Carl Reid retweeted
❗️Ukrainian media report that Medical Forces commander Anatolii Kazmirchuk and Ground Forces chief of staff Oleksandr Hruzevych have been dismissed. Sources said the personnel decisions were made as part of a reorganization of Ukraine's military leadership. The reported dismissals have not yet been officially confirmed. #Ukraine
Carl Reid retweeted
Great post from @QuinnyPig that echos a lot of my frustrations with AWS on the security front.
lastweekinaws.com/blog/amazo…
Carl Reid retweeted
Pretty cool to finally have @AWSCloudFormer stack refactor aws.amazon.com/blogs/devops/… . Well done to the team that worked on it!
I also get to formally deprecate my 4 year old 🤯 stack rename repo: github.com/iann0036/cfn-stac…
Pretty happy with my new #secretlab Magnus Pro setup. Love the ease of changing from sitting to standing.
Carl Reid retweeted
We're coming towards the end of #AWSreinvent 2024 and we've seen an impressive set of releases, so here is my top 10 announcements I find most impactful for this years #AWS re:Invent.
Carl Reid retweeted
Friday goodies! You can now programmatically retrieve AWS service information. Starting with IAM actions across all #AWS services. Check it out: servicereference.us-east-1.a…
Tbs seems like a great idea. I've always valued documentation but it's been hard to encourage others to see it as important a the code and be one of the deliverables.
dev.to/dumebii/docs-as-code-…
Carl Reid retweeted
How to securely transfer files with presigned URLs 👉 Best practices for generating and distributing presigned URLs, security considerations, and recommendations for monitoring usage and access patterns buff.ly/3RdbnoP #AWS #Storage #Security
Finally invested in a chair that justifies the time spent sitting in it.
Can't belive I spent 3 years sat on a very uncomfortable office chair.
#secretlab come at a premium cost but you can see why when you unbox and set it up. Extremely high quality materials and design.
Had a play around with the new #aws #cloudformation intrinsic function ForEach. Once you get passed the slightly awkward syntax and requirement for mixing !Ref and Fn::Sub to reference existing resources it really is powerful. I converted 300+ lines of client vpn routes into 20.
Carl Reid retweeted
Valve is one of the most agile companies I know of. No Sprints. No backlogs. No frameworks. No Scrum. No SAFe. Just pure agility built around iterative development and feedback. It's worth 15 minutes of your life to see how they work: youtu.be/9Yomqk0C6kE 1/2
What a great story. I'm sure @latifnasser has made a friend for life here.
Carl Reid retweeted
I wrote about #serverless Idempotency and improved the docs for AWS Lambda Powertools at the same time. You can read about it all in my Python Powertools series on my blog.
The best thing about AWS Lambda Powertools is it's not just for Python!
blog.walmsles.io/series/pyth…
Carl Reid retweeted
Written for the infosec community, AWSGoat is a realistic training ground for #AWS exploitation techniques. It features OWASP Top 10 (2021) security risks and misconfigurations based on AWS services. Check it out on our repo: bit.ly/3T6HWEd #cloud #pentest
Great example of proactive techniques for detecting breaches in Aws.
How about another real world attacker critique thread? @ExpelSecurity just published a great piece on an intrusion they took care of (Great work team). A thread. 🧵 expel.com/blog/incident-repo…
Carl Reid retweeted
I enjoyed this talk by @ebrandwine about how SigV4 authN works and the design rationale behind it.
I have one nitpick though. At 21:06 he says the access key ID has no internal structure. Is this true? Maybe it was until a few years ago?
1/3
youtube.com/watch?v=tPr1AgGk…
