Lex NevaNov 01
1
Monday November, 2021
📢 MAMIP (Monitor AWS Managed IAM Policies)
Policies changed since last week:
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSMigrationHubStrategyCollector
- AWSMigrationHubStrategyConsoleFullAccess
- AWSMigrationHubStrategyServiceRolePolicy
- AWSPanoramaApplianceServiceRolePolicy
- AWSPanoramaFullAccess
- AWSPanoramaServiceLinkedRolePolicy
- AmazonChimeSDK
Get notified of policy change using this Twitter bot. 🐦
SRE Weekly Issue #294
📖 [The CloudSecList] Issue 111
Marco from CloudSecListOct 31
[tl;dr sec] #107 - Supply Chain and CI/CD Security, Threat Modeling in HCL
Clint at tl;dr secOct 28
AWS Security Hub adds support for cross-Region aggregation of findings to simplify how you evaluate and improve your AWS security posture
Oct 20
AWS Security Huband, nbsp;now allows you to designate an aggregation Region and link some or all Regions to that aggregation Region. This gives you a centralized view of all your findings across all of your accounts and all of your linked Regions. After you link a Region to the aggregation …
Amazon CloudWatch Application Insights - 11 updated methods
Oct 29
Added Monitoring support for SQL Server Failover Cluster Instance. Additionally, added a new API to allow one-click monitoring of containers resources.
Amazon Connect Service - 2 new 3 updated methods
Oct 29
Amazon Connect Chat now supports real-time message streaming.
Amazon Elastic Compute Cloud - 2 updated methods
Oct 29
Support added for AMI sharing with organizations and organizational units in ModifyImageAttribute API
Amazon Rekognition - 1 updated methods
Oct 29
This release added new attributes to Rekognition Video GetCelebrityRecognition API operations.
Forensic investigation environment strategies in the AWS Cloud
Sol KavanaghOct 28
When a deviation from your secure baseline occurs, it’s crucial to respond and resolve the issue quickly and follow up with a forensic investigation and root cause analysis. Having a preconfigured infrastructure and a practiced plan for using it when there’s a deviation from your baseline will help you to …
Migrate and secure your Windows PKI to AWS with AWS CloudHSM
Govindarajan VaradanOct 27
AWS CloudHSM provides a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys in AWS. Using CloudHSM as part of a Microsoft Active Directory Certificate Services (AD CS) public key infrastructure (PKI) fortifies the security of your certificate authority (CA) private key …
Three ways to improve your cybersecurity awareness program
Stephen SchmidtOct 26
Raising the bar on cybersecurity starts with education. That’s why we announced in August that Amazon is making its internal Cybersecurity Awareness Training Program available to businesses and individuals for free starting this month. This is the same annual training we provide our employees to help them better understand and …
Correlate security findings with AWS Security Hub and Amazon EventBridge
Marshall JonesOct 25
In this blog post, we’ll walk you through deploying a solution to correlate specific AWS Security Hub findings from multiple AWS services that are related to a single AWS resource, which indicates an increased possibility that a security incident has happened. AWS Security Hub ingests findings from multiple AWS services, …
textract: 2 new actions
Oct 30
2 new actions: GetExpenseAnalysis (return information about an expense analysis job), StartExpenseAnalysis (start an asynchronous job to detect instances of invoices or receipts within an image or pdf provided as input)
cloudwatch: 1 new condition | 1 updated condition, 1 updated action
Oct 28
1 new condition: cloudwatch:requestInsightRuleLogGroups (filters actions based on the log groups specified in an insight rule.); 1 updated condition: cloudwatch:AlarmActions (type); 1 updated action: PutInsightRule (conditions)
GitHub - rung/threat-matrix-cicd: Threat matrix for CI/CD Pipeline
Threat matrix for CI/CD Pipeline. Contribute to rung/threat-matrix-cicd development by creating an account on GitHub.
Introducing Quiet Riot - Wes Ladd - Medium
A Scalable AWS Enumeration and Footprinting Tool
Clint Gibler @clintgibler
🛡️ Attacking and Securing CI/CD Pipelines
@rung's talk covers why CI/CD pipeline security is important, relevant breaches, several attack scenarios, and how to defend
ATT&CK-like matrix for CI/CD Pipelines. Repo 👇
github.com/rung/threat-ma…
speakerdeck.com/rung/cd-pipeli…
Christophe @christophetd
TTPs for compromising CI/CD pipelines, by @rung
github.com/rung/threat-ma…
Clint Gibler @clintgibler
🗡️ Awesome Linux #Rootkits
Repo with links to source code of 10s of Linux rootkits
Both user mode and kernel mode
github.com/milabs/awesome…
Scott Piper @0xdabbad00
AWS execs need to read this to see how users of other cloud providers don't have to deal with the limitations AWS has.
Phil Venables @philvenables
Example of security and (micro-)economics needing to be aligned.
This is a great post from @forrestbrazeal esp. the crucial point on org/project structure decoupling from billing is crucial.
Billing "boundaries" are not usually security boundaries.
cloud.google.com/blog/products/…
Victor Grenu @zoph
A new major release of AWS Secure Environment Accelerator (ASEA) is out (1.5), check out as there are some interesting new features, like the possibility to install it on top of AWS Control Tower.
- github.com/aws-samples/aw…
Scott Piper @0xdabbad00
The entire training is under 700 words. learnsecurity.amazon.com/training/story…
Amazon News @amazonnews
Starting today, we're making the same cybersecurity training used by Amazon employees available to businesses and individuals around the world at no cost. #CybersecurityAwarenessMonth aboutamazon.com/news/community…
Kinnaird McQuade💥🌩 @kmcquade3
🔥@WesLadd dropped a new AWS security tool, Quiet Riot - unauthenticated enumeration and footprinting of AWS accounts that can validate AWS Account IDs and services in use (via existing service linked role names) at a rate of 1100 requests per second.
blog.traingrc.com/introducing-qu…
Kinnaird McQuade💥🌩 @kmcquade3
Me: Asks a very, very specific question in an online forum related to cloud security
**immediately receives 3 DMs from friends asking me what the hell I am up to**
😈
Brigid Johnson @bjohnso5y
Trick or treat? Pickles always chooses treat. Happy Halloween 🎃
Brigid Johnson @bjohnso5y
Reinvent presentations are like gas. To create them, they will take up as much time as you give them.
Was billed 60k with a free tier?
I was billed 60k having only signed up for the free tier, what is this? Contacted aws support and they told me this was correct and that all usage above the free tier was billed like normal. My site has not seen activity that indicates that this is correct? What …
- 🖊️ This newsletter was fwd to you? Subscribe here
- 💌 Want to suggest new content: contact me or reply to this email
- ⚡️ Powered by Mailbrew
- 🐦 Follow me on Twitter or hire me.
