Last Week In AWS Podcast

View Top 200 Chart

Back to Rankings Page

News
**Last Week In AWS Podcast**

The latest in AWS news, sprinkled with snark. Posts about AWS come out over sixty times a day. We filter through it all to find the hidden gems, the community contributions–the stuff worth hearing about! Then we summarize it with snark and share it with you–minus the nonsense.

Latest Episodes:

Azure's Security Vulnerabilities are Out of Control Jul 20, 2022

Show notes

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/azures_vulnerabilities_are_quack

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/5iTxtBnCPys

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

What's Corey up to?

Immortal AWS Accounts, the Methuselah Pattern Jul 18, 2022

Show notes

AWS Morning Brief for the week of July 18th, 2022 with Corey Quinn.

AWS Bakery: Rolls Everywhere Jul 14, 2022

Show notes

Links:

My article on the dangers of chatbots led someone to share this concern-affirming tale.
Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere
How to tune TLS for hybrid post-quantum cryptography with Kyber
hasIAMfailedopenyet.com is a site that triggers a Lambda function on every invocation that attempts to access something it cannot.

My Security Posture Jul 13, 2022

Show notes

Want to give your ears a break and read this as an article? You’re looking for this link.

https://www.lastweekinaws.com/blog/coreys-security-posture-2022

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/dHDY69hIvvk

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

What's Corey up to?

How I Spent My Summer Vacation and College Tuition Jul 11, 2022

Show notes

AWS Morning Brief for the week of July 11, 2022 with Corey Quinn.

Azure Insecurity Templates Jul 07, 2022

Show notes

Links:

The most recently reported Azure vulnerability
Amazon Photos exposes customers to risk
I (re)discovered Scott Piper's work on Lesser Known Techniques for Attacking AWS Environments.
PyPi python packages get caught sending stolen AWS keys to unsecured sites.
TLS 1.2 to become the minimum TLS protocol level for all AWS API endpoints
GuardDuty has new findings
CloudFormation Guard had a new release.

The ChatOps Issue That No One's Chatting About Jul 06, 2022

Show notes

Want to give your ears a break and read this as an article? You’re looking for this link:

https://www.lastweekinaws.com/blog/the-chatops-issue-no-ones-chatting-about

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/eBKZ71OLjG8

Never miss an episode

Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts

Help the show

Leave a review
Share your feedback
Subscribe wherever you get your podcasts

What's Corey up to?

Mr. Selipsky's Geography Class Jul 05, 2022

Show notes

AWS Morning Brief for the week of July 4th, 2022 with Corey Quinn.

Enter Your Passwordle Jun 30, 2022

Show notes

Links:

Azure has another security issue around its Synapse offering; this one was discovered by Tenable.
Sysdig has a dive into the real threats to SSH on EC2.
Tailscale has announced the ability to support Tailscale SSH.
Chris Farris has a treatise on the The Philosphy of Prevention when it comes to cloud security.
Google Cloud CISO Phil Venables asks whether security analogies are counterproductive.
A security issue of sorts was discovered around sts:GetSessionToken Role Chaining in AWS
The person responsible for the giant Capital One hack that took advantage of a series of small AWS misconfigurations has been convicted.
Rogue GitHub apps could have hijacked countless repos for a week or two earlier this year.
Wickr for Government achieves FedRAMP Ready designation
It takes an open source project like trackiam to collate IAM actions, AWS APIs, and managed policies from all over the place
Passwordle lets you guess commonly used passwords.