Amazon Web Services (AWS) customers have been adopting the approach of using AWS PrivateLink to have secure communication to AWS services, their own internal services, and third-party services in the AWS Cloud. As these environments scale, the number of PrivateLink connections outbound to external services and inbound to internal services increase and are spread out […]
Read moreIn an ever-changing security landscape, teams must be able to quickly remediate security risks. Many organizations look for ways to automate the remediation of security findings that are currently handled manually. Amazon CodeWhisperer is an artificial intelligence (AI) coding companion that generates real-time, single-line or full-function code suggestions in your integrated development environment (IDE) to […]
Read moreIn this post, I’ll show how you can export software bills of materials (SBOMs) for your containers by using an AWS native service, Amazon Inspector, and visualize the SBOMs through Amazon QuickSight, providing a single-pane-of-glass view of your organization’s software supply chain. <p>The concept of a bill of materials (BOM) originated in the manufacturing industry […]
Read moreAWS Network Firewall is a stateful managed network firewall and intrusion detection and prevention service designed for the Amazon Virtual Private Cloud (Amazon VPC). This post concentrates on automating rule updates in a central Network Firewall by using distributed firewall configurations. If you’re new to Network Firewall or seeking a technical background on rule management, […]
Read moreWith AWS Certificate Manager (ACM), you can simplify certificate lifecycle management by using event-driven workflows to notify or take action on expiring TLS certificates in your organization. Using ACM, you can provision, manage, and deploy public and private TLS certificates for use with integrated AWS services like Amazon CloudFront and Elastic Load Balancing (ELB), as well […]
Read moreIn this post, we’ll share an automation pattern that you can use to automatically detect and block suspicious hosts that are attempting to access your Amazon Web Services (AWS) resources. The automation will rely on Amazon GuardDuty to generate findings about the suspicious hosts, and then you can respond to those findings by programmatically updating […]
Read more<a href=”https://aws.amazon.com/security-hub/” target=”_blank” rel=”noopener noreferrer”> AWS Protection Hub </a> is really a main dashboard for security, danger management, and compliance results from <a href=”https://aws.amazon.com/audit-manager/” target=”_blank” rel=”noopener noreferrer”> AWS Audit Supervisor </a> , <a href=”https://aws.amazon.com/firewall-manager/” target=”_blank” rel=”noopener noreferrer”> AWS Firewall Supervisor </a> , <a href=”https://aws.amazon.com/guardduty/” target=”_blank” rel=”noopener noreferrer”> Amazon GuardDuty </a> , <a href=”https://aws.amazon.com/iam/features/analyze-access/” target=”_blank” rel=”noopener […]
Read moreIn this website post, we’ll demonstrate how exactly to use Amazon Route 53 Resolver DNS Firewall to automatically react to suspicious DNS queries which are detected by Amazon GuardDuty inside your Amazon Web Providers (AWS) environment. <pre> <code> <p>The Protection Pillar of the <a href=”https://aws.amazon.com/architecture/well-architected/” target=”_blank” rel=”noopener noreferrer”>AWS Well-Architected Framework</the> includes incident reaction, stating your […]
Read moreIn this website post, we’ll walk you through how exactly to deploy a remedy to enrich AWS Security Hub findings with additional account-related metadata, like the account name, the business Unit (OU) from the account, security contact information, and account tags. Account metadata might help you search findings, create insights, and react to and remediate […]
Read moreIn this article, you’ll learn to automatically solve AWS Security Hub results for earlier deleted Amazon Web Providers (AWS) resources. Through the use of an event-driven solution, it is possible to resolve findings for AWS and third-party support integrations automatically. Security Hub offers a comprehensive view of one’s security security and alerts posture across your […]
Read more
You must be logged in to post a comment.