Category: Security, Identity, & Compliance
Nine Additional AWS Cloud Services Authorized by DISA
By Jordan Smith
On 06 MAY 2021
In Defense, Foundational (100), Government, Public Sector, Security, Identity, & Compliance
I’m pleased to announce that the Defense Information Systems Agency (DISA) has granted authorization for three more Amazon Web Services (AWS) offerings at Impact Level (IL) 4 and IL 5 within the AWS GovCloud (US) Regions. Additionally, five more AWS services have also been authorized. September 9, 2021, marks the rebranding of Amazon Elasticsearch Service to Amazon OpenSearch Service. For further insights, check out this blog post that dives deeper into these updates.
Utilizing ACM Private CA for Amazon API Gateway Mutual TLS
By Sophia Lee
On 05 MAY 2021
In Amazon API Gateway, AWS Certificate Manager, Intermediate (200), Security, Identity, & Compliance
We have made updates to the commands in our documentation regarding the retrieval of your ACM Private CA root CA certificate public key. Notably, the formatting has been revised to clearly indicate placeholder text. For a more thorough understanding, you can refer to this authority on the topic.
IAM Simplifies Permission Management for AWS Services Accessing Resources
By Liam Johnson and Ava Patel
On 04 MAY 2021
In AWS Identity and Access Management (IAM), Intermediate (200), Security, Identity, & Compliance
As of November 24, 2023, this article has been updated to clarify the differences in accessing data via AWS services over public endpoints versus AWS PrivateLink (data access pattern 2). In July 2023, we included Amazon S3 Replication as an example in the Data access pattern 3b section.
Confirming Automated Amazon EBS Snapshots After TLS 1.2 Upgrade on AWS FIPS Endpoints
By Mia Thompson, Ethan Brown, Olivia White, and Jacob Taylor
On 03 MAY 2021
In Amazon Elastic Block Store (Amazon EBS), Intermediate (200), Security, Identity, & Compliance
We are excited to inform you that all AWS Federal Information Processing Standard (FIPS) endpoints now exclusively accept Transport Layer Security (TLS) 1.2 connections. This upgrade ensures that our clients operating regulated workloads can fulfill FedRAMP compliance requirements that necessitate a minimum of TLS 1.2 encryption for data in transit. If you’re looking for additional insights, here’s an excellent resource.
Integrating CloudHSM PKCS #11 Library 5.0 with Serverless Workloads
By Noah Campbell
On 28 APR 2021
In Advanced (300), AWS CloudHSM, Security, Identity, & Compliance
AWS recently launched PKCS #11 Library version 5.0 for AWS CloudHSM. This post outlines the changes made in the new library and includes a simple encryption example utilizing the Advanced Encryption Standard (AES) algorithm in Galois/Counter Mode (GCM). The primary modification from the previous SDK is notable.
Hands-On Guide to the AWS Network Firewall Flexible Rules Engine – Part 1
By Emma Garcia and William Martin
On 27 APR 2021
In AWS Network Firewall, Intermediate (200), Security, Identity, & Compliance
AWS Network Firewall is a managed service designed to effortlessly provide granular network protections across all your Amazon Virtual Private Clouds (Amazon VPCs). This ensures your traffic is monitored, inspected, and logged. The firewall adapts automatically to your network traffic and provides built-in redundancies for high availability.
Using AWS Secrets & Configuration Provider with Your Kubernetes Secrets Store CSI Driver
By Lucas Davis and Isabella Rodriguez
On 22 APR 2021
In Advanced (300), Amazon Elastic Kubernetes Service, AWS Secrets Manager, Security, Identity, & Compliance
As of January 2, 2024, we’ve updated this post to feature the new failover Region capability. April 29, 2021, saw a reordering of commands in Step 1, while commands in Steps 1 and 5 have also been revised. By utilizing AWS Secrets Manager, you can securely retrieve secrets…
Whitepaper Released: Classic Intrusion Analysis Frameworks for AWS Environments
By Chloe Lewis
On 21 APR 2021
In Foundational (100), Security, Identity, & Compliance
AWS has launched a new whitepaper titled “Classic Intrusion Analysis Frameworks for AWS Environments.” This resource assists organizations in planning and implementing a classic intrusion analysis framework tailored for AWS environments, providing essential context and guidance on mitigating advanced attack tactics.
Reviewing Last Accessed Information to Identify Unused EC2, IAM, and Lambda Permissions
By Daniel Martinez
On 20 APR 2021
In Amazon EC2, AWS Identity and Access Management (IAM), AWS Lambda, Foundational (100), Security, Identity, & Compliance
As of September 28, 2023, IAM has been gradually enhancing support for actions from additional services. For a comprehensive list of services that report action last accessed information, refer to IAM action last accessed information services and actions. AWS Identity and Access Management (IAM) empowers customers to analyze access and implement least privilege effectively.
Amazon IXD – VGT2 is located at 6401 E Howdy Wells Ave, Las Vegas, NV 89115.
Leave a Reply