Issue #57
Monday · February 14, 2022
🥗 AWS security blogs
- C5 Type 2 attestation report now available with 141 services in scope — Amazon Web Services (AWS) is pleased to announce the issuance of the new Cloud Computing Compliance Controls Catalogue (C5) Type 2 attestation report. We added 18 additional services and service features to the scope of the 2021 report. Germany’s national cybersecurity authority, Bundesamt für Sicherheit in der Informationstechnik (BSI), established …
🍛 Reddit threads on r/aws
- We started using AWS SSO with external apps - there is no api so i had to automate the creation of over 500 apps
- Terraform AWS Provider 4.0
- A magical AWS serverless developer experience
- Best Practices for AWS Organizations Service Control Policies in a Multi-Account Environment
- Introducing AWS Virtual Waiting Room
📌 Newsletters
📌 Top Links from Security Folks
- Release v4.0.0 · hashicorp/terraform-provider-aws — BREAKING CHANGES: data-source/aws_connect_hours_of_operation: The hours_of_operation_arn attribute is renamed to arn (#22375) resource/aws_batch_compute_environment: No compute_resources configura...
📌 r/netsec
📌 r/cloudsecurity
- AWS Cloud Security challenge - 1 — Hey folks, Starting these random challenges for people to try out and learn cloud hacking. You can start the hunt from s3-challenge-1 bucket. :) Have fun !
📌 "AWS Security" on Google News
🧁 IAM permission changes
- ds: 1 new action | 4 updated actions — 1 new action: DescribeClientAuthenticationSettings (retrieve information about the type of client authentication for the specified directory, if the type is specified. if no type is specified, information about all client authentication types that are supported for the specified directory is retrieved. currently, only smartcard is supported); 4 updated actions: ConnectDirectory …
- quicksight: 2 new actions — 2 new actions: AccountConfigurations (to enable setting default access to aws resources), ScopeDownPolicy (scoping policies for permissions to aws resources)
- cloudformation: 1 new action — 1 new action: DescribeChangeSetHook (return the hook invocation information for the specified change set)
🍪 API changes
- AWS CloudFormation - 1 updated methods — This SDK release adds AWS CloudFormation Hooks HandlerErrorCodes
- Amazon Pinpoint - 4 updated methods — This SDK release adds a new paramater creation date for GetApp and GetApps Api call
- AWS WAFV2 - 3 new 8 updated methods — Adds support for AWS WAF Fraud Control account takeover prevention (ATP), with configuration options for the new managed rule group AWSManagedRulesATPRuleSet and support for application integration SDKs for Android and iOS mobile apps.
- AWS CloudFormation - 1 new 15 updated methods — This SDK release is for the feature launch of AWS CloudFormation Hooks.
