Lex NevaJun 13
13
Monday June, 2022
📢 MAMIP (Monitor AWS Managed IAM Policies)
Policies changed since last week:
- AWSApplicationMigrationAgentPolicy_v2
- AWSM2ServicePolicy
- AWSManagedServicesDeploymentToolkitPolicy
- AmazonMonitronFullAccess
- AmazonRDSBetaServiceRolePolicy
- AmazonRDSPreviewServiceRolePolicy
SRE Weekly Issue #326
📖 [The CloudSecList] Issue 141
Marco from CloudSecListJun 12
[tl;dr sec] #136 - Career Advice, Scaling AppSec at Netflix
Clint at tl;dr secJun 09
AWS Notification Message
GuardDutyAnnouncementsJun 07
Sponsor
Tackle your unused AWS assets, mistakenly left active with unusd.cloud, and react before the end of month bill 💸
In just a few minutes, you will be able to add your AWS account, start the analysis, and get reports on Slack, MS Teams, or by email.
Try now, it's free for the first 30 days.
AWS Database Migration Service - 9 new methods
Jun 8
This release adds DMS Fleet Advisor APIs and exposes functionality for DMS Fleet Advisor. It adds functionality to create and modify fleet advisor instances, and to collect and analyze information about the local data infrastructure.
AWSMainframeModernization - 32 new methods
Jun 8
AWS Mainframe Modernization service is a managed mainframe service and set of tools for planning, migrating, modernizing, and running mainframe workloads on AWS
Amazon Neptune - 6 new 3 updated methods
Jun 8
This release adds support for Neptune to be configured as a global database, with a primary DB cluster in one region, and up to five secondary DB clusters in other regions.
Amazon Redshift - 1 new methods
Jun 8
Adds new API GetClusterCredentialsWithIAM to return temporary credentials.
Introducing a new AWS whitepaper: Does data localization cause more problems than it solves?
Jana KayJun 10
Amazon Web Services (AWS) recently released a new whitepaper, Does data localization cause more problems than it solves?, as part of the AWS Innovating Securely briefing series. The whitepaper draws on research from Emily Wu’s paper Sovereignty and Data Localization, published by Harvard University’s Belfer Center, and describes how countries …
Use Amazon Cognito to add claims to an identity token for fine-grained authorization
Ajit AmbikeJun 8
With Amazon Cognito, you can quickly add user sign-up, sign-in, and access control to your web and mobile applications. After a user signs in successfully, Cognito generates an identity token for user authorization. The service provides a pre token generation trigger, which you can use to customize identity token claims …
AWS HITRUST Shared Responsibility Matrix version 1.2 now available
Sonali VaidyaJun 7
The latest version of the AWS HITRUST Shared Responsibility Matrix is now available to download. Version 1.2 is based on HITRUST MyCSF version 9.4[r2] and was released by HITRUST on April 20, 2022. AWS worked with HITRUST to update the Shared Responsibility Matrix and to add new controls based on …
AWS achieves ISO 22301:2019 certification
Sonali VaidyaJun 7
We’re excited to announce that Amazon Web Services (AWS) has successfully achieved ISO 22301:2019 certification without audit findings. ISO 22301:2019 is a rigorous third-party independent assessment of the international standard for Business Continuity Management (BCM). Published by the International Organization for Standardization (ISO), ISO 22301:2019 is designed to help organizations …
U2F deprecation and WebAuthn/FIDO update
May 31
Removed mentions of U2F as an MFA option and added information about WebAuthn, FIDO2, and FIDO security keys.
connect-campaigns: 4 new actions | 1 updated condition, 1 updated action
Jun 10
4 new actions: DeleteConnectInstanceConfig (Grants permission to remove configuration information for an Amazon Connect instance), DeleteInstanceOnboardingJob (Grants permission to remove onboarding job for an Amazon Connect instance), GetConnectInstanceConfig (Grants permission to get configuration information for an Amazon Connect instance), StartInstanceOnboardingJob (Grants permission to start onboarding job for an Amazon Connect …
m2: 32 new actions, 2 new resources, 3 new conditions
Jun 10
32 new actions: CancelBatchJobExecution (Grants permission to cancel the execution of a batch job), CreateApplication (Grants permission to create an application), CreateDataSetImportTask (Grants permission to create a data set import task), CreateDeployment (Grants permission to create a deployment), CreateEnvironment (Grants permission to Create an environment), DeleteApplication (Grants permission to delete …
GitHub - hexops/dockerfile: Dockerfile best-practices for writing production-worthy Docker images.
