For years, the biggest gap in tagging in AWS has been S3 buckets. This gap often made it impractical for companies to use tag-based strategies for access control. No longer! #AWS re:Invent hasn't even started, and this could be the biggest launch of the event! aws.amazon.com/blogs/aws/in...

Yesterday, #AWS IAM launched four -- that is not a typo -- features to simplify authenticating from the CLI & SDKs and address use cases in multi-cloud access control, region-based networking controls, and onboarding to ISV products. Quite a banner day for #security! 1/5

Next up, a powerful pair of launches for #AWS partners. ISVs can make it easier for customers to onboard to their products: aws.amazon.com/blogs/apn/st... . Channel partners can balance financial and management responsibilities with their customers more easily: aws.amazon.com/about-aws/wh.... Woot!

Another pre:Invent goodie: simplify credential management and improve security posture with managed external secrets in #AWS Secrets Manager. aws.amazon.com/about-aws/wh...

Good news for governance in #AWS: you can now browse and adopt managed controls without having a full Control Tower landing zone. For many businesses, landing zone setup is too opinionated. This launch lets you add any managed control to your custom AWS environment. aws.amazon.com/blogs/aws/aw...

“what was ’Cinderella,’ if not an allegory for the fundamental unhappiness of shoe shopping?” - Elif Batuman, “The Idiot.” I’ve only read about a quarter so far but quite compelling. #booksky

Seattle: need to escape the dreary weather? Garfield High School presents “Almost, Maine” tonight and next weekend. Get tickets here (or just show up). gstage.booktix.com

Looks like we’re headed for a mandatory recount, folks. Buckle up! www.seattletimes.com/seattle-news...

“We chose… hope over big money and small ideas.” - Zohran Mamdani

Just noticed my ballot mailer includes this handy guide to nearby drop boxes. Drop yours off this weekend, Seattlites!

Happy Halloween morning from Seattle

Shout out to the Seattle Visiting Nurse Assn and Seattle Public Schools for the fast and easy flu and COVID vaccine clinics we went to today. More dates coming up: www.seattleschools.org/departments/... Open to the community; requires verified insurance or payment.

Where else but Amazon’s headquarters? #seattle #nokings

Through Sep 3, Polanco typically batted 6th in the lineup. In the 21 regular season games he played in after that, he batted 5th in 16 games and 4th in 5 games. He batted 5th in the first post-season game too. Since then, it’s clean-up every day. Go #mariners !

Jorge Polanco! Jorge Polanco! 15 innings! 3 different starters pitched! #mariners !!!! On to the ALCS!

Big Papi knows how to rub it in! Bye, #Yankees. We won’t miss you.

Who else but the Mariners?

You can now sign in with Google to access AWS applications and experiences such as AWS Training and Certification and AWS re:Post. That's one fewer personal credential to remember and manage. aws.amazon.com/about-aws/wh...

Mariners! I have lived in Seattle for the end of 23 baseball seasons, and this is their first AL West division win. A true gem pitched by La Piedra, and Cal Raleigh hit homers 59 and 60. Bring on the champagne. #mariners www.mlb.com/news/mariner...

Good news, #AWSIAMIdentityCenter customers! You can now use customer-managed keys to encrypt your identity data at rest. aws.amazon.com/about-aws/wh... #AWS

Friday treat for fans of #AWSIAM : you can now author service control policies with all IAM language constructs, eliminating previous sharp edges such as only being able to use NotAction in Deny statements: aws.amazon.com/blogs/securi...

Cal Raleigh! My favorite part about his historic night is that not only does he now hold the record for most home runs by a switch hitter, but he hit two in the record-breaking game, one from each side of the plate.

Thanks to folks including @frichetten.com for feedback about our Bedrock API key launch. We're listening. Yesterday, we updated Bedrock and IAM docs (see docs.aws.amazon.com/bedrock/late...) to clarify that these are service-specific credentials and how to prevent their use in your environment. 1/2

Check out these new AWS IAM context keys that make is easier to restrict access to AWS resources to expected networks -- and that use less policy space! aws.amazon.com/blogs/securi...

So many lovely things in this world. Lime Kiln State Park, San Juan Island, Washington

Imagine if all elections were like the primary in WA today. I received my ballot in the mail weeks ago, with a voter’s guide, automatically. I walked it to a drop box on Sunday - no postage needed. I got a text yesterday that my ballot was received, and it will be part of today’s initial results.

