Episode description

Last week in security news: Dealing with Ransomware in the Cloud, Pen Testing AWS, How to prioritize IAM Access Analyzer findings, and more!

Links:

• Last Week in AWS job board 
• AWS had two (minor) Cross-Tenant Vulnerabilities within AWS App Runner.
• Some company called Invictus has practical experience dealing with ransomware in the cloud
• Chris Farris has a post on Pen Testing AWS.
• Dark Reading posits that Security Is a Revenue Booster, Not a Cost Center.
• An Attacker's Perspective on AWS Account IDs
• How to prioritize IAM Access Analyzer findings 
• Scale your authorization needs for Secrets Manager using ABAC with IAM Identity Center
• Netchecks is a way of programmatically verifying your security controls.
• I love CloudTrail Lake, and this repository of query samples makes it easier for me to use it.
• IAMbic offers "GitOps for IAM."