Dockerfile best-practices for writing production-worthy Docker images. - GitHub - hexops/dockerfile: Dockerfile best-practices for writing production-worthy Docker images.
Marco Lancini 🔖 Dockerfile best practices Dockerfile best-practices for writing production-worthy Docker images. github.com/hexops/dockerf…
Clint Gibler @Lak5hmi5udheer @JuliaaMarieee @BSidesSF @jbowocky @astha_singhal @ramimacisabird @askjeevansingh @_minus_world @likethecoins @nojonesuk @jassics @ph…
IAM policy types: How and when to use them | Amazon Web Services
You manage access in AWS by creating policies and attaching them to AWS Identity and Access Management (IAM) principals (roles, users, or groups of users) …
rowan New post about IAM policy types from AWS aws.amazon.com/blogs/security… As a writer, it's always interesting to see how others cover complex topics.…
Brigid Johnson This blog has several relatable use cases and IAM policy examples (JSON included!). Very helpful guidance for managing #aws permissions. twitter.com/…
A Deep Dive into Temporal's Access Control Strategy in AWS | Temporal Documentation
This blog post gives some insight into Temporal’s strategy for securing our cloud environment. It also calls attention to an unexpected facet of AWS access …
Update detected · z0ph/MAMIP@cd761d6
[MAMIP] Monitor AWS Managed IAM Policies Changes . Contribute to z0ph/MAMIP development by creating an account on GitHub.
Clint Gibler @clintgibler
📺 NahamCon 2022 Playlist
Featuring 🔥 talks by @seanyeoh, @devec0, @infosec_au, @Codingo, @zseano, @samwcyo, @gregxsunday, @Farah_Hawaa, and @Jhaddix
#bugbounty #bugbountytips
youtube.com/playlist?list=…
108
34Jun 07 · 5:00 PM Marco Lancini @lancinimarco
It's official: I'm writing a book! 📖
"The CloudSec Engineer" will be a book on how to enter, establish yourself, and thrive in the cloud security industry as an individual contributor.
1/
8310Jun 11 · 4:00 PM Marco Lancini @lancinimarco
🔖 AWS-Threat-Simulation-and-Detection
Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic.
github.com/sbasu7241/AWS-…
6514Jun 07 · 11:27 PM
stephenschmidt @StephenSchmidt
At #RSAC22 with my friend George, CISO of Apple, promoting #MoreThanAPassword. @CISAJen @CISAgov
524Jun 09 · 12:44 AM Clint Gibler @clintgibler
🧑🎓 Security Study Plan
A complete practical study plan to become a successful security professional in:
* Pen testing
* AppSec
* Cloud Security
* DevSecOps
and more
By @jassics
github.com/jassics/securi…
404Jun 10 · 7:00 PM
Toni de la Fuente @ToniBlyx
You asked we heard you, look what is coming in Prowler: 4 times faster execution and python support! Look this test by @sergargar1 😍 🚀
269Jun 09 · 7:13 PM
Scott Piper @0xdabbad00
The remote control car service gets the budget controls everyone else has been asking for because it impacts AWS's marketing budget. 😐
What's New on AWS (Unoffical) @awswhatsnew
AWS DeepRacer introduces quota management
AWS DeepRacer Multi-user mode provides an exciting way for organizations to sponsor multiple AWS DeepRacer participants under one AWS account. Until now, AWS DeepRacer event organizers lacked ways to preemp... aws.amazon.com/about-aws/what…
294Jun 06 · 10:17 PM
Chris Farris @jcfarris
For anyone looking to attend fwd:cloudsec - speaker acceptances will be going out soon. We've got a strong line-up but it does mean only about 20-25 additional tickets will be available. Mark your calendar, they go on sale June 13th at 5pm ET! and will sell out fast.
245Jun 07 · 12:54 AM
Kinnaird McQuade ⛅️🧨 @kmcquade3
How the fuck did I live without observability tools in serverless
170Jun 09 · 5:11 AM rowan @elrowan
New post about IAM policy types from AWS aws.amazon.com/blogs/security…
As a writer, it's always interesting to see how others cover complex topics. This is very different to how I cover it in my awsiamguide.com, but I do like the policy examples they've included
122Jun 08 · 1:55 AM
How can I automate my AWS EC2 Minecraft server so that it is only running when people are online?
I want the server to be offline when no one is one and online when someone try’s to connect.
- 🖊️ This newsletter was forwarded to you? Subscribe here
- 📢 Promote your content with ASD Sponsorship
- 💌 Want to suggest new content: contact me or reply to this email