Links:
Datadog reports that an undocumented API allowed CloudTrail bypass

MailChimp was breached and had customer data exposed

Folks can use GitHub Codespaces to host and deliver malware.
How to revoke federated users’ active AWS sessions
The worst backup software known to humankind

Aspirational Audit Logs

Links:
Amazon CloudFront now supports the request header order and header count headers

Amazon ECS announces the new default console experience 
Amazon EFS Supports 1,000 Access Points per File System
AWS Nitro Enclaves announces support for multiple enclaves

AWS Network Optimization Tips 

Introducing multi-function packager, allowing more than one function per event trigger on Amazon CloudFront 
Winning the Cat-and-Mouse Race: Staying One Step Ahead of Streaming Free-Riders with GeoGuard and AWS

1000 Access Points of Light

Links:
Join Corey in Phoenix next Sunday at 1PM at Zuzu for a community meet-up.
Rackspace continues to trickle the truth out; it's now admitting that attackers accessed customer data 
Tom Forbes scanned--wait, holy hell, he scanned every package on PyPi and found 57 live AWS keys. 
In one year we're going to come back and see how accurate the heads of AWS security are with their predictions for cybersecurity in 2023
Today's tip of the week is to go fire up your important AWS account(s) and validate that the root user doesn't have API credentials assigned.

Wait Did You Say Root API Keys?

Links:
Join Corey in Phoenix next Sunday at 1PM at Zuzu for a community meet-up.

AWS Config supports 22 new resource types 
Changes to AWS Billing, Cost Management, and Account Consoles Permissions
Run a popular benchmark on Amazon Redshift Serverless easily with AWS Data Exchange
How to optimize costs for grant-based research projects with AWS

Four Announcements of the Boring Apocalypse

Links:
CircleCI came out with a security alert urging you to rotate any secrets stored in CircleCI.
Another bite at the craptastic LastPass breach response, this article parses their weak-sauce PR statement 
Over the holidays Slack had some private GitHub code repositories stolen.

ACSESSED is another Azure vulnerability

Amazon S3 Encrypts New Objects By Default 
Updated whitepaper available: AWS Security Incident Response Guide

iamfast analyzes your application code to generate a least-privilege IAM policy.
Wiz has come up with and open sourced PEACH, a tenant isolation framework for cloud applications.

Computers Checking Compliance Boxes

Links:

Amazon CloudFront now supports the removal of response headers 
Amazon SageMaker is now available in AWS Middle East (UAE) Region
Amazon Neptune announces graph-explorer, an open-source visual exploration tool for low-code users

An elastic deployment of Stable Diffusion with Discord on AWS 

Measure the Business Impact of Personalize Recommendations 

How Heineken’s Connected Brewery Ecosystem fuels automation 

The Work of Sober Minds

inks:
AWS Lambda Security Threats and Mitigations
LastPass now admits that hackers stole customers’ password vaults.
Google WordPress Plug-in Bug 
McGraw Hill earned this week’s S3 Bucket Negligence Award for exposing 100K students' grades

Announcing the new security widget on AWS Console Home 

Introducing the Security Design of the AWS Nitro System whitepaper 
Please +1 my request to add support for an ~/.aws/config.d/ directory to the AWS cli. 

LastStrawPass

This episode originally aired on October 13, 2021Check out a related YouTube Video here: https://youtu.be/BCiUulzr9f8Never miss an episode
Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts
Help the show
Leave a review
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch https://store.lastweekinaws.comWhat's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Holiday Replay: Why I Turned Down an AWS Job Offer

Links:

Amazon Connect now allows contact center managers to join ongoing calls 
Amazon OpenSearch Service now supports Amazon Graviton2 (M6g, C6g, R6g, and R6gd) instances in four additional regions

AWS IQ launches public profiles for companies 
AWS Organizations console adds support to centrally manage region opt-in settings on AWS accounts

ROSA now provides an AWS Management Console experience for satisfying ROSA prerequisites 

Amazon EMR Serverless cost estimator 

AWS Multi-Region Fundamentals - AWS Multi-Region Fundamentals 

Organize your AWS Serverless code to prevent merge conflicts 

Soaking the US Navy

Links:
Azure's VP of Security Engineering published a post describing their approach to cloud vulnerabilities
Panther deployed Yubikeys internally and blogged about it.
LastPass has (yet again) suffered a breach, and published a no-content advisory that TechCrunch took the time to parse through. 
Apparently Wiz decided to poke around a bit into IBM "Cloud" and found a bunch of security issues. 

