北京——2023年6月15日，亞馬遜云科技在re:Inforce 2023全球大(da)會上宣布，推(tui)出(chu)十多項安(an)全新服務及功能(neng)，包括(kuo)Amazon Verified Permissions正式可用、擴(kuo)展Amazon Detective發(fa)現組的范圍、Amazon Inspector全面支持Lambda函數(shu)的代碼掃描、推(tui)出(chu)Amazon CodeGuru Security預(yu)覽版以及Amazon Build-in Partner Solutions預(yu)覽版等。
Amazon Verified Permissions正式可用
Amazon Verified Permissions可(ke)以為(wei)用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)構建的(de)(de)(de)(de)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)提供(gong)細粒度(du)授(shou)(shou)權(quan)(quan)和(he)權(quan)(quan)限管理(li)。Verified Permissions使(shi)(shi)用(yong)(yong)(yong)(yong)了(le)用(yong)(yong)(yong)(yong)于訪問(wen)控制(zhi)的(de)(de)(de)(de)開(kai)源(yuan)語言Cedar，用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)使(shi)(shi)用(yong)(yong)(yong)(yong)Cedar可(ke)以將權(quan)(quan)限定(ding)義為(wei)更容易理(li)解的(de)(de)(de)(de)策(ce)(ce)(ce)略(lve)。用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)可(ke)以使(shi)(shi)用(yong)(yong)(yong)(yong)Verified Permissions管理(li)其(qi)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)的(de)(de)(de)(de)角色和(he)屬(shu)性的(de)(de)(de)(de)訪問(wen)控制(zhi)。Amazon Verified Permissions旨在實(shi)現高可(ke)用(yong)(yong)(yong)(yong)性和(he)可(ke)擴(kuo)展性，可(ke)以持續評(ping)估(gu)用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)的(de)(de)(de)(de)授(shou)(shou)權(quan)(quan)決策(ce)(ce)(ce)。用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)使(shi)(shi)用(yong)(yong)(yong)(yong)Verified Permissions可(ke)將授(shou)(shou)權(quan)(quan)與(yu)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)邏輯分離，并(bing)借(jie)助集中式策(ce)(ce)(ce)略(lve)存儲、可(ke)重復使(shi)(shi)用(yong)(yong)(yong)(yong)的(de)(de)(de)(de)策(ce)(ce)(ce)略(lve)模板(ban)和(he)策(ce)(ce)(ce)略(lve)測(ce)試，實(shi)現更快速地構建更安全(quan)的(de)(de)(de)(de)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)。用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)可(ke)以使(shi)(shi)用(yong)(yong)(yong)(yong)現有(you)身(shen)份權(quan)(quan)限(管理(li)用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)及用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)組)管理(li)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)并(bing)控制(zhi)訪問(wen)。現在，用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)可(ke)以使(shi)(shi)用(yong)(yong)(yong)(yong)整合(he)其(qi)應(ying)用(yong)(yong)(yong)(yong)程(cheng)序(xu)的(de)(de)(de)(de)身(shen)份驗(yan)證(zheng)和(he)授(shou)(shou)權(quan)(quan)解決方案(an)。用(yong)(yong)(yong)(yong)戶(hu)(hu)(hu)可(ke)以基于Amazon Cognito的(de)(de)(de)(de)屬(shu)性進行驗(yan)證(zheng)策(ce)(ce)(ce)略(lve)，并(bing)通(tong)過Amazon Cognito口(kou)令處(chu)理(li)授(shou)(shou)權(quan)(quan)請求(qiu)。欲了(le)解更多Amazon Verified Permissions信息，請訪問(wen)：
Amazon Detective擴大發現組的范圍至Amazon Inspector
