Last Week In AWS Podcast

inks:

• AWS Lambda Security Threats and Mitigations
• LastPass now admits that hackers stole customers’ password vaults.
• Google WordPress Plug-in Bug 
• McGraw Hill earned this week’s S3 Bucket Negligence Award for exposing 100K students' grades
• Announcing the new security widget on AWS Console Home 
• Introducing the Security Design of the AWS Nitro System whitepaper 
• Please +1 my request to add support for an ~/.aws/config.d/ directory to the AWS cli. 

This episode originally aired on October 13, 2021

Check out a related YouTube Video here: https://youtu.be/BCiUulzr9f8

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Amazon Connect now allows contact center managers to join ongoing calls 
• Amazon OpenSearch Service now supports Amazon Graviton2 (M6g, C6g, R6g, and R6gd) instances in four additional regions
• AWS IQ launches public profiles for companies 
• AWS Organizations console adds support to centrally manage region opt-in settings on AWS accounts
• ROSA now provides an AWS Management Console experience for satisfying ROSA prerequisites 
• Amazon EMR Serverless cost estimator 
• AWS Multi-Region Fundamentals - AWS Multi-Region Fundamentals 
• Organize your AWS Serverless code to prevent merge conflicts 

Links:

• Azure's VP of Security Engineering published a post describing their approach to cloud vulnerabilities
• Panther deployed Yubikeys internally and blogged about it.
• LastPass has (yet again) suffered a breach, and published a no-content advisory that TechCrunch took the time to parse through. 
• Apparently Wiz decided to poke around a bit into IBM "Cloud" and found a bunch of security issues. 
• Prepare for consolidated controls view and consolidated control findings in AWS Security Hub 
• Reported ECR Public Gallery Issue
• From the world of tools: osquery turns your operating system into a database

This episode originally aired on July 17, 2020.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the_right_and_wrong_way_to_interview_engineers/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Introducing concurrent account provisioning operations for AWS Control Tower 
• AWS Cost Anomaly Detection now supports percentage-based thresholds
• AWS Trusted Advisor adds new fault tolerance checks
• Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023 
• LaunchDarkly’s journey from ingesting 1 TB to 100 TB per day with Amazon Kinesis Data Streams 
• Visualizing the impact of AWS Lambda code updates 
• New: AWS CLI v2 Docker images available on Amazon ECR Public

Links:

• Infosys leaked FullAdminAccess AWS keys on PyPi for over a year.
• Rackspace has suffered a ransomware attack 
• AWS Security Hub now integrates with AWS Control Tower
• AWS Verified Access Preview — VPN-less Secure Network Access to Corporate Applications
• The Open Source Security Index 

This episode was originally released on August 20, 2021.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/a_multicloud_rant/

Want to watch a rant about Multi-Cloud? Watch our Multi-Cloud is a Terrible Idea YouTube Video here: https://youtu.be/Mlr7vioQqwg

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Amazon VPC IP Address Manager (IPAM) is now available in the AWS GovCloud (US) Regions
• AWS CloudShell is now System and Organization Controls (SOC) compliant
• Email delta cost usage report in a multi-account organization using AWS Lambda
• AWS re:Invent 2022 CEO Keynote through the Cloud Financial Management lens
• Build a robust text-based toxicity predictor

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/The-Unfulfilled-Promise-of-Serverless/

This episode was originally released on November 3, 2021.

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill