AWS Morning Brief

AWS Morning Brief for the week of March 27, 2023 with Corey Quinn. Links: Allow Listing tool for testing new Billing, Cost Management and Account console permissions  Amazon CloudWatch Logs adds support for new Amazon VPC Flow Logs metadata Amazon EC2 C6in, M6in, M6idn, R6in, and R6idn metal instances are now availableAmazon SNS (pronounced "Snizz") announces support for setting content-type request headers for HTTP/S notificationsAWS CodeBuild now supports a small GPU machine typeConfiguring .NET Garbage Collection for Amazon ECS and AWS LambdaIntegrating with GitHub Actions – Amazon CodeGuru in your DevSecOps PipelineDelete Empty CloudWatch Log Steams Growing AWS internet peering with 400 GbE

Last week in security news: The Many Ways to Access DynamoDB, a Yubikey configuration cheatsheet, and more!Links: The Many Ways to Access DynamoDB Scott Piper’s post on redacting AWS account IDs from public posts How to use Google Workspace as an external identity provider for AWS IAM Identity Center Yubikey configuration cheatsheet

AWS Morning Brief for the week of March 20, 2023 with Corey Quinn. Links:jobs.lastweekinaws.comAmazon EC2 M1 Mac instances now support in-place operating system updates Announcing Amazon Linux 2023  AWS Chatbot now available in Microsoft Teams  Announcing cross-account support for Amazon S3 Multi-Region Access Points  Talk about cloud with a non-cloud audience New – Use Amazon S3 Object Lambda with Amazon CloudFront to Tailor Content for End UsersImplementing an event-driven serverless story generation application with ChatGPT and DALL-E The Future of Mining is in the Cloud

Last week in security news: U.S. Officials are frustrated with cloud providers, Best Practices For Securing Your Home Network, The Tool of the Week, and more!Links:U.S. officials express significant frustration that cloud providers often up-charge customers to add security protectionsLightspin has a guide to SecDataOps and Vulnerability Management on AWS Best Practices For Securing Your Home Network. IAM Identity Center for AWS environments spanning AWS GovCloud (US) and standard Regions Establishing a data perimeter on AWS: Allow only trusted resources from my organizationHow to use policies to restrict where EC2 instance credentials can be used fromTool of the Week: Nosey Parker

AWS Morning Brief Extras edition for the week of March 15, 2023.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/awss-anti-competitive-move-hidden-in-plain-sight/Never miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of March 13, 2023 with Corey Quinn. Links:jobs.lastweekinaws.com Amazon EC2 announces the ability to create Amazon Machine Images (AMIs) that can boot on UEFI and Legacy BIOS AWS Application Composer is now generally available AWS CloudShell now supports the modular variant of AWS Tools for PowerShell  AWS Config now supports 18 new resource types  AWS Lambda now supports up to 10 GB of ephemeral storage for Lambda functions in 6 additional regions AWS announces new competition structure for the 2023 SeasonAWS Resource Explorer supports 12 new resource typesAnnouncing lower data warehouse base capacity configuration for Amazon Redshift Serverless Meet the Newest AWS Heroes – March 2023 Subscribe to AWS Daily Feature Updates via Amazon SNSCalculate Amazon DynamoDB reserved capacity recommendations to optimize costs How to use deletion protection to enhance your Amazon DynamoDB table protection strategy  Push notification engagement metrics tracking  Build Cloud Operations skills using the new AWS Observability Training

Last week in security news: Audit Log Wall of Shame, More info on the LastPass breach, the Tool of the Week, and more!Links:Audit Log Wall of ShameSaudi social media app Fayvo apparently had an unsecured database More information has come to light about the LastPass breach Three ways to boost your email security and brand reputation with AWSTool of the week: Trailscraper is an open source project to get useful information out of CloudTrail logs.

AWS Morning Brief for the week of March 6, 2023 with Corey Quinn. Links:Amazon Aurora Serverless v1 now supports customer configurable maintenance windowsAmazon CloudWatch Internet Monitor is now generally availableAWS Lambda Powertools for .NET is now generally available Amazon Neptune Serverless now scales down to 1 NCU to save costs AWS Control Tower announces a progress tracker for landing zone setup and upgrades In the Works – AWS Region in Malaysia  New – Amazon Lightsail for Research with All-in-One Research Environments  Announcing Amazon ECS Task Definition Deletion Announcing the end of Windows Installer support for AWS Tools for Windows “Avatar: The Way of Water” and the future of filmmaking  A detailed overview of Trusted Advisor Organizational Dashboard

