Topics include leaking real secrets with Copilot and CodeWhisperer, a cloud cryptocurrency miner teardown, creating an AMI hardening pipeline, automating updates for ECS instance fleet, improving security incident response with Jupyter notebooks, and the tool of the week aws-firewall-factory for WAF usage.

AWS Morning Brief for the week of November 13, 2023, with Corey Quinn. Show Notes:Links:Amazon Aurora Global Database for PostgreSQL now supports write forwardingAmazon SQS announces support for JSON protocolAWS Cost Management now provides purchase recommendations for Amazon MemoryDB Reserved NodesIntroducing the Generative AI Center of Excellence for AWS Partners: The Path to AI ExpertiseNew – Block Public Sharing of Amazon EBS SnapshotsNew for Amazon Comprehend – Toxicity DetectionAWS CodeBuild adds support for AWS Lambda compute modeAn Overview of Bulk Sender Changes at Yahoo/GmailCreating a correction of errors documentKnow Before You Go – AWS re:Invent 2023 | AWS Management ConsoleUnhoused individuals gain shelter, prove their identity using AWS-powered solution KiipHow VMware partnered with AWS to nurture a culture of sustainabilityHow to Stop Feeding AWS’s AI With Your Data

The podcast discusses the recent lawsuit against SolarWinds and their CISO by the SEC, the ElectraLeak campaign targeting exposed IAM credentials, and security considerations for running containers on Amazon ECS.

The podcast discusses how AWS trains AI models on user data and the challenges of opting out. It highlights the lack of transparency in AWS's practices and raises concerns about their terms of service restrictions.

Updates and announcements on AWS services: Amazon Athena, AWS Neuron, streaming logs to Splunk with AWS Lambda. GoDaddy's benchmarking results with AWS Graviton2. Evaluating generative AI for contact center customer experience. Topics on service usage: low cardinality indexes, analyzing harmonics issues, optimizing cloud costs, monitoring Amazon EFS storage costs. Release of Finch 1.0 GA.

The podcast discusses the importance of email security and highlights the significance of AWS role session tags for GitHub Actions. It also explores the damning summary of the Okta hack and introduces the AWS Digital Sovereignty Pledge for an independent sovereign cloud in Europe.

AWS Morning Brief discusses various AWS updates and announcements, including optimizations in Amazon Aurora MySQL, support for customer-managed IAM policies in Amazon EKS, and enabling blocked public access for AMIs. They also talk about AWS Jam, a post mortem of an AWS service event, and AWS's policy on the resale of reserved instances.

Last week in security news: PR pushback from Microsoft, AWS Cloud Companion Guide for the CSA Cyber Trust Mark, and more!Links:My intense 2am conversation with MSRC a week before BlackHatAWS announces Cloud Companion Guide for the CSA Cyber Trust markSecuring generative AI: An introduction to the Generative AI Security Scoping Matrix

The podcast discusses the challenges of understanding and predicting costs for AWS services. It introduces a new pricing metric - Amazon Aurora IO Optimized - and emphasizes the benefits of standardizing costs for easier infrastructure planning.

In this podcast, they cover recent AWS announcements such as new EC2 instances, Redshift integration, and CloudWatch alarm recommendations. They also discuss migrating to Red Hat Enterprise Linux, data archiving with DynamoDB, using AI technology to monitor cows, highlights from AWS Gen AI Day, and employee skill investment by Stellantis.