Links:

• Apparently there's been some dependency confusion in AWS CodeArtifact.
• PlatformQ wins this week's S3 Bucket Negligence Award
• Found an interesting article that suggests that ransomware in AWS isn't a purely theoretical concern.
• Protocol interview with AWS CISO CJ Moses about his cloud security challenges.
• AWS co-announces release of the Open Cybersecurity Schema Framework (OCSF) project
• Trivy is a security scanner for vulnerabilities in container images, Git repositories, filesystems, and various bits of configuration.