Questions tagged with Security, Identity, & Compliance
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
I am looking for a solution to disable security hub control from audit accounts for all the accounts under the organization using Terraform. Currently, I delegated audit account as admin of security...
3
answers
0
votes
290
views
asked 5 months agolg...
Hi
Is there a way to accept multiple answers for an AWS question on repost if both are excellent?
Thanks,
2
answers
0
votes
257
views
asked 6 months agolg...
Hi, what frequency are DKIM keys rotated when using SES Easy DKIM?
I need to fill out a questionnaire around emails being sent out, and one of the requirements is to support DKIM rotation every six...
0
answers
0
votes
75
views
asked 6 months agolg...
There are 4 options for S3 encryption: SSE-S3 / SSE-KMS / DSSE-KMS / SSE-C. What's the use case for them. For example, what is SSE-S3 protecting from? Malicious AWS employee? Somebody stealing...
3
answers
0
votes
719
views
asked 6 months agolg...
I have the following Terraform based on the recommended SCP:
```
data "aws_iam_policy_document" "restrict-regions-policy" {
statement {
sid = "RegionRestriction"
effect = "Deny"
...
1
answers
0
votes
239
views
asked 6 months agolg...
Hi,
we tried with the [link](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html) with the option **using the s3 console**
We are able to get the Presigned URL but...
2
answers
0
votes
395
views
asked 6 months agolg...
I need to change the default umask from 022 to 077. I have changed the umask in all the files it appears in in /etc/ and it remains 022. I am using PAM so I have added
```
session optional ...
2
answers
0
votes
396
views
asked 6 months agolg...
Hi,
I am building a authentication system where the user can show their interest by registering. However, upon signup, instead of sending verification code, I want to send the user a Thank you...
1
answers
0
votes
240
views
asked 6 months agolg...
Hi team, I have a customer who's akin to a "Pinterest for Education" where users create collections with pictures and other resources. I just got this question from them and I wonder if you had any...
1
answers
0
votes
151
views
asked 6 months agolg...
Hello,
Following this article https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc.html#manage-oidc-provider-console, it says:
```
"AWS secures communication with some OIDC...
1
answers
0
votes
373
views
asked 6 months agolg...
I'm trying to set up an API in APIGateway with mTLS. I built the truststore file composing the RootCA - IntermediateCA - ClientCertificate. The client can make calls to the API, but it seems that the...
1
answers
0
votes
566
views
asked 6 months agolg...
I've recently been trying out the preview of CodeGuru Security for static code analysis (we use GitHub so the integration is very nice). I'm pretty impressed with how it works so far, but have one...
1
answers
0
votes
94
views
asked 6 months agolg...