Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
bolha.us is one of the many independent Mastodon servers you can use to participate in the fediverse.
We're a Brazilian IT Community. We love IT/DevOps/Cloud, but we also love to talk about life, the universe, and more. | Nós somos uma comunidade de TI Brasileira, gostamos de Dev/DevOps/Cloud e mais!

Administered by:

Server stats:

252
active users

bolha.us: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.6

#aws

42 posts27 participants10 posts today
Continued thread
Public
hannah aubry

Personally, I'm thrilled to get back to work supporting these builders and their critical projects. Our doors are always open if you need #AWS support, or if you have ideas about how we can do more.

Until next time — build on, friends! and be excellent to each other 👋

Public *
hannah aubry

Today, #AWS announced an extended $3 million annual commitment to #Kubernetes, reaffirming our commitment to supporting open source projects with the vital infrastructure they need to operate at global scale. For free.
aws.amazon.com/blogs/opensourc

Amazon Web Services · AWS Cloud Credits for Open Source Projects: Affirming Our Commitment | Amazon Web ServicesToday, Amazon Web Services is proud to reaffirm our commitment to providing vital infrastructure for free and open source software projects. One of the ways we are doing this is with an extended $3 million annual commitment to the Kubernetes project, the container orchestration platform which underpins the Amazon Elastic Kubernetes Service (Amazon EKS). We’re […]
#OpenSource#CNCF#OSS
Public
Paco Hope #resist

Some of my colleagues at #AWS have created an open-source serverless #AI assisted #threatmodel solution. You upload architecture diagrams to it, and it uses Claude Sonnet via Amazon Bedrock to analyze it.

I'm not too impressed with the threats it comes up with. But I am very impressed with the amount of typing it saves. Given nothing more than a picture and about 2 minutes of computation, it spits out a very good list of what is depicted in the diagram and the flows between them. To the extent that the diagram is accurate/well-labeled, this solution seems to do a very good job writing out what is depicted.

I deployed this "Threat Designer" app. Then I took the architecture image from this blog post and dropped that picture into it. The image analysis produced some of the list of things you see attached.

This is a specialized, context-aware kind of OCR. I was impressed at boundaries, flows, and assets pulled from a graphic. Could save a lot of typing time. I was not impressed with the threats it identifies. Having said that, it did identify a handful of things I hadn't thought of before, like EventBridge event injection. But the majority of the threats are low value.

I suspect this app is not cheap to run. So caveat deployor.
#cloud #cloudsecurity #appsec #threatmodeling

#ai#threatmodel
Public
DevOps Weekly

AWS CloudTrail network activity events for VPC endpoints now generally available

aws.amazon.com/blogs/aws/aws-c

Discussions: discu.eu/q/https://aws.amazon.

Amazon Web Services · AWS CloudTrail network activity events for VPC endpoints now generally available | Amazon Web ServicesAWS CloudTrail now offers network activity events for VPC endpoint logging, enabling comprehensive monitoring and recording of AWS API activity through VPC endpoints to enhance security visibility, detect unauthorized access, and prevent data exfiltration without requiring custom TLS traffic inspection solutions.
#aws#devops
ExploreLive feeds
About