Last Week In AWS Podcast

Latest Episodes:

The Wages of TLS Jun 01, 2023

Show notes

Last week in security news: Faster AWS cloud connections with TLS 1.3, Belkin is crappy in many ways, the Tool of the Week, and more!

Links:

Amazon bought Pillpack, since they wanted to get into being our pharmacy. Now Pillpack reports a data breach affecting more than 19,000 people.
Belkin is crappy in many ways
AWS partners bring choice of temporary elevated access capabilities to IAM Identity Center
Exclude cipher suites at the API gateway using a Network Load Balancer security policy
Faster AWS cloud connections with TLS 1.3
Stronger together: Highlights from RSA Conference 2023
This is a fun tool: Is It AWS

Batman's Customer Testimonials May 30, 2023

Show notes

AWS Morning Brief for the week of May 30, 2023 with Corey Quinn.

Links:

Bloomberg reported this week that I referred to AWS's hyped generative AI offerings that nobody I know has been able to access as vaporware
Amazon Aurora PostgreSQL improves availability of read replicas
AWS Copilot announces Static Site pattern to host single-page web applications
Developing a serverless Slack app using AWS Step Functions and AWS Lambda
How Broadridge used Amazon Managed Blockchain to build a private equity lifecycle management solution
Stronger together: Highlights from RSA Conference 2023
Welcome to AWS Documentation

Bad Behavior And Doing Things Right May 25, 2023

Show notes

Last week in security news: The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term, Bitbucket will be updating their SSH host keys, AWS Reported a GuardDuty Finding Issue, and more!

Links:

The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term
Bitbucket will be updating their SSH host keys
Google has decided to free up inactive accounts after two years. Okay, that's their policy, but then they have the audacity to lie to our faces and say it's for "security."
I have a bunch of Wemo devices at home that control lights. I found out that they've got a buffer overflow that Wemo "will not be fixing" because the devices are end of life.
AWS Reported a GuardDuty Finding Issue
The tool of the week: IAMbic lets you tailor AWS Identity Center permissions per account.

A Hidden Serverless Peril May 24, 2023

Show notes

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/a-hidden-serverless-peril

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

Buy our merch

https://store.lastweekinaws.com

What's Corey up to?

RedShift Costs a Peloton May 22, 2023

Show notes

AWS Morning Brief for the week of May 22, 2023 with Corey Quinn.

Links:

Corey is speaking at Tailscale Up in San Francisco next week; his talk is called "The Managed NAT Gateway Time Machine"
AWS announces Amazon Aurora I/O-Optimized
AWS Cost Categories now supports “Usage Type” dimension
Retiring the AWS Documentation on GitHub
Peloton embraces Amazon Redshift to unlock the power of data during changing times
Motivations for migration to Amazon DynamoDB
Neo Financial achieves Zero Trust goals and meets compliance requirements with Amazon WorkSpaces Web
Introducing AWS GameTime – a new AWS Twitch show
Unlock Insights from your Amazon S3 data with intelligent search
Estimating AWS Config recorder costs and usage using AWS CloudTrail
Creating a strategic approach to government continuity

SCPs Are Not For Me..s? May 18, 2023

Show notes

Last week in security news: Amazon CloudFront announces one-click security protections, SCPkit helps you manage your SCPs, A walk through AWS Verified Access policies, and more!

Links:

Aetonix was nominated for a potential S3 Bucket Negligence Award
Google has launched its Passkey implementation
A story about MSI leaking its own signing keys
Kentik once again has a marvelously unhinged video that you're going to want to watch.
This AWS IAM Wishlist is a great place to start if you're an AWS IAM product manage
Amazon CloudFront announces one-click security protections
A walk through AWS Verified Access policies
Tool of the week: SCPkit helps you manage your SCPs

EC2 Wars 1: The Phantom NAT Gateway May 15, 2023

Show notes

AWS Morning Brief for the week of May 15, 2023 with Corey Quinn.

Links:

Humoring the Parenthetical May 11, 2023

Show notes

Last week in security news: Containing Compromised EC2 Credentials Without (Hopefully) Breaking Things, How to scan your AWS Lambda functions with Amazon Inspector, AWS IAM Actions, And More!

Links: