AWS launches three new services and capabilities to help customers build and operate securely

guest · Dec 5, 2019

AWS launches three new services and capabilities to help customers build and operate securely
December 5, 2019
https://www.helpnetsecurity.com/2019/12/05/aws-three-new-services/

Amazon Web Services (AWS), an Amazon.com company, announced three new services and capabilities that make it easier for customers to build and operate securely:

Amazon Detective is a new security service that makes it easy for customers to conduct faster and more efficient investigations into security issues across their workloads (available in preview).

AWS IAM Access Analyzer is a new AWS Identity and Access Management (IAM) capability that makes it simple for security teams and administrators to audit resource policies for unintended access.

AWS Nitro Enclaves is a new Amazon EC2 capability that makes it easy for customers to process highly sensitive data by partitioning compute and memory resources within an instance to create an isolated compute environment (available in preview early next year).

“Each of the offerings we introduced today represents a different approach to helping customers be more secure, but they’re all designed to decrease the amount of time security teams spend on tasks like checking configurations, aggregating data, and devising custom solutions to remove needless churn from crucial security processes.”
Click to expand...

Amazon Detective
AWS IAM Access Analyzer
AWS Nitro Enclaves

Amazon: AWS Announces Three New Security Offerings

guest · Dec 5, 2019

Sophos and AWS collaborate to provide rapid response to cloud threats
December 3, 2019
https://news.sophos.com/en-us/2019/...e-to-provide-rapid-response-to-cloud-threats/

We’re excited to support the latest advances in public cloud security with the launch of Amazon Detective and AWS Identity and Access Management Access Analyzer at AWS re:Invent 2019.

Cloud Optix has already transformed the way organizations address challenges around public cloud visibility and threat detection. So we’re over the moon to support the latest advancements in public cloud security with the launch of Amazon Detective and AWS Identity and Access Management (IAM) Access Analyzer at AWS re:Invent 2019, which gives you a smart way to further meet these challenges.

Available in Amazon Web Services (AWS) Marketplace, Cloud Optix provides automatic discovery of an organization’s assets across hybrid cloud environments, including AWS, native and managed Kubernetes clusters (Amazon EKS), and Infrastructure-as-Code environments.
Click to expand...

Identify unintended access in seconds
Who has access to my S3 buckets? Can an external account assume my IAM role and access or delete my sensitive data? Good questions… wait a minute, let me check.
Well, you don’t have time for that, but IAM Access Analyzer does.

As integration launch partner for Amazon Detective and IAM Access Analyzer, Sophos Cloud Optix transforms your AWS security posture.
Click to expand...

guest · Apr 1, 2020

Amazon’s Detective service for investigating security incidents now generally available
March 31, 2020
https://siliconangle.com/2020/03/31...g-security-incidents-now-generally-available/

Amazon Web Services Inc. said today its new security service Amazon Detective is now generally available, three months after it was launched in preview.
Announced at the AWS re:Invent conference in Las Vegas in December, Amazon Detective uses artificial intelligence, statistical analysis and graph theory to boost alert systems.

It does so by providing details about the size and scope of security breaches, and by helping customers to reconstruct the methods and targets of those attacks. That, in turn, helps customers to visualize and conduct faster and more efficient security investigations. The service helps companies to identify the root cause of security incidents and eliminates the need to collect logs from different data sources, Amazon said.

“Amazon Detective uses machine learning models to produce graphical representations of your account behavior and helps you to answer questions such as ‘is this an unusual API call for this role?’ or is this spike in traffic from this instance expected?’” Amazon’s senior developer advocate Sébastien Stormacq wrote in a blog post announcing the service.
Click to expand...

Amazon:
Amazon Detective is now generally available
Amazon Detective – Rapid Security Investigation and Analysis

guest · Oct 29, 2020

AWS Nitro Enclaves, a service for processing sensitive data, hits general availability
October 29, 2020
https://www.neowin.net/news/aws-nit...sing-sensitive-data-hits-general-availability

Amazon Web Services (AWS) today announced the general availability of AWS Nitro Enclaves, a specific subset of elastic compute cloud (EC2) instances that focus on processing sensitive data. With this release, AWS is targeting customers in industries like defense, entertainment, media, financial services, and sciences that use the computing power of AWS Cloud instances to process sensitive data.

Unlike traditional EC2 instances, Nitro Enclaves do not host persistent storage, nor do they support external networking or provide administrator or operator access. This enables Nitro Enclaves in reducing the attack surface for applications with an isolated environment that is tailored to data processing use cases.

