175: AWS re:Inforces Their Dislike for OrcaSec

On The Cloud Pod this week, the team gets skeptical on Prime Day numbers. Plus: AWS re:Inforce brings GuardDuty, Detective and Identity Center updates and announcements; Google Cloud says hola to Mexico with a new Latin American region; and Azure introduces its new cost API for EC and MCA customers. A big thanks to this week’s sponsor, Foghorn Consulting, which provides full-stack cloud solutions with a focus on strategy, planning and execution for enterprises seeking to take advantage of the transformative capabilities of AWS, Google Cloud and Azure. This week’s highlights AWS re:Inforce brings us Amazon GuardDuty, Amazon Detective and IAM Identity Center releases, updates and name-changes for additional protection and headache. Google Cloud adds a third Latin American data region to its collection — this time, in Mexico. EA and MCA customers now benefit from Azure’s new Cost Details API for better HR and finance management. Top Quotes   “This must always have been their plan. Amazon did not build that block Inspection Service just so that Orca could serve their own customers. They must have had an eye on the huge customer base of people using EBS Volumes to do this exact same thing. So it’s no surprise [as they’ve] had almost two years of sole ownership of the service to deliver this to customers. I’m not surprised at all to see an enhancement like this. And it’s awesome. Really.” “Microsoft is in a lucky position, because the Windows ecosystem has been very services heavy for a long time. … They’ve got this unique position where they can deprecate … they can pivot to new APIs more quickly than AWS, who are stuck with so many customers [and it’s] very painful for them to deprecate … It’s lucky that [Microsoft] don’t have customers that would push back against this, because they’re used to constant change.” AWS: re:Inforcing Prime Numbers #️⃣ There may well be some spin in Jeff Barr’s latest brag on behalf of Amazon for its Prime Day 2022. Impressive numbers nonetheless! New malware detection for EBS Volumes with GuardDuty is the first of three announcements hot out of AWS re:Inforce — very similar to Orca Security malware snapshot and restore functions. ️ The second offering is Amazon Detective’s support for Kubernetes Workloads on EKS, for improved security investigations. There’s nothing not to like here, and it shows exactly why we use managed services. Finally, the...