Huw McNamara

Hello

[Huw McNamara @hoo29]

@mikejulian @willmcginniser we did something similar with https://t.co/8pnaEIsrWa

slightly annoying as it wastes tokens. Will also give windbag a try!

[Huw McNamara @hoo29]

@ClaudeDevs the sandbox doesn't work reliably on WSL https://t.co/68qmqqfepL

[Huw McNamara @hoo29]

@0xdabbad00 I wonder given the values in sts:IdentityTokenAudience what will be kept in aws land. Easy per user token tracking in anthropic with billing tied back to aws? Models still hosted by bedrock?

[Huw McNamara @hoo29]

@craigaloewen new WSL features look great!
Is there anything on the roadmap for this issue around mirrored networking supporting virtual NICs in WSL? https://t.co/gw8SXvEfWd

[Huw McNamara @hoo29]

@craigaloewen Is there any details on the mirror mode docker network changes? I would love for this to work
https://t.co/gw8SXvEfWd

[Huw McNamara @hoo29]

@OpenTofuOrg Early variable evaluation for module sources is fantastic. No more external tooling needed.

[Huw McNamara @hoo29]

@IanColdwater @ladyleet Do you think you or the senior people would have got ahead without the extra effort that led to burnout? Is it more getting there quicker because of all the extra effort?

[Huw McNamara @hoo29]

@0xdabbad00 And now just renaming an account remains.

[Huw McNamara @hoo29]

@ben11kehoe @pgarbe @AWSCloudFormer @spanierm42 What are all the benefits? I thought the main one was API additions to the provider as the code can be autogenerated. I feel like I'm missing something!

[Huw McNamara @hoo29]

@__steele Helps when your claims have values disallowed in tags such as {} (looking at you, bitbucket cloud)

[Huw McNamara @hoo29]

@__steele This also allows for extra claim checking. Normally you are limited to amr, aud, id, & sub. Using a cognito role mapper, you check arbitrary claims and map to a "deny" IAM role if they don't match.

[Scott Piper @0xdabbad00]

AMI Block Public Access now enabled for all new accounts and existing accounts with no public AMIs. ♥️
https://t.co/CPhnDkDL7t

[Huw McNamara @hoo29]

@ben11kehoe @rchrdbyd I was trying to recreate this but you cannot change the passthrough behaviour for proxy integrations anymore. Although the problematic, unchangeable behaviour is still WHEN_NO_MATCH.

[Huw McNamara @hoo29]

@NVIDIAGeForce #DiabloRTX

[Huw McNamara @hoo29]

@harsh_thakur_1 @Sarah_Cecc I asked this the other day! Here was the response
https://t.co/a1EHnu4Sz1

[Sarah Cecchetti @Sarah_Cecc]

@ben11kehoe @hoo29 It's a good question. The main benefits of Cedar are:
*Verifiable/Analyzable
*Deterministic Low Latencies
*No Security Sandboxing Needed
*Ergonomic (easily readable)
*Enables parallel execution
More here: https://t.co/M4DTvvI5Hf

[Huw McNamara @hoo29]

@ben11kehoe How does this compare to OPA? I assume it fills some gap to warrant AWS creating something new but it would have been nice to have OPA support for AWS Verified* services.

[Huw McNamara @hoo29]

@g01d3nm4ng0 but after how many more new "unveilings"?

[Huw McNamara @hoo29]

@0xdabbad00 Even AWS thought this in the README for the secure landing zone accelerator https://t.co/N96X44CDIW

[Huw McNamara @hoo29]

@0xdabbad00 Is there anything you think azure can do to regain the trust of those using it given the current complete lack of security best practice?

[Huw McNamara @hoo29]

@TerminalStar @QuornFoods They're objectively the superior sandwich slice.