CINXE.COM

<!DOCTYPE html> <html lang="en-US"> <head > <meta charset="UTF-8" /> <script type="text/javascript"> /* <![CDATA[ */ var gform;gform||(document.addEventListener("gform_main_scripts_loaded",function(){gform.scriptsLoaded=!0}),document.addEventListener("gform/theme/scripts_loaded",function(){gform.themeScriptsLoaded=!0}),window.addEventListener("DOMContentLoaded",function(){gform.domLoaded=!0}),gform={domLoaded:!1,scriptsLoaded:!1,themeScriptsLoaded:!1,isFormEditor:()=>"function"==typeof InitializeEditor,callIfLoaded:function(o){return!(!gform.domLoaded||!gform.scriptsLoaded||!gform.themeScriptsLoaded&&!gform.isFormEditor()||(gform.isFormEditor()&&console.warn("The use of gform.initializeOnLoaded() is deprecated in the form editor context and will be removed in Gravity Forms 3.1."),o(),0))},initializeOnLoaded:function(o){gform.callIfLoaded(o)||(document.addEventListener("gform_main_scripts_loaded",()=>{gform.scriptsLoaded=!0,gform.callIfLoaded(o)}),document.addEventListener("gform/theme/scripts_loaded",()=>{gform.themeScriptsLoaded=!0,gform.callIfLoaded(o)}),window.addEventListener("DOMContentLoaded",()=>{gform.domLoaded=!0,gform.callIfLoaded(o)}))},hooks:{action:{},filter:{}},addAction:function(o,r,e,t){gform.addHook("action",o,r,e,t)},addFilter:function(o,r,e,t){gform.addHook("filter",o,r,e,t)},doAction:function(o){gform.doHook("action",o,arguments)},applyFilters:function(o){return gform.doHook("filter",o,arguments)},removeAction:function(o,r){gform.removeHook("action",o,r)},removeFilter:function(o,r,e){gform.removeHook("filter",o,r,e)},addHook:function(o,r,e,t,n){null==gform.hooks[o][r]&&(gform.hooks[o][r]=[]);var d=gform.hooks[o][r];null==n&&(n=r+"_"+d.length),gform.hooks[o][r].push({tag:n,callable:e,priority:t=null==t?10:t})},doHook:function(r,o,e){var t;if(e=Array.prototype.slice.call(e,1),null!=gform.hooks[r][o]&&((o=gform.hooks[r][o]).sort(function(o,r){return o.priority-r.priority}),o.forEach(function(o){"function"!=typeof(t=o.callable)&&(t=window[t]),"action"==r?t.apply(null,e):e[0]=t.apply(null,e)})),"filter"==r)return e[0]},removeHook:function(o,r,t,n){var e;null!=gform.hooks[o][r]&&(e=(e=gform.hooks[o][r]).filter(function(o,r,e){return!!(null!=n&&n!=o.tag||null!=t&&t!=o.priority)}),gform.hooks[o][r]=e)}}); /* ]]> */ </script> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />  <title>Orca Security, AWS, and the Killer Whale of a Problem - Last Week in AWS Blog</title><link rel="preload" data-rocket-preload as="style" href="https://fonts.googleapis.com/css2?family=Barlow:ital,wght@0,800;0,900;1,800;1,900&family=Rubik:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap" /><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Barlow:ital,wght@0,800;0,900;1,800;1,900&family=Rubik:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap" media="print" onload="this.media='all'" /><noscript><link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Barlow:ital,wght@0,800;0,900;1,800;1,900&family=Rubik:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700&display=swap" /></noscript> <link rel="canonical" href="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/" /> <meta property="og:locale" content="en_US" /> <meta property="og:type" content="article" /> <meta property="og:title" content="Orca Security, AWS, and the Killer Whale of a Problem" /> <meta property="og:description" content="Last week Orca Security published two critical vulnerabilities in AWS. This led to a bit of a hair-on-fire day, since AWS didn't get around to saying" /> <meta property="og:url" content="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/" /> <meta property="og:site_name" content="Last Week in AWS" /> <meta property="article:published_time" content="2022-01-19T15:30:00+00:00" /> <meta property="article:modified_time" content="2022-02-03T20:12:24+00:00" /> <meta property="og:image" content="https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg" /> <meta property="og:image:width" content="2560" /> <meta property="og:image:height" content="1851" /> <meta property="og:image:type" content="image/jpeg" /> <meta name="author" content="Corey Quinn" /> <meta name="twitter:card" content="summary_large_image" /> <meta name="twitter:creator" content="@LastWeekinAWS" /> <meta name="twitter:site" content="@LastWeekinAWS" /> <meta name="twitter:label1" content="Written by" /> <meta name="twitter:data1" content="Corey Quinn" /> <meta name="twitter:label2" content="Est. reading time" /> <meta name="twitter:data2" content="7 minutes" /> <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"Article","@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#article","isPartOf":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"},"author":{"name":"Corey Quinn","@id":"https://www.lastweekinaws.com/#/schema/person/9db9ec187cc3a0d7651263fabb90b0b8"},"headline":"Orca Security, AWS, and the Killer Whale of a Problem","datePublished":"2022-01-19T15:30:00+00:00","dateModified":"2022-02-03T20:12:24+00:00","mainEntityOfPage":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"},"wordCount":1635,"publisher":{"@id":"https://www.lastweekinaws.com/#organization"},"image":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#primaryimage"},"thumbnailUrl":"https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg","inLanguage":"en-US","copyrightYear":"2022","copyrightHolder":{"@id":"https://www.lastweekinaws.com/#organization"}},{"@type":"WebPage","@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/","url":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/","name":"Orca Security, AWS, and the Killer Whale of a Problem - Last Week in AWS Blog","isPartOf":{"@id":"https://www.lastweekinaws.com/#website"},"primaryImageOfPage":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#primaryimage"},"image":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#primaryimage"},"thumbnailUrl":"https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg","datePublished":"2022-01-19T15:30:00+00:00","dateModified":"2022-02-03T20:12:24+00:00","breadcrumb":{"@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#primaryimage","url":"https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg","contentUrl":"https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg","width":2560,"height":1851,"caption":"Orca Security"},{"@type":"BreadcrumbList","@id":"https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.lastweekinaws.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.lastweekinaws.com/blog/"},{"@type":"ListItem","position":3,"name":"Orca Security, AWS, and the Killer Whale of a Problem"}]},{"@type":"WebSite","@id":"https://www.lastweekinaws.com/#website","url":"https://www.lastweekinaws.com/","name":"Last Week in AWS","description":"AWS News Sprinkled With Snark","publisher":{"@id":"https://www.lastweekinaws.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.lastweekinaws.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://www.lastweekinaws.com/#organization","name":"Last Week in AWS","url":"https://www.lastweekinaws.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.lastweekinaws.com/#/schema/logo/image/","url":"https://www.lastweekinaws.com/wp-content/uploads/2019/04/last-week-in-aws-logo.svg","contentUrl":"https://www.lastweekinaws.com/wp-content/uploads/2019/04/last-week-in-aws-logo.svg","width":193,"height":100,"caption":"Last Week in AWS"},"image":{"@id":"https://www.lastweekinaws.com/#/schema/logo/image/"},"sameAs":["https://x.com/LastWeekinAWS","https://www.linkedin.com/company/last-week-in-aws/"]},{"@type":"Person","@id":"https://www.lastweekinaws.com/#/schema/person/9db9ec187cc3a0d7651263fabb90b0b8","name":"Corey Quinn","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://www.lastweekinaws.com/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/1627fd3033020d65446b69ec2cbdc9c2?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/1627fd3033020d65446b69ec2cbdc9c2?s=96&d=mm&r=g","caption":"Corey Quinn"},"url":"https://www.lastweekinaws.com/blog/author/cquinn/"}]}</script>  <link rel='dns-prefetch' href='//cdn.usefathom.com' /> <link rel='dns-prefetch' href='//js.hs-scripts.com' /> <link rel='dns-prefetch' href='//kit.fontawesome.com' /> <link rel='dns-prefetch' href='//www.googletagmanager.com' /> <link rel='dns-prefetch' href='//fonts.googleapis.com' /> <link href='https://fonts.gstatic.com' crossorigin rel='preconnect' /> <link rel="alternate" type="application/rss+xml" title="Last Week in AWS » Feed" href="https://www.lastweekinaws.com/feed/" /> <link rel="alternate" type="application/rss+xml" title="Last Week in AWS » Comments Feed" href="https://www.lastweekinaws.com/comments/feed/" /> <style id='wp-emoji-styles-inline-css' type='text/css'> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 0.07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; } </style> <link rel='stylesheet' id='wp-block-library-css' href='https://www.lastweekinaws.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2' type='text/css' media='all' /> <style id='safe-svg-svg-icon-style-inline-css' type='text/css'> .safe-svg-cover{text-align:center}.safe-svg-cover .safe-svg-inside{display:inline-block;max-width:100%}.safe-svg-cover svg{height:100%;max-height:100%;max-width:100%;width:100%} </style> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-block-style-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=1725966921' type='text/css' media='all' /> <style id='classic-theme-styles-inline-css' type='text/css'> /*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} </style> <style id='global-styles-inline-css' type='text/css'> :root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16/9;--wp--preset--aspect-ratio--9-16: 9/16;--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--base-color: #3d3935;--wp--preset--color--blue-dark: #41859b;--wp--preset--color--blue: #4298b5;--wp--preset--color--orange: #dc6b2f;--wp--preset--color--yellow: #e9ec6b;--wp--preset--color--blue-light: #e3f0f4;--wp--preset--color--grey-light: #ececeb;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 14px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 18px;--wp--preset--font-size--x-large: 20px;--wp--preset--font-size--mini: 12px;--wp--preset--font-size--regular: 16px;--wp--preset--font-size--xx-large: 24px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flex{display: flex;}.is-layout-flex{flex-wrap: wrap;align-items: center;}.is-layout-flex > :is(*, div){margin: 0;}body .is-layout-grid{display: grid;}.is-layout-grid > :is(*, div){margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} :where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;} :where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;} :root :where(.wp-block-pullquote){font-size: 1.5em;line-height: 1.6;} </style> <link data-minify="1" rel='stylesheet' id='wd-style-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/themes/lwiaws-2022/assets/css/main.