Last Week In AWS Podcast

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/a-hidden-serverless-peril

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of May 22, 2023 with Corey Quinn.

Links:

• Corey is speaking at Tailscale Up in San Francisco next week; his talk is called "The Managed NAT Gateway Time Machine"
• AWS announces Amazon Aurora I/O-Optimized 
• AWS Cost Categories now supports “Usage Type” dimension 
• Retiring the AWS Documentation on GitHub
• Peloton embraces Amazon Redshift to unlock the power of data during changing times 
• Motivations for migration to Amazon DynamoDB 
• Neo Financial achieves Zero Trust goals and meets compliance requirements with Amazon WorkSpaces Web
• Introducing AWS GameTime – a new AWS Twitch show 
• Unlock Insights from your Amazon S3 data with intelligent search 
• Estimating AWS Config recorder costs and usage using AWS CloudTrail
• Creating a strategic approach to government continuity 

Last week in security news: Amazon CloudFront announces one-click security protections, SCPkit helps you manage your SCPs, A walk through AWS Verified Access policies, and more!

Links:

• Aetonix was nominated for a potential S3 Bucket Negligence Award
• Google has launched its Passkey implementation
• A story about MSI leaking its own signing keys
• Kentik once again has a marvelously unhinged video that you're going to want to watch.
• This AWS IAM Wishlist is a great place to start if you're an AWS IAM product manage
• Amazon CloudFront announces one-click security protections 
• A walk through AWS Verified Access policies 
• Tool of the week: SCPkit helps you manage your SCPs

AWS Morning Brief for the week of May 15, 2023 with Corey Quinn. 

Links:

• Introducing Amazon EC2 I4g storage-optimized instances
• Amazon RDS for PostgreSQL now supports pgvector for simplified ML model integration 
• Amazon VPC IP Address Manager (IPAM) is now available in two additional AWS Regions 
• Private Access to the AWS Management Console is generally available
• AWS Systems Manager now allows customers to optimize the compute costs of their applications
• Introducing Cedar, an open-source language for access control 
• New – Amazon Aurora I/O-Optimized Cluster Configuration with Up to 40% Cost Savings for I/O-Intensive Applications
• AWS Lambda for the containers developer 
• Committed to our communities: The economic impact of AWS’s $15.6 billion investment in Oregon 

Last week in security news: Containing Compromised EC2 Credentials Without (Hopefully) Breaking Things, How to scan your AWS Lambda functions with Amazon Inspector, AWS IAM Actions, And More!

Links:

• The parenthetical in Containing Compromised EC2 Credentials Without (Hopefully) Breaking Things says it all. 
• Amazon S3 now applies two security best practices to all new buckets by default
• How to scan your AWS Lambda functions with Amazon Inspector
• AWS IAM Actions 

AWS Morning Brief Extras edition for the week of May 10, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/9-things-I-love-about-aws

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of May 8, 2023 with Corey Quinn.

Links:

• Announcing Provisioned Capacity for Amazon Athena
• Amazon EFS Replication is now available in all AWS Regions
• Amazon Redshift launches ra3.xlplus instances in additional Middle East, Europe and Asia Pacific Regions 
• AWS Compute Optimizer now supports filtering by tags
• AWS Console Mobile Application launches push notifications
• Announcing AWS User Notifications general availability 
• Process price transparency data using AWS Glue 
• Patterns for building an API to upload files to Amazon S3
• Improve query performance and reduce cost using scheduled queries in Amazon Timestream
• Working with JSON data in Amazon DynamoDB 
• The history and future roadmap of the AWS CloudFormation Registry 
• Partnerships extend Just Walk Out technology to more colleges and universities
• Quickly build high-accuracy Generative AI applications on enterprise data using Amazon Kendra, LangChain, and large language models 
• Introducing AWS Verified Access – General Availability 

Last week in security news: Tailscale now offers network flow logs, Google had a GhostToken flaw, AWS reported an issue with IAM supporting multiple MFA devices, and more!

Links:

• Tailscale now offers network flow logs
• Google had a GhostToken flaw that let attackers backdoor Google accounts.
• The folks at SADA found a major bug in Google Cloud; apparently it had the potential to expose the private keys for Google Cloud Service Accounts
• Issue With IAM Supporting Multiple MFA Devices
• This week in Tools: It's been a while since I linked to CloudMapper

AWS Morning Brief for the week of May 1, 2023 with Corey Quinn.

Links:

• Condolences to my AWS friends affected by last week's layoffs; if I can help, please let me know.
• Amazon CloudWatch Logs data protection is now available in all AWS Commercial Regions 
• AWS Firewall Manager adds support for multiple administrators
• AWS Systems Manager now supports AWS Cloud Development Kit (CDK) applications 
• Working with percolators in Amazon OpenSearch Service 
• AWS Lambda now supports Java 17
• Optimizing Amazon EC2 Spot Instances with Spot Placement Scores 
• Optimize costs by scheduling provisioned capacity for Amazon DynamoDB
• Perform intelligent search across emails in your Google workspace using the Gmail connector for Amazon Kendra 
• Best practices and considerations to migrate from VPC Peering to AWS Transit Gateway

Last week in security news: Dealing with Ransomware in the Cloud, Pen Testing AWS, How to prioritize IAM Access Analyzer findings, and more!

Links:

• Last Week in AWS job board 
• AWS had two (minor) Cross-Tenant Vulnerabilities within AWS App Runner.
• Some company called Invictus has practical experience dealing with ransomware in the cloud
• Chris Farris has a post on Pen Testing AWS.
• Dark Reading posits that Security Is a Revenue Booster, Not a Cost Center.
• An Attacker's Perspective on AWS Account IDs
• How to prioritize IAM Access Analyzer findings 
• Scale your authorization needs for Secrets Manager using ABAC with IAM Identity Center
• Netchecks is a way of programmatically verifying your security controls.
• I love CloudTrail Lake, and this repository of query samples makes it easier for me to use it.
• IAMbic offers "GitOps for IAM."