Aki Hänninen

DevSecOps & CISO at @midaxo ☁️. Opinions are my own 🤔

[Joona Kallio @joonakallio]

!! Lahjoita ilotulitusrahat Ukrainaan

Ukraina on taistellut koko vuoden myös meidän vapauden puolesta. He tarvitsevat kaiken tulituen.

Lahjoita tänä vuonna ilotulitusrahat Ukrainaan. Heillä on käyttöä ruudille ja räjähteille enemmän kuin meillä täällä.

#SlavaUkraini

[Datadog, Inc. @datadoghq]

We're excited to announce that @CloudcraftCo, a visualization service for cloud and system architects to create real-time diagrams of their cloud infrastructures, has joined Datadog. Learn more about the acquisition in our blog post: https://t.co/PQY82yJmpy

[Christophe Tafani-Dereeper @christophetd]

My awesome colleague @Frichette_n has found a cross-tenant vulnerability in AWS AppSync, allowing an attacker to access data in victim's accounts.

Write-up: https://t.co/ddIvV0Fvyu

AWS security bulletin: https://t.co/O1qk8RTYj1

[Aki Hänninen @hanninen]

@heitor_lessa Oh boy that EphemeralMetrics looks very interesting for a SaaS builder like me 😍

[Ben Kehoe @ben11kehoe]

If you use boto3 and you're not familiar with aws-error-utils, check it out—it can vastly simplify your error handling. https://t.co/MzKv9oUv0i

[Aki Hänninen @hanninen]

@wolfeidau I generate SBOMs for the archives in CI/CD and use https://t.co/PSNdP6ly9f to analyze those SBOMs and monitor for new vulns. And CI/CD is the only path for deployments.

[Heitor Lessa @heitor_lessa]

Lambda Powertools for Python V2 is now out 🌟

- 🤩 97.6% package size reduction for PyPi
- 🤩 80% Lambda Layer reduction
- 🔥 Parser +30-50% speed on Layer (Cython)
- 🔥 ARM64 Support
- 🤗 Upgrade guide

🙏 @rubenfonseca @LeoCDamascena + community

https://t.co/DhuDGNlqLr

[Luc van Donkersgoed @donkersgood]

Anyway, the article (about backend stuff!) is up now.
https://t.co/2s8mkLPC57

[Zack Kanter @zackkanter]

Cloud principle: be liberal in what you configure and conservative in what you code.

[Eric Johnson @edjgeek]

AWS SAM Accelerate now supports nested stacks. Allowing multiple, re-usable stacks while still taking advantage of SAM accelerate to expedite development. @jeffmarcinko & @brianzambrano put together a blog about it! https://t.co/MsxdgLNTEr

[Aki Hänninen @hanninen]

@theburningmonk @AWSSupport @heitor_lessa @ednergizer Very much interested in this as well, the http2and3 mode should suffice.

[Aki Hänninen @hanninen]

Truth

[Mark Wolfe 🐺 @wolfeidau]

First thing you learn in AWS is that everything has limits, and when adding useful things to names you will always be a few characters over... Hopefully this happens before production 😅🔥🔥 #aws #Serverless

[Yan Cui @theburningmonk]

Don't wait for users to complain to find out there's a problem.

Here are the alerts you should have around your #serverless application.

It's not an exhaustive list, but a good starting point that's broadly applicable to everyone.

[fwd:cloudsec @fwdcloudsec]

Videos from fwd:cloudsec are up! https://t.co/lQlT9hA31x

[Allan is @allanfriedman on bsky & infosec.exchange @allanfriedman]

Very exciting to see @Microsoft open source their internal SBOM generation tool. Would love to hear what you think of it.

https://t.co/cPMaaa1z5J

[d0nut 🦀 @d0nutptr]

If you’re a security engineer you *really* should watch this video.

The breach being discussed here is absolutely insane and @InsecureNature does a really good job breaking down any complicated parts for those less familiar with modern production networks and CI/CD

[Scott Piper @0xdabbad00]

Access Denied errors are going to say why type of policy is denying them! (SCP vs resource vs IAM vs boundary vs VPC end-point, etc.) This is going to be a huge help for debugging these.

[Kinnaird McQuade @kmcquade3]

Dear god this is fucking thorough

[DEV Community @ThePracticalDev]

I highly recommend that all teams adopt this lightweight practice, and they are a core part of my minimal approach to software architecture documentation.

{ author: @simonbrown } #DEVCommunity
https://t.co/iJ5gYXPOGG

[Nicolas Moutschen 🦀 @NMoutschen]

Version 0.2.0 of serverless-rules is now out! 📐🚀

Two major improvements since v0.1.0!

✅First is a complete revamp of the doc, with samples for CloudFormation, CDK, SLS, and Terraform.
✅Second is complete rule parity between cfn-lint and tflint.

https://t.co/HUnSNk28Z0