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-socicon-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-genericons-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-academicons-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-font-awesome-3-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='dashicons-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-includes/css/dashicons.min.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='wpzoom-social-icons-styles-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1725966922' type='text/css' media='all' /> <link data-minify="1" rel='stylesheet' id='searchwp-forms-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/searchwp/assets/css/frontend/search-forms.css?ver=1725966922' type='text/css' media='all' /> <link rel='preload' as='font' id='wpzoom-social-icons-font-academicons-woff2-css' href='https://www.lastweekinaws.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff2?v=1.9.2' type='font/woff2' crossorigin /> <link rel='preload' as='font' id='wpzoom-social-icons-font-fontawesome-3-woff2-css' href='https://www.lastweekinaws.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0' type='font/woff2' crossorigin /> <link rel='preload' as='font' id='wpzoom-social-icons-font-genericons-woff-css' href='https://www.lastweekinaws.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff' type='font/woff' crossorigin /> <link rel='preload' as='font' id='wpzoom-social-icons-font-socicon-woff2-css' href='https://www.lastweekinaws.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff2?v=4.3.2' type='font/woff2' crossorigin /> <style id='block-visibility-screen-size-styles-inline-css' type='text/css'> /* Large screens (desktops, 992px and up) */ @media ( min-width: 992px ) { .block-visibility-hide-large-screen { display: none !important; } } /* Medium screens (tablets, between 768px and 992px) */ @media ( min-width: 768px ) and ( max-width: 991.98px ) { .block-visibility-hide-medium-screen { display: none !important; } } /* Small screens (mobile devices, less than 768px) */ @media ( max-width: 767.98px ) { .block-visibility-hide-small-screen { display: none !important; } } </style> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" id="jquery-core-js"></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" id="jquery-migrate-js" data-rocket-defer defer></script> <script type="text/javascript" src="https://cdn.usefathom.com/script.js" id="fathom-snippet-js" defer="defer" data-wp-strategy="defer" data-site="EMNTYTXD" data-no-minify></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/js/main-js-min.js?ver=6.6.2" id="wd-scripts-js" data-rocket-defer defer></script> <script type="text/javascript" crossorigin="anonymous" src="https://kit.fontawesome.com/8c13f4e8e9.js" id="wd-fontawesome-js" data-rocket-defer defer></script>   <script type="text/javascript" src="https://www.googletagmanager.com/gtag/js?id=GT-P36TLKM" id="google_gtagjs-js" async></script> <script type="text/javascript" id="google_gtagjs-js-after"> /* <![CDATA[ */ window.dataLayer = window.dataLayer || [];function gtag(){dataLayer.push(arguments);} gtag("set","linker",{"domains":["www.lastweekinaws.com"]}); gtag("js", new Date()); gtag("set", "developer_id.dZTNiMT", true); gtag("config", "GT-P36TLKM"); /* ]]> */ </script>  <link rel="https://api.w.org/" href="https://www.lastweekinaws.com/wp-json/" /><link rel="alternate" title="JSON" type="application/json" href="https://www.lastweekinaws.com/wp-json/wp/v2/posts/12121" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://www.lastweekinaws.com/xmlrpc.php?rsd" /> <link rel='shortlink' href='https://www.lastweekinaws.com/?p=12121' /> <link rel="alternate" title="oEmbed (JSON)" type="application/json+oembed" href="https://www.lastweekinaws.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.lastweekinaws.com%2Fblog%2Forca-security-aws-and-the-killer-whale-of-a-problem%2F" /> <link rel="alternate" title="oEmbed (XML)" type="text/xml+oembed" href="https://www.lastweekinaws.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.lastweekinaws.com%2Fblog%2Forca-security-aws-and-the-killer-whale-of-a-problem%2F&format=xml" />  <script async src="https://www.googletagmanager.com/gtag/js?id=G-EC36BJ11E8"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-EC36BJ11E8'); </script> <meta name="generator" content="Site Kit by Google 1.139.0" /><style>[class$="woocommerce-product-gallery__trigger"] {visibility:hidden;}</style> <script async src="https://www.googletagmanager.com/gtag/js?id=AW-10792478766"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'AW-10792478766'); </script>  <script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-5C8Z4HX');</script>  <script async src='https://dash.sparkloop.app/widget/MF12e0be8a62/embed.js' data-sparkloop></script>  <script type="text/javascript"> /* <![CDATA[ */ ( function( w, d, s, l, i ) { w[l] = w[l] || []; w[l].push( {'gtm.start': new Date().getTime(), event: 'gtm.js'} ); var f = d.getElementsByTagName( s )[0], j = d.createElement( s ), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore( j, f ); } )( window, document, 'script', 'dataLayer', 'GTM-NPZBPDM' ); /* ]]> */ </script>  <link rel="icon" href="https://www.lastweekinaws.com/wp-content/uploads/2022/01/cropped-favicon-umber-512-32x32.png" sizes="32x32" /> <link rel="icon" href="https://www.lastweekinaws.com/wp-content/uploads/2022/01/cropped-favicon-umber-512-192x192.png" sizes="192x192" /> <link rel="apple-touch-icon" href="https://www.lastweekinaws.com/wp-content/uploads/2022/01/cropped-favicon-umber-512-180x180.png" /> <meta name="msapplication-TileImage" content="https://www.lastweekinaws.com/wp-content/uploads/2022/01/cropped-favicon-umber-512-270x270.png" /> <style type="text/css" id="wp-custom-css"> .email-subscribe-block .gform_wrapper.gravity-theme .gform_footer, .email-subscribe-block .gform_wrapper.gravity-theme .gform_page_footer { margin: 0; padding: 0; } </style> <noscript><style id="rocket-lazyload-nojs-css">.rll-youtube-player, [data-lazy-src]{display:none !important;}</style></noscript><style id="rocket-lazyrender-inline-css">[data-wpr-lazyrender] {content-visibility: auto;}</style><meta name="generator" content="WP Rocket 3.17.2.1" data-wpr-features="wpr_defer_js wpr_lazyload_images wpr_lazyload_iframes wpr_automatic_lazy_rendering wpr_image_dimensions wpr_minify_css wpr_desktop" /></head> <body class="post-template-default single single-post postid-12121 single-format-standard wp-custom-logo wp-embed-responsive header-full-width full-width-content genesis-breadcrumbs-visible">  <noscript> <iframe src="https://www.googletagmanager.com/ns.html?id=GTM-NPZBPDM" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>  <div class="site-container"><ul class="genesis-skip-link"><li><a href="#genesis-nav-primary" class="screen-reader-shortcut"> Skip to primary navigation</a></li><li><a href="#genesis-content" class="screen-reader-shortcut"> Skip to main content</a></li></ul><header class="site-header"><div class="wrap"> <div class="site-header__logo"> <a class="custom-logo-link" href="https://www.lastweekinaws.com"> <img class="custom-logo" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20100%20193'%3E%3C/svg%3E" alt="Last Week in AWS Logo" height="193" width="100" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2019/04/last-week-in-aws-logo.svg"><noscript><img class="custom-logo" src="https://www.lastweekinaws.com/wp-content/uploads/2019/04/last-week-in-aws-logo.svg" alt="Last Week in AWS Logo" height="193" width="100"></noscript> </a> </div> <span class="site-header__cta"> <a href="https://duckbillgroup.com" target="_blank" rel="noopener noreferrer">Lower My AWS Bill</a> </span> <button class="menu-toggle" aria-label="Menu"> <img class="menu-toggle__img menu-toggle__img--open" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2036%2034'%3E%3C/svg%3E" alt="Mobile Navigation Icon" width="36" height="34" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/mobile-nav-closed.svg"><noscript><img class="menu-toggle__img menu-toggle__img--open" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/mobile-nav-closed.svg" alt="Mobile Navigation Icon" width="36" height="34"></noscript> <img class="menu-toggle__img menu-toggle__img--close" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2032%2032'%3E%3C/svg%3E" alt="Close Mobile Navigation Icon" width="32" height="32" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/mobile-nav-open.svg"><noscript><img class="menu-toggle__img menu-toggle__img--close" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/mobile-nav-open.svg" alt="Close Mobile Navigation Icon" width="32" height="32"></noscript> </button> <nav class="nav-primary" aria-label="Main" id="genesis-nav-primary"><div class="wrap"><ul id="menu-main-menu" class="menu genesis-nav-menu menu-primary js-superfish"><li id="menu-item-48" class="menu-item menu-item-has-children"><a href="https://www.lastweekinaws.com/about/"><span >About</span></a><button aria-label="Submenu Dropdown" tabindex="-1"><img width="320" height="512" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20320%20512'%3E%3C/svg%3E" alt="Submenu Down Arrow" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg"><noscript><img width="320" height="512" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg" alt="Submenu Down Arrow"></noscript></button> <ul class="sub-menu"> <li id="menu-item-12177" class="menu-item"><a href="https://www.lastweekinaws.com/community/"><span >Community</span></a></li> <li id="menu-item-49" class="menu--contactxxx menu-item"><a href="https://www.lastweekinaws.com/contact/"><span >Contact</span></a></li> <li id="menu-item-12561" class="menu-item"><a href="https://www.lastweekinaws.com/contribute/"><span >Contribute</span></a></li> </ul> </li> <li id="menu-item-45" class="menu-item current_page_parent"><a href="https://www.lastweekinaws.com/blog/"><span >Blog</span></a></li> <li id="menu-item-7608" class="menu-item"><a href="https://www.lastweekinaws.com/newsletter/"><span >Newsletter</span></a></li> <li id="menu-item-737" class="menu-item menu-item-has-children"><a href="https://www.lastweekinaws.com/podcast/"><span >Podcasts</span></a><button aria-label="Submenu Dropdown" tabindex="-1"><img width="320" height="512" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20320%20512'%3E%3C/svg%3E" alt="Submenu