#security (2019-12)

I’m sharing this with my team. It’s really cool.

scam ^

the link is http://console.aws.amazon.com.console.home.218542.immobilienmack.de/?XXXXXXXXXXXXXXXXDA4MTgmczI9MTc0MjUzNDQ2JnMzPUdMQg== (not real, query string changed)

That’s a pretty good phishing email

The temptation to click is strong

Anyone else getting these?

even openbsd is being affected from time to time http://linkalyzer.stackpointersolutionsnet.net/article/81ac55dd7d13a2f9158789f39fb892df7d6f955acd19e40380

another scam ^

the language is strong but not perfect, with some grammatical issues (they have to work on it)

I got an email today from amazon.de stating that I got reimbursed for a purchase from 2017

https://www.hashicorp.com/blog/injecting-vault-secrets-into-kubernetes-pods-via-a-sidecar/

Any opinions on https://github.com/nozaq/terraform-aws-secure-baseline ? Is there anything better out there?

https://github.com/cloudposse/terraform-aws-cloudtrail-cloudwatch-alarms is all I found from CP

Yea your better off for now with the nozaq one

We are currently investing in the AWS labs cloud formation approach for the CIS Foundations Benchmarks