Episode description

Last week in security news: Delegating permission set management and account assignment in AWS IAM Identity Center, How AWS protects customers from DDoS events, The Tip of the Week, and more!

Links:

• Rhino Security has a two part post that talks about how they find Cognito misconfigurations
• Delegating permission set management and account assignment in AWS IAM Identity Center 
• How AWS protects customers from DDoS events 
• Now available: Building a scalable vulnerability management program on AWS
• Issue with Amazon WorkSpaces Windows Client Version 5.9 and 5.10
• The Tip of the Week is to delegate as much as humanly possible to accounts that aren't the management account for the org. As more services gain the ability to delegate management to designated accounts, it gets easier to restrict access to it