Down Arrow" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg"><noscript><img width="320" height="512" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg" alt="Submenu Down Arrow"></noscript></button> <ul class="sub-menu"> <li id="menu-item-11457" class="menu-item"><a href="https://www.lastweekinaws.com/podcast/aws-morning-brief/"><span >Last Week in AWS</span></a></li> <li id="menu-item-11459" class="menu-item"><a href="https://www.lastweekinaws.com/podcast/screaming-in-the-cloud/"><span >Screaming in the Cloud</span></a></li> <li id="menu-item-14464" class="menu-item"><a href="https://www.lastweekinaws.com/nominate-a-guest/"><span >Nominate a Guest</span></a></li> </ul> </li> <li id="menu-item-12665" class="menu-item"><a target="_blank" rel="noopener" href="https://store.lastweekinaws.com/collections/all"><span >Merch</span></a></li> <li id="menu-item-12037" class="menu-item menu-item-has-children"><a href="https://www.lastweekinaws.com/resources/"><span >Resources</span></a><button aria-label="Submenu Dropdown" tabindex="-1"><img width="320" height="512" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20320%20512'%3E%3C/svg%3E" alt="Submenu Down Arrow" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg"><noscript><img width="320" height="512" src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/utility/caret-down-solid-orange.svg" alt="Submenu Down Arrow"></noscript></button> <ul class="sub-menu"> <li id="menu-item-14200" class="menu-item"><a href="https://awsnetwork.lastweekinaws.com/"><span >AWS Network Map</span></a></li> </ul> </li> <li id="menu-item-12038" class="menu-item"><a href="https://www.lastweekinaws.com/sponsorship/"><span >Sponsorships</span></a></li> </ul></div></nav></div></header> <div class="blog-archive-featured"> <div class="blog-archive-featured__image"> <img width="2560" height="1851" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%202560%201851'%3E%3C/svg%3E" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Orca Security" decoding="async" fetchpriority="high" data-lazy-srcset="https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg 2560w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-300x217.jpg 300w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-1024x740.jpg 1024w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-768x555.jpg 768w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-1536x1111.jpg 1536w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-2048x1481.jpg 2048w" data-lazy-sizes="(max-width: 2560px) 100vw, 2560px" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg" /><noscript><img width="2560" height="1851" src="https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg" class="attachment-post-thumbnail size-post-thumbnail wp-post-image" alt="Orca Security" decoding="async" fetchpriority="high" srcset="https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1.jpg 2560w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-300x217.jpg 300w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-1024x740.jpg 1024w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-768x555.jpg 768w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-1536x1111.jpg 1536w, https://www.lastweekinaws.com/wp-content/uploads/2022/01/109176001_l-scaled-1-2048x1481.jpg 2048w" sizes="(max-width: 2560px) 100vw, 2560px" /></noscript> </div> <div class="blog-archive-featured__content"> <div class="blog-archive-featured__content-inner"> <span class="blog-archive-featured__date"> <svg aria-hidden="true" focusable="false" role="img" xmlns="http://www.w3.org/2000/svg" width="18px" height="18px" viewBox="0 0 448 512"><path fill="currentColor" d="M400 64h-48V12c0-6.6-5.4-12-12-12h-40c-6.6 0-12 5.4-12 12v52H160V12c0-6.6-5.4-12-12-12h-40c-6.6 0-12 5.4-12 12v52H48C21.5 64 0 85.5 0 112v352c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48V112c0-26.5-21.5-48-48-48zm-6 400H54c-3.3 0-6-2.7-6-6V160h352v298c0 3.3-2.7 6-6 6z"></path></svg> 01.19.2022 </span> <h1 class="is-style-display has-white-color has-text-color"> Orca Security, AWS, and the Killer Whale of a Problem </h1> <span class="blog-archive-featured__author"> <a href="https://www.lastweekinaws.com/blog/author/cquinn/">By Corey Quinn</a> </span> <div class="blog-archive-featured__excerpt has-large-font-size has-white-color has-text-color"> Last week Orca Security published two critical vulnerabilities in AWS. This led to a bit of a hair-on-fire day, since AWS didn’t get around to saying anything formally about it until later… </div> </div> <div class="shared-counts-wrap style-icon"><a href="https://www.facebook.com/sharer/sharer.php?u=https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/&display=popup&ref=plugin&src=share_button" title="Share on Facebook" target="_blank" rel="nofollow noopener noreferrer" class="shared-counts-button facebook shared-counts-no-count" data-postid="12121" data-social-network="Facebook" data-social-action="Share" data-social-target="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"><span class="shared-counts-icon-label"><span class="shared-counts-icon"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="18.8125" height="32" viewBox="0 0 602 1024"><path d="M548 6.857v150.857h-89.714q-49.143 0-66.286 20.571t-17.143 61.714v108h167.429l-22.286 169.143h-145.143v433.714h-174.857v-433.714h-145.714v-169.143h145.714v-124.571q0-106.286 59.429-164.857t158.286-58.571q84 0 130.286 6.857z"></path></svg></span><span class="shared-counts-label">Facebook</span></span></a><a href="https://twitter.com/share?url=https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/&text=Orca%20Security%2C%20AWS%2C%20and%20the%20Killer%20Whale%20of%20a%20Problem" title="Share on Twitter" target="_blank" rel="nofollow noopener noreferrer" class="shared-counts-button twitter shared-counts-no-count" data-postid="12121" data-social-network="Twitter" data-social-action="Tweet" data-social-target="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"><span class="shared-counts-icon-label"><span class="shared-counts-icon"><svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M13.8944 10.4695L21.3345 2H19.5716L13.1085 9.35244L7.95022 2H1.99936L9.80147 13.1192L1.99936 22H3.76218L10.5832 14.2338L16.0318 22H21.9827L13.8944 10.4695ZM11.4792 13.2168L10.6875 12.1089L4.39789 3.30146H7.10594L12.1833 10.412L12.9717 11.5199L19.5708 20.7619H16.8628L11.4792 13.2168Z" /></svg></span><span class="shared-counts-label">Tweet</span></span></a><a href="https://www.linkedin.com/shareArticle?mini=true&url=https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/" title="Share on LinkedIn" target="_blank" rel="nofollow noopener noreferrer" class="shared-counts-button linkedin shared-counts-no-count" data-postid="12121" data-social-network="LinkedIn" data-social-action="Share" data-social-target="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"><span class="shared-counts-icon-label"><span class="shared-counts-icon"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="27.4375" height="32" viewBox="0 0 878 1024"><path d="M199.429 357.143v566.286h-188.571v-566.286h188.571zM211.429 182.286q0.571 41.714-28.857 69.714t-77.429 28h-1.143q-46.857 0-75.429-28t-28.571-69.714q0-42.286 29.429-70t76.857-27.714 76 27.714 29.143 70zM877.714 598.857v324.571h-188v-302.857q0-60-23.143-94t-72.286-34q-36 0-60.286 19.714t-36.286 48.857q-6.286 17.143-6.286 46.286v316h-188q1.143-228 1.143-369.714t-0.571-169.143l-0.571-27.429h188v82.286h-1.143q11.429-18.286 23.429-32t32.286-29.714 49.714-24.857 65.429-8.857q97.714 0 157.143 64.857t59.429 190z"></path></svg></span><span class="shared-counts-label">LinkedIn</span></span></a><a href="https://www.reddit.com/submit?url=https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/" title="Share on Reddit" target="_blank" rel="nofollow noopener noreferrer" class="shared-counts-button reddit shared-counts-no-count" data-postid="12121" data-social-network="Reddit" data-social-action="Share" data-social-target="https://www.lastweekinaws.com/blog/orca-security-aws-and-the-killer-whale-of-a-problem/"><span class="shared-counts-icon-label"><span class="shared-counts-icon"><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 512 512"><path d="M128 320c0-17.673 14.327-32 32-32s32 14.327 32 32c0 17.673-14.327 32-32 32s-32-14.327-32-32zM320 320c0-17.673 14.327-32 32-32s32 14.327 32 32c0 17.673-14.327 32-32 32s-32-14.327-32-32zM321.556 388.389c8.241-6.493 20.188-5.077 26.682 3.166s5.076 20.189-3.167 26.683c-22.948 18.079-57.911 29.762-89.071 29.762s-66.124-11.683-89.072-29.761c-8.243-6.495-9.66-18.441-3.166-26.684 6.495-8.241 18.441-9.659 26.683-3.166 13.211 10.409 39.361 21.611 65.555 21.611s52.344-11.202 65.556-21.611zM512 256c0-35.346-28.654-64-64-64-24.058 0-44.996 13.285-55.926 32.91-32.896-17.997-72.976-29.623-116.64-32.304l38.191-85.763 73.097 21.1c6.576 18.671 24.359 32.057 45.278 32.057 26.51 0 48-21.49 48-48s-21.49-48-48-48c-18.28 0-34.171 10.221-42.277 25.257l-81.453-23.512c-9.112-2.629-18.769 1.861-22.626 10.526l-51.885 116.513c-42.569 2.998-81.631 14.511-113.818 32.118-10.932-19.625-31.883-32.902-55.941-32.902-35.346 0-64 28.654-64 64 0 26.156 15.701 48.627 38.186 58.551-4.035 12.014-6.186 24.552-6.186 37.449 0 88.365 100.288 160 224 160s224-71.635 224-160c0-12.896-2.15-25.431-6.184-37.443 22.485-9.925 38.184-32.401 38.184-58.557zM432 94c9.941 0 18 8.059 18 18s-8.059 18-18 18-18-8.059-18-18 8.059-18 18-18zM32 256c0-17.645 14.355-32 32-32 12.754 0 23.786 7.502 28.923 18.323-16.724 12.683-30.583 27.313-40.833 43.369-11.762-4.735-20.090-16.256-20.090-29.692zM256 474c-102.725 0-186-54.621-186-122s83.275-122 186-122c102.725 0 186 54.621 186 122s-83.275 122-186 122zM459.91 285.692c-10.25-16.056-24.109-30.686-40.833-43.369 5.138-10.821 16.169-18.323 28.923-18.323 17.645 0 32 14.355 32 32 0 13.436-8.328 24.957-20.090 29.692z"></path></svg></span><span class="shared-counts-label">Reddit</span></span></a></div> </div> </div> <div class="site-inner"><div class="wrap"><div class="single-post-top"><div class="breadcrumb"><span><span><a href="https://www.lastweekinaws.com/">Home</a></span> <i class="fas fa-caret-right"></i> <span><a href="https://www.lastweekinaws.com/blog/">Blog</a></span> <i class="fas fa-caret-right"></i> <span class="breadcrumb_last" aria-current="page">Orca Security, AWS, and the Killer Whale of a Problem</span></span></div><div class="single-post-top__nav single-post-top__nav--previous"><a href="https://www.lastweekinaws.com/blog/azures-terrible-security-posture-comes-home-to-roost/" rel="prev">Prev</a></div><div class="single-post-top__nav single-post-top__nav--next"><a href="https://www.lastweekinaws.com/blog/clickops/" rel="next">Next</a></div></div><main class="content" id="genesis-content"><article class="type-post entry" aria-label="Orca Security, AWS, and the Killer Whale of a Problem"><div class="entry-content"> <p>Last week Orca Security published <a href="https://orca.security/resources/blog/two-critical-cloud-vulnerabilities/">two critical vulnerabilities in AWS</a>. This led to a bit of a hair-on-fire day, since AWS didn’t get around to saying anything formally about it until later that afternoon.</p> <p>The particularly eye-popping phrase that stood out from one of the announcements was:</p> <p>“Our research team believes, given the data found on the host (including credentials and data involving internal endpoints), that an attacker could abuse this vulnerability to bypass tenant boundaries, giving them privileged access to any resource in AWS.”</p> <p>When a few <a href="https://twitter.com/colmmacc/status/1481670721449385984">AWS employees rightfully took exception</a> to such a bombastic claim on Twitter, Orca’s <a href="https://twitter.com/yoavalon/status/1481691075672694793">CTO walked it back</a>, though as of this writing the statement remains in the blog post.</p> <p>I’m not thrilled with Orca for overstating the severity of the vulnerabilities, nor am I particularly pleased with AWS for its “we aren’t going to talk about these things unless forced to” mindset. I’m also fully aware that this came out right after I <a href="https://www.lastweekinaws.com/blog/azures-terrible-security-posture-comes-home-to-roost/">tore Azure a new one for similar security lapses</a>; let it never be said that I’m not willing to hold AWS to at least the same standard!</p> <h2 class="wp-block-heading" id="h-what-happened">What Happened</h2> <p>Orca Security posted two blog posts about two distinct vulnerabilities. The first is <a href="https://orca.security/resources/blog/aws-cloudformation-vulnerability/">an ability to gain control plane access to a CloudFormation host</a> and retrieve its AWS credentials, while the second is <a href="https://orca.security/resources/blog/aws-glue-vulnerability/">cross-account access via AWS Glue</a>. Both of these are serious issues and were fully mitigated within days of Orca reporting them to AWS (which happened in September 2021).</p> <h2 class="wp-block-heading" id="h-what-orca-security-got-right">What Orca Security Got Right</h2> <p>I want to start out by noting that Orca Security did the responsible thing by looping in AWS’s security team immediately, and not saying anything publicly until well after the vulnerabilities had been patched, in line with the <a href="https://aws.amazon.com/security/vulnerability-reporting/">guidelines of coordinated disclosure</a>. (Just as an aside, <a href="https://www.youtube.com/watch?v=IxvMK4kAu0E">I gave a talk at re:Invent 2019</a> on AWS vulnerability disclosure and response.) They’re also not using this to hurl anti-cloud nonsense at the industry; they maintain that you should still absolutely be moving workloads to the cloud from a security standpoint.</p> <h2 class="wp-block-heading" id="h-what-orca-security-got-wrong">What Orca Security Got Wrong</h2> <p>I have two issues with Orca’s approach to talking about these vulnerabilities.</p> <p>First, it’s unclear why Orca would wait over four months from discovering these vulnerabilities, then disclose them both simultaneously, and make overstated claims about the potential breadth of these exploits.</p> <p>By disclosing these issues four months after the fact, you’d think that they would have had time to workshop the messaging so that it didn’t confuse readers about which exploit empowered what, as well as coordinate a messaging campaign with AWS so customers weren’t left in full panic mode for half a day. I’d have said that they spent that time waiting to disclose in coordination with AWS except that AWS didn’t bother to say anything formally when Orca made their announcement.</p> <p>Second, Orca’s claim that they believe these vulnerabilities granted them access to all resources within AWS is undermined in the next paragraph by their note that they could not in fact make it do that. This is just irresponsible messaging. Worse, it undercuts the broader message that they were attempting to convey: that they’re responsible grown-ups with a deep understanding of how cloud security works, and that they’re to be trusted when they say such things.</p> <h2 class="wp-block-heading" id="h-what-aws-got-right">What AWS Got Right</h2> <p>AWS didn’t (to my understanding) attempt to pressure Orca Security into not talking about the vulnerabilities in public. In fact, there’s a statement in one of the Orca posts from AWS Principal Engineer Anthony Virtuoso that lends credence to these issues being in the hands of Serious Professionals. Further, <a href="https://aws.amazon.com/security/security-bulletins/AWS-2022-002/">both</a> of AWS’s <a href="https://aws.amazon.com/security/security-bulletins/AWS-2022-001/">security bulletins</a> go out of their way to thank Orca Security by name for reporting the issues.</p> <p>The fact that AWS put up those announcements is also a credit to them, albeit many hours after they should have been released (see above about the lack of coordinated disclosure!).</p> <p>Perhaps the most interesting and borderline awe-inspiring lines from AWS’s tersely-worded bulletins is this one:</p> <p>“Analysis of logs going back to the launch of the service have been conducted and we have conclusively determined that the only activity associated with this issue was between accounts owned by the researcher.”</p> <p>In other words, AWS looked through the access logs for AWS Glue <em>going back to the launch of the service five years ago</em> to validate that this had never been exploited against customers.</p> <p>That is a STUPENDOUS amount of data that they’re retaining. This is a far cry from Azure’s “<a href="https://msrc-blog.microsoft.com/2021/09/08/coordinated-disclosure-of-vulnerability-in-azure-container-instances-service/">our investigation surfaced no unauthorized access to customer data</a>.”</p> <h2 class="wp-block-heading" id="h-what-aws-got-wrong">What AWS Got Wrong</h2> <p>Speaking to the substance of the disclosures, while there are few details in Orca’s post, the incident is very much on par with <a href="https://blog.wiz.io/chaosdb-explained-azures-cosmos-db-vulnerability-walkthrough/">Azure’s ChaosDB issue</a> with regard to severity. Orca was able to assume the Glue service role in all customer accounts and would be able to have the privileges granted to that role within those accounts. In many cases, that’s going to be all data stored in S3. At least ChaosDB had the decency to be limited to data stored within CosmosDB, making this is a <em>terrifying</em> lapse on AWS’s part.</p> <p>The CloudFormation issue also gave some chilling insight. First, that despite its <a href="https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/">semi-recent launch</a> to defend against precisely this type of issue in the wake of <a href="https://www.lastweekinaws.com/blog/capitalones-capitaltwo-day/">Capital One’s breach</a>, the Instance Metadata Service v2 isn’t being used in a “do as we say, not as we do” demonstration. Second, Orca was able to dump the contents of /etc/passwd which in turn showed a lot of AWS employee accounts deployed to the server which… yikes. This is exactly the kind of thing that Azure was rightfully dragged over; the handwaving and partial excuses on Twitter by AWS employees don’t refute that. This demonstrates that some of what AWS says or implies that it does may not be what’s actually occurring.</p> <h2 class="wp-block-heading" id="h-what-aws-got-very-wrong">What AWS Got <em>Very</em> Wrong</h2> <p>All of this brings us to what AWS has gotten catastrophically wrong, and as you might expect, I have some thoughts.</p> <p>Let’s start with the issue announcement itself.</p> <p>First, I think it’s safe to say that AWS seemed surprised by this disclosure. I’d have expected a blog post on the <a href="https://aws.amazon.com/blogs/security/">AWS Security Blog</a> at an absolute minimum that gave a lot more context and color to this.</p> <p>Instead, I found out from <a href="https://twitter.com/0xdabbad00/status/1481655942303281154">Scott Piper’s tweet</a> that it wasn’t going to be a typical Thursday. I mentioned at the start that a number of AWS employees took exception to Scott’s framing of the issue, to which the kindest and most sincere thing I can say is: <strong>sit the hell down</strong>. AWS had <em>four months</em> and <a href="https://www.theinformation.com/articles/amazons-spinmasters-behind-the-internet-giants-battle-with-the-press">an 800+ person PR team</a> to come up with messaging around this, but instead all of us customers got to find out about this from a third party?</p> <p>Orca offered up limited information about the scope and scale of the issue but included <em>actual quotes from one of AWS’s principal engineers</em>! Combined with the fact that Orca is an AWS Partner, that strongly suggests that their post received review by AWS–and yet AWS didn’t say anything?</p> <p>This response shines a bright light on what is, <a href="https://twitter.com/codebrewed/status/1481714337827885058?s=20">according to one former AWS employee</a>, a policy of “if there isn’t direct customer impact, we don’t disclose issues.” That makes it much more likely that there have indeed been hypervisor escapes and cross-account access by attackers previously. While the affected customer(s) would have been notified, such an event would have been kept quiet if at all possible. I didn’t expect that and it radically shifts my perspective on the levels of thoroughness and transparency we’re really getting from AWS’s security processes.</p> <p>As a cloud provider, AWS owes its customers a realistic assessment of what the risks really are. “Fifteen years of no control plane access or cross-account lapses in the AWS security model” has been the strong implication, if never expressly said outright. We now know that that’s very much not true. With everyone now having watched AWS’s response to Orca’s disclosure, the open question is now this: how many times has this happened before, but been swept under the rug?</p> <h2 class="wp-block-heading" id="h-the-takeaway">The Takeaway</h2> <p>Cloud security depends on being able to trust our cloud vendors to do what they say they’re doing and to communicate quickly and clearly whenever a vulnerability or breach has occurred.</p> <p>I don’t accept having to hear it from third parties and only a short begrudging paragraph or two from the cloud provider hours later as being anywhere close to sufficient. How are customers supposed to trust a cloud provider if they don’t say anything until someone external shows the world what’s been going on? This extends well past the boundary of “security” and into everything that makes the cloud a viable option for any business that takes itself even halfway seriously.</p> <p><a href="https://www.lastweekinaws.com/blog/azures-terrible-security-posture-comes-home-to-roost/">As I said last week</a>, I can’t fathom a scenario in which Google or AWS suffered from vulnerabilities like this and <em>didn’t</em> make loud, sweeping reforms that they talk about constantly just to rebuild the trust that they would have burned through.</p> <p>AWS has just had a vulnerability of the very kind I was referring to come home to roost. Is my expectation as a customer around the communication and next steps from AWS leadership accurate, or am I a naive dreamer who had an overly rosy view of the company I cover the most?</p> <p><strong>Either way, we’re about to find out.</strong></p> </div> <div class="single-post-author"> <div class="single-post-author__inner"> <div class="single-post-author__image"> <img src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20160%20160'%3E%3C/svg%3E" alt="Corey Quinn Headshot" width="160px" height="160px" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2019/09/Corey_Quinn_2019_02-150x150.jpg"><noscript><img src="https://www.lastweekinaws.com/wp-content/uploads/2019/09/Corey_Quinn_2019_02-150x150.jpg" alt="Corey Quinn Headshot" width="160px" height="160px"></noscript> </div> <div class="single-post-author__details"> <span class="single-post-author__name"> by Corey Quinn </span> <div class="single-post-author__bio"> <p>Corey is the Chief Cloud Economist at The Duckbill Group, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure.</p> </div> </div> </div> </div> <div class="single-related-posts"> <div class="single-related-posts__inner"> <div class="acf-block header-button-block no-mobile-hide"> <h2 class="is-style-default"> More Posts from Corey </h2> <div class="wp-block-buttons"> <div class="wp-block-button"> <a class="wp-block-button__link" href="https://www.lastweekinaws.com/blog/"> Back to the Blog </a> </div> </div> </div> <div class="single-related-posts__posts"> <div class="loop-wrapper"> <div class="loop-item"> <div class="loop-item__thumbnail"> <a href="https://www.lastweekinaws.com/blog/the-cold-hard-truth-about-your-cloud-dr-strategy/" tabindex="-1"> <img width="350" height="200" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20350%20200'%3E%3C/svg%3E" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2024/11/truth-350x200.jpg" /><noscript><img width="350" height="200" src="https://www.lastweekinaws.com/wp-content/uploads/2024/11/truth-350x200.jpg" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" /></noscript> </a> </div> <div class="loop-item__content"> <h3 class="loop-item__title"><a href="https://www.lastweekinaws.com/blog/the-cold-hard-truth-about-your-cloud-dr-strategy/" tabindex="-1">The Cold, Hard Truth About Your Cloud DR Strategy</a></h3> <span class="loop-item__author"> <a href="https://www.lastweekinaws.com/blog/author/cquinn/">By Corey Quinn</a> </span> <div class="loop-item__excerpt"> <p>Disaster recovery / business continuity / “backups” are always an interesting subject for very large scale cloud environments. Many of the old data-center strategies that grumpy old sysadmins (that’s me!) relied upon don’t hold water anymore.</p> </div> <div class="loop-item__readmore wp-block-buttons"> <div class="wp-block-button is-style-arrow-link"> <a class="wp-block-button__link" href="https://www.lastweekinaws.com/blog/the-cold-hard-truth-about-your-cloud-dr-strategy/"> Read More <span class="screen-reader-only">about The Cold, Hard Truth About Your Cloud DR Strategy</span> <span><svg aria-hidden="true" focusable="false" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="#dc6b2f" d="M295.515 115.716l-19.626 19.626c-4.753 4.753-4.675 12.484.173 17.14L356.78 230H12c-6.627 0-12 5.373-12 12v28c0 6.627 5.373 12 12 12h344.78l-80.717 77.518c-4.849 4.656-4.927 12.387-.173 17.14l19.626 19.626c4.686 4.686 12.284 4.686 16.971 0l131.799-131.799c4.686-4.686 4.686-12.284 0-16.971L312.485 115.716c-4.686-4.686-12.284-4.686-16.97 0z"></path></svg></span> </a> </div> </div> </div> </div> <div class="loop-item"> <div class="loop-item__thumbnail"> <a href="https://www.lastweekinaws.com/blog/aws-valkey-play-when-a-fork-becomes-a-price-cut/" tabindex="-1"> <img width="350" height="200" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20350%20200'%3E%3C/svg%3E" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2024/10/pexels-thelazyartist-1201673-350x200.jpg" /><noscript><img width="350" height="200" src="https://www.lastweekinaws.com/wp-content/uploads/2024/10/pexels-thelazyartist-1201673-350x200.jpg" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" /></noscript> </a> </div> <div class="loop-item__content"> <h3 class="loop-item__title"><a href="https://www.lastweekinaws.com/blog/aws-valkey-play-when-a-fork-becomes-a-price-cut/" tabindex="-1">AWS’s Valkey Play: When a Fork Becomes a Price Cut</a></h3> <span class="loop-item__author"> <a href="https://www.lastweekinaws.com/blog/author/cquinn/">By Corey Quinn</a> </span> <div class="loop-item__excerpt"> <p>In a move that’s equal parts predictable and surprising, AWS has decided to make their Valkey-based services significantly cheaper than their Redis counterparts.</p> </div> <div class="loop-item__readmore wp-block-buttons"> <div class="wp-block-button is-style-arrow-link"> <a class="wp-block-button__link" href="https://www.lastweekinaws.com/blog/aws-valkey-play-when-a-fork-becomes-a-price-cut/"> Read More <span class="screen-reader-only">about AWS’s Valkey Play: When a Fork Becomes a Price Cut</span> <span><svg aria-hidden="true" focusable="false" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="#dc6b2f" d="M295.515 115.716l-19.626 19.626c-4.753 4.753-4.675 12.484.173 17.14L356.78 230H12c-6.627 0-12 5.373-12 12v28c0 6.627 5.373 12 12 12h344.78l-80.717 77.518c-4.849 4.656-4.927 12.387-.173 17.14l19.626 19.626c4.686 4.686 12.284 4.686 16.971 0l131.799-131.799c4.686-4.686 4.686-12.284 0-16.971L312.485 115.716c-4.686-4.686-12.284-4.686-16.97 0z"></path></svg></span> </a> </div> </div> </div> </div> <div class="loop-item"> <div class="loop-item__thumbnail"> <a href="https://www.lastweekinaws.com/blog/amazon-genai-services/" tabindex="-1"> <img width="350" height="200" src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20350%20200'%3E%3C/svg%3E" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2024/07/GenAI-350x200.jpg" /><noscript><img width="350" height="200" src="https://www.lastweekinaws.com/wp-content/uploads/2024/07/GenAI-350x200.jpg" class="attachment-wd-blog-thumbnail size-wd-blog-thumbnail wp-post-image" alt="" decoding="async" /></noscript> </a> </div> <div class="loop-item__content"> <h3 class="loop-item__title"><a href="https://www.lastweekinaws.com/blog/amazon-genai-services/" tabindex="-1">Amazon GenAI Services</a></h3> <span class="loop-item__author"> <a href="https://www.lastweekinaws.com/blog/author/cquinn/">By Corey Quinn</a> </span> <div class="loop-item__excerpt"> <p>I was in New York this week for the AWS Summit, and while it’s always great to catch up with readers (thanks to those of you who came out to the drinkup!), AWS friends, and others, I found myself rather taken aback by the overwhelming strength behind the Generative AI theme of the entire event. […]</p> </div> <div class="loop-item__readmore wp-block-buttons"> <div class="wp-block-button is-style-arrow-link"> <a class="wp-block-button__link" href="https://www.lastweekinaws.com/blog/amazon-genai-services/"> Read More <span class="screen-reader-only">about Amazon GenAI Services</span> <span><svg aria-hidden="true" focusable="false" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path fill="#dc6b2f" d="M295.515 115.716l-19.626 19.626c-4.753 4.753-4.675 12.484.173 17.14L356.78 230H12c-6.627 0-12 5.373-12 12v28c0 6.627 5.373 12 12 12h344.78l-80.717 77.518c-4.849 4.656-4.927 12.387-.173 17.14l19.626 19.626c4.686 4.686 12.284 4.686 16.971 0l131.799-131.799c4.686-4.686 4.686-12.284 0-16.971L312.485 115.716c-4.686-4.686-12.284-4.686-16.97 0z"></path></svg></span> </a> </div> </div> </div> </div> </div> </div> </div> </div> <div class="single-post-email-subscribe loop-email-signup"> <div class="acf-block email-subscribe-block"> <div class="email-subscribe-block__image"> <img src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20123%20140'%3E%3C/svg%3E" alt="Billie Holding Mail Email Subscribe Icon" width="123" height="140" data-lazy-src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/blocks/billie-newsletter.svg"><noscript><img src="https://www.lastweekinaws.com/wp-content/themes/lwiaws-2022/assets/images/blocks/billie-newsletter.svg" alt="Billie Holding Mail Email Subscribe Icon" width="123" height="140"></noscript> </div> <div class="email-subscribe-block__innerBlocks"> <h2 class="is-style-no-bottom-margin">Get the newsletter!</h2> <p class="is-style-no-bottom-margin">Stay up to date on the latest AWS news, opinions, and tools, all lovingly sprinkled with a bit of snark.</p> </div> <div class="email-subscribe-block__form"> <script type="text/javascript"></script> <div class='gf_browser_ie gf_browser_ie7 gform_wrapper gravity-theme gform-theme--no-framework' data-form-theme='gravity-theme' data-form-index='0' id='gform_wrapper_1' ><div id='gf_1' class='gform_anchor' tabindex='-1'></div><form method='post' enctype='multipart/form-data' target='gform_ajax_frame_1' id='gform_1' action='/blog/orca-security-aws-and-the-killer-whale-of-a-problem/#gf_1' data-formid='1' novalidate> <div class='gform-body gform_body'><div id='gform_fields_1' class='gform_fields top_label form_sublabel_below description_below validation_below'><div id="field_1_5" class="gfield gfield--type-email gfield--width-full field_sublabel_below gfield--no-description field_description_below hidden_label field_validation_below gfield_visibility_visible gfield_email_wrap" data-field-class="gfield_email_wrap" data-js-reload="field_1_5" ><label class='gfield_label gform-field-label' for='input_1_5'>Email</label><div class='ginput_container ginput_container_email'> <input name='input_5' id='input_1_5' type='email' value='' class='large' placeholder='Email Address' aria-invalid="false" /> </div></div><div id="field_1_3" class="gfield gfield--type-text field_sublabel_below gfield--no-description field_description_below field_validation_below gfield_visibility_hidden gfield_text_wrap" data-field-class="gfield_text_wrap" data-js-reload="field_1_3" ><div class="admin-hidden-markup"><i class="gform-icon gform-icon--hidden" aria-hidden="true" title="This field is hidden when viewing the form"></i><span>This field is hidden when viewing the form</span></div><label class='gfield_label gform-field-label' for='input_1_3'>rgsid</label><div class='ginput_container ginput_container_text'><input name='input_3' id='input_1_3' type='text' value='' class='medium' aria-invalid="false" /></div></div><div id="field_1_6" class="gfield gfield--type-honeypot gform_validation_container field_sublabel_below gfield--has-description field_description_below field_validation_below gfield_visibility_visible gfield_honeypot_wrap" data-field-class="gfield_honeypot_wrap" data-js-reload="field_1_6" ><label class='gfield_label gform-field-label' for='input_1_6'>Phone</label><div class='ginput_container'><input name='input_6' id='input_1_6' type='text' value='' autocomplete='new-password'/></div><div class='gfield_description' id='gfield_description_1_6'>This field is for validation purposes and should be left unchanged.</div></div></div></div> <div class='gform-footer gform_footer top_label'> <button type='submit' id='gform_submit_button_1' class='gform_button button' onclick='gform.submission.handleButtonClick(this)' ><span>Sign Me Up!</span></button> <input type='hidden' name='gform_ajax' value='form_id=1&title=&description=&tabindex=0&theme=gravity-theme' /> <input type='hidden' class='gform_hidden' name='gform_submission_method' data-js='gform_submission_method_1' value='iframe' /> <input type='hidden' class='gform_hidden' name='is_submit_1' value='1' /> <input type='hidden' class='gform_hidden' name='gform_submit' value='1' /> <input type='hidden' class='gform_hidden' name='gform_unique_id' value='' /> <input type='hidden' class='gform_hidden' name='state_1' value='WyJbXSIsImFjNTFmMzYzODNkM2I2MTMxNWViYTdjNTg3ZjAzYzlhIl0=' /> <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_target_page_number_1' id='gform_target_page_number_1' value='0' /> <input type='hidden' autocomplete='off' class='gform_hidden' name='gform_source_page_number_1' id='gform_source_page_number_1' value='1' /> <input type='hidden' name='gform_field_values' value='' /> </div> </form> </div> <iframe style='display:none;width:0px;height:0px;' src='about:blank' name='gform_ajax_frame_1' id='gform_ajax_frame_1' title='This iframe contains the logic required to handle Ajax powered Gravity Forms.'></iframe> <script type="text/javascript"> /* <![CDATA[ */ gform.initializeOnLoaded( function() {gformInitSpinner( 1, 'https://www.lastweekinaws.com/wp-content/plugins/gravityforms/images/spinner.svg', true );jQuery('#gform_ajax_frame_1').on('load',function(){var contents = jQuery(this).contents().find('*').html();var is_postback = contents.indexOf('GF_AJAX_POSTBACK') >= 0;if(!is_postback){return;}var form_content = jQuery(this).contents().find('#gform_wrapper_1');var is_confirmation = jQuery(this).contents().find('#gform_confirmation_wrapper_1').length > 0;var is_redirect = contents.indexOf('gformRedirect(){') >= 0;var is_form = form_content.length > 0 && ! is_redirect && ! is_confirmation;var mt = parseInt(jQuery('html').css('margin-top'), 10) + parseInt(jQuery('body').css('margin-top'), 10) + 100;if(is_form){jQuery('#gform_wrapper_1').html(form_content.html());if(form_content.hasClass('gform_validation_error')){jQuery('#gform_wrapper_1').addClass('gform_validation_error');} else {jQuery('#gform_wrapper_1').removeClass('gform_validation_error');}setTimeout( function() { /* delay the scroll by 50 milliseconds to fix a bug in chrome */ jQuery(document).scrollTop(jQuery('#gform_wrapper_1').offset().top - mt); }, 50 );if(window['gformInitDatepicker']) {gformInitDatepicker();}if(window['gformInitPriceFields']) {gformInitPriceFields();}var current_page = jQuery('#gform_source_page_number_1').val();gformInitSpinner( 1, 'https://www.lastweekinaws.com/wp-content/plugins/gravityforms/images/spinner.svg', true );jQuery(document).trigger('gform_page_loaded', [1, current_page]);window['gf_submitting_1'] = false;}else if(!is_redirect){var confirmation_content = jQuery(this).contents().find('.GF_AJAX_POSTBACK').html();if(!confirmation_content){confirmation_content = contents;}jQuery('#gform_wrapper_1').replaceWith(confirmation_content);jQuery(document).scrollTop(jQuery('#gf_1').offset().top - mt);jQuery(document).trigger('gform_confirmation_loaded', [1]);window['gf_submitting_1'] = false;wp.a11y.speak(jQuery('#gform_confirmation_message_1').text());}else{jQuery('#gform_1').append(contents);if(window['gformRedirect']) {gformRedirect();}}jQuery(document).trigger("gform_pre_post_render", [{ formId: "1", currentPage: "current_page", abort: function() { this.preventDefault(); } }]); if (event && event.defaultPrevented) { return; } const gformWrapperDiv = document.getElementById( "gform_wrapper_1" ); if ( gformWrapperDiv ) { const visibilitySpan = document.createElement( "span" ); visibilitySpan.id = "gform_visibility_test_1"; gformWrapperDiv.insertAdjacentElement( "afterend", visibilitySpan ); } const visibilityTestDiv = document.getElementById( "gform_visibility_test_1" ); let postRenderFired = false; function triggerPostRender() { if ( postRenderFired ) { return; } postRenderFired = true; jQuery( document ).trigger( 'gform_post_render', [1, current_page] ); gform.utils.trigger( { event: 'gform/postRender', native: false, data: { formId: 1, currentPage: current_page } } ); gform.utils.trigger( { event: 'gform/post_render', native: false, data: { formId: 1, currentPage: current_page } } ); if ( visibilityTestDiv ) { visibilityTestDiv.parentNode.removeChild( visibilityTestDiv ); } } function debounce( func, wait, immediate ) { var timeout; return function() { var context = this, args = arguments; var later = function() { timeout = null; if ( !immediate ) func.apply( context, args ); }; var callNow = immediate && !timeout; clearTimeout( timeout ); timeout = setTimeout( later, wait ); if ( callNow ) func.apply( context, args ); }; } const debouncedTriggerPostRender = debounce( function() { triggerPostRender(); }, 200 ); if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) { const observer = new MutationObserver( ( mutations ) => { mutations.forEach( ( mutation ) => { if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) { debouncedTriggerPostRender(); observer.disconnect(); } }); }); observer.observe( document.body, { attributes: true, childList: false, subtree: true, attributeFilter: [ 'style', 'class' ], }); } else { triggerPostRender(); } } );} ); /* ]]> */ </script> </div> </div> </div> </article></main></div></div><footer data-wpr-lazyrender="1" class="site-footer"><div class="wrap"> <div class="footer-column footer-column--1"> <span class="footer-column__header"> The world of cloud takes itself far too seriously. We aim to change that. </span> <div class="wp-block-buttons"> <div class="wp-block-button"> <a class="wp-block-button__link" href="https://www.duckbillgroup.com/" target="_blank" rel="noopener noreferrer"> Lower my AWS bill, please! </a> </div> </div> <div class="social-media"> <a class="social-media__link" href="https://twitter.com/LastWeekinAWS" target="_blank" rel="noopener noreferrer" aria-label="Twitter"> <i class="fab fa-twitter"></i> </a> <a class="social-media__link" href="https://www.linkedin.com/company/last-week-in-aws/" target="_blank" rel="noopener noreferrer" aria-label="LinkedIn"> <i class="fab fa-linkedin-in"></i> </a> <a class="social-media__link" href="https://www.lastweekinaws.com/feed/" target="_blank" rel="noopener noreferrer" aria-label="RSS Feed"> <i class="fas fa-rss"></i> </a> <a class="social-media__link" href="https://www.lastweekinaws.com/community" target="_self" aria-label="Slack"> <i class="fab fa-slack"></i> </a> </div> </div> <div class="footer-column footer-column--2"> <div class="footer-menu footer-menu--1"><ul id="menu-footer-menu-1" class="footer-menu__menu"><li id="menu-item-60" class="menu-item"><a href="https://www.lastweekinaws.com/newsletter/">Newsletter</a></li> <li id="menu-item-738" class="menu-item"><a href="https://www.lastweekinaws.com/podcast/">Podcasts</a></li> <li id="menu-item-57" class="menu-item current_page_parent"><a href="https://www.lastweekinaws.com/blog/">Blog</a></li> <li id="menu-item-1396" class="menu-item"><a href="https://www.lastweekinaws.com/products/">Merch</a></li> <li id="menu-item-12560" class="menu-item"><a href="https://www.lastweekinaws.com/contribute/">Contribute</a></li> </ul></div><div class="footer-menu footer-menu--2"><ul id="menu-footer-menu-2" class="footer-menu__menu"><li id="menu-item-62" class="menu-item"><a href="https://www.lastweekinaws.com/about/">About</a></li> <li id="menu-item-64" class="menu-item"><a href="https://www.lastweekinaws.com/contact/">Contact</a></li> <li id="menu-item-63" class="menu-item"><a href="https://www.lastweekinaws.com/sponsorship/">Sponsorships</a></li> <li id="menu-item-12340" class="menu-item"><a href="https://www.lastweekinaws.com/disclosures/">Disclosures</a></li> </ul></div> </div> <div class="footer-column footer-column--3"> <img src="data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20400%20330'%3E%3C/svg%3E" alt="Billie Footer" width="400" height="330" data-lazy-src="https://www.lastweekinaws.com/wp-content/uploads/2022/01/billie-lwiaws-footer.svg" /><noscript><img src="https://www.lastweekinaws.com/wp-content/uploads/2022/01/billie-lwiaws-footer.svg" alt="Billie Footer" width="400" height="330" /></noscript> </div> </div></footer> <div data-wpr-lazyrender="1" class="copyright"> <div class="wrap"> <div class="copyright__footprint"> <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256.37 216" width="35px" height="35px"><defs><style>.cls-1{fill:#dc6b2f;}</style></defs><title>footprint-orange</title><g id="Layer_2" data-name="Layer 2"><g id="lockup-pms-black7"><path class="cls-1" d="M170.06,55.12,144.38,9.47a18.58,18.58,0,0,0-32.39,0L86.31,55.12A18.57,18.57,0,0,1,62.58,63L26.24,46.84C8.74,39.06-7.66,59.64,3.83,75L44.59,129.3l53.87,71.84a37.16,37.16,0,0,0,59.45,0l53.87-71.84L252.54,75c11.49-15.32-4.91-35.9-22.41-28.12L193.79,63A18.57,18.57,0,0,1,170.06,55.12Z"></path></g></g></svg> </div> <div class="copyright__text"> © 2024 The Duckbill Group. All Rights Reserved. </div> <div class="copyright__links"> <a href="https://www.lastweekinaws.com/privacy-policy/" target="">Privacy Policy</a> <a href="https://www.lastweekinaws.com/cookie-policy/" target="">Cookie