Last Week In AWS Podcast

Links:

• Azure’s continuing security woes
• The Meeting Owl videoconference device apparently had significant security problems 
• Brandon Sherman writes about how Temporal structures its access control strategy with regard to AWS 
• This week's S3 Bucket Negligence Award goes to Mobike.  
• Cloud Functions or Cloud Run launched from any GCP organization can bypass Google Kubernetes Engine (GKE) Authorized Networks restrictions
• Proof of someone migrating to SSO and disabling IAM users entirely. 
• AWS blog post about IAM policy types: How and when to use them
• Tailscale

Want to give your ears a break and read this as an article? You’re looking for this link:

https://www.lastweekinaws.com/blog/reinvent-keynote-incident/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/NGvLMsf4Wg8

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

Links:

• Nick Jones' review of the AWS Security Model I linked to previously.
• Microsoft Azure has seen 6 'nightmare' cloud security flaws over the past year. 
• Unsecured Elasticsearch Data Replaced with Ransom Note
• AWS Systems Manager announces support for port forwarding to remote hosts using Session Manager 
• When and where to use IAM permissions boundaries 
• Security vulnerability in AWS's Managed Workflows for Apache Airflow

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-strange-too-familiar-tale-of-uncle-suitcase/

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/x70EypnAH1Y

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• Poisoned Python and PHP packages purloin passwords for AWS access
• No, your cloud environment doesn't need a sandbox
• Spring 2022 SOC reports are now available with 150 services in scope
• Canary Tokens

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/the-aurora-serverless-road-not-taken/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill