Free AI web copilot to create summaries, insights and extended knowledge, download it at here
7422
Abstract
AWS Elastic Container Registry</h2>
<div><h3>ACM.287 A few simple commands to get our Docker container into ECR</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*agkzjAKdJojHYqRAcS3XNA.png)"></div>
</div>
</div>
</a>
</div><div id="22a3" class="link-block">
<a href="https://readmedium.com/inconsistencies-and-risks-that-make-aws-kms-key-deployments-complicated-14d6698d9381">
<div>
<div>
<h2>Inconsistencies and Risks That Make AWS KMS Key Deployments Complicated</h2>
<div><h3>ACM.286 Troubleshooting a KMS Key Policy used for AWS ECR</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_agwpey6uK5OZK2ZikfsPg.png)"></div>
</div>
</div>
</a>
</div><div id="c162" class="link-block">
<a href="https://readmedium.com/allow-lambda-to-pull-containers-from-elastic-container-registry-123d05325bb7">
<div>
<div>
<h2>Allow Lambda to Pull Containers from Elastic Container Registry</h2>
<div><h3>ACM.295 Add a policy to ECR to allow lambda to access images</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*CumVpsQvYpXv6wgO-p9diQ.png)"></div>
</div>
</div>
</a>
</div><div id="d638" class="link-block">
<a href="https://readmedium.com/deploying-a-lambda-running-a-container-using-cloudformation-387e6d511b91">
<div>
<div>
<h2>Deploying a Lambda running a Container using CloudFormation</h2>
<div><h3>ACM.298 Leveraging ECR and our prior VPC with NAT deployment</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*wep3eH13un5ywHhl5TUGpw.png)"></div>
</div>
</div>
</a>
</div><div id="b83e" class="link-block">
<a href="https://readmedium.com/testing-a-lambda-function-with-the-aws-console-and-enabling-cloudwatch-logs-and-metrics-816528863863">
<div>
<div>
<h2>Testing a Lambda function with the AWS Console and Enabling CloudWatch Logs and Metrics</h2>
<div><h3>ACM.299 Restricting Lambda functions to write to their own CloudWatch logs groups</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*cQqUwapyvFanUgMs7jKTGQ.png)"></div>
</div>
</div>
</a>
</div><div id="87a1" class="link-block">
<a href="https://readmedium.com/lambda-architecture-vs-container-architecture-e3256879a6d6">
<div>
<div>
<h2>Lambda Architecture vs. Container Architecture</h2>
<div><h3>ACM.300 Resolving errors caused by architecture mismatch</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*_c-BvVueHHT8eXrPVldrNA.png)"></div>
</div>
</div>
</a>
</div><div id="c11c" class="link-block">
<a href="https://readmedium.com/fixing-application-errors-inside-a-container-used-by-a-lambda-function-and-redeploying-it-49a8c4804c07">
<div>
<div>
<h2>Fixing Application Errors Inside a Container Used By a Lambda Function and Redeploying It</h2>
<div><h3>ACM.301 The benefits and risks of redeploying a container used by a Lambda function</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*WoAvTpNvH2AcEzhDc3tA2w.png)"></div>
</div>
</div>
</a>
</div><div id="e49b" class="link-block">
<a href="https://readmedium.com/testing-lambda-functions-locally-outside-of-lambda-f7126d20421a">
<div>
<div>
<h2>Testing Lambda Functions Locally Outside of Lambda</h2>
<div><h3>ACM.302 Using the AWS Lambda Runtime Interface Emulator (RIE) and how system architectures affect it</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*8Zid7OyczpHEE731tMIkkw.png)"></div>
</div>
</div>
</a>
</div><div id="65c0" class="link-block">
<a href="https://readmedium.com/why-do-i-need-a-language-specific-runtime-in-a-lambda-container-103dcfb5cb5c">
<div>
<div>
<h2>Why Do I Need a Language Specific Runtime in a Lambda Container?</h2>
<div><h3>ACM.303 Why doesn’t Lambda just run any OCI Compliant container?</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*Srt_jGpotiOOO_Lci1BmZw.png)"></div>
</div>
</div>
</a>
</div><div id="fed7" class="link-block">
<a href="https://readmedium.com/custom-lambda-runtimes-6da9977eabfe">
<div>
<div>
<h2>Custom Lambda Runtimes</h2>
<div><h3>ACM.304 Overview of a custom Lambda runtime to execute bash scripts deployed in a container in Lambda</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*FZEpE2nJa4A_sKWEkOFuWg.png)"></div>
</div>
</div>
</a>
</div><div id="cd93" class="link-block">
<a href="https://readmedium.com/custom-bash-runtime-for-lambda-container-bec64ab33582">
<div>
<div>
<h2>Custom Bash Runtime for Lambda Container</h2>
<div><h3>ACM.305 Using AWS base images for a container that runs a custom Lambda runtime</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*nZNnuwdt1s2q5L7RGJq7aw.png)"></div>
</div>
</div>
</a>
</div><div id="5fa4" class="link-block">
<a href="https://readmedium.com/adding-error-handling-to-bash-custom-lambda-runtime-29d3f1c94441">
<div>
<div>
<h2>Adding Error Handling to Bash Custom Lam
Options
bda Runtime</h2>
<div><h3>ACM.306 Using Bash trap to capture and handle errors in bash scripts</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*kLGyFgwhGc1ZYyr1cdgZxg.png)"></div>
</div>
</div>
</a>
