Last Week In AWS Podcast

AWS Morning Brief for the week of August 22, 2022 with Corey Quinn.

Links: Apparently there's been some dependency confusion in AWS CodeArtifact . PlatformQ wins this week's S3 Bucket Negligence Award   Found an interesting article that suggests that ransomware in AWS isn't a purely theoretical concern. Protocol interview with AWS CISO CJ Moses about his cloud security challenges. AWS co-announces release of the Open Cybersecurity Schema Framework (OCSF) project T...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/an_unexpected_love_letter_to_azure/ Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/NIsF_NS1B0k Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave...

AWS Morning Brief for the week of August 15, 2022 with Corey Quinn.

Links: Twilio's disclosure of an Employee and Customer Account Compromise .  Update of AWS Security Reference Architecture is now available As the linked tweet says : "If you check out the AWS docs on IAM policy parsing order there is a flowchart that shows you can get an Allow outcome before the boundary policy is evaluated."  IAM-Deescalate: is an open source tool to help users reduce the risk o...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/why_amazon_cant_end_the_release_tidal_wave/ Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/eKMxBNF5N-k Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the sh...

AWS Morning Brief for the week of August 8, 2022 with Corey Quinn.

Links: 35K GitHub repos had been compromised by malware. GitHub security issued a response within 24 hours showing what their findings indicate and clarifying the situation. Scale your workforce access management with AWS IAM Identity Center (previously known as AWS SSO) Welcoming the AWS Customer Incident Response Team - Surprisingly this doesn't require a paid support plan. iamlive generates IAM...

Want to give your ears a break and read this as an article? You’re looking for this link. Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get your podcasts What's Corey up to? Follow Corey on Twitter (@quinnypig) See our recent work at the Duckbill Group Apply to work with Co...

AWS Morning Brief for the week of August 1, 2022 with Corey Quinn.

Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/Q2Zpg5jQe-Q Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get your podcasts What's Corey up to? Follow Corey on Twitter (@quinnypig) See our recent work at the Duckbi...

Links: The Nigerian government scores this week's S3 Bucket Negligence Award New Air-Gap Attack Uses SATA Cable as an Antenna to Transfer Radio Signals Automatically block suspicious DNS activity with Amazon GuardDuty and Route 53 Resolver DNS Firewall Use Security Hub custom actions to remediate S3 resources based on Macie discovery results   There has been significant improvement to the AWS IAM...

AWS Morning Brief for the week of July 25, 2022 with Corey Quinn.

Links: Things I wish I knew about AWS WAF - Bot Control   How to Protect Your Data from Ransomware with S3 Object Lock It seems that Experian has learned nothing from its string of data breaches The Makati city government is the winner of this week's S3 Bucket Negligence award. A quick overview of AWS principals, identity-based policies, and resource-based policies . Eligible customers can now ord...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/azures_vulnerabilities_are_quack Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/5iTxtBnCPys Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a...

AWS Morning Brief for the week of July 18th, 2022 with Corey Quinn.

Links: My article on the dangers of chatbots led someone to share this concern-affirming tale .  Extend AWS IAM roles to workloads outside of AWS with IAM Roles Anywhere   How to tune TLS for hybrid post-quantum cryptography with Kyber   hasIAMfailedopenyet.com is a site that triggers a Lambda function on every invocation that attempts to access something it cannot. 

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/coreys-security-posture-2022 Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/dHDY69hIvvk Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a revi...

AWS Morning Brief for the week of July 11, 2022 with Corey Quinn.

Links: The most recently reported Azure vulnerability Amazon Photos exposes customers to risk I (re)discovered Scott Piper's work on Lesser Known Techniques for Attacking AWS Environments . PyPi python packages get caught sending stolen AWS keys to unsecured sites . TLS 1.2 to become the minimum TLS protocol level for all AWS API endpoints   GuardDuty has new findings   CloudFormation Guard had a...

Want to give your ears a break and read this as an article? You’re looking for this link: https://www.lastweekinaws.com/blog/the-chatops-issue-no-ones-chatting-about Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/eBKZ71OLjG8 Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show...

AWS Morning Brief for the week of July 4th, 2022 with Corey Quinn.

Links:  Azure has another security issue around its Synapse offering; this one was discovered by Tenable . Sysdig has a dive into the real threats to SSH on EC2. Tailscale has announced the ability to support Tailscale SSH. Chris Farris has a treatise on the The Philosphy of Prevention when it comes to cloud security. Google Cloud CISO Phil Venables asks whether security analogies are counterprodu...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/9-ways-aws-cdk-headdesk Want to watch the full dramatic reenactment of this podcast? Watch the YouTube Video here: https://youtu.be/3Mf3_l6iEtA    Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review...

AWS Morning Brief for the week of June 27, 2022 with Corey Quinn.