Dieter Van der StockApr 14
17
Monday April, 2023
📣 Sponsor
bucketAV scans S3 buckets for viruses, worms, and trojans. bucketAV detects malware in real-time, periodically, or on-demand.
- Data Protection: Scan your data with virtual machines running in your AWS account - no need to transfer data to an external service.
- Simple: Get started within 15 minutes with the help of our setup guide and auto-installer based on AWS CloudFormation.
- Scalable: Scan as many files as needed. bucketAV scales automatically. That's ensuring cost efficiency even for spiky workloads.
🐿 In a nutshell
Episode 2 of the Twitter API Saga: Between Friday and Saturday, all of my AWS Twitter bots API keys were suspended with a notice by email and a warning message on dev portal.
They roll back the decision a few hours later, and the warning message is gone.
I can't imagine the chaos inside Twitter ATM 😰
📢 MAMIP (Monitor AWS Managed IAM Policies)
Policies changed since last week (11):
- AWSBackupAuditAccess
- AWSConfigServiceRolePolicy
- AWSControlTowerServiceRolePolicy
- AWSServiceCatalogAdminFullAccess
- AWSServiceCatalogOrgsDataSyncServiceRolePolicy
- AWS_ConfigRole
- AmazonChimeVoiceConnectorServiceLinkedRolePolicy
- AmazonInspector2ServiceRolePolicy
- AmazonRDSFullAccess
Security Newsletter - Breaches, patches, and hacking cars through their headlights.
[tl;dr sec] #177 - AWS KMS Threat Model, DOM Invader
Clint at tl;dr secApr 13
Amazon Chime SDK Voice - 5 updated methods
Apr 13
This release adds tagging support for Voice Connectors and SIP Media Applications
AWS MediaConnect - 20 new 7 updated methods
Apr 13
Gateway is a new feature of AWS Elemental MediaConnect. Gateway allows the deployment of on-premises resources for the purpose of transporting live video to and from the AWS Cloud.
📣 Sponsor
Are you suffering from FOMO syndrome (Fear of missing out) when it comes to the latest news and trends in the AWS Security landscape? Fear not! Our AWS Security Digest Newsletter has got you covered.
We are excited to announce that sponsorship opportunities are still available for the end of May and June issues of our newsletter. This is a great chance to reach our engaged audience of AWS Security professionals and showcase your products and services.
AWS Security Profile: Ryan Dsouza, Principal Solutions Architect
Maddie BaconApr 14
In the AWS Security Profile series, I interview some of the humans who work in Amazon Web Services Security and help keep our customers safe and secure. This interview is with Ryan Dsouza, Principal Solutions Architect for industrial internet of things (IIoT) security. How long have you been at AWS …
Scale your authorization needs for Secrets Manager using ABAC with IAM Identity Center
Aravind GopaluniApr 14
With AWS Secrets Manager, you can securely store, manage, retrieve, and rotate the secrets required for your applications and services running on AWS. A secret can be a password, API key, OAuth token, or other type of credential used for authentication purposes. You can control access to secrets in Secrets …
Investigate security events by using AWS CloudTrail Lake advanced queries
Rodrigo FerroniApr 13
This blog post shows you how to use AWS CloudTrail Lake capabilities to investigate CloudTrail activity across AWS Organizations in response to a security incident scenario. We will walk you through two security-related scenarios while we investigate CloudTrail activity. The method described in this post will help you with the …
AWS Security Profile: Matt Luttrell, Principal Solutions Architect for AWS Identity
Maddie BaconApr 12
In the AWS Security Profile series, I interview some of the humans who work in Amazon Web Services Security and help keep our customers safe and secure. In this profile, I interviewed Matt Luttrell, Principal Solutions Architect for AWS Identity. How long have you been at AWS and what do you …
mediaconnect: 22 new actions, 3 new resources
Apr 15
22 new actions: AddBridgeOutputs (Grants permission to add outputs to an existing bridge), AddBridgeSources (Grants permission to add sources to an existing bridge), CreateBridge (Grants permission to create bridges), CreateGateway (Grants permission to create gateways), DeleteBridge (Grants permission to delete bridges), DeleteGateway (Grants permission to delete gateways), DeregisterGatewayInstance (Grants permission …
ssm-contacts: 1 new action
Apr 15
1 new action: ListPageResolutions (Grants permission to list the resolution path of an engagement)
inspector2: 5 new actions
Apr 15
5 new actions: BatchGetMemberEc2DeepInspectionStatus (Grants permission to delegated administrator to retrieve ec2 deep inspection status of member accounts), BatchUpdateMemberEc2DeepInspectionStatus (Grants permission to update ec2 deep inspection status by delegated administrator for its associated member accounts), GetEc2DeepInspectionConfiguration (Grants permission to retrieve ec2 deep inspection configuration for standalone accounts, delegated administrator and …
Use Amazon CodeWhisperer for Your AWS Security 
3#aws #security #devops
3#aws #security #devops NGINX vs Apache : A Comparison of Web Servers 2#nginx #apache #aws
2#nginx #apache #aws Network Traffic Security With AWS VPC 0#aws #security #networking
0#aws #security #networking
- 🖊️ Don't miss out on the latest industry insights - stay ahead of the game by subscribing
- 📢 Gain visibility for your brand by sponsoring our content
- 💌 If you have any suggestions for future topics, let us know
