Last Week In AWS Podcast

Links:

• Fascinating allegations have come from Twitter's former CISO about an alleged trashfire approach to security intrinsic to their culture.
• Microsoft employees exposed their own Azure credentials via GitHub
• A fascinating discovery by the folks at Wiz
• How to detect suspicious activity in your AWS account by using private decoy resources 
• Remember to opt out of AWS AI data usage.

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/sagemaker_is_responsible_for_my_surprise_bill/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/LCZjSZhRAjs

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Apparently there's been some dependency confusion in AWS CodeArtifact.
• PlatformQ wins this week's S3 Bucket Negligence Award 
• Found an interesting article that suggests that ransomware in AWS isn't a purely theoretical concern.
• Protocol interview with AWS CISO CJ Moses about his cloud security challenges.
• AWS co-announces release of the Open Cybersecurity Schema Framework (OCSF) project
• Trivy is a security scanner for vulnerabilities in container images, Git repositories, filesystems, and various bits of configuration.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an_unexpected_love_letter_to_azure/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/NIsF_NS1B0k

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Buy our merch 

• https://store.lastweekinaws.com

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Twilio's disclosure of an Employee and Customer Account Compromise. 
• Update of AWS Security Reference Architecture is now available
• As the linked tweet says: "If you check out the AWS docs on IAM policy parsing order there is a flowchart that shows you can get an Allow outcome before the boundary policy is evaluated." 
• IAM-Deescalate: is an open source tool to help users reduce the risk of privilege escalation.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/why_amazon_cant_end_the_release_tidal_wave/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/eKMxBNF5N-k

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill