy. Now Pillpack reports a data breach affecting more than 19,000 people.
• Belkin is crappy in many ways
• AWS partners bring choice of temporary elevated access capabilities to IAM Identity Center
• Exclude cipher suites at the API gateway using a Network Load Balancer security policy 
• Faster AWS cloud connections with TLS 1.3 
• Stronger together: Highlights from RSA Conference 2023 
• This is a fun tool: Is It AWS 

AWS Morning Brief for the week of May 30, 2023 with Corey Quinn.

Links:

• Bloomberg reported this week that I referred to AWS's hyped generative AI offerings that nobody I know has been able to access as vaporware
• Amazon Aurora PostgreSQL improves availability of read replicas 
• AWS Copilot announces Static Site pattern to host single-page web applications 
• Developing a serverless Slack app using AWS Step Functions and AWS Lambda
• How Broadridge used Amazon Managed Blockchain to build a private equity lifecycle management solution 
• Stronger together: Highlights from RSA Conference 2023
• Welcome to AWS Documentation

Last week in security news: The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term, Bitbucket will be updating their SSH host keys, AWS Reported a GuardDuty Finding Issue, and more!

Links:

• The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term
• Bitbucket will be updating their SSH host keys 
• Google has decided to free up inactive accounts after two years. Okay, that's their policy, but then they have the audacity to lie to our faces and say it's for "security."
• I have a bunch of Wemo devices at home that control lights. I found out that they've got a buffer overflow that Wemo "will not be fixing" because the devices are end of life.
• AWS Reported a GuardDuty Finding Issue
• The tool of the week: IAMbic lets you tailor AWS Identity Center permissions per account.