🥗 Appetizer

Hey Folks,

In the spotlight this week: AWS has announced plans to mandate Multi-Factor Authentication (MFA) for the root user of AWS Organizations, set to take effect in mid-2024.

In other news, Amazon DataZone has officially transitioned from preview to General Availability (GA).

Lastly, we delve into an in-depth discussion on architectural choices and the critical decisions behind constructing a secure and efficient landing zone.

Stay tuned for these updates and more!

Victor

🍹 Monitor AWS Managed IAM Policies

Managed Policy changed since last week: 11

1. 🚩 AWSConfigServiceRolePolicy
2. AWSQuickSightSageMakerPolicy
3. 🚩 AWSResilienceHubAsssessmentExecutionPolicy
4. 🚩 AWSS3OnOutpostsServiceRolePolicy
5. 🚩 AWS_ConfigRole
6. 🚩 AmazonConnectServiceLinkedRolePolicy
7. AmazonDataZoneFullUserAccess
8. AmazonKeyspacesFullAccess
9. AmazonRDSPreviewServiceRolePolicy
10. AmazonSageMakerCanvasDirectDeployAccess
11. 🚩 AmplifyBackendDeployFullAccess

Weekly diff
🤖 Powered by MAMIP | 🚩 Sensitive IAM Actions included

🥗 AWS Security Blog

• AWS-LC is now FIPS 140-3 certified
• Use AWS Secrets Manager to store and manage secrets in on-premises or multicloud workloads
• Enable Security Hub partner integrations across your organization
• Validate IAM policies with Access Analyzer using AWS Config rules
• How to use AWS Certificate Manager to enforce certificate issuance controls
• Secure by Design: AWS to enhance MFA requirements in 2024

🧁 IAM Permission Changes

• ds: 3 new actions - 3 new actions: DisableRoleAccess (Grants permission to disable AWS Management Console access for identity in your AWS Directory), EnableRoleAccess (Grants permission to enable AWS Management Console access for identity in your AWS Directory), UpdateDirectory (Grants permission to update the configurations like service account credentials or DNS server IP addresses for the specified directory)
• sagemaker: 2 updated conditions - 2 updated conditions: sagemaker:ImageArns (type), sagemaker:ImageVersionArns (type)