Mark Ryland

@0xdabbad00 Scott, thank you for the constructive feedback. We appreciate it and we've made some updates to the post to stress the overriding importance of focusing on the use of short-term credentials. New version at same URL. aws.amazon.com/blogs/security…

I recognize the folks at AWS thought the SSE-C part of the story was important because you want to ensure people don't think AWS services are vulnerable, but blocking an AWS feature (and one that is used for security!), is the exact opposite content that should be published.

Hey @AWSSecurityInfo, can you please remove or reword your recommendation to ban SSE-C on S3 buckets, or at least reorder your guidance so it's not your top recommendation? This is bad advice and is causing customer confusion. aws.amazon.com/blogs/security…

@Frichette_n Hall Effect keyboards like amzn.com/gp/product/B0B… are hard to beat...

What keyboards do y'all recommend? My current one is failing. I'm interested in going without a number pad but it's not a hard requirement.

In the near future we'll be sharing our plans to disable TLS1.0 and TLS1.1 on all AWS APIs. It's coming! There'll be plenty of time and notifications to any impacted customers (which is now quite few!). You can check yourself with CloudTrail! aws.amazon.com/blogs/mt/using…

Happy to highlight my recent blog post announcing an increased investment in @theopenssf by committing an additional $10 million over the next three years: aws.amazon.com/blogs/opensour…

@KarimMelhaoui We have documentation about IMDSv2 and PowerShell in the Windows guide: docs.aws.amazon.com/AWSEC2/latest/…

Using #AWS IMDSv2 with PowerShell $header = @{"X-aws-ec2-metadata-token-ttl-seconds" = "21600"} $token = Invoke-RestMethod -Method Put -Uri "http://169.254.169.254/latest/api/token" -Headers $header $header = @{"X-aws-ec2-metadata-token" = $token} Now include $header in requests

Let someone else build and operate for you massively scaled compute clusters! Awesome stuff. twitter.com/jeffbarr/statu…

Look forward to seeing any colleagues who are at the NHTSA Vehicle Cybersecurity Roundtable today, I'll be on a 3:15…lnkd.in/exd4xU7