Season 4 Episode 14: Monitoring, Guardrails, and Open Source

LogiCast AWS News

Player FM - Internet Radio Done Right

הוסף לפני three שנים

תוכן מסופק על ידי Logicata. כל תוכן הפודקאסטים כולל פרקים, גרפיקה ותיאורי פודקאסטים מועלים ומסופקים ישירות על ידי Logicata או שותף פלטפורמת הפודקאסט שלהם. אם אתה מאמין שמישהו משתמש ביצירה שלך המוגנת בזכויות יוצרים ללא רשותך, אתה יכול לעקוב אחר התהליך המתואר כאן https://he.player.fm/legal.

Squid Game: The Official Podcast

1
Keys and Knives - S3 Ep 1 26:28

לפני 5 weeks26:28

הפעל מאוחר יותר

רשימות

לייק

אהבתי

26:28

Squid Game is back—and this time, the knives are out. In the thrilling Season 3 premiere, Player 456 is spiraling and a brutal round of hide-and-seek forces players to kill or be killed. Hosts Phil Yu and Kiera Please break down Gi-hun’s descent into vengeance, Guard 011’s daring betrayal of the Game, and the shocking moment players are forced to choose between murdering their friends… or dying. Then, Carlos Juico and Gavin Ruta from the Jumpers Jump podcast join us to unpack their wild theories for the season. Plus, Phil and Kiera face off in a high-stakes round of “Hot Sweet Potato.” SPOILER ALERT! Make sure you watch Squid Game Season 3 Episode 1 before listening on. Play one last time. IG - @SquidGameNetflix X (f.k.a. Twitter) - @SquidGame Check out more from Phil Yu @angryasianman , Kiera Please @kieraplease and the Jumpers Jump podcast Listen to more from Netflix Podcasts . Squid Game: The Official Podcast is produced by Netflix and The Mash-Up Americans.…

לפני שנה 42:43

MP3•בית הפרקים

In Season 4, Episode 14 Karl & Jon are joined by Tangara Aymen. They discuss Amazon CloudWatch Application Signals, AWS Step Functions SDK Expanded Integrations, Amazon Bedrock Guardrails Image Content Filters, Australian Fintech Data Leak, AWS Commitment to Open Source and then the guys joked about writing horror films called "Attack of the Leaky Buckets" and "Attack of the Bad Internet" after experiencing connectivity issues during the podcast.

04:25 - Monitor service dependencies with Amazon CloudWatch Application Signals SLOs

CloudWatch is getting more features, including application signals for monitoring service dependencies and Service Level Objectives (SLOs). This allows for more precise tracking of performance at the individual request level, improved error budgeting, and cross-account observability. The functionality is becoming comparable to third-party monitoring tools like Datadog or New Relic.

13:27 - AWS Step Functions expands SDK integrations with Amazon Backup Search and 137 additional APIs

AWS has added 137 new API integrations to Step Functions, including Amazon Backup Search. This allows for easier orchestration of backup discovery and management without writing additional code. While it expands capabilities, it may make Step Functions less testable due to the complexity of testing around these integrations.

20:35 - Amazon Bedrock Guardrails announces the general availability of industry-leading image content filters

Bedrock Guardrails has released generally available image content filters to detect and block harmful content. This can be useful for protecting sensitive audiences and reducing the need for manual content moderation. However, there are concerns about potential over-blocking of legitimate content.

28:52 - 27,000 records in Australian fintech database were exposed

An Australian fintech company exposed approximately 27,000 records due to an unsecured S3 bucket. This highlights the ongoing issue of "leaky buckets" and the importance of proper security measures and monitoring for cloud storage.

33:06 - AWS Cloud Credits for Open Source Projects: Affirming Our Commitment

AWS has reaffirmed its commitment to open source projects by offering cloud credits, including $3 million annually to the Kubernetes project. While the credits are beneficial, there was discussion about whether direct financial support would be more valuable for open source communities.

100 פרקים

#Tech #News #Tech News #Logicata #Community Builders

Season 4 Episode 14: Monitoring, Guardrails, and Open Source

LogiCast AWS News

published לפני שנה

שתפו

MP3•בית הפרקים

04:25 - Monitor service dependencies with Amazon CloudWatch Application Signals SLOs

13:27 - AWS Step Functions expands SDK integrations with Amazon Backup Search and 137 additional APIs

20:35 - Amazon Bedrock Guardrails announces the general availability of industry-leading image content filters

28:52 - 27,000 records in Australian fintech database were exposed

33:06 - AWS Cloud Credits for Open Source Projects: Affirming Our Commitment

100 פרקים

#Tech #News #Tech News #Logicata #Community Builders

Wszystkie odcinki

1
Season 4 Episode 30: Security, MCPs, and Open Source Perils 49:49

לפני 10 hours49:49

49:49

In Season 4, Episode 30, Karl and Jon are joined by Pieter VanIperen, CISO at AlphaSense. They discussed AWS security best practices and authentication methods, the Security Reference Architecture (SRA) and the SRA Verify tool, as well as the Model Context Protocol (MCP) and its implications for CIOs. They also covered the CLOUD Act and its impact on data access, and a compromised Amazon Q extension that posed a security risk. Finally, the guys discovered that Jon's interest in karate extends to Japanese electoral politics. 06:17 - Beyond IAM Access Keys: Modern Authentication Approaches for AWS This article discusses the shift from traditional IAM users and access keys to more secure authentication methods. It recommends using Cloud Shell for CLI access, Identity Center for permissions management, and emphasizes the principle of least privilege. The article also covers scenarios where access keys might still be necessary and suggests alternatives like OIDC for better security. 15:20 - Introducing SRA Verify: An AWS Security Reference Architecture Assessment Tool The article introduces SRA Verify, a tool for assessing compliance with AWS Security Reference Architecture guidelines. It provides automated checks for various security services like CloudTrail, GuardDuty, and Security Hub. The tool aims to simplify the deployment and assessment of security measures in AWS environments. 23:09 - MCP Doesn't Stand for Many Critical Problems, but Maybe It Should for CIOs This article discusses the challenges and potential risks associated with Model Context Protocol (MCP) for CIOs. While MCP offers new possibilities for AI integration, it also raises concerns about data security, context poisoning, and the need for proper scoping and permissions management. The discussion highlights that many organizations are still in the early adoption phase of MCP. 30:42 - 5 Facts About How the CLOUD Act Actually Works AWS published an article addressing misconceptions about the CLOUD Act, a US law from 2018. The article aims to clarify that the Act doesn't give unrestricted access to data and that proper encryption and security measures can protect customer data. It emphasizes that AWS prioritizes customer data privacy and security. 40:33 - Compromised Amazon Q Extension Told AI to Delete Everything This article discusses a security incident where a malicious actor compromised an Amazon Q extension for VS Code. The compromised extension contained a destructive AI prompt that could potentially delete user files. The incident highlights the importance of code review and the potential risks in the open-source ecosystem.…

1
Season 4 Episode 29: Revamped Free Tier, Rebranded Certification, and Renewed Layoffs 40:03

לפני 6 ימים40:03

40:03

In Season 4, Episode 29, Karl and Jon are joined by AWS Community Builder and Ambassador Niklas Westerstråhle to discuss the AWS Free Tier overhaul, the new Cloud Operations Engineer certification, the launch of the Amazon Kiro AI, and a security issue with misconfigured AWS Organizations policies. They wrap up with thoughts on the latest Amazon/AWS layoffs—and a fun debate over whether Niklas should keep wearing his gold AWS jacket after his certifications expire, like it's some kind of sacred relic that loses its powers. 04:15 - AWS Free Tier Overhaul The AWS Free Tier has been significantly updated. New accounts now receive up to $200 in credits valid for 6 months instead of the previous 12-month free tier offerings. Users can earn additional credits by completing certain tasks. The new system aims to be more developer-friendly and reduce surprise bills. Accounts are automatically closed after 6 months unless upgraded to paid plans. 15:03 - New AWS Cloud Operations Engineer Certification AWS is updating the SysOps Administrator certification to become the AWS Certified Cloud Ops Engineer. The exam will include new content on containers and other topics. Existing SysOps Administrator certificate holders will need to take the new exam to earn the Cloud Ops Engineer certification. The change has caused some debate about recertification requirements for those holding multiple AWS certifications. 28:58 - Amazon Kiro AI Coding Assistant AWS launched Kiro, a new AI-powered coding assistant, currently in preview. It's based on Visual Studio Code and uses Anthropic's AI models. Kiro aims to assist with coding tasks and project setup. AWS is running a competition with $100,000 in prizes for developers to build applications using Kiro 28:23 - AWS Organizations Misconfigured Managed Policy A security issue was discovered in the AmazonGuardDutyFullAccess managed policy, which could potentially allow attackers to gain full AWS organizational control. AWS has fixed the issue by creating a new version of the policy (with "_V2" appended). Users are advised to review and update their environments to use the new policy version. 34:15 - Amazon/AWS Layoffs Reuters reported that AWS is cutting hundreds of jobs in its latest round of layoffs. The speakers discussed the scale of these layoffs in context of Amazon's overall workforce and debated the potential impact of AI on employment in the tech industry. They also critiqued the article's presentation of the information, noting that it seemed to conflate Amazon and AWS employee numbers.…

1
Season 4 Episode 28: VMware Migration, GPU Cooling, and Builder Center 39:39

לפני 14 ימים39:39

39:39

In Season 4, Episode 28, Karl and Jon are joined by AWS Community Builder Mahendran Selvakumar. Together, they dive into topics including Amazon’s development of cooling equipment for NVIDIA GPUs to support AI acceleration, the launch of the new AWS Builder Center for the AWS Builder Community, and Amazon's massive AI supercluster—Project Rainier—built for Anthropic. They also explore the upcoming changes to the AWS Free Tier, which will introduce a new credit-based system. And in true Karl fashion, he deftly steers the conversation away from a tangent on uneven sun tans. 05:23 - AWS Transform for VMware AWS has shifted its strategy from supporting VMware workloads to encouraging migration off VMware entirely. The new AWS Transform for VMware service helps migrate VMware workloads to native AWS services, potentially reducing licensing costs and manual efforts. It supports various migration tasks like network conversion and instance sizing. 12:08 - Amazon cooling equipment for Nvidia GPUs As AI workloads increase power demands, Amazon is developing in-row heat exchangers to cool Nvidia GPUs more efficiently. This liquid cooling solution can be retrofitted into existing data centers and is designed to handle the extreme heat generated by high-density GPU racks used for AI applications. 17:50 - Amazon CloudWatch and Application Signals MCP servers for AI-assisted troubleshooting AWS launched two open-source MCP servers for CloudWatch and Application Signals, enabling AI agents to troubleshoot issues via natural language—accessing metrics, logs, traces, and SLOs for faster root cause analysis. 22:23 - New AWS Builder Center AWS has launched a new Builder Center to unify various community programs and resources. It provides a centralized platform for learning, building, and connecting within the AWS ecosystem. The center includes features like wishlists for suggesting ideas to AWS and supports multiple languages for broader accessibility. 29:17 - Amazon's AI supercluster for Anthropic (Project Rainier) Amazon is building a massive AI supercomputer cluster for Anthropic, using custom-designed AI chips instead of traditional GPUs. This project demonstrates significant investment in AI capabilities and includes a custom network fabric for high-bandwidth communication between nodes. 34:39 - Changes to AWS Free Tier AWS is replacing its traditional free tier with a new credit-based system. New accounts will receive $100 in credits valid for 6 months, with restrictions on certain high-usage services. This change aims to simplify the free tier and prevent unexpected charges for new users.…

1
Season 4 Episode 27: DynamoDB Consistency, ECS Windows AMIs, and AI Landing Zones 34:14

לפני 21 ימים34:14

34:14

In Season 4, Episode 27, Karl and Jon are joined by AWS Community Member, Tim Dodd. They discuss Amazon DynamoDB Global Tables with multi-region strong consistency, Amazon ECS-optimized Windows Server 2025 AMIs, AWS Backup support for copying S3 backups across regions/accounts in GovCloud, a Chrome extension using AI to summarize web pages, and building a generative AI landing zone on AWS and then the guys realized they’d spent more time talking about the world’s weather than any of the AWS articles. 03:19 - Amazon DynamoDB Global Tables with multi-region strong consistency This feature allows for strongly consistent multi-region DynamoDB tables, similar to Aurora DSQL. It's currently limited to major AWS regions but enables applications to have the same consistent data across multiple geographic locations. This is useful for disaster recovery, high availability, and serving users in different regions with the same synchronized dataset. 08:49 - Amazon ECS optimized Windows Server 2025 AMIs AWS has released new Amazon ECS optimized Windows Server 2025 AMIs. While not groundbreaking, this update ensures Windows container users can run workloads on up-to-date host systems. It highlights the ongoing need to support Windows workloads in containerized environments, despite limitations compared to Linux containers. 13:30 - AWS Backup support for copying S3 backups across regions/accounts in GovCloud This feature allows GovCloud users to copy S3 backups across regions and accounts, bringing capabilities already available in commercial AWS regions to GovCloud. It's particularly relevant for government agencies adopting cloud-first strategies and implementing best practices for data backup and disaster recovery. 20:12 - Chrome extension using AI to summarize web pages A developer created a Chrome extension that uses AI to summarize web page content. This tool addresses short attention spans and language barriers by providing quick summaries of long articles or content in unfamiliar languages. It demonstrates a practical application of AI for improving web accessibility and information consumption. 26:59 - Building a generative AI landing zone on AWS This article discusses how to build a generative AI landing zone on AWS, adapting traditional landing zone concepts to AI workloads. It covers foundational guardrails, development fast lanes, composable building blocks, observability, and governance specific to AI applications. The approach aims to provide a secure, compliant, and efficient foundation for deploying AI workloads on AWS.…

1
Season 4 Episode 25: Certificates, MFA, and Australian Investments 57:19

לפני 5 weeks57:19

57:19

In Season 4, Episode 25, Karl and Jon are joined by AWS Community Hero Stephen Sennett. They discuss recent AWS security enhancements and active defense measures, including the introduction of exportable public SSL/TLS certificates from AWS Certificate Manager, the enforcement of 100% MFA for AWS root users, and Amazon Inspector’s new code security feature. The conversation also covers AWS’s $20 billion investment in Australian data center infrastructure. The episode wraps up with a light-hearted segment where the hosts compare their sports tape collections, each trying to outdo the other with increasingly outrageous injury stories. 05:45 - AWS improves active defense to empower customers This article discusses AWS's internal security tools like Madopt, Mythroat, and Sonaris, which help protect customers at scale. It highlights the decreasing trend in global malicious vulnerability exploit attempts and emphasizes AWS's ability to provide security measures that individual organizations cannot match. 16:40 - AWS Certificate Manager introduces exportable public SSL/TLS certificates AWS now offers exportable public SSL/TLS certificates at competitive prices ($15 for single domain, $150 for wildcard). This new feature allows for end-to-end encryption within the AWS ecosystem and provides a more cost-effective and manageable solution compared to traditional certificate authorities. 26:14 - AWS enforces 100% MFA for root users AWS has achieved 100% MFA enforcement for root users, addressing a long-standing security concern. This change alters the login flow for new accounts, requiring MFA setup before access is granted. The guys also discusse the importance of hardware MFA solutions for organizations. 35:48 - Amazon Inspector launches code security feature Amazon Inspector now includes a code security feature that scans code for vulnerabilities and security issues. While not as comprehensive as some existing tools, it provides a convenient option for AWS customers who want to keep their security tooling within the AWS ecosystem. 42:32 - AWS invests $20 billion in Australian data center infrastructure AWS is investing $20 billion AUD (about $12.8 billion USD) to expand its data center infrastructure in Australia. This investment aims to strengthen Australia's AI capabilities, improve renewable energy usage, and address data sovereignty concerns. The article also mentions AWS's commitment to training 400,000+ people in Australia in cloud skills since 2017.…

1
Season 4 Episode 24 - Meatballs, Manifolds, and Massive Investments 38:26

לפני 6 weeks38:26

38:26

In Season 4, Episode 24, Karl and Jon are joined by Randall Hunt, CTO of Caylent, for a dynamic and insightful conversation that blends cutting-edge cloud developments with a dash of humor. They dive into some of the latest updates from AWS, including the launch of on-demand key rotation for imported keys via AWS Key Management Service, new application layer 7 DDoS protection for customers using AWS Web Application Firewall and AWS Shield Advanced, and enhanced CloudTrail logging for Amazon S3’s delete objects API, which offers improved auditability and operational visibility. The discussion also explores Amazon’s ambitious investment plans in global data center infrastructure and the introduction of AWS’s new liquid cooling technology designed for next-generation AI data centers. As always, the episode takes an entertaining turn when the conversation veers into a lighthearted tangent about IKEA meatballs and flat-pack furniture. 04:04 - AWS Key Management Service (KMS) on-demand key rotation This new feature allows users to rotate imported keys, which was previously not possible. It improves key management and security while maintaining backwards compatibility. The pricing model includes additional charges for the first two rotations, with a cap after that. 08:44 - New application layer 7 DOS protection AWS introduced enhanced DDoS protection for Web Application Firewall and Shield Advanced customers. This feature uses machine learning to quickly learn normal traffic patterns and protect against complex layer 7 attacks, especially with the challenges posed by HTTP/3 and newer protocols. 14:17 - AWS CloudTrail enhanced logging for S3 delete objects API CloudTrail now provides more detailed logging for S3 delete operations, including bulk deletes. This closes a gap in logging capabilities, making it easier to track and audit object deletions without relying on expensive bucket-level logging. 19:22 - Amazon's data center infrastructure investments AWS announced significant investments in data center infrastructure globally, including $20 billion in Pennsylvania, $10 billion in North Carolina, and $5 billion in Taiwan. These investments demonstrate AWS's commitment to expanding its cloud infrastructure despite recent reports of AI data center project delays. 26:58 - AWS liquid cooling technology for AI data centers AWS introduced a new liquid cooling system for its next-generation AI data centers. This closed-loop system allows for more efficient cooling of high-density racks, particularly for GPU workloads. The technology provides flexibility in deployment and doesn't significantly increase water consumption.…

1
Season 4 Episode 23: Pricing, Protection, and Privacy 42:04

לפני 7 weeks42:04

42:04

In Season 4, Episode 23, Karl and Jon are joined by Cloud Security Consultant, Deep Shankar Yadav for a wide-ranging discussion on recent cloud updates and innovations. They cover the latest enhancements to the AWS Pricing Calculator, including support for discounts and purchase commitments, making it easier for users to estimate and plan costs more accurately. The conversation moves to Amazon EC2's new feature that allows for the deletion of underlying EBS snapshots when deregistering AMIs, helping users streamline storage management. They also explore how Amazon GuardDuty and Amazon Detective can be used together to detect and investigate EC2 malware, providing stronger security insights. The episode highlights how developers can boost productivity with Claude Code and take advantage of prompt caching in Amazon Bedrock. They also reflect on AWS’s launch of a new sovereign cloud in Europe, aimed at addressing data residency and regulatory requirements. To cap it all off, the trio dives into a fun debate over whether karate is fundamentally more offensive or defensive in nature. 04:26 - AWS Pricing Calculator The AWS Pricing Calculator now supports discounts and purchase commitments, allowing users to get more accurate cost estimates. This update is particularly useful for product businesses and internal teams, but may add complexity for consulting businesses when explaining costs to clients. The tool's effectiveness still depends on accurately knowing usage patterns. 13:25 - Amazon EC2 and EBS snapshots Amazon EC2 now allows users to delete underlying EBS snapshots when deregistering AMIs. This feature helps clean up orphaned snapshots and reduces storage costs. Users need to enable this option manually, and it won't delete snapshots associated with multiple AMIs. 20:37 - Detecting EC2 malware The article discusses using Amazon GuardDuty and Amazon Detective together to detect and investigate EC2 malware. While this combination provides a good workflow for security investigations, it requires manual setup and lacks some features found in commercial malware protection offerings, such as automatic quarantine. 27:22 - Claude Code and Bedrock prompt caching Anthropic's Claude Code is entering the AI coding assistant market, competing with GitHub Copilot and Amazon's Q Developer. The article highlights the benefits of using Claude Code through AWS Bedrock, including data privacy and prompt caching for improved efficiency. 33:24 - AWS sovereign cloud in Europe AWS is launching a sovereign cloud in Europe, starting in Germany, to address data sovereignty concerns. This separate entity will be governed independently from Amazon Inc. and AWS. The move is seen as a response to growing demands for data localization and sovereignty, particularly in regions like the Middle East.…

1
Season 4 Episode 22: Aurora DSQL, Cost Optimization, and Cloud Dissatisfaction 38:45

לפני 8 weeks38:45

38:45

In Season 4, Episode 22, Karl and Jon are joined by AWS Community Builder Mohit Saxena to unpack the latest in AWS news. They kick things off with the general availability of Amazon Aurora DSQL, followed by updates to Amazon ECS, which now provides more detailed exit reason messages. The conversation moves into developer tools, highlighting how Amazon Q’s Developer CLI agents can be used to automatically generate architecture diagrams. They also explore a new cost comparison feature in AWS Cost Explorer and improvements to the Cost Optimization Hub, which now supports preferences for savings plans and reserved instances. The episode also touches on a recent survey reflecting growing dissatisfaction with the rising costs of cloud computing. Just as the discussion hits full technical stride, things take an unexpected (and hilarious) turn when the trio dives into a spirited debate over the best way to fold a wrap—completely derailing the AWS updates in favor of culinary strategy. 04:58 - Aurora DSQL General Availability Aurora DSQL, announced at re:Invent 2023, is now generally available. It offers a globally distributed database service with millisecond-level time synchronization, solving distributed time issues. It provides active-active distributed architectures with high availability (99.99% within a single region, 99.999% multi-region) and no single point of failure. 10:54 - ECS Exit Reason Message Increase Amazon ECS has increased the exit reason message character limit from 255 to 1,024 characters. This change makes debugging failed container starts significantly easier by providing more detailed information. The extended message can be accessed through both the management console and the describe tasks API. 14:28 - Architecture Diagrams with Amazon Q Faye Ellis wrote about creating architecture diagrams using the Amazon Q developer CLI agent. This tool can generate mermaid diagrams or Draw.io compatible diagrams from YAML templates or CloudFormation code. It's a useful feature for visualizing and understanding complex architectures quickly. 20:32 - Cost Explorer and Cost Optimisation Hub AWS Cost Explorer now offers a new cost comparison feature allowing users to overlay and compare costs from different time periods more easily. It also includes a new widget on the cost management home page showing the top 10 cost variations in the previous two months, making it easier to identify and analyze cost trends.The Cost Optimization Hub now supports savings plans and reservations preferences. Users can set their preferences for upfront payments and commitment terms, allowing for more realistic and aligned cost-saving recommendations based on their financial situation and needs. 30:35 - Cloud Cost Dissatisfaction Survey A Gartner survey revealed growing dissatisfaction with cloud computing costs. The article suggests that many organizations moved to the cloud without proper planning or workload analysis, leading to higher than expected costs. It highlights the importance of due diligence and proper cloud migration strategies to realize the full benefits of cloud computing.…

1
Season 4 Episode 21: Reboot Migrations, Container Mapping, and GenAI Spending 36:31

לפני 9 weeks36:31

36:31

In Season 4, Episode 21, Karl and Jon are joined by Community Builder Ayhan Setirekli to discuss a range of AWS updates and industry news. Topics include the new EC2 feature: customer-initiated reboot migrations for scheduled events, enhancements to Amazon Inspector for container security, the launch of the AWS Product Lifecycle page, and updates on service availability. They also cover a report revealing that generative AI spending is now surpassing security spending in some organizations, and a widespread misconfiguration in cloud storage buckets exposing over 200 billion files and then the conversation shifted to plumbing—almost as if they were trying to fix a leaky S3 bucket! 06:09 - EC2 Customer-initiated reboot migrations This feature simplifies the process of rebooting EC2 instances for scheduled maintenance events. Previously, users had to manually stop and start instances, which could be time-consuming. The new feature allows for a simpler reboot process, making it easier for users to manage their instances during maintenance windows. 09:36 - Amazon Inspector container security enhancement Amazon Inspector now maps Amazon ECR images to running containers, improving visibility and security for containerized workloads. This feature helps users identify vulnerabilities in container images and track where these images are running, making it easier to manage and secure container deployments across ECS and EKS environments. 17:22 - AWS Product Lifecycle page and service availability updates AWS has introduced a new page that provides information on service deprecations and end-of-life announcements. This addresses previous criticism about lack of communication regarding service discontinuations. The page includes details on end of support dates, migration plans, and access restrictions for new customers, improving transparency for AWS users 24:01 - Generative AI spending overtaking security A report suggests that some organizations are prioritizing generative AI spending over security budgets. This trend raises concerns about potential security risks, especially as AI adoption introduces new vulnerabilities. The shift in spending priorities is more pronounced in larger companies, while smaller businesses still tend to focus on security investments. 29:15 - Cloud storage bucket misconfiguration A study revealed that 660,000 misconfigured cloud storage buckets have exposed 200 billion files across multiple cloud providers. This highlights ongoing issues with cloud security practices, despite efforts by providers to improve default security settings. The problem appears to be worsening, with a 30% increase in exposed buckets compared to the previous year.…

1
Season 4 Episode 20: Chips, Chaos, and Nuclear Power 49:36

לפני 10 weeks49:36

49:36

In Season 4, Episode 20, Karl and Jon are joined by AWS Ambassador and Community Builder, Jenn Bergstrom for a wide-ranging discussion on key developments in cloud and infrastructure. They explore AWS CloudTrail network activity events for VPC endpoints, strategies for enhancing application resiliency using Amazon Q Developer, and how AWS security services can be mapped to MITRE frameworks for improved threat detection and mitigation. The episode also touches on AWS’s push for chip production in the UK amid the growing energy demands of AI, and the country’s increasing reliance on nuclear power to support data centers. Wrapping up on a lighter note, the trio jokes about launching “Nuclear Reactor as a Service” for AWS’s mobile data centers—complete with trailer-sized reactors to power them anywhere. 06:44 - AWS Cloud Trail Network Activity events for VPC Endpoints The article discusses the introduction of Cloud Trail Network Activity events for VPC Endpoints. The hosts debate whether this feature is new or was previously announced. They discuss the importance of having proper auditability for cloud services from day one and question why Cloud Trail integration isn't a standard feature for new AWS services. 11:31 - Enhancing application resiliency using Amazon Q developer https://aws.amazon.com/blogs/devops/how-to-enhance-your-application-resiliency-using-amazon-q-developer/ This article focuses on how Amazon Q developer can be used to improve application resiliency. Jen, as a chaos engineering practitioner, explains how this tool can help identify single points of failure and provide recommendations to improve architecture. The hosts discuss the potential of Q to upskill junior architects and its integration with existing dev tools. 18:27 - Mapping AWS security services to Mitre frameworks The article discusses how AWS security services map to Mitre frameworks for threat detection and mitigation. The hosts talk about the importance of these frameworks in the security community and recent funding issues with Mitre. They also discuss the EU's creation of its own vulnerability database and the mapping of AWS services to different aspects of the Mitre framework. 28:56 - AWS pushing UK chip plans amid AI energy crunch This article focuses on AWS's promotion of their custom silicon, including Graviton chips, in response to the increasing energy demands of AI workloads. The hosts discuss the benefits of ARM-based chips in terms of energy efficiency and performance, and how this relates to the sustainability of data center growth for AI applications. 37:56 - UK's need for more nuclear power to support AI and data centers The final article discusses Amazon's stance on the need for more nuclear power in the UK to support AI and data center growth. The hosts debate the pros and cons of nuclear energy, its safety compared to other power sources, and the potential for small-scale reactors to power individual data centers.…

1
Season 4 Episode 19: AI Agents, Responsible AI Adoption, and Cloud Earnings 50:06

לפני 11 weeks50:06

50:06

In Season 4, Episode 19, Karl and Jon are joined by Rob Pankow , Simplyblock CEO, to discuss the new AWS EBS snapshot acceleration feature, the evolution of AI agents, AWS’s guide for responsible AI adoption in financial services, and how to use Amazon Q Business to gain insights from AWS Trusted Advisor. They also touch on cloud hyperscaler earnings and market share—before realizing they had spent more time talking about Jon’s t-shirt than the actual AWS news. 04:55 - AWS EBS snapshot acceleration feature This new feature allows users to accelerate the transfer of data from an Amazon EBS snapshot to a new EBS volume. It offers two tiers of initialization rates, ranging from 100-200 Mbps and 200-300 Mbps, with associated costs. While it provides faster restoration and initialization, especially beneficial for disaster recovery and high-performance computing, it comes with additional costs that may be significant for large-scale users. 15:19 - AI agents and their development The article discusses the concept of AI agents, which are more advanced than foundation models and can perform tasks beyond their initial training data. It explores how to build AI agents using JavaScript and highlights their potential impact on various industries. The discussion touches on the challenges of widespread adoption and the need for reliability in production environments. 23:36 - AWS guide for responsible AI adoption in financial services AWS has released a guide on governance, risk, and compliance for responsible AI adoption within the financial services industry. The guide, available through AWS Artifact, aims to help financial institutions navigate the complexities of implementing AI technologies while adhering to regulatory requirements and best practices. The article's disappearance from the AWS Security blog raised questions about potential updates or revisions to the guide. 30:21 - Using Amazon Q Business for AWS Trusted Advisor insights This article explores how Amazon Q Business can be used to obtain faster and more actionable insights from AWS Trusted Advisor. The setup involves creating a custom business application, integrating with Trusted Advisor data, and connecting to project management tools like Jira. While the concept is promising, the implementation requires significant effort and may not be as seamless as desired. 39:08 - Cloud hyperscaler earnings and market share The article discusses the recent earnings announcements from major cloud providers (AWS, Microsoft Azure, and Google Cloud). It highlights the continued growth of the cloud industry, with AWS maintaining its market leadership despite slower growth rates. The discussion touches on the inconsistent reporting methods between providers and the significant financial resources required to build and maintain a hyperscale cloud infrastructure.…

