Amazon Web Services782 тыс
Опубликовано 26 сентября 2022, 20:45
We would love to hear your feedback about our show! Please take our survey here: amazonintna.qualtrics.com/jfe/...
AWS Supports You: Answering Your re:Post Questions on Security Identity & Compliance featured three AWS experts answering user submitted questions from the repost.aws forum to our live audience on our twitch.tv/aws channel. In this episode we give viewers an overview of how to get STS Regional endpoints in a real scenario, how to identify which Service Control Policy (SCP) is denying access to what, and how to increase the performance of fetching secrets using AWS Secrets Manager. If you have questions for our experts you can post them over on the repost.aws forum, and maybe you'll be the topic of a future episode! This episode originally aired on September 26, 2022.
Intro 0:00
How to Get STS Regional Endpoints in a Real Scenario 01:23
How to Determine Which SCP is Denying Access to What 15:16
Increase the Performance of Fetching Secrets Using AWS Secrets Manager 25:19
Conclusions 39:37
Helpful Links:
rePost User Question 1: repost.aws/questions/QUSDezJc1...
rePost User Question 2: repost.aws/questions/QUPJoyz28...
rePost User Question 3: repost.aws/questions/QUOcHHPYg...
STS docs: docs.aws.amazon.com/IAM/latest...
Identity providers and federation:
docs.aws.amazon.com/IAM/latest...
Other services that work with IAM:
docs.aws.amazon.com/IAM/latest...
Using an IAM role to grant permissions to applications running on Amazon EC2 instances:
docs.aws.amazon.com/IAM/latest...
Global Endpoints: docs.aws.amazon.com/IAM/latest...
Regional Endpoints: docs.aws.amazon.com/IAM/latest...
AWS Python SDK (Boto3): boto3.amazonaws.com/v1/documen...
boto3.amazonaws.com/v1/documen...
docs.aws.amazon.com/sdkref/lat...
VPC Endpoints:
docs.aws.amazon.com/secretsman...
Secrets Manager pricing:
aws.amazon.com/secrets-manager...
How lambda pricing works:
docs.aws.amazon.com/whitepaper...
Rotate AWS Secrets Manager Secrets
docs.aws.amazon.com/secretsman...
Rotate DB Credentials
docs.aws.amazon.com/secretsman...
Caching Data with AWS Lambda extensions:
aws.amazon.com/blogs/compute/c...
Securely Retrieving secrest with AWS Lambda:
aws.amazon.com/it/blogs/comput...
Secrets Manager Caching Libraries:
docs.aws.amazon.com/secretsman...
Secrets Manager Rotation Strategies:
docs.aws.amazon.com/secretsman...
docs.aws.amazon.com/organizati...
Subscribe:
More AWS videos - bit.ly/2O3zS75
More AWS events videos - bit.ly/316g9t4
ABOUT AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers — including the fastest-growing startups, largest enterprises, and leading government agencies — are using AWS to lower costs, become more agile, and innovate faster.
#AWS #AmazonWebServices #CloudComputing
AWS Supports You: Answering Your re:Post Questions on Security Identity & Compliance featured three AWS experts answering user submitted questions from the repost.aws forum to our live audience on our twitch.tv/aws channel. In this episode we give viewers an overview of how to get STS Regional endpoints in a real scenario, how to identify which Service Control Policy (SCP) is denying access to what, and how to increase the performance of fetching secrets using AWS Secrets Manager. If you have questions for our experts you can post them over on the repost.aws forum, and maybe you'll be the topic of a future episode! This episode originally aired on September 26, 2022.
Intro 0:00
How to Get STS Regional Endpoints in a Real Scenario 01:23
How to Determine Which SCP is Denying Access to What 15:16
Increase the Performance of Fetching Secrets Using AWS Secrets Manager 25:19
Conclusions 39:37
Helpful Links:
rePost User Question 1: repost.aws/questions/QUSDezJc1...
rePost User Question 2: repost.aws/questions/QUPJoyz28...
rePost User Question 3: repost.aws/questions/QUOcHHPYg...
STS docs: docs.aws.amazon.com/IAM/latest...
Identity providers and federation:
docs.aws.amazon.com/IAM/latest...
Other services that work with IAM:
docs.aws.amazon.com/IAM/latest...
Using an IAM role to grant permissions to applications running on Amazon EC2 instances:
docs.aws.amazon.com/IAM/latest...
Global Endpoints: docs.aws.amazon.com/IAM/latest...
Regional Endpoints: docs.aws.amazon.com/IAM/latest...
AWS Python SDK (Boto3): boto3.amazonaws.com/v1/documen...
boto3.amazonaws.com/v1/documen...
docs.aws.amazon.com/sdkref/lat...
VPC Endpoints:
docs.aws.amazon.com/secretsman...
Secrets Manager pricing:
aws.amazon.com/secrets-manager...
How lambda pricing works:
docs.aws.amazon.com/whitepaper...
Rotate AWS Secrets Manager Secrets
docs.aws.amazon.com/secretsman...
Rotate DB Credentials
docs.aws.amazon.com/secretsman...
Caching Data with AWS Lambda extensions:
aws.amazon.com/blogs/compute/c...
Securely Retrieving secrest with AWS Lambda:
aws.amazon.com/it/blogs/comput...
Secrets Manager Caching Libraries:
docs.aws.amazon.com/secretsman...
Secrets Manager Rotation Strategies:
docs.aws.amazon.com/secretsman...
docs.aws.amazon.com/organizati...
Subscribe:
More AWS videos - bit.ly/2O3zS75
More AWS events videos - bit.ly/316g9t4
ABOUT AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers — including the fastest-growing startups, largest enterprises, and leading government agencies — are using AWS to lower costs, become more agile, and innovate faster.
#AWS #AmazonWebServices #CloudComputing
Свежие видео