All Content tagged with Security, Identity, & Compliance

Hi there, Im reaching out with a query about Security Hub Thing is, Im a beginner with Security Hub and our company recently started the project for deploying & tracking the Security findings throug...

For security compliance, my team wonders how AWS AppSync handles subscription arguments behind the scenes. * Are the arguments stored in the Appsync memory temporarily, and are they disposed of after ...

Hi, I'm looking to use Identity Center as the SAML IdP to connect to AD-joined AppStream. The basics are working, but we're looking to implement Certificate-Based Authentication (CBA). This requires ...

Hello, I am currently researching the capabilities of AWS Inspector, but I am unable to find whether it can monitor S3 components or not. Are there also any components that cannot be monitored by AWS ...

We have an AWS Organizations org and are addressing findings from SecurityHub. The most common critical finding is that none of the root users for any of the accounts in the org have hardware MFA ena...

I need the Winter SOC 1 report, but when I go to Artifact, the only one that allows downloads is the most current. Any ideas on how to access those historical SOC 1 reports?

Hypothetical question for planning: - one AWS org - two accounts - Prod, DR - shared CMK created in Prod, used to snapshot and copy volume to DR account If the Prod account is compromised but DR rem...

I am using AWS S3 as a block storage device to store mty documents. We were using AccessKey and SecretKey combination from configuration files to connect to S3 and retrieve a document. So far so good....

I am following a similar workflow as show in [this](https://stackoverflow.com/a/77529522/4352701) StackOverflow post. I have an SPA that runs at `admin.example.com` with API requests (via an OpenAPI-g...

I am using aws-azure-login and and below assumerole works { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Federa...

I'm experiencing an unexpected issue with my EC2 instances that I've been running for an extended period. Upon checking my web pages today, I discovered that one of my servers appears to have had its ...

Hi everyone, I wonder what should customers undergoing FedRamp do with EKS add-on images, which are not FIPS compliant? Namely, those are 'kube-proxy', 'coredns', 'aws-ebs-csi-driver', 'aws-network-po...