(this is just the highlight of issue 57 and 58 of aws cloud security weekly @ https://aws-cloudsec.com/p/issue-57-and-58 << subscribe to receive the full version in your inbox weekly for...
aws云安全每周重点介绍了cloudfront访问日志中签名url记录方式的变化。有效签名将被编辑并替换为“signature=redacted-verified”,而无效签名将被替换为“signature=redacted-invalid-”,并包含验证失败的详细信息。aws config现在支持29个aws区域的124种资源类型。amazon verified permissions允许与第三方身份提供商进行细粒度授权。amazon cognito的高级安全功能升级以防止密码重用并检测“不可行旅行”等风险。