Last Week In AWS Podcast

Links: Azure's VP of Security Engineering published a post describing their approach to cloud vulnerabilities Panther deployed Yubikeys internally and blogged about it . LastPass has (yet again) suffered a breach, and published a no-content advisory that TechCrunch took the time to parse through .  Apparently Wiz decided to poke around a bit into IBM "Cloud" and found a bunch of security issues. ...

This episode originally aired on July 17, 2020. Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/the_right_and_wrong_way_to_interview_engineers/ Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get you...

Links: Introducing concurrent account provisioning operations for AWS Control Tower   AWS Cost Anomaly Detection now supports percentage-based thresholds AWS Trusted Advisor adds new fault tolerance checks Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023   LaunchDarkly’s journey from ingesting 1 TB to 100 TB per day with Amazon Kinesis Data Streams   Visualizing the impact of AWS L...

Links: Infosys leaked FullAdminAccess AWS keys on PyPi for over a year . Rackspace has suffered a ransomware attack   AWS Security Hub now integrates with AWS Control Tower AWS Verified Access Preview — VPN-less Secure Network Access to Corporate Applications The Open Source Security Index  

This episode was originally released on August 20, 2021. Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/a_multicloud_rant/ Want to watch a rant about Multi-Cloud? Watch our Multi-Cloud is a Terrible Idea YouTube Video here: https://youtu.be/Mlr7vioQqwg Never miss an episode Join the Last Week in AWS newsletter Subscribe...

Links: Amazon VPC IP Address Manager (IPAM) is now available in the AWS GovCloud (US) Regions AWS CloudShell is now System and Organization Controls (SOC) compliant Email delta cost usage report in a multi-account organization using AWS Lambda AWS re:Invent 2022 CEO Keynote through the Cloud Financial Management lens Build a robust text-based toxicity predictor

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/The-Unfulfilled-Promise-of-Serverless/ This episode was originally released on November 3, 2021. Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get yo...

Links: VPC Lattice -- network overlay. AWS Supply Chain AWS Application Composer EventBridge pipes Amazon Security Lake Amazon OpenSearch Serverless Amazon CodeCatalyst AWS Wickr is now available AWS Backup supports CloudFormation Stacks A WS stimface weaver – space sim weaver… screw it. AWS SpiderBro it is. AWS launched a whole bunch of new EC2 instance types and sizes

Links: Last Week in AWS Community Slack VPC Lattice AWS Supply Chain OpenSearch Serverless AWS Verified Access Stay Up To Date with re:Quinnvent Sign up for the re:Quinnvent Newsletter Check out the re:Quinnvent playlist on YouTube If you’re on site: Join Corey for a Nature Walk through the Expo Hall beginning at the Fortinet booth today (11/29/22) at 1pm PST or  For drinks at Atomic Liquors tonig...

Links: Last Week in AWS Community Slack Amazon ECS Service Connect Amazon RDS Optimized Reads and Writes Fully Managed Blue / Green Deployments in Aurora and RDS Protect Sensitive Data with CloudWatch Logs Amazon cloudWatch Cross-Account Observability Stay Up To Date with re:Quinnvent Sign up for the re:Quinnvent Newsletter Check out the re:Quinnvent playlist on YouTube If you’re on site: Join Cor...

Links: Tiered storage for MSK Lambda telemetry API Resource Explorer Launched GP3 comes to RDS Amazon Time Sync is now available as a public NTP service Zurich region Spain Region Hyderabad Region Faster glacier restores multiple MFA devices Finch AWS Fault Isolation Boundaries whitepaper Stay Up To Date with re:Quinnvent Sign up for the re:Quinnvent Newsletter Check out the re:Quinnvent playlist...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/the-feudal-lords-of-amazon/ Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/g1guW6tiR50 Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a revie...

Links: Amazon NAT Gateway Now Allows You to Select Private IP Address for Network Address Translation Amazon S3 Glacier improves restore throughput by up to 10x when retrieving large volumes of archived data Amazon Time Sync is now available over the internet as a public NTP service AWS re:Post launches a community leaderboard Announcing the new Applications widget on AWS Console Home Amazon S3 re...

Links: A super-neat exploration of the Lambda execution environment from a security perspective. Detect and block advanced bot traffic   How to evaluate and use ECDSA certificates in AWS Certificate Manager - AWS released support for ECDSA certificates. Canary Tokens

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/How-To-Learn-Something-New-Kubernetes-the-Much-Harder-Way Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/bpp5tpgU6CE Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcas...

Links: Ben Kehoe has left iRobot . And where's he going next? Presumably to re:Invent! I am too, with my re:Quinnvent nonsense Amazon Athena announces Query Result Reuse to accelerate queries Amazon EC2 enables you to opt out of directly shared Amazon Machine Images Amazon EC2 placement groups can now be shared across multiple AWS accounts   Amazon EC2 now supports specifying list of instance type...

Links: I really like this idea of an AWS account solely for getting into other AWS accounts .  Amazon accidentally exposed an internal server packed with Prime Video viewing habits . How to use trust policies with IAM roles - "It's an older post sir, but it checks out."  OpenSSL Security Advisories - November 2022 Tool of the week: s3crets_scanner

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/an-alternat-future-we-now-have-a-nat-gateway-replacement/ Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get your podcasts Buy our merch  https://stor...

Links: Amazon MSK now offers a new low-cost storage tier that scales to virtually unlimited storage Amazon Virtual Private Cloud (VPC) now supports the transfer of Elastic IP addresses between AWS accounts AWS IoT Core announces Location Action to route location data from IoT devices to Amazon Location Service Amazon Connect Customer Profiles now surfaces additional customer information in the Ama...

Links: SOCRadar demonstrated a significant leak that spanned the world; it distills down to an Azure equivalent of an open S3 bucket. This security recap of 2022 Google Next and Microsoft Ignite is worth reading if you're doing things in that particular side of the ecosystem. IAM Access Analyzer findings now support Amazon SNS topics and five other AWS resource types to help you identify public an...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/aws-re-invent-what-you-actually-need-to-know-before-you-go/ Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/lZPDfTXmfI4 Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podc...

Links: Amazon Aurora supports cluster export to S3   Amazon Cognito now provides user pool deletion protection   Amazon Connect adds real-time schedule adherence Amazon EC2 enables easier patching of guest operating system and applications with Replace Root Volume   Amazon Neptune Serverless is now generally available   Introducing the Amazon OpenSearch Service delivery program Amazon SageMaker Ca...

Want to give your ears a break and read this as an article? You’re looking for this link.  https://www.lastweekinaws.com/blog/the-real-reason-cloud-ide-adoption-is-lagging Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here:  https://youtu.be/fRc0maN0Z_I Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help th...

Links: Go to snark.cloud/shirt to get your limited edition S3 8th Wonder of the World t-shirt to benefit our friends at 826 National Amazon CloudFront adds fields for origin latency and ASN in real-time logs for more granular insights Amazon EC2 adds Service Quotas for Amazon Machine Images (AMIs) Amazon WorkDocs adds support for Apple Silicon MacBooks AWS Control Tower now available in GovCloud (...

Links: A walkthrough that takes us on a whirlwind tour of AWS Secrets Manager and the principle of least-privilege .  Azure Arc-enabled Kubernetes privilege escalation vulnerability Datadog has an report out on the The State of AWS Security Simplifying serverless permissions with AWS SAM Connectors   Tool of the week: trailscraper gets signal from noise when it comes to CloudTrail logs.