In 2018 AWS released the preview release of AWS Security Hub. Since then the solution has been a critical component for most cloud environments. AWS Security Hub is considered a Cloud Security Posture Management (CSPM) system. It automatically checks cloud-native services configuration for compliance with security controls for common frameworks...
This article will give you the latest news on AWS security updates, solutions, and other cool stuff published in October 2022. The latest edition of the "AWS Cloud Security Roundup" blog series is now available. This month, we cover the following topics: regional updates, Identity and Access Management...
AWS WAF delivers web application protection from malicious attacks and intrusions. The service protects applications running on AWS services such as CloudFront, Application Load Balancer, API Gateway, or AWS AppSync. In early November AWS WAF (Web Application Firewall) introduced granular geo-based blocking rules. We can now check new labels, which...
AWS recently introduced deletion protection for Amazon Cognito. This is mainly useful if you are using the DeleteUserPool API as it immediately deleted a user pool in the past, even production resources. Deletion protection is automatically enabled for all new user pools by default. For existing user pools you need...
Introduction When you build applications and solutions, you want to restrict access to other AWS services. Typically, you would use IAM policies and roles to accomplish this task. However, managing these policies can get quite complicated. Luckily, AWS recently introduced several new features for the IAM Access Analyzer, providing users...
During mid of October, AWS released the AWS Parameters and Secrets Lambda Extension. It makes it easier to retrieve parameters or secrets from the Systems Manager Parameter Store or AWS Secrets Manager. As the lambda function makes requests to different AWS services, we need to adjust the execution role. You...
