{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Last Week In AWS Podcast","title":"re:Inforce and fwd:cloudsec with Scott Piper","html":"","width":"100%","height":180,"duration":449,"description":"Last week in security news: Videos from fwd:cloudsec are now available on YouTube, AWS announces AWS Payment Cryptography, Amazon CodeGuru Security is now available in preview, and more!\nLinks:\nThere was lots of great content presented at fwd:cloudsec.  The day-long videos are up on YouTube. You can use the schedule to help find the talks you're interested in.\nIn contrast to AWS's \"Shared Responsibility Model\", I appreciate GCP's \"Shared Fate Model\" where they put their own skin in the game in ensuring their customers are protected.  In their New Cryptomining Protection Program, they offer $1M in what is basically an insurance policy that comes with Security Command Center Premium.\nBob McMillan from the WSJ reports that North Korean hackers have stolen more than $3 billion in crypto over the last 5 years, and their heists are now funding fully half of its ballistic missile program.\na16z writes Hiring a Chief Information Security Officer.\nRemoving header remapping from Amazon API Gateway, and notes about our work with security researchers - AWS made a breaking change to respond to a security issue. The security researchers that found the issue wrote their side of the story, describing it as AWS API Gateway header smuggling and cache confusion.\nIssue with AWS Directory Service EnableRoleAccess - AWS released a security bulletin for this issue, which they seem to do at random for security issues. Ben Bridts from Cloudar found and reported this issue which AWS has fixed.  He goes into more detail in his blog post and in a talk at fwd:cloudsec.\nAmazon CloudWatch Logs data protection account level policy configuration\nAWS WAF Fraud Control launches account creation fraud prevention and reduced pricing\nAWS announces AWS Payment Cryptography\nAWS Transfer Family announces quantum-safe key exchange for SFTP\nAmazon CodeGuru Security is now available in preview\nAmazon Inspector announces the general availability of Code Scans for AWS Lambda function\nAWS announces Software...","thumbnail_url":"https://img.transistorcdn.com/PMIkgW48sHRopAuMhIYzsjzhK0RhchBCtpHSuJjoizc/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS80MDRk/OGFjYTIxMWE1MjQy/YWRkZDhiMDJmMzMy/MDQyMi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}