hey world

me

• Steven Collison
• engineer of frontends @ AWS EC2 Networking
• steven@raycoll.com
• soco@amazon.com
• https://github.com/raycoll

some public work

• https://github.com/aws/s2n-tls
• https://github.com/aws/http-desync-guardian
• https://github.com/awslabs/aws-lc
• 100% of AWS S3 traffic uses s2n for TLS
• AWS ALB multiple certificate support(SNI)
• TLS listener support for AWS NLB
• CVE-2019-1559
• AWS NLB multiple certificate support(SNI)
• Post Quantum Cryptograpy(PQC) in TLS for AWS KMS
• Mutual TLS authentication support in AWS API Gateway
• Custom Domains support in AWS IoT
• AWS Security Bulletin AWS-2021-002
• All AWS FIPS endpoints use minimum of TLS1.2
• S3 Private Link support
• S3 Multi Region Access Points
• TLS1.3 support in NLB
• AWS Security Bulletin AWS-2022-003
• All AWS endpoints to use a minimum of TLS1.2
• Hybrid PQC with Kyber for some AWS services
• Distributed TLS session ticket resumption with keys derived from multiple sources
• AWS VPC Lattice
• JDK Session Ticket Memory Handling Improvements
• AWS Application Loadbalancer now supports TLS1.3
• AWS IoT Custom Domains now supports TLS1.3
• Faster AWS Cloud Connections with TLS1.3
• Application and Network Load Balancer now supports FIPS 140-3 for TLS Termination
• Mutual TLS authentication for Application Load Balancer
• Stronger TLS certificate support on AWS Network Loadbalancer
• IAM Condition Key support for AWS ELB TLS security policies
• AWS API Gateway now supports TLS 1.3
• The impact of data-heavy, post-quantum TLS 1.3 on the Time-To-Last-Byte of real-world connections

posts