EPISODE · Apr 21, 2022 · 5 MIN
gimme-aws-creds, Possibly Okta's AWS Creds
from Last Week In AWS Podcast · host Corey Quinn
Corey’s livetweet: https://twitter.com/quinnypigEric Hammond’s old article: https://alestic.com/2014/09/aws-root-password/Lightspin found a vulnerability: https://blog.lightspin.io/aws-rds-critical-security-vulnerabilityExpel’s incident report: https://expel.com/blog/incident-report-from-cli-to-console-chasing-an-attacker-in-aws/Rhino Security Labs found a CVE in the AWS VPN Client: https://rhinosecuritylabs.com/aws/cve-2022-25165-aws-vpn-client/DarkReading’s profile of AJ Yawn: https://www.darkreading.com/edge-articles/bytechek-founder-aj-yawn-brings-discipline-to-everything-he-doesNotGitBleed: https://www.notgitbleed.com/AWS Security Bulletins: https://aws.amazon.com/security/security-bulletins/AWS-2022-005/ https://aws.amazon.com/security/security-bulletins/AWS-2022-004/gimme-aws-creds: https://github.com/Nike-Inc/gimme-aws-credsChamber: https://github.com/segmentio/chamber#lastweekinaws slack channel: https://og-aws-slack.lexikon.io/
What this episode covers
Last week in security news: Eric Hammond has advised we throw out the passwords, Lightspin spun up some vulnerability, AJ Yawn is profiled by DarkReading, and more!
NOW PLAYING
gimme-aws-creds, Possibly Okta's AWS Creds
No transcript for this episode yet
Similar Episodes
Mar 26, 2026 ·1m
Mar 19, 2026 ·34m
Feb 18, 2026 ·11m
Feb 11, 2026 ·45m