Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cloud
    • Cloud
    • Cybersecurity

    Amazon Web Services Adds New Services to Bolster Cloud Security

    By
    Sean Michael Kerner
    -
    November 9, 2017
    Share
    Facebook
    Twitter
    Linkedin
      cloud security

      Amazon announced a series of new security features for its cloud platform on Nov. 8, providing users with enhanced capabilities to help protect S3 storage buckets and virtual private cloud (VPC) endpoint connections.

      The company is launching the new Amazon Web Services (AWS) security features ahead of its re:invent conference, which runs from Nov. 27 to Dec. 1 in Las Vegas. The security of the AWS Simple Storage Service (S3) has been under intense scrutiny over the course of 2017, with multiple groups of security researchers finding unintentionally exposed data due to various misconfiguration issues.

      In total, AWS is adding five new encryption and security features to S3 to help protect cloud storage, including default encryption, permission checks, cross-region replication access control list overwrite, cross-region replication with KMS (Key Management Service) and a detailed inventory report.

      “You can now mandate that all objects in a bucket must be stored in encrypted form by installing a bucket encryption configuration,” Jeff Barr, chief evangelist for AWS, wrote in a blog post. “If an unencrypted object is presented to S3 and the configuration indicates that encryption must be used, the object will be encrypted using encryption option specified for the bucket.”

      Without encryption for an S3 storage bucket, if data is leaked, an attacker will have full access to all the unencrypted data. With encryption, even in the event of a data breach or leak, the data will not be immediately usable by an attacker. The new cross-region replication capabilities in S3 mean that the encryption policy will hold, even when data is replicated and distributed across multiple AWS regions.

      At the AWS Summit in New York on Aug.14, Amazon first announced a series of AWS Config service enhancements to help improve S3 storage security. The AWS Config rule enhancements enable organizations to more easily block public read and writes to S3 storage instances. AWS is now improving on that capability with the permission checking feature for S3.

      “The S3 Console now displays a prominent indicator next to each S3 bucket that is publicly accessible,” Barr wrote. “You will know right away if you open up a bucket for public access, allowing you to make changes with confidence.”

      Going a step further, the new detailed inventory report feature provides users with a listing that details the encryption status of S3 objects.

      PrivateLink

      AWS also announced its PrivateLink for AWS Services offering on Nov. 8, providing a new approach to helping users keep traffic between AWS services and Amazon VPC deployments as secure as possible. The PrivateLink service is an evolution of AWS’ VPC Endpoints service, which gives users a way to directly access a logically isolated segment of AWS for private cloud deployments.

      “Today we are announcing AWS PrivateLink, the newest generation of VPC Endpoints which is designed for customers to access AWS services in a highly available and scalable manner, while keeping all the traffic within the AWS network,” Colm MacCárthaigh, senior engineer for Amazon Virtual Private Cloud, wrote in a blog post. 

      AWS PrivateLink supports Kinesis, Service Catalog, Amazon EC2, EC2 Systems Manager (SSM) and Elastic Load Balancing (ELB) and will support Amazon Cloudwatch and Key Management Service (KMS) in a future update.

      Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.

      Sean Michael Kerner
      Sean Michael Kerner is an Internet consultant, strategist, and contributor to several leading IT business web sites.

      MOST POPULAR ARTICLES

      Big Data and Analytics

      Alteryx’s Suresh Vittal on the Democratization of...

      James Maguire - May 31, 2022 0
      I spoke with Suresh Vittal, Chief Product Officer at Alteryx, about the industry mega-shift toward making data analytics tools accessible to a company’s complete...
      Read more
      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Cloud

      IGEL CEO Jed Ayres on Edge and...

      James Maguire - June 14, 2022 0
      I spoke with Jed Ayres, CEO of IGEL, about the endpoint sector, and an open source OS for the cloud; we also spoke about...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×