Last Week In AWS Podcast

Links:

• 35K GitHub repos had been compromised by malware. GitHub security issued a response within 24 hours showing what their findings indicate and clarifying the situation.
• Scale your workforce access management with AWS IAM Identity Center (previously known as AWS SSO)
• Welcoming the AWS Customer Incident Response Team - Surprisingly this doesn't require a paid support plan.
• iamlive generates IAM policies from AWS calls via client-side monitoring

Want to give your ears a break and read this as an article? You’re looking for this link.

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/Q2Zpg5jQe-Q

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• The Nigerian government scores this week's S3 Bucket Negligence Award
• New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals
• Automatically block suspicious DNS activity with Amazon GuardDuty and Route 53 Resolver DNS Firewall
• Use Security Hub custom actions to remediate S3 resources based on Macie discovery results 
• There has been significant improvement to the AWS IAM documentation around IAM best practices.
• Artillery lets you use Lambdas for open source load testing. 

Links:

• Things I wish I knew about AWS WAF - Bot Control 
• How to Protect Your Data from Ransomware with S3 Object Lock
• It seems that Experian has learned nothing from its string of data breaches
• The Makati city government is the winner of this week's S3 Bucket Negligence award.
• A quick overview of AWS principals, identity-based policies, and resource-based policies.
• Eligible customers can now order a free MFA security key
• Reported EKS IAM Authenticator Issue 
• I found a handy script that someone beat together that makes it easy as pie to use AWS Roles Anywhere. 

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/azures_vulnerabilities_are_quack

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/5iTxtBnCPys

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• My article on the dangers of chatbots led someone to share this concern-affirming tale. 
• Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere 
• How to tune TLS for hybrid post-quantum cryptography with Kyber 
• hasIAMfailedopenyet.com is a site that triggers a Lambda function on every invocation that attempts to access something it cannot.