🔶 How to use on-demand rotation for AWS KMS imported keys

AWS announced support for on-demand rotation of symmetric encryption AWS Key Management Service (AWS KMS) keys with imported key material (EXTERNAL origin). This new capability enables you to rotate the cryptographic key material of these keys without changing the key identifier.

https://aws.amazon.com/ru/blogs/security/how-to-use-on-demand-rotation-for-aws-kms-imported-keys/

(Use VPN to open from Russia)

#aws

🔶 Securing Amazon Redshift

How to manage access in Amazon Redshift, focusing on best practices for security.

https://dev.to/awscommunity-asean/securing-amazon-redshift-best-practices-for-access-control-15l6

#aws

🔴 How Google Cloud is securing open-source credentials at scale

Google developed a tool to scan open-source package and image files by default for leaked Google Cloud credentials to help protect Google Cloud customers who publish open-source artifacts.

https://cloud.google.com/blog/products/identity-security/securing-open-source-credentials-at-scale

#gcp

🔶 Amazon GuardDuty expands Extended Threat Detection coverage to Amazon EKS clusters

GuardDuty Extended Threat Detection introduces a new critical severity finding type, which automatically correlates security signals across Amazon EKS audit logs, runtime behaviors of processes associated with EKS clusters, malware execution in EKS clusters, and AWS API activity to identify sophisticated attack patterns that might otherwise go unnoticed.

https://aws.amazon.com/ru/blogs/aws/amazon-guardduty-expands-extended-threat-detection-coverage-to-amazon-eks-clusters/

(Use VPN to open from Russia)

#aws

🔶 AWS Backup adds new Multi-party approval for logically air-gapped vaults

Multi-party approval for AWS Backup logically air-gapped vaults enables organizations to recover their backup data even when their AWS account is compromised, by creating approval teams of trusted individuals who can authorize vault sharing with a recovery account through a separate authentication path.

https://aws.amazon.com/ru/blogs/aws/aws-backup-adds-new-multi-party-approval-for-logically-air-gapped-vaults/

(Use VPN to open from Russia)

#aws

🔶 Unify your security with the new AWS Security Hub for risk prioritization and response at scale

Amazon announced the preview release of the new AWS Security Hub which offers additional correlation, contextualization, and visualization capabilities.

https://aws.amazon.com/ru/blogs/aws/unify-your-security-with-the-new-aws-security-hub-for-risk-prioritization-and-response-at-scale-preview/

(Use VPN to open from Russia)

#aws

🔶 JA3 and JA4 Fingerprints in AWS WAF and Beyond

This article discusses JA3 and JA4 fingerprints, including how they can be useful across cloud services, and how to use them with AWS WAF.

https://engineering.doit.com/ja3-ja4-fingerprints-aws-waf-e2d18dca198a

(Use VPN to open from Russia)

#aws

🔶 Sign in with your eID: Using AWS IAM Roles Anywhere with a SmartCard Reader

A fun experiment: the Belgian eID, which includes an authentication certificate, can be utilized to authenticate users without requiring extensive certificate management.

https://cloudar.be/awsblog/sign-in-with-your-eid-using-aws-iam-roles-anywhere-with-a-smartcard-reader/

#aws

🔶 The Future of Threat Emulation: Building AI Agents that Hunt Like Cloud Adversaries

Exploring the breakthrough potential and emerging risks of AI agents that can autonomously discover and exploit complex AWS attack chains.

https://www.offensai.com/blog/the-future-of-threat-emulation-building-ai-agents-that-hunt-like-cloud-adversaries

#aws

🔶🔴 gcp-oidc-aws

A Terraform module that creates a GCP Workload Identity Federation to allow AWS workloads to authenticate to GCP via a GCP Service Account, without storing service account keys.

https://github.com/marco-lancini/utils/tree/main/terraform/gcp-oidc-aws

#aws #gcp