AWS re:Inforce 2023 keynote highlights
Tags: aws, security, cloud
Published: 2023-06-14 11:26:45

## Security of the Cloud


![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/05vy5wy5ndhvcvox80jq.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/uzpt6v8o43yy0h7pmxlc.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/b9jh0im04z66csgc1ppc.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/9lndst5y7rhfbzm1x2v6.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/gzeo3g0m7u00t31uf2wa.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/41znd4xjvt0a64beqsrs.png)

## Security in the Cloud

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/soo6uw1epx8kcwk4uuo0.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/f5lm87aiba564ppepg4m.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/uughbdq8wyeizn6pn7ag.png)

What are AWS Verified Access?  
[https://docs.aws.amazon.com/verified-access/latest/ug/what-is-verified-access.html](https://docs.aws.amazon.com/verified-access/latest/ug/what-is-verified-access.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ez1se0y7sm1w0xw20e9t.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ih98qcrrx8gmxz94ghil.png)

## Announcement: AWS Verified Permissions
Purpose: Manage permissions and fine-grained authorization in applications that you build  
References:  
* [https://aws.amazon.com/blogs/aws/simplify-how-you-manage-authorization-in-your-applications-with-amazon-verified-permissions-now-generally-available/](https://aws.amazon.com/blogs/aws/simplify-how-you-manage-authorization-in-your-applications-with-amazon-verified-permissions-now-generally-available/)  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-verified-permissions-generally-available](https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-verified-permissions-generally-available)  
* [https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/what-is-avp.html](https://docs.aws.amazon.com/verifiedpermissions/latest/userguide/what-is-avp.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/t8rehi0eslqe1ukdg2ck.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/kdhz58ygauqqub88kgp5.png)

## Announcement: Amazon EC2 Instance Connect Endpoint
Purpose: Allows to connect to an instance via SSH or RDP without requiring the instance to have a public IPv4 address  
References:  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-ec2-instance-connect-ssh-rdp-public-ip-address/](https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-ec2-instance-connect-ssh-rdp-public-ip-address/)  
* [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Connect-using-EC2-Instance-Connect-Endpoint.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Connect-using-EC2-Instance-Connect-Endpoint.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/vvp01w428gunr2vcvv7i.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/j566paicl2ghpn2dl23w.png)

## Announcement: Amazon Inspector Code Scan for Lambda
Purpose: Scans custom proprietary application code within a Lambda function for code security vulnerabilities such as injection flaws, data leaks, weak cryptography, or missing encryption based on AWS security best practices  
References:  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-inspector-code-scans-aws-lambda-function/](https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-inspector-code-scans-aws-lambda-function/)  
* [https://docs.aws.amazon.com/inspector/latest/user/scanning-lambda.html](https://docs.aws.amazon.com/inspector/latest/user/scanning-lambda.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/1pxmlimhw4uzifvdrxyb.png)

## Announcement: Amazon Inspector SBOM Export
Purpose: Offers the ability to export a consolidated Software Bill of Materials (SBOMs) for all Amazon Inspector monitored resources across organization in industry standard formats  
References:  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/software-bill-materials-export-capability-amazon-inspector/](https://aws.amazon.com/about-aws/whats-new/2023/06/software-bill-materials-export-capability-amazon-inspector/)  
* [https://docs.aws.amazon.com/inspector/latest/user/sbom-export.html](https://docs.aws.amazon.com/inspector/latest/user/sbom-export.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/n3o5231cq9hnn1h281qq.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/o7846jkptnkmi65oj6h6.png)

## Announcement: Amazon CodeGuru Security
Purpose: A static application security testing (SAST) tool that uses Machine Learning to help identify code vulnerabilities and provide guidance to use as part of remediation  
Note: This service is currently in preview  
References:  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-codeguru-security-available-preview/](https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-codeguru-security-available-preview/)  
* [https://docs.aws.amazon.com/codeguru/latest/security-ug/what-is-codeguru-security.html](https://docs.aws.amazon.com/codeguru/latest/security-ug/what-is-codeguru-security.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/n6mvcyro21sbf0wqytt2.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/s5rr2n5u6vc67r5x7cdy.png)

## Announcement: Findings Groups for Amazon Detective
Purpose: Amazon Detective has expanded finding groups to include Amazon Inspector network reachability and software vulnerability findings alongside Amazon GuardDuty findings  
References:  
* [https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-detective-finding-groups-amazon-inspector/](https://aws.amazon.com/about-aws/whats-new/2023/06/amazon-detective-finding-groups-amazon-inspector/)  
* [https://docs.aws.amazon.com/detective/latest/userguide/groups-about.html](https://docs.aws.amazon.com/detective/latest/userguide/groups-about.html)  

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/iu9iy3zq0nhlcx16fhm5.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/otb6m7ewx4y2hw3kh36m.png)

## About the Author
Eyal Estrin is a cloud and information security architect, the owner of the blog [Security & Cloud 24/7](https://security-24-7.com/) and the author of the book [Cloud Security Handbook](https://amzn.to/3xMI4Ak), with more than 20 years in the IT industry.
You can connect with him on [Twitter](https://twitter.com/eyalestrin) and [LinkedIn](https://www.linkedin.com/in/eyalestrin/).