{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Last Week In AWS Podcast","title":"re:Inforce and fwd:cloudsec with Scott Piper","html":"","width":"100%","height":180,"duration":449,"description":"Last week in security news: Videos from fwd:cloudsec are now available on YouTube, AWS announces AWS Payment Cryptography, Amazon CodeGuru Security is now available in preview, and more!Links:There was lots of great content presented at fwd:cloudsec.  The day-long videos are up on YouTube. You can use the schedule to help find the talks you're interested in.In contrast to AWS's \"Shared Responsibility Model\", I appreciate GCP's \"Shared Fate Model\" where they put their own skin in the game in ensuring their customers are protected.  In their New Cryptomining Protection Program, they offer $1M in what is basically an insurance policy that comes with Security Command Center Premium.Bob McMillan from the WSJ reports that North Korean hackers have stolen more than $3 billion in crypto over the last 5 years, and their heists are now funding fully half of its ballistic missile program.a16z writes Hiring a Chief Information Security Officer.Removing header remapping from Amazon API Gateway, and notes about our work with security researchers - AWS made a breaking change to respond to a security issue. The security researchers that found the issue wrote their side of the story, describing it as AWS API Gateway header smuggling and cache confusion.Issue with AWS Directory Service EnableRoleAccess - AWS released a security bulletin for this issue, which they seem to do at random for security issues. Ben Bridts from Cloudar found and reported this issue which AWS has fixed.  He goes into more detail in his blog post and in a talk at fwd:cloudsec.Amazon CloudWatch Logs data protection account level policy configurationAWS WAF Fraud Control launches account creation fraud prevention and reduced pricingAWS announces AWS Payment CryptographyAWS Transfer Family announces quantum-safe key exchange for SFTPAmazon CodeGuru Security is now available in previewAmazon Inspector announces the general availability of Code Scans for AWS Lambda functionAWS announces Software Bill of...","thumbnail_url":"https://img.transistorcdn.com/PMIkgW48sHRopAuMhIYzsjzhK0RhchBCtpHSuJjoizc/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS80MDRk/OGFjYTIxMWE1MjQy/YWRkZDhiMDJmMzMy/MDQyMi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}