AWS Security Digest

Monday,
July 07, 2025

🥖 Palette Cleanser

The internet ghosted us this week.

After giving us content overload last issue, there's been barely a whisper since. The good news is fwd:cloudsec USA talks are live, so there's plenty of interesting content to consume nonetheless.

Apparently, edge network devices have been trying to catch the internet on fire again. This time it's Citrix Netscaler ADC and Netscaler Gateway. I don't know how bad this is, but ReliaQuest has reported "indications of exploitation" in the wild. Maybe these kinds of devices just need a rethink.

Have feedback about AWS Security Digest? Tell us here. This issue is also available to share online.

📋 Chef's selections

Building a cloud security roadmap: Tools by layer and when you need them (pt.1) by Ethan Chen

If you've ever wondered what all the security things are that you might need to implement in your cloud environment, this is a decent place to start. It's more of a taxonomy of tools than a guide — I assume the guide will come in part 2? I'll confess I didn't know people still used/referred to what was once called intrusion detection systems (IDS) and intrusion prevention systems (IPS), especially in the cloud.
fwd:cloudsec USA 2025 Conference Talk Summaries by Christophe Limpalair

Christophe used AI to elegantly summarize every talk from this year's con, and I picked out the AWS ones for you to enjoy:

🥗 AWS security blogs

🍛 Reddit threads on r/aws

💸 Sponsor shoutout

Meet Pleri: your AI-powered cloud security teammate. She’s not a chatbot. Pleri proactively finds meaningful security work and fixes issues before they become problems.

Learn more about Pleri and see her in action.

🤖 Dessert

Dessert is made by robots, for those that enjoy the industrial content.

🧁 IAM permission changes

🍪 API changes

🍹 IAM managed policy changes

☕ CloudFormation resource changes

🎮 Amazon Linux vulnerabilities

📺 AWS security bulletins

No bulletins this week.