AWS Security Digest · Issue #50

🥗 AWS security blogs

Continuous runtime security monitoring with AWS Security Hub and Falco — Customers want a single and comprehensive view of the security posture of their workloads. Runtime security event monitoring is important to building secure, operationally excellent, and reliable workloads, especially in environments that run containers and container orchestration platforms. In this blog post, we show you how to use services such …
Using AWS security services to protect against, detect, and respond to the Log4j vulnerability — December 17, 2021: The blog has been updated to include using Athena to query VPC flow logs. December 16, 2021: The Respond section of the post has been updated to include IMDSv2 and container mitigation info. Overview In this post we will provide guidance to help customers who are responding …
Open source hotpatch for Apache Log4j vulnerability — December 14, 2021:The version 2.15 Log4j was updated to the new version out today. At Amazon Web Services (AWS), security remains our top priority. As we addressed the Apache Log4j vulnerability this weekend, I’m pleased to note that our team created and released a hotpatch as an interim mitigation step. …

Another AWS outage? — Unable to access any of our resources in us-west-2 across multiple accounts at the moment
Using AWS security services to protect against, detect, and respond to the Log4j vulnerability
Today I learned "Classic PostgreSQL on RDS beats Aurora in Benchmarks" — One of my client wanted 5000IOPS for peak hours but at the cheaper costs. We tried RDS Provisioning for 5000IOPS but the costs had skyrocketed. After researching I found this medium link I got to know RDS+1TB storage gives better performance than Aurora at 3000IOPS and that too at cheaper …
Using Route53 as a Key Value Store in GitHub Actions
Lessons in Trust From us-east-1

Snaring the Bad Folks - Netflix TechBlog — Project by Netflix’s Cloud Infrastructure Security team (Alex Bainbridge, Mike Grima, Nick Siow)
GitHub - Cybereason/Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell — Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell - GitHub - Cybereason/Logout4Shell: Use Log4Shell vulnerability to vaccinate a victim server against Log4Shell

Azure CSPM Coding Doubt — Hey, my boss told me to start working on the Azure CSPM integration for our product. I don't have a lot of experience with cloud security. I have experience with information security only. Also, did a project on AWS integration. I'm very confused about Azure. I don't really know where …