marknca

A few of the many AWS security resources available online:

Mentioned in the AWS re:Inforce 2022 keynote

1. Threat Modelling Workshop
2. Cloud Audit Academy
3. Security Awareness Training

Handy resources not mentioned in the keynote

marknca

#! /usr/bin/env python3

# Standard library
import datetime
import re
import sys
import time

# 3rd party library
import requests

marknca

What is ransomware?

• Forrest's amazing ransomware song
• Gas prices: Pipeline shutdown sparks worries of $3 a gallon - CNN
• Ransomware Disrupts Meat Plants in Latest Attack on Critical U.S. Business - The New York Times
• Irish Healthcare System Struggles With Tech Disruptions After May Ransomware Attack
• Exclusive: U.S. to give ransomware hacks similar priority as terrorism | Reuters
• [Ransomware Threat Assessments: Key Ransomware Families](https://unit42.paloaltonetworks.com/ra

marknca

Usage

List your feeds in a tab seperated value text file with the format;

Name of feed\tFEED_URL
Name of feed\tFEED_URL
Name of feed\tFEED_URL

marknca

#! /usr/bin/env bash
sudo yum -y install git
sudo yum -y install python3
sudo pip3 install boto3
sudo pip3 install dateparser
sudo pip3 install feedparser

cat > /home/ec2-user/get_secret.py <<- PY_FILE
# Standard libraries
import base64

marknca

pip3 install --upgrade google-cloud-bigquery
pip3 install --upgrade google-cloud-bigtable
pip3 install --upgrade google-cloud-datastore
pip3 install --upgrade google-cloud-dns
pip3 install --upgrade google-cloud-error-reporting
pip3 install --upgrade google-cloud-firestore
pip3 install --upgrade google-cloud-language
pip3 install --upgrade google-cloud-logging
pip3 install --upgrade google-cloud-monitoring
pip3 install --upgrade google-cloud-pubsub

marknca

Future home of the show: https://letstalkcloud.fyi/

Check out the first season at https://www.youtube.com/watch?v=Zh5hIvQ5tE0&list=PLZm70v-MT4Jrg461-1QgrAuWg4px1RYyP

Links from this stream:

• AWS's new course, Architecting Serverless Solutions - https://www.aws.training/Details/eLearning?id=42594
• AWS Well-Architected Framework - https://aws.amazon.com/architecture/well-architected/
• FreeCodeCamp's list of Ivy League courses - https://www.freecodecamp.org/news/ivy-league-free-online-courses-a0d7ae675869/

YouTube Channels

marknca

Keynotes

• Monday Night Live with Peter DeSantis
  • Elastic Fabric Adapter
  • AWS Inferentia
• Keynote with Andy Jassy
  • AWS Graviton Processor
  • Amazon EKS on AWS Fargate
  • Amazon S3 Access Points
  • Amazon Redshift RA3 nodes
• Advanced Query Accelerator (AQUA) for Amazon Redshift

marknca

aws acm list-certificates | jq '.CertificateSummaryList' | jq -r '.[].CertificateArn' | while read -r l; do echo "CERT: $l" && aws acm describe-certificate --certificate-arn $l | jq '.Certificate | .NotAfter' | xargs -I {} date -r {} && echo ""; done;

marknca

import deepsecurity # from https://github.com/deep-security/deep-security-py
import logging

# if testing a tenant login
mgr = deepsecurity.dsm.Manager(username=YOUR_USERNAME, password=YOUR_PASSWORD, tenant=YOUR_TENANT_NAME) # will call the API authenticateTenant
# or
# if testing the primary tenant
mgr = deepsecurity.dsm.Manager(username=YOUR_USERNAME, password=YOUR_PASSWORD) # if "tenant" argument ISN'T sent, it calls a different API call "authenticate"
mgr.log_at_level = logging.DEBUG
mgr.sign_in()