AWS Security Digest · Issue #158

📋 Chef's selections

🥗 AWS security blogs

TLS inspection configuration for encrypted egress traffic and AWS Network Firewall
How to generate security findings to help your security team with incident response simulations

🍛 Reddit threads on r/aws

📌

Stop the money leak (Sponsor)

We are building a 🚚 Garbage collector for your AWS Accounts.

As DevOps engineers building a SaaS product from the ground up for our fellow engineers, we understand the challenges of AWS cost optimization.

We're excited to share our product: unusd.cloud, an automatic waste detection solution designed to reduce your AWS spending, attack surface, and environmental impact 🍃.

With unusd.cloud, you can eliminate wasted spend on unused AWS assets, effortlessly uncover and address active assets you didn't know were still running, and ultimately optimize your AWS budget.

🧁 IAM permission changes

🍪 API changes

🍹 IAM managed policy changes

Managed Policy changed since last week: 17

Weekly diff

🤖 Powered by MAMIP | 🚩 Sensitive IAM Actions included

☕ CloudFormation resource changes

AWS::Bedrock
AWS::SecurityHub
AWS::CloudWatch::AnomalyDetector

🎮 Amazon Linux vulnerabilities

This section will show you the latest (Important and Critical) CVEs on Amazon Linux.

No CVE this week 🎉