Last Week In AWS Podcast

Links:

• Amazon announced its fourth quarter and FY 2022 results last week; Tim Bray has an analysis that's absolutely worth reading. 
• Amazon CloudWatch now simplifies metric extraction from structured logs
• Amazon MemoryDB for Redis Announces 99.99% Availability Service Level Agreement
• AWS CloudTrail Lake now supports ingestion of activity events from non-AWS sources
• AWS announces access of Simple Monthly Calculator estimates in the AWS Pricing Calculator 
• Amazon increases NAT Gateway’s capacity to support concurrent connections to a unique destination
• Amazon EMR launches support for Amazon EC2 C7g (Graviton3) instances to improve cost performance for Spark workloads by 7–13%
• Analyze Amazon S3 storage costs using AWS Cost and Usage Reports, Amazon S3 Inventory, and Amazon Athena 
• AWS shows why physical stores matter more than ever at NRF 2023

Links:

• Azure messed up a regular expression
• GitHub's blog has a piece on passwordless deployments to the cloud
• LastPass has now admitted that the attackers stole customers' backups and encryption key
• Deploy a dashboard for AWS WAF with minimal effort 
• Thinkst's free service now supports credit card tokens.
• precloud is a suite of dynamic tests for infrastructure as code. 

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/s3-encryption-at-rest-does-not-solve-for-bucket-negligence/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

This episode is sponsored in part by the Google for Startups Cloud Program

Links:

• AWS Purity Test 
• Amazon Detective adds Amazon VPC Flow Logs visualizations for Amazon EKS workloads 
• AWS Elemental MediaLive adds timecode burn-in 
• AWS Pricing Calculator now supports optimized pricing estimation for EC2 Dedicated Hosts 
• Announcing Porting Advisor for Graviton 
• Now Open — AWS Asia Pacific (Melbourne) Region in Australia 
• Amazon OpenSearch Serverless is now generally available!
• AWS Lambda: Resilience under-the-hood 
• VPC Routing Enhancements and GWLB Deployment Patterns
• Introducing AWS Lambda runtime management controls 

Links:

• Datadog reports that an undocumented API allowed CloudTrail bypass
• MailChimp was breached and had customer data exposed
• Folks can use GitHub Codespaces to host and deliver malware.
• How to revoke federated users’ active AWS sessions
• The worst backup software known to humankind

Links:

• Amazon CloudFront now supports the request header order and header count headers
• Amazon ECS announces the new default console experience 
• Amazon EFS Supports 1,000 Access Points per File System
• AWS Nitro Enclaves announces support for multiple enclaves
• AWS Network Optimization Tips 
• Introducing multi-function packager, allowing more than one function per event trigger on Amazon CloudFront 
• Winning the Cat-and-Mouse Race: Staying One Step Ahead of Streaming Free-Riders with GeoGuard and AWS

Links:

• Join Corey in Phoenix next Sunday at 1PM at Zuzu for a community meet-up.
• Rackspace continues to trickle the truth out; it's now admitting that attackers accessed customer data 
• Tom Forbes scanned--wait, holy hell, he scanned every package on PyPi and found 57 live AWS keys. 
• In one year we're going to come back and see how accurate the heads of AWS security are with their predictions for cybersecurity in 2023
• Today's tip of the week is to go fire up your important AWS account(s) and validate that the root user doesn't have API credentials assigned.

Links:

• Join Corey in Phoenix next Sunday at 1PM at Zuzu for a community meet-up.
• AWS Config supports 22 new resource types 
• Changes to AWS Billing, Cost Management, and Account Consoles Permissions
• Run a popular benchmark on Amazon Redshift Serverless easily with AWS Data Exchange
• How to optimize costs for grant-based research projects with AWS

This episode is sponsored in part by the Google for Startups Cloud Program

Links:

• CircleCI came out with a security alert urging you to rotate any secrets stored in CircleCI.
• Another bite at the craptastic LastPass breach response, this article parses their weak-sauce PR statement 
• Over the holidays Slack had some private GitHub code repositories stolen.
• ACSESSED is another Azure vulnerability
• Amazon S3 Encrypts New Objects By Default 
• Updated whitepaper available: AWS Security Incident Response Guide
• iamfast analyzes your application code to generate a least-privilege IAM policy.
• Wiz has come up with and open sourced PEACH, a tenant isolation framework for cloud applications.

Links:

• Amazon CloudFront now supports the removal of response headers 
• Amazon SageMaker is now available in AWS Middle East (UAE) Region
• Amazon Neptune announces graph-explorer, an open-source visual exploration tool for low-code users
• An elastic deployment of Stable Diffusion with Discord on AWS 
• Measure the Business Impact of Personalize Recommendations 
• How Heineken’s Connected Brewery Ecosystem fuels automation