#AWS introduced EC2 Instance Attestation in October
I have created a demo project to showcase how we can use it to achieve verifiable software deployment
📝 Blog post: blog.richardfan.xyz/2025/12/18/w...
#EC2 #NitroTPM #Cybersecurity #CloudSecurity #TEE #ZeroTrust #NitroEnclaves
Werner keynote ready to go
#AWSreInvent
25 announcements in 10 minutes
#AWSreInvent
Running Gemini on Amazon Bedrock
#AWSreInvent
AWS Builders Loft at #AWSreInvent
There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects.
TL,DR: Adopt Trusted Publishing 🔐🚀📦
blog.pypi.org/posts/2025-1...
I can't overstate how significant the new #AWS Organization Inspector policy is
🔗 Example code: gist.github.com/richardfan11...
With a simple terraform stack, we can enable Amazon Inspector in all accounts, in all regions
📝 More example policy: docs.aws.amazon.com/organization...
#CloudSecurity
This is my most favourite announcement so far: #AWS issued-JWT
🔗 docs.aws.amazon.com/IAM/latest/U...
With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service.
#AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC
There is an upcoming change on #GitHubActions Pull Request workflow starting from Dec 8
Let me explain what's going on and how you can check if your workflow is affected
👉 blog.richardfan.xyz/2025/11/17/g...
#GitHub #Security #CloudSecurity #CICD #DevOps
If you use #Microsoft365, check your subscription
If you don't need its AI, you can switch back to the Classic plan, and #Microsoft never told you in the email
#LegalTech #ConsumerLaw #MisleadingConduct #Subscriptions
www.accc.gov.au/media-releas...
Can anyone tell me what is the difference between this M365 Copilot app and the Excel app?
If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps?
#Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot
The mysterious YouTube algorithm brought me to yet another niche video
This time, it's "Why you can't go faster than light"
But surprisingly, this channel gave me the most intuitive explanation ever to this question 😄
youtu.be/Vitf8YaVXhc?...
I always hear news reporters say “QUOTE” when quoting someone
But I seldom hear them say “unquote”
So when do the quotes end?
An I the only one wondering?
Good luck to anyone hosting #aws identity center in us-east-1
You should ask the cabin crew next time
How do they read the punctuation?
Session reservation for #AWSreInvent is opening soon, still struggling to plan your schedule among 2000+ sessions?
Use this planner made by @raphaelmanke.bsky.social to discover sessions you are interested in.
👉Link: reinvent-planner.cloud
#AWS #AWSCommunity #TechConference
The internet this week #sora2
After facing countless of limitation on #AWS #NitroEnclaves, the same feature is now available on normal EC2 instance.
The coming month must be a busy month for me to try it out
#ConfidentialComputing #AWSCloud
aws.amazon.com/about-aws/wh...
Totally worth a trip to #AWSCommunityDay #Warsaw
What a massive and successful community day
#aws #awscloud #awscommunity #networking #tech
Heading to #AWSCommunityDay #Warsaw
#aws #awscloud #awscommunity #networking #tech
#fwdcloudsec EU is happening soon
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
After 14 hours of flight, finally arrived in Berlin,
What brings me here?
It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars
Can’t make it? No worry
📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
There are still tickets available for the upcoming #fwdcloudsec EU in Berlin
The speaker lineup is all-star level. Don't miss it if you love to learn practical cloud security.
fwdcloudsec.org/conference/e...
#cybersecurity #security #cloudsecurity
☁️ Hong Kong’s First AWS Community Day is here! ☁️
🔗 Event Site awscommunity.hk
🔗 Apply to speak: sessionize.com/aws-communit...
#AWS #AWSCommunityDay #AWSCommunity #CloudComputing #CloudTech #CloudInnovation
#TechEvents #TechCommunity #HongKongTech #HKTech #AWSUserGroup #AWSUGHK #DeveloperCommunity
If you created a new #AWS account with #FreeTier
DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗
If you want to use IAM Identity Center, create it on account instance!
#AWSCloud #CostOptimization #AWSFreeTier
TIL, you only need write access on a #GitHub repo to manage variables and secrets, even under environment. No admin access required🫨
It's just that it can't be accessed via UI, you need to use API or gh cli
cli.github.com/manual/gh_va...
cli.github.com/manual/gh_se...
#devops #cicd #githubactions
I saw this debate on an Instagram post: www.instagram.com/reel/DI6SN7k...
Here's my solution, simple and clear
Why Americans love writing essay on traffic signs?
#RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign
They have mention it in the credit section, the end of the README
But they also removed the previous versions from the CHANGELOG, making it looks like their release is the first version
Whether this is considered “Credit” is debatable but it just looks cheeky to me
Copying the entire repo of another project and publishing it as your own project, and just vaguely mentioning the original project at the end of the README
Is it a standard and good-faithful way of open-source projects???
#OpenSource #OpenTofu #GitHub #DevOps
github.com/opentofu/vsc...
