Issue 33 of AWS Cloud Security Weekly

(Summary of the issue 33 of AWS Cloud Security weekly. Full page @ https://aws-cloudsec.com/p/issue-33)

1. AWS Amplify Hosting now enables support for personalized SSL certificates for custom domains to upload and integrate SSL/TLS certificates into web applications, enhancing adaptability and security. You can leverage certificates from external Certificate Authorities (CAs) or opt for certificates issued by AWS Certificate Manager (ACM), providing enhanced control over domain management and meeting IT compliance requirements.

2. AWS Systems Manager Parameter Store Parameter Store has introduced the capability to share advanced-tier parameters across different AWS accounts, facilitating centralized configuration data management. Parameters, represented as key-value pairs, are accessible in code and various AWS integrations like AWS CloudFormation and Amazon EC2. As organizations often operate workloads in multiple AWS accounts relying on shared configuration data, this update allows for maintaining a unified source of truth. Instead of the manual duplication and synchronization of data across accounts, users can now efficiently share parameters with other accounts requiring access. (Note: You’d have to enable RAM from AWS Organizations and must use AWS Systems Manager.)

3. The AWS Resilience Hub has two service improvements: Payment Card Industry (PCI) certification and the availability of AWS Migration Acceleration Program 2.0 (MAP 2.0). For organizations with PCI requirements, AWS Resilience Hub now offers the capability to evaluate and enhance the resilience of their applications. Utilizing AWS Artifact, you can download reports detailing AWS compliance programs and share them with relevant third parties. Additionally, Resilience Hub is now integrated into MAP 2.0. This AWS program equips customers operating on-premise applications with tools and resources to assess their readiness for migration to the AWS cloud, mobilize necessary resources, and modernize their applications post-migration. With MAP 2.0, customers are now eligible for credits that can be applied towards the usage fees of Resilience Hub.

4. AWS Support introduced a five-minute response time for critical incidents occurring on workloads integrated into AWS Incident Detection and Response. (Note: This service is available to AWS Enterprise Support customers only). Through AWS Incident Detection and Response, AWS team of AWS Incident Management Engineers (IMEs) diligently monitor workloads round the clock.

Thank You!