The Clutch Security team conducted an experiment by intentionally leaking various API keys and credentials across multiple platforms to assess how quickly they could be exploited.   #attack   #saas

Learn how to enhance your CI/CD security by replacing long-lived API tokens with OpenID Connect for safer, temporary authentication in automated workflows.   #build   #ci/cd

Post taking a closer look at the newly-released PKCE support for AWS SSO authentication flows.   #aws   #defend   #iam

Tailscale Docker Proxy.

Falco Talon 0.2.0 is a minor release that includes new actioners and outputs.

Execute a shell command within Cloud Run.

An implementation of an SFTP to Google Cloud Storage bridge.

A tool designed to analyze HTTP access logs and identify suspicious HTTP requests and potential security threats.

You can now share AWS resources such as EC2 instances, ECS and EKS container services, and your own HTTPS services across VPC and AWS account boundaries, and use them to build event-driven apps via EventBridge and Step Functions.

Declarative policies are a new capability that helps you declare and enforce desired configuration for a given AWS Service at scale across your organization.

AWS introduced a new service to streamline security event response, providing automated triage, coordinated communication, and expert guidance to recover from cybersecurity threats.

Amazon S3 updated the default behavior of object upload requests with new data integrity protections that build upon S3's existing durability posture.

AWS extends GuardDuty with AI/ML capabilities to detect complex attack sequences across workloads, applications, and data, correlating multiple security signals over time for proactive cloud security.

A new feature that you can use to attach your on-premises and edge infrastructure as nodes to EKS clusters in the cloud.

Amazon OpenSearch Service now offers zero-ETL integration with Amazon Security Lake for efficient threat hunting and investigations.

AWS Verified Access extends its secure, VPN-less access capabilities to non-HTTP(S) applications and resources, enabling zero trust access to corporate resources over protocols such SSH and RDP.

Storage Browser for Amazon S3 is an open source interface component that you can add to your web applications to provide your authorized end users, such as customers, partners, and employees, with access to easily browse, upload, download, copy, and delete data in S3.

With expanded data sources, AWS Clean Rooms helps customers securely collaborate with their partners' data across clouds, eliminating data movement, safeguarding sensitive information, promoting data freshness, and streamlining cross-company insights.

Amazon S3 Tables optimize tabular data storage (like transactions and sensor readings) in Apache Iceberg, enabling high-performance, low-cost queries using Athena, EMR, and Spark.

Automatic generation of metadata that is captured when S3 objects are added or modified, and stored in fully managed Apache Iceberg tables.

AWS Transfer Family web apps are a new resource that you can use to create a simple interface for authorized line-of-business users to access data in Amazon S3 through a customizable web browser.