Prepare for consolidated controls view and consolidated control findings in AWS Security Hub 
Reported ECR Public Gallery Issue
From the world of tools: osquery turns your operating system into a database

A Bunch of Vulnerabilities is Called an Embarrassment

This episode originally aired on July 17, 2020.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/the_right_and_wrong_way_to_interview_engineers/Never miss an episode
Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts
Help the show
Leave a review
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch https://store.lastweekinaws.comWhat's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

Holiday Replay: The Right and Wrong Way to Interview Engineers

Links:

Introducing concurrent account provisioning operations for AWS Control Tower 
AWS Cost Anomaly Detection now supports percentage-based thresholds
AWS Trusted Advisor adds new fault tolerance checks

Heads-Up: Amazon S3 Security Changes Are Coming in April of 2023 

LaunchDarkly’s journey from ingesting 1 TB to 100 TB per day with Amazon Kinesis Data Streams 

Visualizing the impact of AWS Lambda code updates 
New: AWS CLI v2 Docker images available on Amazon ECR Public

Screwing Up the Cloud Economics Math

Links:

Infosys leaked FullAdminAccess AWS keys on PyPi for over a year.
Rackspace has suffered a ransomware attack 
AWS Security Hub now integrates with AWS Control Tower
AWS Verified Access Preview — VPN-less Secure Network Access to Corporate Applications
The Open Source Security Index 

Censoring Myself Out of Pure Self-Interest

This episode was originally released on August 20, 2021.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/a_multicloud_rant/Want to watch a rant about Multi-Cloud? Watch our Multi-Cloud is a Terrible Idea YouTube Video here: https://youtu.be/Mlr7vioQqwgNever miss an episode
Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts
Help the show
Leave a review
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch https://store.lastweekinaws.comWhat's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

A Multi-Cloud Rant (Holiday Replay)

Links:
Amazon VPC IP Address Manager (IPAM) is now available in the AWS GovCloud (US) Regions
AWS CloudShell is now System and Organization Controls (SOC) compliant
Email delta cost usage report in a multi-account organization using AWS Lambda
AWS re:Invent 2022 CEO Keynote through the Cloud Financial Management lens
Build a robust text-based toxicity predictor

The Dryer Ate the SOC

Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/The-Unfulfilled-Promise-of-Serverless/This episode was originally released on November 3, 2021. Never miss an episode
Join the Last Week in AWS newsletter
Subscribe wherever you get your podcasts
Help the show
Leave a review
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch https://store.lastweekinaws.comWhat's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

The Unfulfilled Promise of Serverless

Links:
VPC Lattice -- network overlay.
AWS Supply Chain
AWS Application Composer
EventBridge pipes
Amazon Security Lake
Amazon OpenSearch Serverless
Amazon CodeCatalyst
AWS Wickr is now available
AWS Backup supports CloudFormation Stacks
AWS stimface weaver – space sim weaver… screw it. AWS SpiderBro it is.

AWS launched a whole bunch of new EC2 instance types and sizes

re:Invent 2022 Retrospective: Releases & Opinions

Links:
Last Week in AWS Community Slack
VPC Lattice
AWS Supply Chain
OpenSearch Serverless
AWS Verified Access
Stay Up To Date with re:Quinnvent
Sign up for the re:Quinnvent Newsletter
Check out the re:Quinnvent playlist on YouTube
If you’re on site:
Join Corey for a Nature Walk through the Expo Hall beginning at the Fortinet booth today (11/29/22) at 1pm PST or 
For drinks at Atomic Liquors tonight at 8:15 pm PST.
Tomorrow evening is re:Play, if you see Corey there, please say hello!


Help the show
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch
What's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

The Releases are Coming Fast and Furious Now

Links:
Last Week in AWS Community Slack
Amazon ECS Service Connect
Amazon RDS Optimized Reads and Writes
Fully Managed Blue / Green Deployments in Aurora and RDS
Protect Sensitive Data with CloudWatch Logs
Amazon cloudWatch Cross-Account Observability
Stay Up To Date with re:Quinnvent
Sign up for the re:Quinnvent Newsletter
Check out the re:Quinnvent playlist on YouTube
If you’re on site:
Join Corey for a Nature Walk through the Expo Hall beginning at the Fortinet booth tomorrow (11/29/22) at 1pm PST or 
For drinks at Atomic Liquors tomorrow evening at 8:15 pm PST.


Help the show
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch
What's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

The Releases of re:Invent are in Full Swing

Links:
Tiered storage for MSK
Lambda telemetry API
Resource Explorer Launched
GP3 comes to RDS
Amazon Time Sync is now available as a public NTP service
Zurich region
Spain Region
Hyderabad Region
Faster glacier restores
multiple MFA devices
Finch
AWS Fault Isolation Boundaries whitepaper
Stay Up To Date with re:Quinnvent
Sign up for the re:Quinnvent Newsletter
Check out the re:Quinnvent playlist on YouTube
Help the show
Share your feedback
Subscribe wherever you get your podcasts
Buy our merch
What's Corey up to?
Follow Corey on Twitter (@quinnypig)
See our recent work at the Duckbill Group
Apply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief

AWS Morning Brief

Get Started

Download the App