Issue #150
Monday · February 12, 2024
🥖 Palate Cleanser
Hey folks,This week, I got my first phishing attempt (see below) linked to my aws account. Looks like I'm now on the radar because of my online activities, mainly around AWS work.
I believe it's crucial to alert your operational teams about this, as a breached AWS account can have severe consequences for your business.
Dive into this week's digest of AWS Security news. I've spent hours filtering through AWS updates and announcements so you can kick back and enjoy this quick, 2-minute read.
Also, I shouldn't leave out this update: Amazon GuardDuty Malware Protection has expanded its capabilities to include scanning EBS volumes encrypted with managed keys.
Bon appétit! 🍽️
Victor
📋 Chef's selections
🥗 AWS security blogs
- How AWS can help you navigate the complexity of digital sovereignty
- AWS completes the 2023 South Korea CSP Safety Assessment Program
- AWS renews K-ISMS certificate for the AWS Asia Pacific (Seoul) Region
- How to migrate asymmetric keys from CloudHSM to AWS KMS
- 2023 C5 Type 2 attestation report available, including two new Regions and 170 services in scope
- How to migrate your on-premises domain to AWS Managed Microsoft AD using ADMT
🍛 Reddit threads on r/aws
🧁 IAM permission changes
🍪 API changes
🍹 IAM managed policy changes
Managed Policy changed since last week: 15- 🚩 AWSMarketplaceSellerFullAccess
- 🚩 AWSMigrationHubStrategyCollector
- AWSOrganizationsFullAccess
- AWSOrganizationsReadOnlyAccess
- AmazonDataZoneDomainExecutionRolePolicy
- 🚩 AmazonLexFullAccess
- AmazonRedshiftReadOnlyAccess
- 🚩 AmazonSageMakerCanvasBedrockAccess
- 🚩 AmazonVPCFullAccess
- AmazonVPCReadOnlyAccess
- 🚩 CloudWatchAgentAdminPolicy
- 🚩 CloudWatchAgentServerPolicy
- Health_OrganizationsServiceRolePolicy
- LakeFormationDataAccessServiceRolePolicy
- 🚩 ReadOnlyAccess
🤖 Powered by MAMIP
🚩 Sensitive IAM Actions included
☕ CloudFormation resource changes
🎮 Amazon Linux vulnerabilities
This section will show you the latest (Important and Critical) CVEs on Amazon Linux.No CVE this week.