1
Season 4 Episode 18: Lambda Logging, Just-in-Time Access, and Data Center Debates 45:31

לפני 12 weeks45:31

45:31

In Season 4, Episode 18 Karl & Jon are joined by AWS Hero Renato Losio . They discuss the introduction of tiered pricing for Amazon CloudWatch logs, new logging destinations, and standardized billing for the init phase in AWS Lambda; the launch of just-in-time node access via AWS Systems Manager; the use of AWS Transfer Family and GuardDuty for enhanced malware protection; the ongoing AI data center boom and its potential slowdown; and Jon’s return to the group, gracing them once more despite his rise as an internationally recognized tech conference speaker. 08:46 - AWS Lambda introduces tiered pricing for Amazon CloudWatch logs and additional logging destinations AWS is now charging for the init phase of Lambda functions across all runtimes, which was previously free for some. This change is seen as a standardization effort but also as a price increase. While it may force developers to optimize their init phase, there are concerns about the impact on costs, especially for larger-scale users. 16:11 - AWS Lambda standardizes billing for init phase This new feature allows for temporary, just-in-time access to nodes, improving security by reducing standing access. While the functionality is praised, especially for large enterprises and highly regulated industries, the pricing ($10 per node per month) is considered expensive. The feature includes approval workflows and integration with communication tools like Slack. 23:10 - Introduction of just-in-time node access using AWS Systems Manager This new feature allows for temporary, just-in-time access to nodes, improving security by reducing standing access. While the functionality is praised, especially for large enterprises and highly regulated industries, the pricing ($10 per node per month) is considered expensive. The feature includes approval workflows and integration with communication tools like Slack. 31:44 - Using AWS Transfer Family and GuardDuty for malware protection The article describes how to use AWS Transfer Family (for SFTP) and GuardDuty for malware scanning of uploaded files. While the solution is praised for its architecture and implementation, there are criticisms about the continued use of SFTP and questions about why AWS doesn't offer this as a managed service. 38:54 - AI data center boom and potential slowdown in big tech companies' data center investments The article discusses recent news about big tech companies like AWS and Microsoft pulling back on some data center investments. The podcast hosts and guest are not particularly concerned, viewing this as part of the normal cyclical nature of data center investments. They suggest that factors like improved hardware efficiency and geopolitical issues may be influencing these decisions rather than a true slowdown in AI-related growth. Guest was Renato Losio https://cloudiamo.com/…

1
Season 4 Episode 17: Prepaid AWS, Prompt Optimization, and Gamified Learning 45:06

לפני 13 weeks45:06

45:06

In Season 4, Episode 17 Karl & Jon are joined by Community Builder and User Group Lead, Damien Jones .They discuss AWS Advanced Payment Option, Amazon Redshift Discounted Pricing, Prompt Optimization in Amazon Bedrock, AWS Well-Architected Generative AI Lens, AWS SkillBuilder Trivia and then the guys joked about Jon's cat being deeply unimpressed with his AWS summit presentation practice, suggesting the audience might have a similar reaction. 07:25 - AWS now allows customers in Europe to pay For their usage in advance AWS now allows customers in Europe to pay for their usage in advance. This option doesn't offer discounts but allows customers to prepay their AWS bills. The hosts discussed potential use cases, such as for businesses with seasonal usage patterns or those wanting to simplify their finance processes. 15:07 - Announcing Serverless Reservations, a new discounted pricing option for Amazon Redshift Serverless Amazon Redshift now offers a new discounted pricing option for service reservations. This applies to Redshift Serverless and provides cost savings for customers who can commit to longer-term usage. The hosts discussed how this could make Redshift Serverless more viable for production use cases. 23:30 - Prompt Optimization in Amazon Bedrock now generally available Amazon Bedrock's prompt optimization feature is now generally available. This tool helps users create more efficient prompts for AI models, potentially reducing costs by minimizing token usage. The hosts discussed the importance of effective prompt engineering in AI applications. 31:41 - Announcing the AWS Well-Architected Generative AI Lens AWS announced a new Well-Architected Lens focusing on generative AI. This lens provides guidance for designing and implementing generative AI solutions using AWS best practices. The hosts expressed surprise that this hadn't been introduced earlier, given the growing importance of AI in cloud computing. 37:49 - Game on: Introducing AWS Skill Builder Trivia AWS introduced a new gamified learning tool called SkillBuilder Trivia. This free feature allows users to create and participate in trivia sessions using AWS-related questions. The hosts discussed its potential use in user group meetings and as a team-building tool for organizations adopting AWS.…

