AWS Security Blog دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۳۸

Simplify cross-partition access with AWS IAM outbound identity federation

You can now use tokens from AWS Identity and Access Management (IAM) outbound federation to assume roles in other Amazon Web Services (AWS) partitions. When your workloads run across AWS partitions such as Commercial, China, GovCloud (US), and European Sovereign Cloud, a workload in one partition might need to access resources or communicate with AWS […]

Cloud Computing Governance, Risk & Compliance

Read the full article at AWS Security Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CERT/CC Vulnerability Notes دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۵۱

VU#188754: FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities

Overview Multiple vulnerabilities in the FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) may allow remote code execution, unauthorized access to onboard sensors, disclosure of sensitive information, and full compromise of affected devices. Exploitation may enable an attacker to remotely control the rover, access audiovisual streams, or pivot into the user’s network. Description The FrodoBots EarthRo…

Vulnerabilities & Zero-Day IoT & OT Security Web Development

Source

BleepingComputer دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۳۵

The Biggest Threat to Your GRC Job Isn’t AI. It’s Ignoring AI.

AI agents are taking over routine governance, risk, and compliance tasks, forcing GRC professionals to rethink the skills needed to stay relevant. Anecdotes examines three essential skills for the AI-driven GRC workplace: data literacy, agent governance, and communication. [...]

Governance, Risk & Compliance

Source

The Register - Security دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۳۲

Microsoft's Azure Linux gets 470-plus security fixes in one almighty patching session

A mountain of CVEs, a certificate cleanup, and yet more work for Microsoft's patching teams

Cloud Computing Operating Systems

Source

Wiz دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۲۶

Trusted by Default: Qubole Cross-Account Access Abused in the Wild

A threat actor used IAM credentials from Qubole's AWS account to assume integration roles in customer AWS environments. Here's what we observed and how to hunt for it.

Threat Intelligence Cloud Computing

Source