[tl;dr sec] #172 - Career Resources, Machine Learning • Establishing a data perimeter on AWS: Allow only trusted resources from my organization • 2022 H2 IRAP report is now available on AWS Artifact for Australian customers • How to use policies to restrict where EC2 instance credentials can be used from • lakeformation: 2 new actions • devops-guru: 1 new condition | 2 updated actions • trustedadvisor: 1 new action • Meet the Newest AWS Heroes – March 2023 | Amazon Web Services • How a single engineer brought down Twitter on Monday • Security Certification Roadmap - Paul Jerimy Media • Update detected · z0ph/MAMIP@47e79f4 • Well this is rather exciting! I’m an AWS Hero now 🎉 • If you have shell access on an EC2 and want to extract creds, instead of remembering how to get them from the 169.254.169.254 path, recent versions of the AWS CLI allow you to use `aws configure export-credentials --format env`. • 🗺️ DevSecOps Roadmap A collection and roadmap for learning <a href="https://twitter.com/hashtag/DevSecOps" target="_blank">#DevSecOps</a>, covering resources and tools for every step of the development process By <a href="https://twitter.com/hahwul" target="_blank">@hahwul</a> <a href="https://t.co/rxUkKJPh2G" target="_blank">github.com/hahwul/DevSecO…</a> • 🚨Security Career Resource Thread 🚨 1️⃣ 2️⃣ resources to break into the field or take your career to the next level 👇 <a href="https://twitter.com/hashtag/infosec" target="_blank">#infosec</a> <a href="https://twitter.com/hashtag/cybersecurity" target="_blank">#cybersecurity</a> <a href="https://twitter.com/hashtag/security" target="_blank">#security</a> • Well well well, if it isn't Mr. Privatize The Gains here to socialize the losses • The reason to point out VC hypocrisy asking for a bailout is not to say they shouldn't get it—it's to say that the next time they argue against regulation that would keep this from happening (but prevent them from lining their pockets), they shouldn't succeed • <a href="https://t.co/9fVsi3dOcI" target="_blank">awsiamguide.com</a> v1.0 is out! Even though it's self published, it definitely wasn't a solo effort... 😅 Thanks to all these great people who helped me: • 👓 Here's a detailed look at implementing Region &amp; Service allowlisting in AWS: <a href="https://t.co/IjycpAxHtH" target="_blank">ramimac.me/aws-allowlisti…</a> Check out the post for a complete walkthrough of the careful roll out of this sort of control, and ways I shot myself in the🦶 • 😍 This "How to" is introducing a new capability on AWS! This appears to be roughly the equivalent of the benefits of enforcing IMDSv2, but possibly less of the usability pain of the access denieds. • I’m happy to share that I’m starting a new position as Director of Engineering Experience <a href="https://twitter.com/oxbotica" target="_blank">@oxbotica</a> Very excited to be joining an innovative, growing organisation with an exciting mission 🚀 • Amazon DynamoDB now supports table deletion protection • Cloud formation Or Terraform • Subscribe to AWS Daily Feature Updates via Amazon SNS • AWS Architecture Icons (Compute) - 3D prints • Top 3 S3 Bucket Security Issues - Check Point Software • Prioritizing AWS Vulnerabilities With Sonrai Identity Insights - Security Boulevard