Kevin Luo

Product Manager @awscloud and AWS Identity. Previously, #AWSLambda. I love coding, cooking, gaming, and parenting. Opinions are my own.

[Kevin Luo @LuoAndOrder]

@___nix___ We identified a potential root cause for the issue and will work on a fix. Thank you again for the feedback!

[Kevin Luo @LuoAndOrder]

@___nix___ Thank you, I have passed this along to the team and we will look. We appreciate your feedback and will use it to continuously improve the service.

[Kevin Luo @LuoAndOrder]

@___nix___ ご報告いただき、誠にありがとうございます。エラーが発生しており、大変申し訳ございません。早急に調査いたします。
（このメッセージはAIによる機械翻訳です）

[Shelly Kramer @ShellyKramer]

There's every reason for the spontaneous applause that happened when Garman announced the launch of the @amazon Web Services (AWS) #Security Agent.

As organizations embrace #AI, the need to build and maintain secure apps with security as a foundational element has never been more important. This becomes even more important as the development velocity increases in this age of AI.

The AWS Security Agent is very cool: it proactively reviews design documents, scans code for vulnerabilities, and integrates directly with developers’ existing workflows, including GitHub pull requests.

This is incredibly significant, as it delivers security feedback at every stage of development, ensuring that potential issues are caught early, reducing the risk of costly rework and strengthening overall product security.

A standout feature of AWS Security Agent (and there are many!) is its ability to automate and accelerate #Pentesting, transforming what has traditionally been a slow, resource-intensive process into an on-demand, continuous practice. This makes rigorous security assessments far more accessible, enabling organizations to confidently scale their application releases without sacrificing security.

By embedding expert knowledge into each review and test, AWS Security Agent empowers teams to ship code with greater speed and confidence, meeting the highest industry standards for application security. The applause? Totally understandable!

#AWSreinvent #AWS #AIsecurity

[AWS Identity @AWSIdentity]

Amazon Verified Permissions announces a significant price reduction. It now costs $5 per million API requests, down by up to 97 percent. Implement fine-grained authorization at scale while optimizing your costs.#AmazonVerifiedPermissions #AWSDevelopers https://t.co/MElteGuyFr

[Neha @neharungta]

We are hiring scientists across automated reasoning, machine learning, and generative AI to innovate in security, access management, and cloud governance. Exciting roles are open in Santa Clara, Seattle, Arlington, and Austin. Reach out! hashtag#AWS hashtag#Identity

[Kevin Luo @LuoAndOrder]

@matthewdfuller Happy to take this to DMs. For context, my team owns the service that answers exactly: “given a policy or bag of policies, does this request result in an allow or deny?”

[Kevin Luo @LuoAndOrder]

@matthewdfuller Got it. Do you only need to determine allow deny for one policy at a time? In IAM, an authorization decision is rarely based on a single policy. Identity policies and resource policies influence the decision especially in cross account access.

[AWS Identity @AWSIdentity]

Cedar is a new access management policy language designed to be secure and provable. Learn more about it from Amazon Senior Principal Applied Scientist Emina Torlak. https://t.co/d2g9b8XaE2

[Neha @neharungta]

Give Cedar a whirl - https://t.co/IQihtH5orh

[Julian Wood @julian_wood]

Lambda functions now scale 12 times faster when handling high-volume requests < Lambda has always had great scaling, now it’s even quicker!! #serverless. I’ll be demoing tomorrow on AWSOnAir. https://t.co/eJMFzLRHvY

[Yan Cui @theburningmonk]

Wow, Lambda just blew its burst concurrency limit wide open 🤯

This was a major blocker for some of my clients.

Instead of taking 14 mins to reach 10k peak account concurrency, now each function can hit 10k concurrency in < 2 min. EACH FUNCTION!

https://t.co/CF7yVIHdZ7

[Julian Wood @julian_wood]

🆕📢 Detecting and stopping recursive loops in AWS Lambda functions. Lambda now automatically stops loops when using SNS & SQS! https://t.co/3vNVcF4jRS. Great blog from @pawanputhran, Aneel Murari and @ShrikhandeShree #serverless #lambda

[Kevin Luo @LuoAndOrder]

Really glad to see this out there and enabled by default! #serverless #lambda

[Julian Wood @julian_wood]

🆕📢 Detecting and stopping recursive loops in AWS Lambda functions. Lambda now automatically stops loops when using SNS & SQS! https://t.co/3vNVcF4jRS. Great blog from @pawanputhran, Aneel Murari and @ShrikhandeShree #serverless #lambda

[Adam Selipsky @aselipsky]

Whether it’s securing generative #AI services, or enabling a Zero Trust architecture, we are always working to keep our customers’ data safe. @mosescj58 & team are showcasing the latest in security at #AWSreInforce, along with announcing the GA of Amazon Verified Permissions. Developers can now save time and simplify how they manage authorization in applications.
https://t.co/5H7bwoI6nG

[AWS Identity @AWSIdentity]

Cedar policy language is now open source, including an SDK to help you author and validate fine-grained permissions as easy-to-understand policies, and evaluate access management requests. Check it out! https://t.co/6KTgBMdFDl

[Kevin Luo @LuoAndOrder]

@chrismunns Nice, I got the same configuration. Finally made the switch from Windows as far as personal devices go. My Lightroom workflows are blazingly fast.

[Kevin Luo @LuoAndOrder]

Plus, AVA uses the Cedar policy language and evaluation engine. We designed Cedar from the ground up to be analyzable using the same automated reasoning techniques that brought you S3 Block Public Access and IAM Access Analyzer. To learn more about Cedar: https://t.co/Oe3QRRwvO8

[Kevin Luo @LuoAndOrder]

Really excited to see this launch. A great win for users and security admins. AVA makes it easier for users to access corp applications without using VPN. Meanwhile, security admins are happier with one place to secure access using identity and device posture. #ZeroTrust #AWS

[Amazon Web Services @awscloud]

Make a secure connection a lighter lift. 🔒☁️🪶

#AWS Verified Access removes the need for VPN, simplifying connectivity for end users & reducing work for IT admins. It’s the heavy layer of security you need without the extra steps you don’t.

👉 https://t.co/nDb4xBD8hs