PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Top AWS re:Invent Announcements for Security Teams in 2025

wiz.io | blog | #cloud | #cloud-security | #aws | #announcements | #iam | #credentials | #reinvent
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Security highlights from AWS re:Invent 2025: the new aws login CLI, JWT-based IAM Outbound Identity Federation, flat-rate static-site pricing, and moving accounts between AWS organizations.
Published
Collected

Related coverage

blog · wiz.io
A new type of long-lived key on AWS: Bedrock API keys
Wiz's Scott Piper reviews AWS Bedrock API keys: long-term keys quietly create IAM users with an over-privileged policy, while a short-term variant offers a safer path — SCPs can block the former.
blog · wiz.io
The many ways to obtain credentials in AWS
A deep dive into how AWS applications obtain IAM credentials—SDK provider chain, environment variables, credentials files, IMDS/IMDSv2, and container endpoints—plus what defenders should watch for.
blog · wiz.io
Wiz at Re:Invent 2023
Recapping Wiz at AWS re:Invent 2023: EMEA Marketplace Partner of the Year, a new AWS console extension, GuardDuty ECS runtime integration and secure cloud development launches.
blog · wiz.io
A security community success story of mitigating a misconfiguration
The story of fixing a common misconfiguration: GitHub Actions OIDC trust policies missing their 'sub' condition let anyone assume AWS roles, until coordinated research pushed defaults to change.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
Back