Questions tagged with Security, Identity, & Compliance

i have a fleet of devices in my aws iot core service. is there the way to migrate from one aws account to another? without device reflashing with new certificates. i have tried to transfer...

What AWS security services will notify me when there is an adversary in my website and its related database (RDS mySQL) hosted on AWS? It is a notification needed for when an adversary in on my...

SendX, a provider of email marketing software, relies on AWS resources for our infrastructure. A critical aspect of our operations involves the dynamic generation of SSL certificates for our clients'...

How can you prevent data exfiltration through VPCEs (VPC Endpoints). If you have a number of internal tenants, all part of an AWS Organization and you would like to allow tenants to create VPCEs, how...

Hi, My EC2 Image Builder is in AWS Organization, it's not the root account. I want to create images and automatically share them with all accounts and newly created accounts? Is it possible to do...

Hello, I am using the AWS IAM (Identity Center - SSO) concept to log into AWS Accounts, integrated with AAD (Using SAML and SCIM protocols). A specific account was created under the AWS Cloud Tower...

Hello, We have desktop application which leverages the AWS SSO device authorization flow[1]. Until recently (days) the flow had been: 1. User clicks on "Login" 2. A new browser window is opened for...

The NiceDCV manual [mentions](https://docs.aws.amazon.com/dcv/latest/adminguide/config-param-ref.html#security) the DCV server can enable Kerberos/GSSAPI for authentication. Does this mean that we...

Hello, I could not find a place to report bugs without getting support... I tried to use the new il-central-1 region, and found that the endpoint URL is not registered with DNS. ``` $ aws...

Hi AWS, I need to know is it possible to trigger the **Redshift Data API using Step Functions cross account** and if so how is that possible? Can you please share any blog post link which has...

What are the recommendations and best practices for assigning permissions to roles and IAM users for developers in our company? Currently, we are required to grant administrator permissions to...

Dear all: In our process of getting ISO 27001 certified, our auditor asked the following: 'Whilst we can see Amazon inc is ISO 27001 and 27017 certified we get invoiced by AWS EMEA Sarl. This...