Last Week In AWS Podcast

AWS Morning Brief for the week of July 24 2023 with Corey Quinn.  Links: Amazon CodeCatalyst now supports workflows triggered by GitHub pull Amazon S3 Inventory can include ACLs as object metadata in inventory reports   Amazon SNS can now deliver mobile push notifications in twelve new regions   Introducing Analytics on Amazon Lex   AWS Mainframe Modernization service is now PCI DSS Compliant   Be...

Last week in security news: An Amazon senior security engineer was indicted in a $9M digital currency heist, Microsoft had one heck of a breach, this week’s S3 Bucket Negligence Award, and more! Links: A write-up of someone's experience going through the publicly available flAWS 1&2 labs Signs of the recent Microsoft breach in your account are tied to an enhanced level of license . An Amazon s...

AWS Morning Brief Extras edition for the week of July 19, 2023 . Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/its-extremely-likely-you-should-not-use-govcloud/ Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe w...

AWS Morning Brief for the week of July 17, 2023 with Corey Quinn. Links: Bullying ChatGPT into ranking the US Presidents by absorbency AWS CodeBuild now supports GitHub Actions AWS Lambda now detects and stops recursive loops in Lambda functions AWS Fault Injection Simulator supports chaos engineering experiments on Amazon EKS Pods AWS announces inaugural State and Local Government Champions  

Last week in security news: A deep dive into the DomainNetworks Snail Mail Scam by Krebs on Security, Tailscale is putting their terms and conditions on GitHub, The Tool/ Lesson of the Week, and more! Links: A deep dive into who's behind the DomainNetworks Snail Mail Scam by Krebs on Security. Tailscale is putting its terms and conditions on GitHub and invites users to subscribe to see diffs inste...

AWS Morning Brief for the week of July 10, 2023 with Corey Quinn.   Links: Last week I railed against what appeared to be AWS Transfer Family creating a new logging format . Last Week in AWS Job Board Amazon CloudWatch now supports dashboard variables Amazon DynamoDB now simplifies and lowers the cost of handling failed conditional writes Mountpoint for Amazon S3 adds support for creating new file...

Last week in security news: The Password Game, Customer Compliance Guides Now Available on AWS Artifact, The Tool of the Week, and more! Links: The Password Game LastPass has apparently locked customers out due to MFA resets .  Customer Compliance Guides now available on AWS Artifact Tool of the Week: findmytakeover  

AWS Morning Brief Extras edition for the week of July 5, 2023 . Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get your podcasts Buy our merch  https://store.lastweekinaws.com What's Corey up to? Follow Corey on Twitter (@quinnypig) See our recent work at the Duckbill Group...

AWS Morning Brief for the week of July 3, 2023 with Corey Quinn.  Links: AWS Lambda simplifies copying environment variables in the console code editor What is a spam trap and why you should care? How we learned to program with atoms in 24 hours flat   Running an SSH server on AWS RoboMaker New training series: Starting your Career with AWS Cloud AWS to remove 62,000-message Simple Email Service '...

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more! Links: This collection of best practices for managing root users at scale in AWS is worth a read 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms . 1Health is th...

AWS Morning Brief for the week of June 26, 2023 with Corey Quinn.  Links: The FTC comment period about the business of cloud computing ended Amazon warehouse practices are now the focus of a senate probe The FTC is suing Amazon for its Prime enrollment dark patterns Amazon’s iRobot acquisition is now the subject of an EU investigation The launch of Amazon Clinic is being delayed after the senate a...

Last week in security news: Videos from fwd:cloudsec are now available on YouTube, AWS announces AWS Payment Cryptography, Amazon CodeGuru Security is now available in preview, and more! Links: There was lots of great content presented at fwd:cloudsec.  The day-long videos are up on YouTube. You can use the schedule to help find the talks you're interested in. In contrast to AWS's "Shared Responsi...

AWS Morning Brief Extras edition for the week of June 21, 2023 . Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/ftc-request-answered-how-cloud-providers-do-business Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscrib...

