Last Week In AWS Podcast

Latest Episodes:

Longer Sessions Are All Right By Me Sep 21, 2023

Show notes

Last week in security news: AWS IAM Identity Center session duration limit increases from 7 to 90 days, Access accounts with AWS Management Console PrivatAccess, A dive through using Amazon Athena in Incident Response, and more!

Links:

This is an esoteric Firefox/Yubikey compatibility bug that I went blindly stumbling into and has been resolved.
Chris Farris has a post up about deploying AWS Backup.
In preparation for re:Invent, the MGM had a massive cybersecurity issue
Amazon EC2 now supports Block Public Access for Amazon Machine Images
AWS IAM Identity Center session duration limit increases from 7 to 90 days
AWS Identity and Access Management provides action last accessed information for more than 140 services
Access accounts with AWS Management Console Private Access
A dive through using Amazon Athena in Incident Response. This is important!
Corey will be hosting an AMA on 9/27 @ noon PDT over on Twitch. Bring questions!

Seeing the Benefits of a Cloud Career Sep 18, 2023

Show notes

AWS Morning Brief for the week of September 18, 2023 with Corey Quinn.
Links:

Overscoped Role? No, It's the Children Who Are Wrong Sep 14, 2023

Show notes

Last week in security news: Corey reported an over-scoped role to AWS security, The bad LastPass breach got even worse, How to enforce DNS name constraints in AWS Private CA, and more!

Links:

I reported an over-scoped role to AWS security; the response from the SageMaker Canvas team was that it's working as intended.
The bad LastPass breach that continues to get worse once again somehow got worse.
Microsoft has published a rather thorough postmortem about how their signing key was leaked.
A security newsletter features a scam that I reported via Twitter.
Google has gone from paragon of security to apparently now sharing aspects of your browsing history with websites in Chrome,
Establishing a data perimeter on AWS: Allow access to company data only from expected networks
How to enforce DNS name constraints in AWS Private CA
Tool of the week: ThreatMapper hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit.

Why Your CPU-Based Utilization Metric Is Absolute Nonsense Sep 13, 2023

Show notes

AWS Morning Brief Extras edition for the week of September 13, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/why-your-cpu-based-utilisation-metric-is-absolute-nonsense/

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

Buy our merch

https://store.lastweekinaws.com

What's Corey up to?

AWS Guild Dinner & Tournament Sep 11, 2023

Show notes

AWS Morning Brief for the week of September 11, 2023, with Corey Quinn.

Links:

Feeding the Snakes Barracuda Sep 07, 2023

Show notes

Last week in security news: Barracuda thought it drove 0-day hackers out of customers’ networks, A terrific guide for getting started with AWS security research, “Zukey” or “Amazon Basics Yubikey”, and more!

Links:

Barracuda thought it drove 0-day hackers out of customers’ networks.
A terrific guide for getting started with AWS security research.
Amazon Basics Yubikey
Two real-life examples of why limiting permissions works: Lessons from AWS CIRT
Validate IAM policies by using IAM Policy Validator for AWS CloudFormation and GitHub Actions
From the world of tools: wapalyzer

Degenerative AI Sep 05, 2023

Show notes

Last Week In AWS for the week of September 4, 2023, with Corey Quinn.

Links:

Everybody Owns This Podcast So Nobody Does Aug 31, 2023

Show notes

Last week in security news: How AWS built the Security Guardians program, Network Load Balancers now support Security groups, the Tool of the week, and more!

Links: