AWS Security Digest

In a nutshell

You are more and more to subscribe to ASD, and I want to thank you folks. To better understand your expectations, I've created a small survey (1 min): AWS Security Digest Survey.

Notable move for "csp-security-mistakes" community repository initiated by Scott to a more usable, good-looking website, led by Wiz.io folks. It's called "Open CVDB". Here's a direct link to AWS Mistakes.

🔦 Highlight of the week

• [Live Podcast] Building AWS Security Guardrails with Kinnaird and Ashish
• TLS 1.2 to become the minimum TLS protocol level for all AWS API endpoints
• The Open Cloud Vulnerability & Security Issue Database

📢 MAMIP (Monitor AWS Managed IAM Policies)

Policies changed since last week:

• AWSElasticDisasterRecoveryAgentInstallationPolicy
• AWSElasticDisasterRecoveryFailbackInstallationPolicy
• AWSSSOServiceRolePolicy
• AmazonConnectServiceLinkedRolePolicy
• AmazonLookoutEquipmentReadOnlyAccess
• AmazonMacieFullAccess
• AmazonSageMakerFullAccess

Weekly diff

👉🏻 From AWS Bots: 📃 MAMIP / 🤖 MASE / 👮🏻‍♂️ MGDA

Sponsor

I see many stories of students going through a tough spot because of an unexpected AWS bill 💸.

As a student, during your apprenticeship, or while preparing for your AWS certifications, you will probably create an AWS Free-tier account and use it to manipulate and create cloud resources.

To avoid unnecessary resources that you forgot to turn off on your accounts, I’ve created a SaaS product called unusd.cloud.

unusd will allows you to receive a notification 💌 when an unused resource is detected: EC2, RDS, Glue DevEndpoints, EIP, EBS Volumes, Redshift Clusters, SageMaker Notebooks. It also provides visibility on current and forecasted spending (end-of-month).

PS: It’s free (forever) for a single AWS Account.

• 🖊️ This newsletter was forwarded to you? Subscribe here
• 📢 Promote your content with ASD Sponsorship
• 💌 Want to suggest new content: contact me or reply to this email