</div><div id="b857" class="link-block">
<a href="https://readmedium.com/using-the-lambda-runtime-interface-emulator-with-a-custom-bash-runtime-f3bd77d61a8c">
<div>
<div>
<h2>Using the Lambda Runtime Interface Emulator With a Custom Bash Runtime</h2>
<div><h3>ACM.307 Revisiting the RIE with a revamped Arm container for Lambda</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*a8hiTPVLb-TP5Xxyd-8duA.png)"></div>
</div>
</div>
</a>
</div><div id="b6be" class="link-block">
<a href="https://readmedium.com/a-generic-bash-error-handler-for-a-bash-custom-lambda-runtime-interface-6e0c55f5252b">
<div>
<div>
<h2>A Bash Error Handler For a Bash Custom Lambda Runtime</h2>
<div><h3>ACM.319 Handling multiple errors and different types of errors in different functions</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*i1Jw12XnI3NQm2eR7i8Vag.png)"></div>
</div>
</div>
</a>
</div><div id="e546" class="link-block">
<a href="https://readmedium.com/where-are-your-yum-packages-coming-from-f7fa7a504636">
<div>
<div>
<h2>Where Are Your Yum Packages Coming From?</h2>
<div><h3>ACM.321 This issue could be applicable to any cloud provider — check where your packages originate on the network</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*He_J5WcOgKMPxuAVFl7i0Q.png)"></div>
</div>
</div>
</a>
</div><div id="bec2" class="link-block">
<a href="https://readmedium.com/moving-a-lambda-function-to-aws-batch-a6ceb83e8cfd">
<div>
<div>
<h2>Moving A Lambda Function to AWS Batch</h2>
<div><h3>ACM.328 Considering new risks in a different execution environment with different security configuration options</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*553gLhsEsDbo_Ok2t4xqmQ.png)"></div>
</div>
</div>
</a>
</div><div id="18a6" class="link-block">
<a href="https://readmedium.com/building-a-container-for-aws-batch-vs-aws-lambda-e586cda9a987">
<div>
<div>
<h2>Building a Container for AWS Batch vs. AWS Lambda</h2>
<div><h3>ACM.328 Also trying to figure out which IP ranges are required for trusted downloads</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*CeeTyuQvWEAPaj7pqW0yWw.png)"></div>
</div>
</div>
</a>
</div><p id="a5c3">More on using containers with Lambda here:</p><div id="30d8" class="link-block">
<a href="https://readmedium.com/aws-lambda-security-2f70d1481c67">
<div>
<div>
<h2>AWS Lambda Security</h2>
<div><h3>Posts on Lambda Security by Teri Radichel</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*JrQ4vUdhgEtyJHnr9wqOPw.png)"></div>
</div>
</div>
</a>
</div><p id="3a78">Examples of container vulnerabilities</p><div id="98ee" class="link-block">
<a href="https://readmedium.com/container-escape-vulnerability-in-aws-hot-patch-bed4211e59e">
<div>
<div>
<h2>Container Escape Vulnerability in AWS Hot Patch</h2>
<div><h3>Update or mitigate now if you are affected (if you run containers, you probably are.)</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*AkdhfEzQWBaFzg5USpTy3w.png)"></div>
</div>
</div>
</a>
</div><p id="880d">Related stories on application security:</p><div id="70bc" class="link-block">
<a href="https://readmedium.com/application-security-77580cf52d1d">
<div>
<div>
<h2>Application Security</h2>
<div><h3>Compilation of stories on Application Security (AppSec) and Secure Code by Teri Radichel</h3></div>
<div><p>medium.com</p></div>
</div>
<div>
<div style="background-image: url(https://miro.readmedium.com/v2/resize:fit:320/1*B_bcpLcdlf2nPmoGLBgh6A.png)"></div>
</div>
</div>
</a>
</div><p id="72ae">Follow for updates.</p><p id="4a3a">Teri Radichel | <i>© <a href="https://2ndsightlab.com/?source=post_page---------------------------">2nd Sight Lab</a> 2023</i></p><div id="8b5f"><pre><span class="hljs-section">About Teri Radichel:
⭐️ Author: Cybersecurity Books
⭐️ Presentations: Presentations by Teri Radichel
⭐️ Recognition: SANS Award, AWS Security Hero, IANS Faculty
⭐️ Certifications: SANS ~ GSE 240
⭐️ Education: BA Business, Master of Software Engineering, Master of Infosec
⭐️ Company: Penetration Tests, Assessments, Phone Consulting ~ 2nd Sight Lab</pre></div><div id="caae"><pre><span class="hljs-section">Need Help With Cybersecurity, Cloud, or Application Security?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~</span>
🔒 Request a penetration test or security assessment
🔒 Schedule a consulting call
🔒 Cybersecurity Speaker for Presentation</pre></div><div id="5a42"><pre>Follow <span class="hljs-keyword">for</span> more stories like <span class="hljs-keyword">this</span>:
❤️ Sign Up my Medium Email List
❤️ Twitter: <span class="hljs-meta">@teriradichel</span>
❤️ LinkedIn: https:<span class="hljs-comment">//www.linkedin.com/in/teriradichel</span>
❤️ Mastodon: <span class="hljs-meta">@teriradichel</span><span class="hljs-meta">@infosec</span>.exchange
❤️ Facebook: 2nd Sight Lab
❤️ YouTube: @2ndsightlab</pre></div><figure id="faf5"><img src="https://cdn-images-1.readmedium.com/v2/resize:fit:800/0*H9Ew1KCl-29nZiPR.jpeg"><figcaption></figcaption></figure></article></body>