Amazon Web Services

52 articles in the TruthFoundry index. Each links out to the original.

• AWS explains DKIM replay attacks and correct mitigation steps · Amazon Web Services details why DKIM key rotation alone fails to stop email replay attacks.
• AWS successfully demonstrates European Sovereign Cloud independent EU operation · AWS completed a public exercise proving its European Sovereign Cloud operates fully within the EU.
• AWS first CSP to complete Canadian Cloud High security assessment · AWS becomes first cloud provider to pass Canada's Cloud High security assessment for 172 services.
• AWS cybersecurity professionals share real unglamorous daily work · Three AWS security staff describe the quiet behind-the-scenes reality of their roles.
• AWS WAF Mitigations Published For Critical PHP2Shell RCE Vulnerabilities · AWS releases AWS WAF guidance for critical PHP2Shell remote code execution flaws.
• Amazon detected PHP2Shell exploitation 4 days before public disclosure · Amazon Threat Intelligence observed PHP2Shell exploitation prior to CVE public release.
• AWS Publishes IAM Roles Anywhere PKI Integration Best Practices · AWS outlines best practices for integrating PKI with IAM Roles Anywhere for external workloads.
• AWS IAM Identity Center adds preserved Active Directory migration · AWS IAM Identity Center now retains user data when migrating away from Active Directory.
• AWS Security Agent exploited 33 of 37 recent real-world CVEs in testing · AWS Security Agent achieved 89.2% success exploiting recent uncontaminated CVEs in controlled testing.
• AWS Continuum enables automated penetration testing on every deployment · AWS Continuum adds scoped penetration testing as a CI/CD deployment gate.
• AWS post outlines non-traditional cybersecurity career paths · This AWS article profiles cybersecurity professionals who entered via non-standard career paths.
• AWS GuardDuty adds five new indicators for attack sequence detection · Amazon GuardDuty launched five new contextual threat indicators on 2026-05-20.
• AWS Enforces Quantum-Resistant ML-DSA Algorithm Policies via SCPs · AWS security teams can enforce cryptographic policies using Service Control Policies to block non-compliant ML-DSA algorithms.
• AWS Releases ML-DSA Quantum-Resistant Software Supply Chain Guide · AWS demonstrates end-to-end quantum-resistant software signing using ML-DSA on its cloud services.
• AWS guide explains AI vulnerability harness steering file configuration · AWS details steering file setup for consistent AI-powered vulnerability triage.
• AWS outlines three-layer AI vulnerability harness for security triage · AWS publishes guide details a three-layer pipeline to filter false positives from security scanners.
• AWS cybersecurity series profiles non-traditional career paths into the field · AWS security staff share unplanned, non-linear journeys into cybersecurity careers.
• AWS outlines managed services for improved SPIRE security and resiliency · AWS demonstrates using its managed services to resolve production SPIRE deployment challenges.
• AWS releases identity-aware AI data agent pattern for Lake Formation · AWS demonstrates trusted identity propagation for AI data agents on Lake Formation
• AWS Continuum sets new record on CyberGym-E2E code security benchmark · AWS Continuum achieves 89% success rate on full end-to-end code security benchmark.
• AWS to run EU Sovereign Cloud independence test October 24 2026 · AWS will demonstrate its European Sovereign Cloud can operate without external global infrastructure.
• AWS Publishes August 2026 Security Digest With 20 New Blog Posts · AWS released its August 2026 security digest covering identity, AI, and cloud protection updates.
• AWS supports ASD MFA campaign, completes full root user MFA enforcement · AWS endorses ASD MFA campaign, confirms full root user MFA enforcement June 2025
• AWS Pipeline Transforms Bedrock Guardrail Events to OCSF for CloudWatch · AWS Lambda function normalizes Bedrock Guardrail telemetry into OCSF records for unified CloudWatch analysis.
• AWS launches Gemma 4 open AI models on EU Sovereign Cloud Bedrock · AWS releases Gemma 4 open weight models on Amazon Bedrock within the European Sovereign Cloud.
• Architecting a Secure Landing Zone in AWS European Sovereign Cloud · AWS outlines secure landing zone architecture for its new European Sovereign Cloud partition.
• AWS STS raises session token limit to 4,096 bytes and adds monitoring · AWS STS increases session token limit to 4,096 bytes and introduces size monitoring features.
• AWS Cognito Adds Multi-Region Replication for Resilient Authentication · Amazon Cognito introduces multi-Region replication to simplify global authentication architecture.
• Automate AWS IAM Remediation via CI/CD Pipeline Using Access Analyzer · AWS introduces an automated workflow to remediate unused IAM permissions through CI/CD pipelines.
• AWS Releases PCI DSS Compliance Guide for Cardholder Data · AWS publishes a new Security Reference Architecture guide to help organizations achieve PCI DSS compliance.