Last Week In AWS Podcast

Links:

• Google Cloud Build deep dive
• Andrea Brancaleoni found an ELB header security issue
• An article on You Can't Opt Out of Citizen Development
•  DOJ Announces It Won’t Prosecute White Hat Security Researchers
• Choosing the right certificate revocation method in ACM Private CA
• a somewhat... controversial AWS Security Maturity Model
•  AWS API calls that return credentials on GitHub

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an-aws-free-tier-bill-shock-your-next-steps

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• "Hacking the Cloud" is a community-built encyclopedia
•  npm dependency confusion attack.
• Windows Event Logs
• F5 appliance (software or hardware) full remote code execution with privileged access
• Wiz has a blog post up about securing AWS Lambda function URLs
• Build a strong identity foundation that uses your existing on-premises Active Directory
• How to use new Amazon GuardDuty EKS Protection findings
• Poro (an open source project) scans for publicly accessible assets in your AWS environment

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/an-aws-free-tier-bill-shock-your-next-steps/

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

• S3 Bucket Negligence Award
• Mandoogle on how AWS's instance metadata service can be abused by attackers
• Heroku apparently had its entire database breached last week
• Wiz Research discovered a new vulnerability in Azure’s PostgreSQL Flexible Server service.
• AWS deleted packages they'd pushed to public repositories
• A guide to Cloud Security Orienteering

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/aws-s-deprecation-policy-is-like-a-platypus

Never miss an episode

• Join the Last Week in AWS newsletter
• Subscribe wherever you get your podcasts

Help the show

• Leave a review
• Share your feedback
• Subscribe wherever you get your podcasts

What's Corey up to?

• Follow Corey on Twitter (@quinnypig)
• See our recent work at the Duckbill Group
• Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:

•  SELinux is unmanageable; just turn it off if it gets in your way
• AWS welcomes new Trans-Atlantic Data Privacy Framework
• How to control access to AWS resources based on AWS account, OU, or organization
• AWS has an article that explains what the confused deputy problem
• The CloudGoat pentest training tool now supports Lambda