Amazon Detective現已擴大其發(fa)(fa)現組的范圍，將Amazon Inspector網絡觸達、軟件漏洞發(fa)(fa)現結果(guo)以(yi)(yi)(yi)(yi)及(ji)發(fa)(fa)現結果(guo)納入其中(zhong)(zhong)。整合的威脅和(he)漏洞發(fa)(fa)現可以(yi)(yi)(yi)(yi)幫助(zhu)企(qi)業(ye)的安(an)(an)全(quan)分析(xi)人(ren)員優(you)先處理(li)更重要事務。Amazon Detective可以(yi)(yi)(yi)(yi)自動地從(cong)Amazon Inspector、Amazon GuardDuty以(yi)(yi)(yi)(yi)及(ji)如(ru)Amazon Security Hub等亞(ya)馬遜云(yun)(yun)科技的其他安(an)(an)全(quan)服務收集發(fa)(fa)現結果(guo)，來(lai)提升(sheng)對相關(guan)安(an)(an)全(quan)事件的感知。Detective發(fa)(fa)現組利(li)用(yong)機器學習技術，可以(yi)(yi)(yi)(yi)幫助(zhu)專業(ye)安(an)(an)全(quan)人(ren)員加快調查(cha)過(guo)程、確定根本原因(yin)，并利(li)用(yong)MITRE ATT&CK框架映(ying)射來(lai)快速解(jie)決安(an)(an)全(quan)問題。用(yong)戶要使用(yong)該擴展功能，可以(yi)(yi)(yi)(yi)在Detective管理(li)控制臺中(zhong)(zhong)啟(qi)用(yong)亞(ya)馬遜云(yun)(yun)科技安(an)(an)全(quan)發(fa)(fa)現的可選數據源。欲了解(jie)更多信息，請訪(fang)問：
Amazon Inspector現已支持Amazon Lambda函數代碼掃描
Amazon Inspector的功(gong)(gong)能擴展至支持(chi)掃(sao)描Lambda函數及相關(guan)層(ceng)以查(cha)找(zhao)應用程(cheng)(cheng)序包(bao)依賴項中(zhong)的軟(ruan)件漏洞(dong)。基于亞馬遜云科技安(an)全(quan)(quan)最(zui)佳實(shi)踐，Amazon Inspector的擴展新(xin)功(gong)(gong)能將支持(chi)掃(sao)描Lambda函數中(zhong)的自定義專(zhuan)有應用程(cheng)(cheng)序代碼(ma)，并查(cha)找(zhao)代碼(ma)安(an)全(quan)(quan)漏洞(dong)，比如注入(ru)缺陷、數據泄漏、弱加密(mi)或加密(mi)缺失。一旦檢(jian)測到Lambda函數或層(ceng)中(zhong)的代碼(ma)漏洞(dong)，Amazon Inspector就(jiu)會生(sheng)成可執(zhi)行的安(an)全(quan)(quan)發(fa)現結果，具體包(bao)括提供安(an)全(quan)(quan)檢(jian)測器名稱、受影響的代碼(ma)片段和修復(fu)漏洞(dong)的補救建(jian)議等細節。所有發(fa)現結果都將匯集到Amazon Inspector控(kong)制臺（）中(zhong)，無縫傳輸至Amazon Security Hub，并推(tui)送到Amazon EventBridge以實(shi)現工作流程(cheng)(cheng)自動化(hua)。欲了解(jie)更(geng)多信(xin)息，請(qing)訪問：
推出Amazon CodeGuru Security預覽版
Amazon CodeGuru Security預(yu)覽版(ban)是一款靜態應用程序(xu)安全測試(SAST)工具，利用機(ji)器(qi)學習(xi)技術幫助(zhu)用戶(hu)識別代(dai)碼(ma)(ma)漏(lou)洞(dong)(dong)，并提供修(xiu)復(fu)漏(lou)洞(dong)(dong)的(de)(de)指導意見。CodeGuru Security還為某些類型的(de)(de)漏(lou)洞(dong)(dong)提供上下文代(dai)碼(ma)(ma)補丁(ding)，幫助(zhu)用戶(hu)減(jian)少修(xiu)復(fu)代(dai)碼(ma)(ma)漏(lou)洞(dong)(dong)所需的(de)(de)工作量(liang)。通過對應用程序(xu)代(dai)碼(ma)(ma)進行深(shen)入的(de)(de)語義分析，CodeGuru Security以(yi)低誤報率檢測漏(lou)洞(dong)(dong)，使工程和(he)安全團隊能夠(gou)更(geng)高效(xiao)地(di)篩選(xuan)發現結果。CodeGuru Security可以(yi)標(biao)記一系列廣泛問(wen)題，比如(ru)日志(zhi)注入、硬編碼(ma)(ma)憑據(ju)和(he)資源泄露等，并可以(yi)集成(cheng)在開(kai)發工作流(liu)程的(de)(de)不同階段(代(dai)碼(ma)(ma)存(cun)儲庫、持續(xu)集成(cheng)/持續(xu)交付管道和(he)容器(qi)注冊等)。欲了解更(geng)多信息(xi)，請訪問(wen)：
推出Amazon Build-in Partner Solutions預覽版
Amazon Build-in Partner Solutiosn預覽版(ban)現(xian)已在Amazon Marketplace上推出(chu)，致力于幫助更多(duo)客(ke)戶(hu)更快(kuai)的發展(zhan)業務并實現(xian)規模(mo)(mo)化。該解決方(fang)案基于亞馬遜(xun)云科技的最(zui)佳實踐，旨在客(ke)戶(hu)多(duo)賬戶(hu)環境(jing)中(zhong)實現(xian)自(zi)(zi)動化，并進(jin)行資源配置和規模(mo)(mo)擴展(zhan)。該解決方(fang)案為客(ke)戶(hu)在其業務快(kuai)速發展(zhan)以及擴大規模(mo)(mo)的過程中(zhong)，提供始(shi)終一(yi)致的體驗，同時借助云服務提升自(zi)(zi)身(shen)的安全。欲了解更多(duo)信息(xi)，請訪問：
