#AWS introduced EC2 Instance Attestation in October I have created a demo project to showcase how we can use it to achieve verifiable software deployment 📝 Blog post: blog.richardfan.xyz/2025/12/18/w... #EC2 #NitroTPM #Cybersecurity #CloudSecurity #TEE #ZeroTrust #NitroEnclaves

Werner keynote ready to go #AWSreInvent

25 announcements in 10 minutes #AWSreInvent

Running Gemini on Amazon Bedrock #AWSreInvent

AWS Builders Loft at #AWSreInvent

There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects. TL,DR: Adopt Trusted Publishing 🔐🚀📦 blog.pypi.org/posts/2025-1...

I can't overstate how significant the new #AWS Organization Inspector policy is 🔗 Example code: gist.github.com/richardfan11... With a simple terraform stack, we can enable Amazon Inspector in all accounts, in all regions 📝 More example policy: docs.aws.amazon.com/organization... #CloudSecurity

This is my most favourite announcement so far: #AWS issued-JWT 🔗 docs.aws.amazon.com/IAM/latest/U... With sts:GetWebIdentityToken, we can now request JWT from AWS, with context inside that can be logged by external service. #AWSCloud #Security #CloudSecurity #CloudSecurity #IAM #OIDC

There is an upcoming change on #GitHubActions Pull Request workflow starting from Dec 8 Let me explain what's going on and how you can check if your workflow is affected 👉 blog.richardfan.xyz/2025/11/17/g... #GitHub #Security #CloudSecurity #CICD #DevOps

If you use #Microsoft365, check your subscription If you don't need its AI, you can switch back to the Classic plan, and #Microsoft never told you in the email #LegalTech #ConsumerLaw #MisleadingConduct #Subscriptions www.accc.gov.au/media-releas...

Can anyone tell me what is the difference between this M365 Copilot app and the Excel app? If the Copilot app have all the full Word, Excel and Powerpoint feature, then why I need to install 3 more apps? #Microsoft #MicrosoftOffice #MicrosoftM365 #M365 #Copilot #MicrosoftCopilot

The mysterious YouTube algorithm brought me to yet another niche video This time, it's "Why you can't go faster than light" But surprisingly, this channel gave me the most intuitive explanation ever to this question 😄 youtu.be/Vitf8YaVXhc?...

I always hear news reporters say “QUOTE” when quoting someone But I seldom hear them say “unquote” So when do the quotes end? An I the only one wondering?

Good luck to anyone hosting #aws identity center in us-east-1

Session reservation for #AWSreInvent is opening soon, still struggling to plan your schedule among 2000+ sessions? Use this planner made by @raphaelmanke.bsky.social to discover sessions you are interested in. 👉Link: reinvent-planner.cloud #AWS #AWSCommunity #TechConference

The internet this week #sora2

After facing countless of limitation on #AWS #NitroEnclaves, the same feature is now available on normal EC2 instance. The coming month must be a busy month for me to try it out #ConfidentialComputing #AWSCloud aws.amazon.com/about-aws/wh...

Totally worth a trip to #AWSCommunityDay #Warsaw What a massive and successful community day #aws #awscloud #awscommunity #networking #tech

Heading to #AWSCommunityDay #Warsaw #aws #awscloud #awscommunity #networking #tech

#fwdcloudsec EU is happening soon Can’t make it? No worry 📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e... #cybersecurity #security #cloudsecurity

After 14 hours of flight, finally arrived in Berlin, What brings me here? It’s #fwdcloudsec, a conference I always learn a lot from cloud security all-stars Can’t make it? No worry 📹 Livestream is also available on YouTube: fwdcloudsec.org/conference/e... #cybersecurity #security #cloudsecurity

There are still tickets available for the upcoming #fwdcloudsec EU in Berlin The speaker lineup is all-star level. Don't miss it if you love to learn practical cloud security. fwdcloudsec.org/conference/e... #cybersecurity #security #cloudsecurity

☁️ Hong Kong’s First AWS Community Day is here! ☁️ 🔗 Event Site awscommunity.hk 🔗 Apply to speak: sessionize.com/aws-communit... #AWS #AWSCommunityDay #AWSCommunity #CloudComputing #CloudTech #CloudInnovation #TechEvents #TechCommunity #HongKongTech #HKTech #AWSUserGroup #AWSUGHK #DeveloperCommunity

If you created a new #AWS account with #FreeTier DO NOT follow the console recommendation to create IAM Identity Center with AWS Organization, it will EXPIRE all your free credit ❗❗❗ If you want to use IAM Identity Center, create it on account instance! #AWSCloud #CostOptimization #AWSFreeTier

TIL, you only need write access on a #GitHub repo to manage variables and secrets, even under environment. No admin access required🫨 It's just that it can't be accessed via UI, you need to use API or gh cli cli.github.com/manual/gh_va... cli.github.com/manual/gh_se... #devops #cicd #githubactions

I saw this debate on an Instagram post: www.instagram.com/reel/DI6SN7k... Here's my solution, simple and clear Why Americans love writing essay on traffic signs? #RoadDesign #HighwayDesign #RoadSafety #SignDesign #RoadSign #TrafficSign

Copying the entire repo of another project and publishing it as your own project, and just vaguely mentioning the original project at the end of the README Is it a standard and good-faithful way of open-source projects??? #OpenSource #OpenTofu #GitHub #DevOps github.com/opentofu/vsc...

