Last week in security news: Short session expiration does not help security, How to use AWS Verified Access logs to write and troubleshoot access policies, This week's S3 Bucket Negligence Award, and more!

Links:

  • A UK contractor wins this week's S3 Bucket Negligence Award.
  • What happens when a Zero Day and Access Keys Collide in the Cloud.
  • Short session expiration does not help security
  • How to use AWS Verified Access logs to write and troubleshoot access policies
  • IAMbic purports to be able to alert you to changes to IAM polices via consuming CloudTrail logs