Issue #52
Monday · January 10, 2022
🥗 AWS security blogs
- Using AWS security services to protect against, detect, and respond to the Log4j vulnerability — January 7, 2022: The blog post has been updated to include using Network ACL rules to block potential log4j-related outbound traffic. January 4, 2022: The blog post has been updated to suggest using WAF rules when correct HTTP Host Header FQDN value is not provided in the request. December 31, …
- Disabling Security Hub controls in a multi-account environment — In this blog post, you’ll learn about an automated process for disabling or enabling selected AWS Security Hub controls across multiple accounts and multiple regions. You may already know how to disable Security Hub controls through the Security Hub console, or using the Security Hub update-standards-control API. However, these methods …
- AWS re:Invent 2021 security track recap — Another AWS re:Invent is in the books! We were so pleased to be able to host live in Las Vegas again this year. And we were also thrilled to be able to host a large virtual audience. If you weren’t able to participate live, you can now view some of …
- Automatically resolve Security Hub findings for resources that no longer exist — In this post, you’ll learn how to automatically resolve AWS Security Hub findings for previously deleted Amazon Web Services (AWS) resources. By using an event-driven solution, you can automatically resolve findings for AWS and third-party service integrations. Security Hub provides a comprehensive view of your security alerts and security posture …
🍛 Reddit threads on r/aws
- Thanks to all of the "My account was hacked!" posts here, I finally setup MFA on all of my accounts — Just wanted to post a thank-you for all the hard lessons learned by the community. It was the final motivation I needed to setup MFA across all of my environments in all of my projects. I've been delaying the setup for months. Thanks for the motivation! Hopefully this serves as …
- Multi-Cloud is NOT the solution to the next AWS outage. — My take on the recent "December" outages. I have seen too many articles talking about Multi-Cloud in the past month, while there is a lot that can be done in terms of disaster recovery before even considering Multi-cloud. Article I wrote on the subject and alternative
- Reduced S3 costs by 60% with S3 Glacier Instant Retrieval storage class — Our S3 storage was a bit unoptimized and with bucket analytics and lifecycle rules, we've managed to reduce the costs from $3400/month to $300/month. The last piece of the puzzle was to switch from Standard IA to Glacier Instant Retrieval which enabled an additional reduction of 60% on top of …
- How to spend $27k on EBS Volumes you never knew you had. — TLDR;: Forget to check the hidden "Delete on Termination" checkbox for the EBS volumes of your Launch Config that is attached to the ASG of the capacity provider of your ECS cluster. Good times. A couple of months ago, we had some performance issues and determined it was best to …
- Announcing AWS CloudTrail Lake, a managed audit and security lake
📌 Newsletters
📌 r/netsec
📌 r/cloudsecurity
- What is the difference between endpoint Security and cloud security ? — Example : What is the difference between endpoint security of a win10 laptop vs win10 VM on a cloud ? We are essentially deploying the same AV solution on both of them, so what is the difference ? Any reading material, link etc would be appreciated.
📌 "AWS Security" on Google News
🧁 IAM permission changes
- pi: 3 new actions — 3 new actions: GetResourceMetadata (call getresourcemetadata api to retrieve the metadata for different features), ListAvailableResourceDimensions (call listavailableresourcedimensions api to retrieve the dimensions that can be queried for each specified metric type on a specified db instance), ListAvailableResourceMetrics (call listavailableresourcemetrics api to retrieve metrics of the specified types that can be …
- iotwireless: 2 new actions — 2 new actions: DeleteQueuedMessages (delete queuedmessages), ListQueuedMessages (list the queued messages)
- elasticfilesystem: 3 new actions — 3 new actions: CreateReplicationConfiguration (create a new replication configuration), DeleteReplicationConfiguration (delete a replication configuration), DescribeReplicationConfigurations (view the description of an amazon efs replication configuration specified by filesystemid; or to view the description of all replication configurations owned by the caller's aws account in the aws region of the endpoint that …
🍪 API changes
- AWS AppSync - 9 updated methods — AppSync: AWS AppSync now supports configurable batching sizes for AWS Lambda resolvers, Direct AWS Lambda resolvers and pipeline functions
- Amazon Elastic Compute Cloud - 11 updated methods — This release introduces On-Demand Capacity Reservation support for Cluster Placement Groups, adds Tags on instance Metadata, and includes documentation updates for Amazon EC2.
- Amazon Elasticsearch Service - 6 updated methods — Amazon OpenSearch Service adds support for Fine Grained Access Control for existing domains running Elasticsearch version 6.7 and above
- AWS IoT Wireless - 2 new methods — Downlink Queue Management feature provides APIs for customers to manage the queued messages destined to device inside AWS IoT Core for LoRaWAN. Customer can view, delete or purge the queued message(s). It allows customer to preempt the queued messages and let more urgent messages go through.
