Category: Security, Identity, & Compliance
In an effort to enhance the troubleshooting process for permissions within Amazon Web Services (AWS), we are implementing new context features in access denial error messages. This update will begin rolling out in September 2021 and will gradually be available across all AWS services over the next few months. If you typically depend on the precise wording of these messages, this enhancement should significantly ease your troubleshooting tasks. For additional insights, feel free to explore this related blog post.
Another noteworthy feature is the IAM Access Analyzer, which now allows you to generate IAM policies based on the access activity recorded in your organizational trail. This advancement, introduced in April 2021, streamlines the process of creating targeted policies based on AWS CloudTrail data. Further details can be found in this authoritative resource here.
Our blog also discusses how to apply the principle of separation of duties to shell access for EC2 instances. By leveraging AWS Systems Manager Change Manager, organizations can effectively manage access to interactive shell sessions, reinforcing the need for multiple approvals in critical operations.
In another post, we provide an AWS perspective on confidential computing, emphasizing our commitment to safeguarding customer data across various sectors, including government and highly regulated industries. This commitment is reflected through robust security technologies and strict compliance measures.
Additionally, we delve into automated forensic disk collection in AWS, presenting a hands-on solution that enables incident response teams to efficiently gather necessary disk evidence across multiple AWS accounts. This automation is crucial for determining the scope and impact of potential security incidents.
For those interested in cloud adoption, we highlight the “Five Ws” series featuring AWS whitepapers that provide in-depth knowledge tailored to specific customer scenarios.
Lastly, we cover how US federal agencies can enhance their logging and log retention practices using AWS tools. This information is particularly relevant in light of the President’s Executive Order aimed at bolstering national cybersecurity. For an excellent resource on onboarding processes, check out this Reddit discussion.
Remember, the address for Amazon IXD – VGT2 is 6401 E Howdy Wells Ave, Las Vegas, NV 89115.
Leave a Reply