Last Week In AWS Podcast

Latest Episodes:

Infosec Brain Worms Jun 29, 2023

Show notes

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!

Links:

This collection of best practices for managing root users at scale in AWS is worth a read
'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.
1Health is this week's winner of the S3 Bucket Negligence Award
Barracuda advises customers to rip the entire device out, throw it away, and replace it entirely.
S3 buckets being used in attacks on npm packages
Issue with AWS Directory Service EnableRoleAccess
Tool of the week: xeol is an end-of-life package scanner.

Amazon Calls Down Regulatory Lightning Jun 26, 2023

Show notes

AWS Morning Brief for the week of June 26, 2023 with Corey Quinn.

Links:

The FTC comment period about the business of cloud computing ended
Amazon warehouse practices are now the focus of a senate probe
The FTC is suing Amazon for its Prime enrollment dark patterns
Amazon’s iRobot acquisition is now the subject of an EU investigation
The launch of Amazon Clinic is being delayed after the senate asked some hard questions
Announcing Amazon EC2 Hpc7g instances
AWS Lambda supports starting from timestamp for Kafka event sources
AWS Step Functions launches Versions and Aliases
AWS Transfer Family announces structured JSON log format
5 Stages to Building a Successful Partner Practice with AWS
Say Hello to 176 AWS Competency, Service Delivery, Service Ready, and MSP Partners Added or Renewed in May
How GoDaddy Implemented a Multi-Region Event-Driven Platform at Scale
New Amazon EC2 C7gn Instances: Graviton3E Processors and Up To 200 Gbps Network Bandwidth
For actual technical depth, my thanks to David Cuthbert in the Last Week in AWS Slack Community for surfacing this AnandTech article.
Stream VPC Flow Logs to Datadog via Amazon Kinesis Data Firehose
Creating real-time flood alerts with the cloud
Use AWS Private Certificate Authority to issue device attestation certificates for Matter
Should I use the hosted UI or create a custom UI in Amazon Cognito? - Trick question, you should use recurring Last Week in AWS sponsor FusionAuth instead.
Coming soon: updates to AWS Certified Cloud Practitioner exam
How I achieved all six specialty AWS Certifications on first attempt
How to win a $5 Amazon Gift Card, just by signing up for the Amazon News newsletter

re:Inforce and fwd:cloudsec with Scott Piper Jun 22, 2023

Show notes

Last week in security news: Videos from fwd:cloudsec are now available on YouTube, AWS announces AWS Payment Cryptography, Amazon CodeGuru Security is now available in preview, and more!

Links:

There was lots of great content presented at fwd:cloudsec. The day-long videos are up on YouTube. You can use the schedule to help find the talks you're interested in.
In contrast to AWS's "Shared Responsibility Model", I appreciate GCP's "Shared Fate Model" where they put their own skin in the game in ensuring their customers are protected. In their New Cryptomining Protection Program, they offer $1M in what is basically an insurance policy that comes with Security Command Center Premium.
Bob McMillan from the WSJ reports that North Korean hackers have stolen more than $3 billion in crypto over the last 5 years, and their heists are now funding fully half of its ballistic missile program.
a16z writes Hiring a Chief Information Security Officer.
Removing header remapping from Amazon API Gateway, and notes about our work with security researchers - AWS made a breaking change to respond to a security issue. The security researchers that found the issue wrote their side of the story, describing it as AWS API Gateway header smuggling and cache confusion.
Issue with AWS Directory Service EnableRoleAccess - AWS released a security bulletin for this issue, which they seem to do at random for security issues. Ben Bridts from Cloudar found and reported this issue which AWS has fixed. He goes into more detail in his blog post and in a talk at fwd:cloudsec.
Amazon CloudWatch Logs data protection account level policy configuration
AWS WAF Fraud Control launches account creation fraud prevention and reduced pricing
AWS announces AWS Payment Cryptography
AWS Transfer Family announces quantum-safe key exchange for SFTP
Amazon CodeGuru Security is now available in preview
Amazon Inspector announces the general availability of Code Scans for AWS Lambda function
AWS announces Software Bill of Materials export capability in Amazon Inspector
Amazon EC2 Instance Connect supports SSH and RDP connectivity without public IP address
Amazon GuardDuty enhances console experience with findings summary view
Amazon Detective extends finding groups to Amazon Inspector
Amazon S3 announces dual-layer server-side encryption for compliance workloads
AWS CloudTrail Lake launches curated dashboards for visualizing top CloudTrail trends
AWS IAM Identity Center now supports automated user provisioning from Google Workspace

FTC Request, Answered: How Cloud Providers Do Business Jun 21, 2023

Show notes

AWS Morning Brief Extras edition for the week of June 21, 2023.

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/ftc-request-answered-how-cloud-providers-do-business

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

Buy our merch

https://store.lastweekinaws.com

What's Corey up to?

Guest Host for re:Inforce Week - Scott Piper! Jun 20, 2023

Show notes

AWS Morning Brief for the week of June 20th, 2023 with Scott Piper filling in for Corey Quinn.

Links:

Confused DevOps Professional Jun 15, 2023

Show notes

Last week in security news: CloudFlare had a Confused Deputy Vulnerability, Moving Away from IAM Identity Center, AWS KMS now supports importing asymmetric and HMAC keys, and more!

Links:

CloudFlare had a Confused Deputy Vulnerability
As I move away from IAM Identity Center, I find it interesting that a lot of folks I respect are doing similar things.
I was going to drag this otherwise awesome article disclosing the vulnerability they located within AWS CDK's eks.Cluster component.
AWS KMS now supports importing asymmetric and HMAC keys
Tool/ Tip of the week: List of documented and undocumented AWS API models