1
Season 4 Episode 16: Apex Domains, Backup Testing, and Cloud Sustainability 45:41

לפני 14 weeks45:41

45:41

In Season 4, Episode 16 Karl & Jon are joined by AWS Hero, Sathyajith Bhat. They discuss Amazon CloudFront Anycast static IPs for Apex domains, AWS simplifying VPC peering billing, AWS Backup restore testing, sustainability challenges with AI and hyperscale data centers, CMA probe into cloud provider dominance and licensing costs and the guys went off on a tangent about the carbon footprint of generating AI action figure dolls. 08:53 - Amazon CloudFront now supports Anycast static IPs for Apex domains This new feature allows users to point their Apex (naked) domains directly to CloudFront without using CNAME flattening or alias records. It simplifies DNS configuration and reduces the number of IPs needed for allowlisting. The feature is particularly useful for organizations still using basic DNS providers and those requiring IP whitelisting for CDNs. 15:08 - AWS simplifies VPC peering billing AWS has made changes to simplify billing for VPC peering by separating inter-availability zone data transfer charges from VPC-to-VPC traffic. This change makes it easier for customers to understand their costs related to VPC peering and inter-AZ data transfer. While it doesn't affect the actual charges, it provides more clarity in billing statements. 21:22 - AWS Backup restore testing and its importance AWS Backup now offers automated restore testing, allowing users to validate their backups regularly. This feature is crucial for ensuring data recoverability and meeting various compliance standards. The article emphasizes the importance of testing backups and provides insights into how the restore testing process works within AWS Backup. 31:04 - Sustainability challenges with AI and hyperscale data centers The article discusses the growing concern over the massive energy consumption of AI and hyperscale data centers. It highlights the conflict between tech companies' sustainability pledges and the increasing power demands of AI workloads. The discussion touches on various potential solutions, including nuclear power and carbon capture technologies, while acknowledging the complexity of the issue. 40:04 - CMA probe into cloud provider dominance and licensing costs The UK's Competition and Markets Authority (CMA) is investigating the dominance of major cloud providers. AWS and Google are claiming that Microsoft's licensing practices for running Windows servers on their clouds are unfair. The article discusses AWS's claim that 50% of Azure workloads would move to other clouds if licensing costs were more favorable, though this claim is met with skepticism by the podcast participants.…

1
Season 4 Episode 15: Models, Money, and Monitoring 42:38

לפני 15 weeks42:38

42:38

In Season 4, Episode 15 Karl & Jon are joined by AWS Community Builder and core member of the Armenia UG*, Tigran Gevorgyan . They discuss Meta's Llama 4 models on Amazon SageMaker, prompting for best price performance with AWS AI models, patched vulnerability in the Amazon EC2 SSM agent, using OpenSearch and Managed Grafana for telemetry data correlation, updates to the AWS Well-Architected Framework and then the guys started discussing the merits of different sports teams' merchandise, completely forgetting they were supposed to be talking about AWS news. 09:02 - Meta's Llama 4 models on Amazon SageMaker JumpStart The article discusses the availability of Meta's Llama 4 models on Amazon SageMaker JumpStart. The speakers highlight the importance of model naming conventions and note that SageMaker is getting new models, which is significant given the recent focus on Bedrock. They discuss the differences between Bedrock and SageMaker, with SageMaker offering more control and customization options. 15:26 - Prompting for best price performance with AWS AI models This article from the AWS Machine Learning blog focuses on optimizing price performance through efficient prompting. The discussion compares the costs of OpenAI's GPT models with Amazon's Nova models, highlighting potential cost savings. The speakers also touch on the differences in prompting techniques between the two systems and the potential challenges of transitioning from GPT to Nova. 22:37 - Amazon EC2 SSM agent vulnerability patched The article discusses a recently patched vulnerability in the Amazon EC2 SSM agent. The speakers explain the nature of the vulnerability, which involved privilege escalation via path traversal. They emphasize the importance of keeping systems updated and note that while the vulnerability required multiple steps to exploit, it's crucial to address such issues promptly. 28:29 - Correlating telemetry data with Amazon OpenSearch Service and Amazon Managed Grafana This article from the AWS Big Data blog discusses using OpenSearch and Managed Grafana for telemetry data correlation. The speakers debate the complexity and cost of this solution, particularly for Kubernetes environments. They suggest considering alternatives like AWS X-Ray or Datadog, depending on specific needs and budget constraints. 34:53 - New guidance in AWS Well-Architected Tool The podcast discusses recent updates to the AWS Well-Architected Framework, including 78 new best practices. The speakers emphasize the importance of staying updated with these best practices and encourage solution architects and DevOps professionals to utilize this resource. They also criticize the pricing structure of the Well-Architected Tool, which is tied to AWS support subscription levels. *AWS Armenia user group ( https://www.linkedin.com/company/aws-user-group-armenia/ ), and community day ( https://aws-community-day.am/ )…

ברוכים הבאים אל Player FM!

Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.