This isolation means that applications running in an Enclave remain inaccessible to other users and systems, even to users within the customer’s organization. With this isolation, the AWS Nitro Enclave owner can start and stop, or assign resources to an Enclave, but even the owner cannot see what is being processed inside of AWS Nitro Enclaves.
Click to expand...

Amazon: AWS Announces General Availability of Nitro Enclaves

AWS Nitro Enclaves makes it easy for customers to create isolated compute environments within Amazon Elastic Compute Cloud (Amazon EC2) instances to further protect their highly sensitive workloads
Click to expand...

guest · Nov 18, 2020

AWS Network Firewall provides network protection across all workloads
New firewall tools offer improved security in virtual private clouds
November 18, 2020
https://www.itpro.co.uk/cloud/amazo...k-firewall-adds-network-protection-across-all

AWS has launched a new security service for customers running virtual private clouds on AWS.

The AWS Network Firewall promises a high-availability, managed network firewall for customers’ workloads. AWS claims the firewall will offer protections against common network threats, including dynamic packet filtering, intrusion prevention and detection, and web filtering.
AWS said customers can also implement customized Snort and Suricata rules — two widely used open-source formats — to further tailor protections, like: [...]
Click to expand...

In a blog post, Channy Yun, principal developer advocate for AWS, said the Network Firewall makes firewall activity visible in real-time via CloudWatch metrics and offers increased visibility of network traffic by sending logs to S3, CloudWatch and Kinesis Firehose.

AWS partners have built integrations with AWS Network Firewall include: [...]
AES expects more partners to come soon. These integrations allow customers to easily incorporate AWS Network Firewall into their existing security workflows for orchestration, automation and threat detection and response.
Click to expand...

Amazon: AWS Announces General Availability of AWS Network Firewall

New high-availability firewall service gives customers added visibility and control to easily secure their virtual networks running on AWS
SEATTLE--(BUSINESS WIRE)--Nov. 17, 2020-- Today, Amazon Web Services Inc., an Amazon.com company (NASDAQ: AMZN), announced the general availability of AWS Network Firewall, a new managed security service that makes it easier for customers to enable network protections across all of their AWS workloads.

Customers can enable AWS Network Firewall in their desired Amazon Virtual Private Cloud (VPC) environments with just a few clicks in the AWS Console, and the service automatically scales with network traffic to provide high availability protections without the need to set up or maintain the underlying infrastructure.
Click to expand...

guest · Jul 29, 2022

AWS rolls out new malware detection and container security features
July 26, 2022

Amazon Web Services Inc. is rolling out new features that will help customers more easily scan their cloud environments for malware and secure software container applications.

GuardDuty is a managed service designed to detect malicious activity in cloud environments. The service can, for example, detect when a hacker attempts to download business data from an important cloud application. GuardDuty also spots other types of malicious activity.
AWS is expanding GuardDuty’s feature set with a new tool dubbed GuardDuty Malware Protection.
Click to expand...

GuardDuty Malware Protection can scan a wide range of files for malware. AWS says that the tool is capable of detecting malicious code in Windows and Linux programs, as well as PDF documents, software installers, scripts and a long list of other files.

The service automatically launches malware scans when it detects suspicious activity in a company’s AWS environment.

“For example, a malware scan is triggered when an EC2 instance is communicating with a command-and-control server that is known to be malicious or is performing denial of service (DoS) or brute-force attacks against other EC2 instances,” Danilo Poccia, AWS’ chief evangelist for EMEA, detailed in a blog post today.
Click to expand...

For situations where an administrator may require additional data about a malicious file, the console provides a shortcut that makes it possible to quickly launch AWS’ Amazon Detective service. The latter service includes features that administrators can use to investigate data breaches. Alongside the enhancements that it rolled out to GuardDuty at re:Inforce today, AWS also released an update for Detective.

Thanks to the update, Detective can now be used to investigate cybersecurity incidents affecting workloads running on Amazon Elastic Kubernetes Service. The service, which is commonly referred to as EKS, is Amazon’s managed implementation of Kubernetes.

“Detective automatically correlates user activity using CloudTrail, and network activity using Amazon VPC Flow logs, without the need for you to enable, store, or retain logs manually,” AWS principal developer advocate Channy Yun explained in a blog post.
Click to expand...

AWS News Blog:
New for Amazon GuardDuty – Malware Detection for Amazon EBS Volumes
Amazon Detective Supports Kubernetes Workloads on Amazon EKS for Security Investigations

Announcements:
Amazon Detective supports security investigations for workloads on Amazon EKS
Malware protection now a feature of Amazon GuardDuty

Log in or Sign up

AWS launches three new services and capabilities to help customers build and operate securely

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

AWS launches three new services and capabilities to help customers build and operate securely

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches