AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0 were susceptible to information leakage (an attacker could create ciphertexts that would leak the user’s AWS account ID, encry...
Mon, Sep 28th, 2020
An audit of an AWS open-source project identified a great deal of issues, and as a result AWS made the decision to take it down.
Fri, Sep 25th, 2020
CloudFormation allows the use of Lambda-backed resource providers, wherein Lambda can be used to write custom provisioning logic to be executed during CloudFormation stack operations. The aforement...
Tue, Sep 22nd, 2020