Monday,
March 03, 2025

🥖 Palette Cleanser - Guest Feast

Well friends, this is my last week as your guest chef before Daniel returns from his European holiday. It’s been a wild ride, and I’ve had a blast shaking things up in the kitchen. But fear not - next week, we’re back to our regularly scheduled programming with the one & only DG to take back the world stage.

Got thoughts on how I did with AWS Security Digest the past few weeks? Loved it? Hated it? You need Daniel to return ASAP?!?! Tell us here.

This issue is also available to share online.

📋 Chef's selections

  • AWS VDP disclosed on HackerOne by Nick Frichette

    Imagine an attacker probing your AWS environment - but instead of setting off alarm bells in CloudTrail, their actions fly completely under the radar. That’s exactly what Nick Frichette and his team found: 44 non-production endpoints in AWS DataZone that could be called with valid IAM credentials but didn’t log to CloudTrail.

  • Introducing Finders Keypers: A Open Source Tool to Discover Usage and Blast Radius of Encryption Keys in AWS by Jason Kao

    Jason Kao has what he calls an unhealthy obsession with cloud encryption - specifically, AWS KMS. And honestly? After seeing how painful it is to track where your KMS keys are actually being used, we get it.

    AWS gives you two official methods:

    1️⃣ CloudTrail logs (which can be incomplete)

    2️⃣ KMS key permissions (which don’t tell the full story)

    Jason said “no thanks” and built Finders Keypers, an open-source tool that takes a third approach: analyzing each AWS service and its resources to actually determine active KMS key usage. No more guessing, no more surprises - just clean, actionable insights into what your encryption keys are touching.

  • DeepSeek AI ~ A Glimpse into the Future of Data Privacy (or Lack Thereof?!) by Jason Murrell

    The DeepSeek AI conversation is still red hot, and for good reason. If you caught Jason Murrell’s previous deep dive here, you already know that this AI-powered chatbot is making serious waves in the data privacy world. Now, he’s back with more insights on just how deep this rabbit hole goes - from sketchy data collection practices to potential state-sponsored surveillance. If you thought your data was safe, as always, think again.

🥗 AWS security blogs

🍛 Reddit threads on r/aws

💸 Sponsor shoutout

Have you got a long list of AWS security issues you could fix but no idea how bad any of it really is?

Instead, start a free trial with Plerion. Focus on the 1% of risks that matter & achieve better security outcomes.

Simplify cloud security with Plerion.

🤖 Dessert

Dessert is made by robots, for those that enjoy the industrial content.

🧁 IAM permission changes

🍪 API changes

🍹 IAM managed policy changes

☕ CloudFormation resource changes

🎮 Amazon Linux vulnerabilities

📺 AWS Security Bulletins

    No bulletins this week.

YouTube Twitter LinkedIn

Crafted with ❤️ by Plerion. We simplify cloud security.