AWS Morning Brief

Corey Quinn
undefined
Jul 24, 2023 • 7min

Space Heaters Plus DNS Equals Cloud

AWS Morning Brief for the week of July 24 2023 with Corey Quinn. Links:Amazon CodeCatalyst now supports workflows triggered by GitHub pullAmazon S3 Inventory can include ACLs as object metadata in inventory reports Amazon SNS can now deliver mobile push notifications in twelve new regions Introducing Analytics on Amazon Lex AWS Mainframe Modernization service is now PCI DSS Compliant Best Practices for Developing an AWS Co-Sell Program Amazon Route 53 Resolver Now Available on AWS Outposts RackReimagine Software Development With CodeWhisperer as Your AI Coding Companion Orca Security’s journey to a petabyte-scale data lake with Apache Iceberg and AWS Analytics Capture clickstream data using AWS serverless services Amazon Simple Email Service adds email delivery features to revised free tier Service Quota Observability Across Regions and AccountsRemoving Unassociated Elastic IPsNavigating common use cases spanning AWS GovCloud (US) and standard AWS
undefined
Jul 20, 2023 • 3min

The Logging Tax Auditor

Last week in security news: An Amazon senior security engineer was indicted in a $9M digital currency heist, Microsoft had one heck of a breach, this week’s S3 Bucket Negligence Award, and more!Links:A write-up of someone's experience going through the publicly available flAWS 1&2 labsSigns of the recent Microsoft breach in your account are tied to an enhanced level of license.An Amazon senior security engineer was indicted in a $9M digital currency heistA far-right publisher earned this week's S3 Bucket Negligence AwardAmazon FSx for NetApp ONTAP supports write once, read many (WORM) protection with SnapLock IAM Policies and Bucket Policies and ACLs! Oh, My! (Controlling Access to S3 Resources) was updated.Tool of the week: AWS IAM Data has launched.
undefined
Jul 19, 2023 • 6min

It's Extremely Likely You Should Not Use GovCloud

AWS Morning Brief Extras edition for the week of July 19, 2023.Want to give your ears a break and read this as an article? You’re looking for this link.https://www.lastweekinaws.com/blog/its-extremely-likely-you-should-not-use-govcloud/Never miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill
undefined
Jul 17, 2023 • 4min

GitHub Actions Done Smartly

In this episode, Corey Quinn talks about Tail Scale and its features for building trusted networks and sharing local services. He also discusses recent AWS updates, including AWS CodeBuild supporting GitHub Actions and AWS Lambda detecting and stopping recursive loops.
undefined
Jul 13, 2023 • 3min

Avoiding a Git Landmine

Last week in security news: A deep dive into the DomainNetworks Snail Mail Scam by Krebs on Security, Tailscale is putting their terms and conditions on GitHub, The Tool/ Lesson of the Week, and more!Links:A deep dive into who's behind the DomainNetworks Snail Mail Scam by Krebs on Security.Tailscale is putting its terms and conditions on GitHub and invites users to subscribe to see diffs instead of legalese.Three ways to accelerate incident response in the cloud: insights from re:Inforce 2023Tool/ Lesson of the week: git-landmine 
undefined
Jul 10, 2023 • 5min

Extracting Revenue and Also Teeth

AWS Morning Brief for the week of July 10, 2023 with Corey Quinn. Links:Last week I railed against what appeared to be AWS Transfer Family creating a new logging format.Last Week in AWS Job BoardAmazon CloudWatch now supports dashboard variablesAmazon DynamoDB now simplifies and lowers the cost of handling failed conditional writesMountpoint for Amazon S3 adds support for creating new files AWS Systems Manager Parameter Store increases API throughput limit Announcing DynamoDB local version 2.0 Building Generative AI into Marketing Strategies: A Primer How To Build an Email Service on SES Downgrade SQL Server Enterprise edition using AWS Systems Manager Document to reduce costITSkills4U: From dentistry to IT 
undefined
Jul 6, 2023 • 2min

The Horrible Game That Inspired My Bank

Last week in security news: The Password Game, Customer Compliance Guides Now Available on AWS Artifact, The Tool of the Week, and more!Links:The Password GameLastPass has apparently locked customers out due to MFA resets. Customer Compliance Guides now available on AWS ArtifactTool of the Week: findmytakeover 
undefined
Jul 5, 2023 • 6min

S3 Is Not a Backup (Replay)

AWS Morning Brief Extras edition for the week of July 5, 2023.Never miss an episodeJoin the Last Week in AWS newsletterSubscribe wherever you get your podcastsHelp the showLeave a reviewShare your feedbackSubscribe wherever you get your podcastsBuy our merch https://store.lastweekinaws.comWhat's Corey up to?Follow Corey on Twitter (@quinnypig)See our recent work at the Duckbill GroupApply to work with Corey and the Duckbill Group to help lower your AWS bill
undefined
Jul 3, 2023 • 3min

Amazon Basics Ohio

AWS Morning Brief for the week of July 3, 2023 with Corey Quinn. Links:AWS Lambda simplifies copying environment variables in the console code editorWhat is a spam trap and why you should care?How we learned to program with atoms in 24 hours flat Running an SSH server on AWS RoboMakerNew training series: Starting your Career with AWS CloudAWS to remove 62,000-message Simple Email Service 'always free' tier from August 2023AWS continues to invest in Ohio The INFORM Consumers Act takes effect on June 27. Here's how Amazon is protecting our customers and sellers from bad actors.
undefined
Jun 29, 2023 • 3min

Infosec Brain Worms

Last week in security news: 'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms, Issue with AWS Directory Service EnableRoleAccess, S3 buckets being used in attacks on npm packages, and more!Links:This collection of best practices for managing root users at scale in AWS is worth a read'Muddled Libra' Uses Oktapus-Related Smishing to Target Outsourcing Firms.1Health is this week's winner of the S3 Bucket Negligence AwardBarracuda advises customers to rip the entire device out, throw it away, and replace it entirely. S3 buckets being used in attacks on npm packagesIssue with AWS Directory Service EnableRoleAccessTool of the week: xeol is an end-of-life package scanner. 

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app