Topics discussed include delegating permission set management and account assignment in AWS IAM Identity Center, how AWS protects customers from DDoS events, a tip of the week on delegating management to designated accounts, and an issue with Amazon WorkSpaces Windows Client Version 5.9 and 5.10.

AWS Morning Brief for the week of October 16, 2023 with Corey Quinn. Links:New Amazon CloudWatch metric monitors EC2 instance reachability to EBS volumesAnnouncing AWS Lambda’s support for Internet Protocol Version 6 (IPv6) for outbound connections in VPC Announcing new AWS Network Load Balancer (NLB) availability and performance capabilities Two billion downloads of Terraform AWS Provider shows value of IaC for infrastructure managementWhy purpose-built artificial intelligence chips may be key to your generative AI strategyHow Zalando migrated their shopping carts to Amazon DynamoDB from Apache Cassandra Unlocking cost-optimization: Open Raven’s journey with Amazon Aurora I/O-Optimized leads to 60% savingsHow does Cloud enable the transformation of Bank finance functions? AWS Cloud Institute: Virtual training program for cloud developers

This podcast covers security topics like data loss in the cloud, leaked IAM keys, user experience with security hub, Google deprecating security offerings, AWS enhancing firewall manager and MFA requirements, torch serve issue, and a tip to patch the Libcurl high severity issue.

Exploring cloud provider options for a side project, including reliability and rapid provisioning. Understanding challenges like setting up databases and evaluating pricing. The advantages of influential customers and community knowledge when starting with AWS.

AWS Morning Brief for the week of October 10, 2023 with Corey Quinn. Links:Sponsor re:QuinnventAmazon DataZone is now generally availableAmazon EC2 Hibernate now supports more operating systems Lambda test events are now available in AWS SAM CLI Simplify data transfer: Google BigQuery to Amazon S3 using Amazon AppFlowComing November 2023: A new analysis experience on Amazon QuickSightImplement auto-increment with Amazon DynamoDBThe Future of Personal Digital Records: Unlocking Security and Efficiency through Blockchain and Smart ContractsSlack elevates media pipeline with AWS Elemental MediaConvert and Amazon TranscribeIntegrate multiple Microsoft Entra ID tenants with AWS IAM Identity CenterBuilding high-throughput satellite data downlink architectures with AWS Ground Station WideBand DigIF and Amphinicy Blink SDR Save the Date: Join AWS at the Reality Capture Network Conference, Oct 17 – Oct 19, 2023 

Last week in security news: When It Comes to Email Security, The Cloud You Pick Matters, Enable external pipeline deployments to AWS Cloud by using IAM Roles Anywhere, How AWS threat intelligence deters threat actors, and more!Links:When It Comes to Email Security, The Cloud You Pick MattersEnable external pipeline deployments to AWS Cloud by using IAM Roles AnywhereGet the full benefits of IMDSv2 and disable IMDSv1 across your AWS infrastructure How AWS threat intelligence deters threat actorsOverhauling AWS Account Access with Terraform

AWS Morning Brief for the week of October 2, 2023, with Corey Quinn. Links:Amazon Chime adds Waiting Room capability to further secure your meetingsAmazon CloudFront announces security recommendations Amazon DocumentDB (with MongoDB compatibility) supports in-place major version upgradeAmazon EC2 Serial Console now available in additional AWS Regions AWS Application Composer now supports all 1000+ AWS CloudFormation resourcesDynamoDB global tables is now available in all AWS Regions Announcing incremental export to S3 for Amazon DynamoDBAmazon Bedrock Is Now Generally Available – Build and Scale Generative AI Applications with Foundation Models How to import existing resources into AWS CDK StacksIntroducing dual-stack and IPv6-only support for Amazon Route 53 Resolver Endpoints

Last week in security news: Accelerating development with AWS CDK plugin – CfnGuardValidator, This week's S3 Bucket Negligence Award is brought to you by PwC Nigeria, The volkswagen open source tool, and more!Links:Last week I talked about AWS Management Console Access incorrectly. My thanks to Timothy Ingalls on the Last Week in AWS community Slack for flagging this for me. Gold star for you!This week's S3 Bucket Negligence Award is brought to you by PwC Nigeria.FusionAuth has a great dive into their annual SOC 2 vendor selection process.My beloved Retool has a post talking about how an MFA failure mode led to a small number of customers being exposed. Accelerating development with AWS CDK plugin – CfnGuardValidator How to implement cryptographic modules to secure private keys used with IAM Roles Anywhere Tool of the week: The volkswagen open source tool detects when your tests are being run in a CI server, and makes them pass.

AWS Morning Brief for the week of September 25, 2023, with Corey Quinn. Links:Today Corey is hosting a drink-up at 6 PM in Seattle at Outer Planet Brewing. If you're in town / free, come on by; let him buy you a beer.Later this week Corey will be hosting an AMA on 9/27 @ noon PDT over on YouTube. Bring questions!Accenture Extends Generative AI Capabilities to Accelerate Adoption and Value on AWS New – Amazon EC2 M2 Pro Mac Instances Built on Apple Silicon M2 Pro Mac Mini Computers How Chime Financial uses AWS to build a serverless stream analytics platform and defeat fraudsters Centralizing management of AWS Lambda layers across multiple AWS AccountsHandle traffic spikes with Amazon DynamoDB provisioned capacityStreamline interstate Department of Motor Vehicles collaboration with Private Blockchain How to host your Unreal Engine game for under $1 per player with Amazon GameLift How United Airlines built a cost-efficient Optical Character Recognition active learning pipelineHow VirtuSwap accelerates their pandas ... -based trading simulations with an Amazon SageMaker Studio custom container and AWS GPU instancesProvision sandbox accounts with budget limits to reduce costs using AWS Control TowerReducing the Scope of Impact with Cell-Based Architecture - Reducing the Scope of Impact with Cell-Based ArchitectureFrom Massage Therapist to Cloud Associate with AWS Academy 

Last week in security news: AWS IAM Identity Center session duration limit increases from 7 to 90 days, Access accounts with AWS Management Console PrivatAccess, A dive through using Amazon Athena in Incident Response, and more!Links:This is an esoteric Firefox/Yubikey compatibility bug that I went blindly stumbling into and has been resolved.Chris Farris has a post up about deploying AWS Backup. In preparation for re:Invent, the MGM had a massive cybersecurity issueAmazon EC2 now supports Block Public Access for Amazon Machine ImagesAWS IAM Identity Center session duration limit increases from 7 to 90 daysAWS Identity and Access Management provides action last accessed information for more than 140 services Access accounts with AWS Management Console Private Access A dive through using Amazon Athena in Incident Response. This is important! Corey will be hosting an AMA on 9/27 @ noon PDT over on Twitch. Bring questions!