Policy</a> </div> </div> </div> </div><link data-minify="1" rel='stylesheet' id='fifu-woo-css-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/transistor-fm-fork-featured-image-from-url/includes/html/css/woo.css?ver=1725966922' type='text/css' media='all' /> <style id='fifu-woo-css-inline-css' type='text/css'> img.zoomImg {display:inline !important} </style> <link data-minify="1" rel='stylesheet' id='gform_basic-css' href='https://www.lastweekinaws.com/wp-content/cache/min/1/wp-content/plugins/gravityforms/assets/css/dist/basic.min.css?ver=1731679495' type='text/css' media='all' /> <link rel='stylesheet' id='gform_theme_components-css' href='https://www.lastweekinaws.com/wp-content/plugins/gravityforms/assets/css/dist/theme-components.min.css?ver=2.9.0' type='text/css' media='all' /> <link rel='stylesheet' id='gform_theme-css' href='https://www.lastweekinaws.com/wp-content/plugins/gravityforms/assets/css/dist/theme.min.css?ver=2.9.0' type='text/css' media='all' /> <link rel='stylesheet' id='shared-counts-css' href='https://www.lastweekinaws.com/wp-content/plugins/shared-counts/assets/css/shared-counts.min.css?ver=1.5.0' type='text/css' media='all' /> <script type="text/javascript" src="//js.hs-scripts.com/39887055.js?ver=6.6.2" id="leadin-scriptloader-js-js" data-rocket-defer defer></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.5.0" id="skip-links-js" data-rocket-defer defer></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1730468796" id="zoom-social-icons-widget-frontend-js" data-rocket-defer defer></script> <script type="text/javascript" id="fifu-image-js-js-extra"> /* <![CDATA[ */ var fifuImageVars = {"fifu_lazy":"","fifu_woo_lbox_enabled":"1","fifu_woo_zoom":"inline"}; /* ]]> */ </script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-content/plugins/transistor-fm-fork-featured-image-from-url/includes/html/js/image.js?ver=6.6.2" id="fifu-image-js-js" data-rocket-defer defer></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381" id="wp-dom-ready-js" data-rocket-defer defer></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/dist/hooks.min.js?ver=2810c76e705dd1a53b18" id="wp-hooks-js"></script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6" id="wp-i18n-js"></script> <script type="text/javascript" id="wp-i18n-js-after"> /* <![CDATA[ */ wp.i18n.setLocaleData( { 'text direction\u0004ltr': [ 'ltr' ] } ); /* ]]> */ </script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-includes/js/dist/a11y.min.js?ver=d90eebea464f6c09bfd5" id="wp-a11y-js" data-rocket-defer defer></script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/js/jquery.json.min.js?ver=2.9.0" id="gform_json-js"></script> <script type="text/javascript" id="gform_gravityforms-js-extra"> /* <![CDATA[ */ var gform_i18n = {"datepicker":{"days":{"monday":"Mo","tuesday":"Tu","wednesday":"We","thursday":"Th","friday":"Fr","saturday":"Sa","sunday":"Su"},"months":{"january":"January","february":"February","march":"March","april":"April","may":"May","june":"June","july":"July","august":"August","september":"September","october":"October","november":"November","december":"December"},"firstDay":0,"iconText":"Select date"}}; var gf_legacy_multi = []; var gform_gravityforms = {"strings":{"invalid_file_extension":"This type of file is not allowed. Must be one of the following:","delete_file":"Delete this file","in_progress":"in progress","file_exceeds_limit":"File exceeds size limit","illegal_extension":"This type of file is not allowed.","max_reached":"Maximum number of files reached","unknown_error":"There was a problem while saving the file on the server","currently_uploading":"Please wait for the uploading to complete","cancel":"Cancel","cancel_upload":"Cancel this upload","cancelled":"Cancelled"},"vars":{"images_url":"https:\/\/www.lastweekinaws.com\/wp-content\/plugins\/gravityforms\/images"}}; var gf_global = {"gf_currency_config":{"name":"U.S. Dollar","symbol_left":"$","symbol_right":"","symbol_padding":"","thousand_separator":",","decimal_separator":".","decimals":2,"code":"USD"},"base_url":"https:\/\/www.lastweekinaws.com\/wp-content\/plugins\/gravityforms","number_formats":[],"spinnerUrl":"https:\/\/www.lastweekinaws.com\/wp-content\/plugins\/gravityforms\/images\/spinner.svg","version_hash":"10524889f6b23b8ebb240ce1d1853aee","strings":{"newRowAdded":"New row added.","rowRemoved":"Row removed","formSaved":"The form has been saved. The content contains the link to return and complete the form."}}; /* ]]> */ </script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/js/gravityforms.min.js?ver=2.9.0" id="gform_gravityforms-js"></script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/js/placeholders.jquery.min.js?ver=2.9.0" id="gform_placeholder-js"></script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/assets/js/dist/utils.min.js?ver=f802885f3482236736b18b55abcdc360" id="gform_gravityforms_utils-js"></script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/assets/js/dist/vendor-theme.min.js?ver=ddd2702ee024d421149a5e61416f1ff5" id="gform_gravityforms_theme_vendors-js"></script> <script type="text/javascript" id="gform_gravityforms_theme-js-extra"> /* <![CDATA[ */ var gform_theme_config = {"common":{"form":{"honeypot":{"version_hash":"10524889f6b23b8ebb240ce1d1853aee"},"ajax":{"ajaxurl":"https:\/\/www.lastweekinaws.com\/wp-admin\/admin-ajax.php","ajax_submission_nonce":"3450f5612f","i18n":{"step_announcement":"Step %1$s of %2$s, %3$s","unknown_error":"There was an unknown error processing your request. Please try again."}}}},"hmr_dev":"","public_path":"https:\/\/www.lastweekinaws.com\/wp-content\/plugins\/gravityforms\/assets\/js\/dist\/","config_nonce":"14f2a8d103"}; /* ]]> */ </script> <script type="text/javascript" defer='defer' src="https://www.lastweekinaws.com/wp-content/plugins/gravityforms/assets/js/dist/scripts-theme.min.js?ver=c055226f9b8c432c9206edab9070263c" id="gform_gravityforms_theme-js"></script> <script type="text/javascript" id="shared-counts-js-extra"> /* <![CDATA[ */ var shared_counts = {"social_tracking":"1"}; /* ]]> */ </script> <script type="text/javascript" src="https://www.lastweekinaws.com/wp-content/plugins/shared-counts/assets/js/shared-counts.min.js?ver=1.5.0" id="shared-counts-js" data-rocket-defer defer></script> <svg style="display:none;"><defs> <symbol id="styled-checkmark" width="74" height="72" width="74" height="72" viewBox="0 0 74 72" fill="none"><g clip-path="url(#clip0_315_1332)"><path d="M36.592 69.5665C55.0483 69.5665 70.0101 54.6697 70.0101 36.2935C70.0101 17.9174 55.0483 3.02057 36.592 3.02057C18.1356 3.02057 3.17383 17.9174 3.17383 36.2935C3.17383 54.6697 18.1356 69.5665 36.592 69.5665Z" fill="#E3F0F4"></path><path d="M52.1342 10.8741C52.8809 11.06 53.6277 11.1529 54.4212 11.1065C55.2146 11.1529 56.0081 11.06 56.8949 10.8741C57.735 10.6882 58.6684 10.3165 58.9018 9.52645C59.1352 8.78292 58.5751 7.89998 57.875 7.24939C55.7747 5.39057 53.2543 3.81057 50.5473 2.74174C47.8402 1.67292 44.9931 0.882917 42.1927 0.511153C38.9256 -2.43365e-05 35.6118 -0.0929656 32.298 0.278799C28.9842 0.650564 25.7637 1.53351 22.6833 2.74174C16.5224 5.20469 11.1083 9.43351 7.14103 14.7312C3.17379 19.9823 0.746777 26.3953 0.140023 32.9476C-0.140017 35.8288 2.83174e-06 38.71 0.466737 41.4982C0.93347 44.2865 1.72692 47.0747 2.84708 49.6771C5.0874 54.8818 8.49456 59.5288 12.7885 63.1535C17.0358 66.8247 22.1232 69.3806 27.5373 70.8212C30.2444 71.5183 32.9981 71.9365 35.7985 72.0294C38.5989 72.1224 41.3993 71.9365 44.153 71.4718C44.5731 71.3788 44.9465 71.2394 45.4132 71.1C45.8333 70.9606 46.3 70.8212 46.8134 70.6818C48.4936 70.1706 50.1272 69.52 51.7608 68.73C53.3943 67.9865 54.9346 67.0571 56.4281 66.0812C59.4152 64.0365 62.1223 61.62 64.4559 58.7853C69.0766 53.1624 71.9237 45.9594 72.3437 38.6635C72.3437 38.2918 72.3904 37.9665 72.3904 37.5947C72.3904 37.2229 72.3437 36.8976 72.3437 36.5259C72.2971 35.8288 72.2504 35.1318 72.1104 34.4347C71.9704 33.7376 71.8303 33.0871 71.597 32.4365C71.4103 31.7859 71.0836 31.1818 70.8035 30.5776C70.6635 30.1594 70.5235 29.7412 70.3368 29.3694L69.7767 28.2076C69.6367 27.9288 69.31 27.6965 69.0299 27.6035C68.4698 27.3247 68.0498 27.4176 67.7697 27.8823C66.6496 29.6482 66.6029 31.8323 66.5562 34.4347C66.6029 34.9924 66.5562 35.5965 66.5096 36.1541C66.5096 36.7118 66.4629 37.3159 66.3695 37.8735C66.2295 40.29 65.7628 42.66 65.0627 44.9835C64.3159 47.2606 63.3825 49.5377 62.0756 51.5824C60.6754 53.813 58.9952 55.8577 57.0815 57.67C56.5681 58.0882 56.1014 58.553 55.588 58.9712L54.0011 60.1794C53.7677 60.3653 53.441 60.5512 53.2077 60.7371C52.9276 60.923 52.6476 61.1088 52.3675 61.2947C51.8075 61.62 51.2474 61.9918 50.6406 62.2706C45.9733 64.78 40.6525 65.9883 35.3317 65.8024C29.2175 65.57 23.1033 63.4324 18.2493 59.6682C13.3953 55.9506 9.70807 50.6065 7.93448 44.7512C7.3744 42.7065 7.04768 40.5688 7.00101 38.4776C7.00101 37.9665 6.95434 37.5018 6.95434 36.9906C6.95434 36.5259 6.95434 36.0612 6.95434 35.6429C7.00101 35.2247 7.04768 34.8065 7.09436 34.4347C7.46774 30.5776 8.5879 26.7671 10.4082 23.3282C12.2284 19.8894 14.7021 16.8223 17.6892 14.3594C23.5701 9.24763 31.5045 6.64527 39.299 7.43528C42.4261 7.66763 45.5065 8.41116 48.4003 9.61939C48.727 9.75881 49.0537 9.85175 49.3804 9.99116C49.7072 10.1306 49.9872 10.27 50.3139 10.3629C50.6406 10.4559 50.9207 10.5488 51.2474 10.6417C51.3874 10.6882 51.5741 10.7347 51.7141 10.7347C51.8075 10.7812 51.9941 10.8276 52.1342 10.8741Z" fill="#3D3935"></path><path d="M73.3238 14.9635C73.3705 14.5453 73.4172 14.127 73.3705 13.7088C73.2771 11.85 71.9703 9.99113 70.1034 9.66584C69.3566 9.52643 68.5631 9.66584 67.8164 9.80525C63.0557 10.8741 59.5552 15.6605 56.0547 18.9135C52.7875 21.9341 49.6137 25.0476 46.4399 28.1611C43.8729 31.0423 41.5392 34.1094 39.1589 37.13C38.5521 37.8735 37.9454 38.617 37.3386 39.3606L36.4052 40.4759L35.7051 41.2659C35.0516 41.9164 34.3515 41.5912 33.6981 41.08C33.2781 40.7547 32.858 40.3829 32.4846 40.0576C31.6445 39.3606 30.851 38.617 30.0109 37.92C28.7974 36.8511 27.6306 35.7823 26.4171 34.7135C25.3436 33.7376 24.4568 32.6688 22.9166 32.4829C21.7964 32.3435 20.8163 32.6688 19.9295 33.3194C19.3227 33.7376 18.856 34.2488 18.5759 34.76C17.4558 36.8047 17.5025 38.0594 18.1559 38.8959C18.4359 39.2676 18.7626 39.6394 19.0427 40.0112C20.4895 41.3588 21.9364 42.7529 23.3366 44.1006C24.2234 44.937 25.1102 45.7735 25.997 46.61C26.4171 47.0282 26.8838 47.4464 27.3039 47.8647L28.144 48.6547C28.564 49.0264 28.9841 49.4447 29.4508 49.8164C30.8044 50.9782 32.2512 51.6753 33.8848 51.9541C35.5184 52.1865 37.292 51.8612 38.7388 51.0712C38.9722 50.9317 39.2056 50.7923 39.4389 50.6529L39.7657 50.4206L40.0457 50.0953L41.2125 48.8406L42.3794 