Welcome to episode 264 of the Cloud Pod Podcast - where the forecast is always cloudy! Justin, Jonathan, Ryan (and eventually) Matthew are all on hand this week - and announcement noise this week it’s the return of the Cloud Journey Series! There’s also a lot of news from Re:inforce, a ground-breaking partnership between Oracle and Google Cloud, and updates to GKE. The guys also look ahead to Finops ‘24.
Titles we almost went with this week:
• First, AI came for Writers/Artists, then it came for Developers, and now it comes for Security… What’s Next?
• Amazon Reinforces my Lack of Interest in Attending - JPB rl
• Object Storage Malware protection, everyone, please copy it!
• Amazon is the last man out in Oracle next-gen partnerships
• Dear Google, A partnership with Oracle is not Groundbreaking when Azure already did it
• AWS Announces some “We finally got around to it feature updates”
• Protect your S3 buckets from themselves with Amazon Guard Duty
• The CloudPod and AI play Guess Who? with IAM Access Analyzer.
A big thanks to this week’s sponsor:
We’re sponsorless! Want to reach a dedicated audience of cloud engineers? Send us an email, or hit us up on our Slack Channel and let’s chat!
AWS
01:04 Simplify risk and compliance assessments with the new common control library in AWS Audit Manager (aws.amazon.com...)
• AWS Audit Manager (aws.amazon.com...) is introducing a common control library that provides common controls with predefined and pre-mapped AWS data sources.
• This makes it easy for the GRC teams to use the common control library to save time when mapping enterprise controls into Audit Manager for evidence collection, reducing their dependence on IT teams.
• You can view the compliance (aws.amazon.com...) requirements for multiple frameworks such as PCI (aws.amazon.com...) or HIPAA (aws.amazon.com...) , associated with the same common control in one place, making it easier to understand your audit readiness across multiple frameworks simultaneously.
• Interested in pricing? You can find that info here (aws.amazon.com...) .
01:37 Ryan - “It’s the dream! Automated evidence generation. And now with the context of known frameworks. Yeah; because that’s always the challenge, you know, are the last step of the translation - this is the control. Hey, we need all these controls to do this level of compliance.”
04:36 Centrally manage member account root email addresses across your AWS Organization (aws.amazon.com...)
• 2017 Justin is really digging all these quality-of-life features coming out, and we like to think that AWS has just finally gotten to our pile of feature requests from back then.
• This week, it’s now easier for AWS Organizations customers to centrally manage the root email address of member accounts across their organization using the CLI, SDK and Organizations Console.
• They had previously made it possible to update primary and alternative contact information and enable AWS regions for their accounts. However you would still need to log in as the root account, not any longer, as the SDK, CLI and Organization console have been updated to allow this to be done at the org level.
• The API will require customers to verify the new root email address using a one-time password to ensure that you are using an accurate email address for the member accounts. The root email address will not change until the new email is verified.
• We would like it to require the old address to be verified too to prevent an attack vector. So let’s get on that AWS.
05:50 Jonathan - “At least they separated the AWS logins from the Amazon .com logins so you couldn’t have somebody ordering pairs of shoes on your AWS bill.”
08:33 Amazon EC2 instance type finder capability is generally available in AWS Console (aws.amazon.com...)
• AWS is announcing the ability to filter EC2 instance type finder, enabling you to select the ideal Amazon EC2 Instance types for your workload. Using ML to help customers make quick and cost-effective selections, such as types, before provisioning workloads.
• This is done by using the Management Console, specifying your workload requirements and getting recommendations.
• The f...
23 авг 2024