Last week in security news: US Military emails leaked on an exposed server, How to monitor and query IAM resources at scale, the Tool of the Week, and more!Links:If you're in Seattle, come to Outer Planet Brewing this Sunday at 7PM and let Corey buy you a drink.Aiden Steele writes at length about using a recent enhancement to Systems Manager to pass out a role to all of your EC2 instances.US Military emails leaked on an exposed serverAmazon Detective launches an interactive workshop for investigating potential security issues How to monitor and query IAM resources at scale – Part 1 Tool of the week: a break-glass role to limit production access to the AWS console

AWS Morning Brief Extras edition for the week of March 1, 2023.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/aws-is-asleep-at-the-lambda-wheelNever miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of February 27, 2023 with Corey Quinn. Links: Amazon OpenSearch Service now lets you schedule service software updates during off-peak hours AWS App Runner now supports HTTP to HTTPS redirect Announcing the ability to enable AWS Systems Manager by default across all EC2 instances in an account New: AWS Telco Network Builder – Deploy and Manage Telco NetworksDeveloping portable AWS Lambda functions Using Porting Advisor for Graviton Query data with DynamoDB Shell – a command line interface for Amazon DynamoDBAWS and Hugging Face collaborate to make generative AI more accessible and cost efficientBranch Insurance improves hiring diversity and accelerates app development using AWS AppSync Gain compliance insights using the open source community for AWS CloudTrail  The true costs of resiliency decisions

Last week in security news: More security woes for Azure, the AWS Survival Kit, CloudGPT, and more!Links:A security researcher reported a potential account compromise vector to Azure back in 2021. I once again want to draw your attention to the open source AWS Survival Kit.  How to visualize IAM Access Analyzer policy validation findings with QuickSight Updated ebook: Protecting your AWS environment from ransomwareChatGPT is all the rage, and of course here's CloudGPT to analyze AWS policies for vulnerabilitiesScott Piper has a great tip for us this week: think of the vendors / partners who have roles in your AWS account.

AWS Morning Brief Extras edition for the week of February 22, 2023.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/amazons-snowball-edge-frustrates-this-userNever miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill

Episode description not available.

Last week in security news: Ubiquiti inside attacker pleads guilty, Wiz 2023 State of the Cloud report, the tool of the week, and more!Links:That inside attacker who worked at jackass company Ubiquiti pleads guilty Datadog's security folk discovered an AWS Console rate limit bypass Wiz 2023 State of the Cloud report The anatomy of ransomware event targeting data residing in Amazon S3 Tool of the week: aws-firewall-factory

AWS Morning Brief Extras edition for the week of February 15, 2023.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/the-dumbest-dollars-a-cloud-provider-can-make/Never miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill

AWS Morning Brief for the week of February 13, 2023 with Corey Quinn. Links:Amazon Chime SDK now offers a Windows client libraryAmazon CloudWatch now supports high resolution metric extraction from structured logs AWS SAM CLI introduces ‘sam list’ command to inspect AWS SAM resources  Get cost estimates faster with AWS Pricing Calculator bulk import  New – Visualize Your VPC Resources from Amazon VPC Creation Experience  Introducing the AWS ProServe Hadoop Migration Delivery Kit TCO tool  Introducing the Amazon EKS Workshop  Using GitHub Actions with Amazon CodeCatalyst  Using Amazon CloudWatch metrics to monitor time to expiration for Reserved Instances

Links:In this down market, it's good to know that jobs paying six (and rarely, seven!) figure salaries, giving bonuses, and of course including paid time off are still out there. Unfortunately they're working for cybercrime groups.Ian McKay is great--but given his history of creating awesome-yet-horrifying things in AWS I read this piece on Cedar (AWS's new policy language) Popular drone manufacturer CrowdStrike reports on how Adversaries Can Persist with AWS User Federation, How to set up ongoing replication from your third-party secrets manager to AWS Secrets Manager Want to chain roles in a way that works for more than an hour? Role Chain Juggling has you covered.

Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/the-aws-community-isnt-for-amazoniansNever miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill

Links:Amazon announced its fourth quarter and FY 2022 results last week; Tim Bray has an analysis that's absolutely worth reading. Amazon CloudWatch now simplifies metric extraction from structured logsAmazon MemoryDB for Redis Announces 99.99% Availability Service Level AgreementAWS CloudTrail Lake now supports ingestion of activity events from non-AWS sources AWS announces access of Simple Monthly Calculator estimates in the AWS Pricing Calculator Amazon increases NAT Gateway’s capacity to support concurrent connections to a unique destinationAmazon EMR launches support for Amazon EC2 C7g (Graviton3) instances to improve cost performance for Spark workloads by 7–13% Analyze Amazon S3 storage costs using AWS Cost and Usage Reports, Amazon S3 Inventory, and Amazon Athena AWS shows why physical stores matter more than ever at NRF 2023