If you don't want your team create any exportable ACM cert, you can use the IAM policy condition "acm:Export" Example: gist.github.com/richardfan11... #aws #awscloud #cloudsecurity #awsreinforce

Good news, ACM cert can be exported and used outside AWS now Bad news for security team: you probably want to block this action from most of your AWS account or set monitoring on it. aws.amazon.com/blogs/aws/aw... #aws #awscloud #awsreinforce #cloudsecurity

2 free tickets to an absolutely amazing Cloud Security conference in the US If you are (or know someone are) new to and want to learn cybersecurity, don't miss the chance #fwdcloudsec #cybersecurity #CloudSecurity www.linkedin.com/posts/ashish...

Badge picked up Ready for tomorrow #Kubecon in Hong Kong #CNCF #CloudNativeCon

Why is #terraform #aws provider documentation showing warning of "5.99.1 not the latest version" instead of "6.0.0-beta2 is a beta version"? I thought people expect the latest stable version as the default instead of a beta one

The recordings of latest AWS User Group Hong Kong meetups are available on YouTube: youtube.com/@awsughk?si=... Please consider like, subscribe and share! #AWS #AWSCommunity #AWSUG #techmeetup

When could #f1 fix this issue? They are coming to the pitlane under safety car, not changing tyres #f1tv #Formula1 i

When could #f1 fix this issue? They are coming to the pitlane under safety car, not changing tyres #f1tv #Formula1

If you are university student and want to learn about Cloud, #AWS Cloud Clubs is a great program you should join. You can get a lot of supports from AWS and the community during your journey! Deadline is 6 March. Apply now: 👉 community.aws/students #AWSCommunity #AWSCloudClubs #CloudComputing

AWS UG HK BuilderCards Night – Level Up Your Cloud Strategy #AWS #AWSUserGroup #AWSCommunity #AWSBuilderCards meetu.ps/e/NSNXR/JTCD...

#Kubestronaut achieved!! #Kubernetes #CloudNative #CNCF

I was about to report bug, thinking CloudTrail is exposing sensitive information Turned out, it's just another form of "HIDDEN_DUE_TO_SECURITY_REASONS" How many other forms do AWS uses??? 😆 #AWS #CloudTrail #CloudSecurity

OWASP Non-human identities top 10 is released The top of them is: Improper offboarding. When I see many existing API keys created by an ex-employee who I've never met, I totally agree it's the risk that most of us are missing owasp.org/www-project-... #Cybersecurity #OWASP #CloudSecurity

Just go with the power plow and hope for the best😂 youtube.com/shorts/x91FC...

Have spent 8 days on flights this year

Living in a city where the time is ahead of most other places. I love the events hosted towards the end of the week, so I can use the weekend to catchup the time I “lost” when flying back home, instead if wasting annual leave on the flight

As always, I visited #serverlesspresso last week in #AWSreInvent2024 ➡️ Checkout how it works behind the scene: serverlessland.com/reinvent2022... #AWSreInvent #AWS #AWSCloud #serverless

I'm on TV!!! 😆 That's my interview in #AWSreInvent last week (Warning ahead, It's Cantonese 😁) #AWSCommunity #AWS #AWSCloud #AWSreInvent2024 www.facebook.com/share/v/1KBB...

2 of the Europe cities I visited this year Why didn’t it happen earlier? 😆

Last week was an exhausting #AWSreInvent week (both mentally and physically) I attended 0 sessions this year, but having some much fun meeting new and old friends!!! Now, I need to do editing for my videos #AWS #AWSCloud #AWSreInvent2024 #AWSCommunity #preinventhike

Thank you @werner.social for the great shout out to the AWS Heroes ❤️ This is the smartest, friendliest, and simply *best* group of people I've ever been part of, and I am forever grateful for AWS' sponsorship 🙏

Time in distributed systems was impossible But with precise clock, those compexity can be reduced #AWSreInvent #AWS #AWSreInvent2024 #AWSCloud

“Automation should be the standard” #AWSreInvent #AWS #AWSreInvent2024 #AWSCloud