AWS Morning Brief for the week of June 20th, 2023 with Scott Piper filling in for Corey Quinn. Links: AWS announces scripts to bulk updates policies per new AWS Billing and Cost Management permissions   Amazon QuickSight now supports APIs to automate and accelerate assets deployment Amazon Rekognition improves face search accuracy with user vectors AWS Config supports recording exclusions by resou...

Last week in security news: CloudFlare had a Confused Deputy Vulnerability, Moving Away from IAM Identity Center, AWS KMS now supports importing asymmetric and HMAC keys, and more! Links: CloudFlare had a Confused Deputy Vulnerability   As I move away from IAM Identity Center, I find it interesting that a lot of folks I respect are doing similar things. I was going to drag this otherwise awesome a...

AWS Morning Brief for the week of June 12, 2023 with Corey Quinn. Links: AWS CloudTrail Lake now supports selective start or stop ingestion of CloudTrail events   AWS Glue for Ray is now generally available   AWS Lambda adds support for Ruby 3.2 AWS Mainframe Modernization service is now HIPAA eligible Announcing AWS Snowblade for U.S Department of Defense JWCC AWS Trusted Advisor adds new checks...

Last week in security news: Thinkst Canary's Thinkstscapes, Multiple S3 Bucket Negligence Awards, Credit Card Payment Processing on AWS, and more! Links: Thinkst Canary's Thinkstscapes It's been a while since we've seen a strong, confirmed S3 Bucket Negligence Award , but Toyota has a massive one dating back a decade. Oof, looks like Google's CloudSQL product had a vulnerability that would allow a...

AWS Morning Brief Extras edition for the week of June 7, 2023. Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/17-final-ways-to-run-containers/ Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get you...

AWS Morning Brief for the week of June 5, 2023 with Corey Quinn.  Links: Corey is off to Washington DC tomorrow for the Public Sector summit. If you're in town, he’s hosting a drink up at Highline RxR  from 6-8 PM tomorrow (Tuesday) evening. Let him buy you a drink! AWS Pricing Calculator now offers visibility of point in time cost estimations Invoice Summary is now available   Optimize your x86-b...

Last week in security news: Faster AWS cloud connections with TLS 1.3, Belkin is crappy in many ways, the Tool of the Week, and more! Links: Amazon bought Pillpack, since they wanted to get into being our pharmacy. Now Pillpack reports a data breach affecting more than 19,000 people . Belkin is crappy in many ways AWS partners bring choice of temporary elevated access capabilities to IAM Identity...

AWS Morning Brief for the week of May 30, 2023 with Corey Quinn. Links: Bloomberg reported this week that I referred to AWS's hyped generative AI offerings that nobody I know has been able to access as vaporware Amazon Aurora PostgreSQL improves availability of read replicas   AWS Copilot announces Static Site pattern to host single-page web applications   Developing a serverless Slack app using A...

Last week in security news: The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term, Bitbucket will be updating their SSH host keys, AWS Reported a GuardDuty Finding Issue, and more! Links: The ex-Ubiquiti engineer who stole a giant pile of their data gets a six year prison term Bitbucket will be updating their SSH host keys   Google has decided to free up inactiv...

Want to give your ears a break and read this as an article? You’re looking for this link. https://www.lastweekinaws.com/blog/a-hidden-serverless-peril Never miss an episode Join the Last Week in AWS newsletter Subscribe wherever you get your podcasts Help the show Leave a review Share your feedback Subscribe wherever you get your podcasts Buy our merch  https://store.lastweekinaws.com What's Corey...

AWS Morning Brief for the week of May 22, 2023 with Corey Quinn. Links: Corey is speaking at Tailscale Up in San Francisco next week; his talk is called "The Managed NAT Gateway Time Machine" AWS announces Amazon Aurora I/O-Optimized   AWS Cost Categories now supports “Usage Type” dimension   Retiring the AWS Documentation on GitHub Peloton embraces Amazon Redshift to unlock the power of data duri...

Last week in security news: Amazon CloudFront announces one-click security protections, SCPkit helps you manage your SCPs, A walk through AWS Verified Access policies, and more! Links: Aetonix was nominated for a potential S3 Bucket Negligence Award Google has launched its Passkey implementation A story about MSI leaking its own signing keys Kentik once again has a marvelously unhinged video that...