PERFECTING RANSOMWARE ON AWS — USING KEYS TO THE KINGDOM TO CHANGE THE LOCKS

Summary from the TLDR InfoSec newsletter

Ransomware attacks on AWS using cross-account KMS keys can be blocked by AWS if the key is owned by them. The new AWS KMS External Key Store feature allows for secure communication with on-premises HSMs for encryption. Simulating ransomware attacks on AWS can help to develop understanding of vulnerabilities and improve security measures.