“…and the past not uncommonly takes a while to happen, and some long time to figure out.” - Ken Kesey in Sometimes a Great Notion

Four summer squash, spiralized into zoodles, roasted and mixed with a light Parmesan cream sauce, topped with roasted cherry tomatoes with garlic and onion, and garnished with fresh basil - all (except the dairy) from the garden. Yay for July!

Beans! So many beautiful beans!

Thanks for being an MFA fan, @jessicalyons.bsky.social ! www.theregister.com/2025/06/17/a... (This article is more than a week old, which is old by media cycle standards -- but I just read it really nails the value of enforcing MFA for customers. Woot!)

What a series! I am supposed to resent the Thunder for leaving Seattle without an NBA team, but I couldn’t help but cheer for them. Amazing play from the Pacers too. Alas, there is no game 8 so no more diversion from the scary stuff going on out there.

All the news that’s fit to print, unless it takes place Saturday evening and you get the Sunday NY Times delivered in Seattle. The front page delivered this morning features a story about U.S.A.I.D., and includes an article on page 10 about the possibility of bombing Fordo.

We've wrapped up re:Inforce but the fun doesn't stop there -- we now support two more AWS services for resource control policies. Woot! aws.amazon.com/about-aws/wh... #AWSreinforce

Nice to see Federal Way, WA rename a park on Juneteenth for the Conna family. www.seattletimes.com/seattle-news... John Conna was enslaved in Texas, fought for the union, held a leadership role in WA’s first legislature, and advocated to bar race-based discrimination in the WA constitution.

Two opposing visions of justice in Philadelphia, two blocks apart from each other. Which nation do we want to be?

This re:Inforce launch includes a valuable new capability in AWS Organizations, multi-party approval. Integrated here with AWS Backup for recovery use cases, the feature requires authorized people to approve a specific action. Very cool! aws.amazon.com/about-aws/wh... #AWSreinforce

Just launched!! Get the certs out of ACM. $15/san, $149/wildcard. aws.amazon.com/blogs/aws/aw...

So excited for this launch! AWS IAM Access Analyzer now offers an internal access analyzer, so you can easily identify whom within your organization has access to resources that contain critical data. Check it out: aws.amazon.com/about-aws/wh... #AWSreinforce

As AWS CISO Amy Herzog said in the #reinforce keynote, this is worthy of applause: MFA enforcement for the powerful root credentials for 100% of AWS accounts!

Today: a huge mass of people bending the arc of history toward justice, followed by an album release choral concert. Joan Szymko, composer of a new piece, connected the events with a quote from Bernstein. “This will be our reply to violence: to make music more intensely, more beautifully…” Wow.

I'm looking forward to AWS re:Inforce next week. Let me know if you will be there and want to talk about identity and access!

1/13 Business writing with GenAI. I’m working on two things where several teams shared detailed plans and I need to synthesize them into a higher-level description of what the plans will accomplish. This seems like an exercise that GenAI tools should be good at, so I’ve been experimenting.

For folks in Seattle seeking joy, tonight is the last performance of "Footloose" at Garfield High. We saw it last night and it's a delight. #seattletheatre

This is just to say (to the teenager): I have folded / the clothes / that were in / the dryer / and which / you were probably / saving / for a parent / I forgive you / they were numerous / so wrinkled / and so old

Happy AWS MFA enforcement anniversary! "In May 2024, we began requiring MFA for AWS Organizations management account root users..." MFA prevents nearly all password-related attacks, so be inspired by this to apply it in other places too! aws.amazon.com/blogs/securi...

This intuitive user interface features a hole in the counter below the paper towel dispenser. It is so inviting that some users deposited their paper towels, even though the engineers neglected to implement a storage layer. It’s AWS, so maybe they thought the towels would be whisked away to S3?

If you are a mother to a person, pet, plant, or any combination of those: Happy Mother’s Day!

There is no compression algorithm for experience. During the power outage in Spain and Portugal, the local AWS datacentres kept humming thanks to careful planning and preparation. Remember: Everything fails, all the time, so plan for failure and nothing fails. www.linkedin.com/posts/kevinm...

I've seen a lot of coverage about the overall approval rating coming in at 39% in this poll, but the approval rate from Republicans stands out to me. 72% of Republicans approve of how Trump is handling the economy. It makes me wonder what would have to be true for that number to come down.

My older daughter conveniently scheduled her wisdom teeth extraction the day before #indiebookstoreday so we treated ourselves to a couple of books at Third Place today. The best part was the little girl clutching a book and racing in a loop around some shelves, giggling. New books for everyone!