Tag: Access

Feed: Cloudwards. Author: Samson Max; YouTube is a free-to-use video sharing service famous for its user-generated content. It’s the go-to place to watch music videos, comedy shows, hacks, step-by-step guides on how to do things and more. However, YouTube content isn’t available everywhere. For example, when you travel to China, you’ll need a VPN for YouTube to freely access the streaming service.  Beyond that, some YouTube creators block videos in specific territories. For example, a U.S.-based vlogger can choose to make their content available only in the U.S., preventing viewers in the U.K. from accessing it. In that case, you’ll ... Read More

Feed: Recent Announcements. You can now use the Amazon S3 Object Ownership setting, Bucket owner enforced, to disable access control lists (ACLs) in the AWS China (Beijing), AWS China (Ningxia), and AWS GovCloud (US) Regions, simplifying access management for data stored in S3. When you apply this bucket-level setting, every object in an S3 bucket is owned by the bucket owner, and ACLs are no longer used to grant permissions. As a result, access to your data is based on policies, including AWS Identity and Access Management (IAM) policies applied to IAM identities, session policies, Amazon S3 bucket and access ... Read More

Feed: Recent Announcements. Amazon SNS is a fully managed messaging service for both application-to-application (A2A) and application-to-person (A2P) communication. The A2A pub/sub functionality provides topics for high-throughput, push-based, many-to-many messaging between distributed systems, microservices, and event-driven serverless applications. The A2P functionality enables you to send messages to users at scale via SMS, mobile push, and email. With ABAC support for Amazon SNS, ABAC policies can be used to allow or deny specific API actions when the IAM principal's tags match the tags on an Amazon SNS topic. To get started, see the following resources: For information about attribute-based access control, ... Read More

Feed: Recent Announcements. Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) now supports enabling fine-grained access control on existing domains. Fine-grained access control adds several capabilities to help you have better access control over the data stored in your domain. Features include creating and mapping local users, authorizing external identities to predefined security roles, limiting access to confidential data, field masking and many other advanced capabilities including document level security and field level security. Fine grained access control enables different teams to share an Amazon OpenSearch Service domain without being able to see or modify other teams’ data, dashboards, or ... Read More

Feed: AWS Big Data Blog. Since 2020, Amazon Redshift has supported multi-factor authentication (MFA) to any SAML 2.0 compliant identity provider (IdP) in our JDBC and ODBC drivers. You can map the IdP user identity and group memberships in order to control authorization for database objects in Amazon Redshift. This simplifies administration by enabling you to manage user access in a central location, reducing the overhead of creating and maintaining users in the database in conjunction with the IdP. Recently, we helped a customer who was building their data warehouse on Amazon Redshift and had the requirement of using Microsoft ... Read More

Feed: The Internet of Things on AWS – Official Blog. Author: Ali Benfattoum. Using firewalls is a common way to protect and secure access to IoT devices. Yet, it’s challenging to access and manage devices deployed at remote sites, behind firewalls that block all inbound traffic. Troubleshooting devices can involve sending technicians onsite to connect to those devices. This increases the complexity and the cost of device management. Secure Tunneling is a feature of AWS IoT Device Management that helps customers accessing remote devices over a secure connection that is managed by AWS IoT. Secure Tunneling does not require updates ... Read More

Feed: What's New. Author: Sanjeev Verma. As Tableau usage has grown across many enterprises, sharing and maintaining access to data has become more complex. Database access must be shared widely with everyone who needs to connect to data for modeling or creating vizzes. If database credentials can’t be shared for security reasons, the burden of creating and maintaining shareable content (like published data sources) falls on whoever has the credentials—whether they’re the best person for the job or not. Tableau 2021.4 introduces a new solution to this problem, as part of the Data Management Add-on: virtual connections. What are virtual ... Read More

Feed: Recent Announcements. In April 2021, IAM Access Analyzer added policy generation to help you create IAM policies based on access activity found in your AWS CloudTrail. IAM Access Analyzer has now increased policy generation quotas to 50 per day to help you right-size permissions for more roles in your account. As you right-size permissions across multiple workloads in your account, you can now use policy generation across your roles to grant just the required permissions. To use IAM Access Analyzer policy generation, visit your role’s detail page and select “generate policy” to get started. When you request a policy, ... Read More

Feed: AWS Partner Network (APN) Blog. Author: Chintan Sanghavi. By Chintan Sanghavi, Partner Solutions Architect – AWSBy Sumit Sarkar, Product Marketing and Strategy Leader – Immuta Immuta Amazon Web Services (AWS) is enabling a new era of data and analytics, fueled by the cloud, advanced data management, and data science tools. It has become challenging, however, for data teams to control who has access to what data, ensure proper compliance, and enable safe data sharing. In order to effectively govern data access, companies must: Know their data landscape. Create data access policies. Automate enforcement of data access policies to restrict ... Read More

Feed: Recent Announcements. AWS Resource Access Manager (RAM) now supports global resource types, enabling you to provision a global resource once and share that resource across your accounts. A global resource is a resource that can be used in multiple AWS Regions. For example, you can now create a RAM resource share with an AWS Cloud WAN core network, which is a managed network containing AWS and on-premises networks, and share it across your organization. As a result, you can use the Cloud WAN core network to centrally operate a unified global network across Regions and across accounts. RAM helps ... Read More