47.5859L42.6594 47.2606L42.7994 47.0747L43.0795 46.7029C43.8729 45.7735 44.6664 44.8441 45.4598 43.9147C47.0467 42.0559 48.7269 40.197 50.3605 38.3847C51.0139 37.827 51.714 37.2694 52.3675 36.7582L52.8342 36.3864C53.0676 36.1076 53.3476 35.8753 53.6276 35.6894C57.4082 32.5294 61.0487 29.137 64.6892 25.7911C67.8164 23.0029 72.7171 19.4711 73.3238 14.9635Z" fill="#DC6B2F"></path><path d="M20.6296 16.0788C24.0367 13.43 28.284 11.8035 32.5779 12.0358C32.998 12.0823 33.4647 12.1288 33.8381 12.3611C34.8183 13.0582 34.3982 14.6382 33.6048 15.5211C31.9245 17.38 29.2641 17.9376 26.9305 19.0529C23.4766 20.6794 20.8163 23.5606 18.3892 26.4417C17.4091 27.6035 16.0556 29.137 14.3753 28.6723C12.415 28.1612 12.275 26.3953 13.0218 24.9547C14.8887 21.6553 17.6891 18.3559 20.6296 16.0788Z" fill="white"></path></g><defs><clipPath id="clip0_315_1332"><rect width="73.3935" height="72" fill="white"></rect></clipPath></defs></symbol> <symbol id="subscriber-icon" width="48" height="48" width="48" height="48" viewBox="0 0 48 48" fill="none"><g clip-path="url(#clip0_1337_1543)"><path d="M10 38.502V40.502C9.98366 40.8843 10.0889 41.2619 10.3005 41.5806C10.5122 41.8993 10.8194 42.1428 11.178 42.276L25 46.502V28.836L12.054 24.09C11.7977 24.0203 11.5282 24.0141 11.2689 24.072C11.0096 24.1299 10.7683 24.2501 10.566 24.4223C10.3637 24.5945 10.2064 24.8134 10.1078 25.0601C10.0091 25.3068 9.97215 25.5738 10 25.838V29.526" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M40.026 38.2V40.514C40.044 40.8963 39.9398 41.2744 39.7283 41.5934C39.5168 41.9125 39.2092 42.1557 38.85 42.288L25 46.502V28.836L37.972 24.09C38.2284 24.0203 38.4978 24.0141 38.7571 24.072C39.0164 24.1299 39.2577 24.2501 39.46 24.4223C39.6623 24.5945 39.8196 24.8134 39.9182 25.0601C40.0169 25.3068 40.0539 25.5738 40.026 25.838V29.814" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M12.974 36.716C12.974 37.716 11.848 38.516 10.472 38.502C7.716 38.49 5.49 36.87 5.5 34.882V33.082C5.5 31.096 7.75 29.496 10.5 29.508C11.878 29.508 12.99 30.324 12.986 31.308L12.974 36.716Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M35.514 36.716C35.514 37.716 36.64 38.516 38.02 38.502C40.78 38.49 43.01 36.87 43 34.882V33.082C43 31.096 40.746 29.496 37.986 29.508C36.608 29.508 35.492 30.324 35.498 31.308L35.514 36.716Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M16.774 9.75201C16.774 10.8354 16.9874 11.9082 17.402 12.9092C17.8166 13.9101 18.4243 14.8196 19.1904 15.5856C19.9565 16.3517 20.8659 16.9594 21.8669 17.374C22.8678 17.7886 23.9406 18.002 25.024 18.002C26.1074 18.002 27.1802 17.7886 28.1812 17.374C29.1821 16.9594 30.0916 16.3517 30.8576 15.5856C31.6237 14.8196 32.2314 13.9101 32.646 12.9092C33.0606 11.9082 33.274 10.8354 33.274 9.75201C33.274 8.66861 33.0606 7.59581 32.646 6.59488C32.2314 5.59394 31.6237 4.68447 30.8576 3.91838C30.0916 3.1523 29.1821 2.54461 28.1812 2.13001C27.1802 1.71541 26.1074 1.50201 25.024 1.50201C23.9406 1.50201 22.8678 1.71541 21.8669 2.13001C20.8659 2.54461 19.9565 3.1523 19.1904 3.91838C18.4243 4.68447 17.8166 5.59394 17.402 6.59488C16.9874 7.59581 16.774 8.66861 16.774 9.75201V9.75201Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_1337_1543"><rect width="48" height="48" fill="white"></rect></clipPath></defs></symbol> <symbol id="open-rate-icon" width="48" height="48" width="48" height="48" viewBox="0 0 48 48" fill="none"><path d="M40.5 25.5V4.5C40.5 3.70435 40.1839 2.94129 39.6213 2.37868C39.0587 1.81607 38.2956 1.5 37.5 1.5H10.5C9.70435 1.5 8.94129 1.81607 8.37868 2.37868C7.81607 2.94129 7.5 3.70435 7.5 4.5V25.5" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M25.183 8.023L27.679 12.937H31.925C32.1591 12.9313 32.3896 12.9964 32.5862 13.1237C32.7828 13.2511 32.9364 13.4348 33.027 13.6508C33.1175 13.8669 33.1407 14.1052 33.0936 14.3347C33.0465 14.5642 32.9313 14.7741 32.763 14.937L28.865 18.773L31.029 23.741C31.1237 23.9685 31.1446 24.22 31.0889 24.4601C31.0331 24.7001 30.9035 24.9167 30.7182 25.0792C30.533 25.2417 30.3014 25.3421 30.0561 25.3661C29.8109 25.3901 29.5642 25.3365 29.351 25.213L24.125 22.273L18.895 25.213C18.6817 25.3365 18.4351 25.3901 18.1898 25.3661C17.9445 25.3421 17.713 25.2417 17.5277 25.0792C17.3424 24.9167 17.2128 24.7001 17.1571 24.4601C17.1013 24.22 17.1223 23.9685 17.217 23.741L19.379 18.773L15.475 14.925C15.3067 14.7621 15.1914 14.5522 15.1443 14.3227C15.0972 14.0932 15.1204 13.8549 15.211 13.6388C15.3015 13.4228 15.4551 13.2391 15.6517 13.1117C15.8483 12.9844 16.0788 12.9193 16.313 12.925H20.565L23.061 8.011C23.164 7.81857 23.3176 7.6579 23.5052 7.54629C23.6928 7.43468 23.9073 7.37635 24.1256 7.37758C24.3439 7.37882 24.5577 7.43957 24.744 7.5533C24.9303 7.66702 25.0821 7.82942 25.183 8.023V8.023Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M44 22.92C44.2261 22.7485 44.4951 22.6428 44.7775 22.6146C45.0598 22.5864 45.3444 22.6367 45.6 22.76C45.8539 22.8791 46.0682 23.0688 46.2171 23.3064C46.3661 23.5441 46.4435 23.8196 46.44 24.1V43.5C46.44 44.2957 46.1239 45.0587 45.5613 45.6213C44.9987 46.1839 44.2356 46.5 43.44 46.5H4.49999C3.70434 46.5 2.94128 46.1839 2.37867 45.6213C1.81606 45.0587 1.49999 44.2957 1.49999 43.5V24.1C1.49651 23.8196 1.57387 23.5441 1.72284 23.3064C1.8718 23.0688 2.08606 22.8791 2.33999 22.76C2.59554 22.6367 2.88019 22.5864 3.16253 22.6146C3.44487 22.6428 3.71392 22.7485 3.93999 22.92L20.3 34.72C21.3559 35.5472 22.6586 35.9967 24 35.9967C25.3414 35.9967 26.644 35.5472 27.7 34.72L44 22.92Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path></symbol> <symbol id="click-through-icon" width="48" height="48" width="48" height="48" viewBox="0 0 48 48" fill="none"><path d="M21.072 23.136L26.432 40.998C26.5144 41.2732 26.6668 41.5224 26.8743 41.7211C27.0818 41.9198 27.3373 42.0612 27.6159 42.1315C27.8944 42.2019 28.1865 42.1987 28.4634 42.1224C28.7404 42.046 28.9928 41.8991 29.196 41.696L31.926 38.966L38.97 46.01C39.1241 46.1642 39.3072 46.2865 39.5086 46.37C39.71 46.4534 39.926 46.4964 40.144 46.4964C40.362 46.4964 40.5779 46.4534 40.7794 46.37C40.9808 46.2865 41.1638 46.1642 41.318 46.01L46.014 41.314C46.1682 41.1598 46.2905 40.9768 46.374 40.7754C46.4574 40.5739 46.5004 40.358 46.5004 40.14C46.5004 39.9219 46.4574 39.706 46.374 39.5046C46.2905 39.3032 46.1682 39.1201 46.014 38.966L38.97 31.922L41.7 29.2C41.9032 28.9969 42.0501 28.7447 42.1266 28.4678C42.2031 28.191 42.2064 27.899 42.1363 27.6205C42.0662 27.342 41.925 27.0864 41.7265 26.8788C41.528 26.6712 41.2791 26.5186 41.004 26.436L23.14 21.076C22.8536 20.991 22.5496 20.9848 22.26 21.0579C21.9704 21.1311 21.7058 21.281 21.4942 21.4918C21.2826 21.7026 21.1317 21.9666 21.0574 22.2559C20.9831 22.5453 20.9881 22.8493 21.072 23.136V23.136Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M43.446 21C43.1593 16.9844 41.7244 13.1358 39.3121 9.91265C36.8999 6.68952 33.612 4.22769 29.8401 2.82041C26.0683 1.41312 21.9714 1.11969 18.0375 1.97506C14.1035 2.83044 10.4984 4.79856 7.65141 7.64501C4.80446 10.4915 2.83569 14.0963 1.97961 18.03C1.12354 21.9638 1.41624 26.0608 2.82285 29.8329C4.22947 33.605 6.6907 36.8933 9.9134 39.3061C13.1361 41.7189 16.9844 43.1546 21 43.442" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M33.626 18C32.8831 16.1626 31.6967 14.5378 30.1727 13.2708C28.6488 12.0037 26.8347 11.1338 24.8926 10.7388C22.9505 10.3438 20.9408 10.436 19.0429 11.0071C17.1451 11.5782 15.4183 12.6105 14.0167 14.0117C12.6151 15.4129 11.5824 17.1395 11.0108 19.0372C10.4392 20.9348 10.3466 22.9445 10.7411 24.8868C11.1356 26.829 12.005 28.6433 13.2716 30.1675C14.5383 31.6918 16.1628 32.8786 18 33.622" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path></symbol> <symbol id="listeners-icon" width="48" height="48" width="48" height="48" viewBox="0 0 48 48" fill="none"><path d="M46.5 28C46.5 28.9283 46.1312 29.8185 45.4749 30.4749C44.8185 31.1313 43.9283 31.5 43 31.5C42.0717 31.5 41.1815 31.1313 40.5251 30.4749C39.8688 29.8185 39.5 28.9283 39.5 28V22C39.5 21.0717 39.8688 20.1815 40.5251 19.5251C41.1815 18.8687 42.0717 18.5 43 18.5C43.9283 18.5 44.8185 18.8687 45.4749 19.5251C46.1312 20.1815 46.5 21.0717 46.5 22V28Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M1.5 28C1.5 28.9283 1.86875 29.8185 2.52513 30.4749C3.1815 31.1313 4.07174 31.5 5 31.5C5.92826 31.5 6.8185 31.1313 7.47487 30.4749C8.13125 29.8185 8.5 28.9283 8.5 28V22C8.5 21.0717 8.13125 20.1815 7.47487 19.5251C6.8185 18.8687 5.92826 18.5 5 18.5C4.07174 18.5 3.1815 18.8687 2.52513 19.5251C1.86875 20.1815 1.5 21.0717 1.5 22V28Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M39.5 24.74V17C39.4842 12.894 37.8461 8.9607 34.9427 6.0573C32.0393 3.15391 28.106 1.5158 24 1.5V1.5C19.894 1.5158 15.9607 3.15391 13.0573 6.0573C10.1539 8.9607 8.5158 12.894 8.5 17V24.74" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M24 31.5C28.9706 31.5 33 27.4706 33 22.5C33 17.5294 28.9706 13.5 24 13.5C19.0294 13.5 15 17.5294 15 22.5C15 27.4706 19.0294 31.5 24 31.5Z" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M36.74 46.5C35.8053 43.8687 34.0787 41.5914 31.7975 39.9809C29.5163 38.3704 26.7924 37.5058 24 37.5058C21.2076 37.5058 18.4837 38.3704 16.2025 39.9809C13.9213 41.5914 12.1948 43.8687 11.26 46.5" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path></symbol> <symbol id="downloads-icon" width="48" height="48" width="48" height="48" viewBox="0 0 48 48" fill="none"><g clip-path="url(#clip0_1337_1487)"><path d="M24 28.5V46.5" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M31.5 39L24 46.5L16.5 39" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path><path d="M33 31.5H36.75C38.2797 31.5026 39.7885 31.1452 41.1546 30.4568C42.5206 29.7683 43.7055 28.7681 44.6134 27.537C45.5213 26.3059 46.1268 24.8784 46.381 23.37C46.6352 21.8616 46.5308 20.3145 46.0765 18.8538C45.6221 17.3932 44.8304 16.0599 43.7654 14.9619C42.7004 13.8638 41.3919 13.0317 39.9458 12.5329C38.4997 12.0341 36.9566 11.8826 35.4411 12.0905C33.9256 12.2985 32.4803 12.8601 31.222 13.73C30.7085 10.9958 29.4447 8.4583 27.5718 6.40108C25.699 4.34387 23.291 2.84802 20.6169 2.08072C17.9428 1.31341 15.108 1.30489 12.4294 2.05611C9.7507 2.80733 7.33373 4.28868 5.44859 6.3346C3.56345 8.38052 2.28442 10.9104 1.75445 13.6414C1.22449 16.3725 1.46448 19.1971 2.44759 21.7996C3.4307 24.4021 5.1182 26.68 7.32148 28.3785C9.52476 30.0771 12.157 31.1295 14.924 31.418" stroke="#DC6B2F" stroke-width="3" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_1337_1487"><rect width="48" height="48" fill="white"></rect></clipPath></defs></symbol> </defs></svg><script type="text/javascript"> /* <![CDATA[ */ gform.initializeOnLoaded( function() { jQuery(document).on('gform_post_render', function(event, formId, currentPage){if(formId == 1) {if(typeof Placeholders != 'undefined'){ Placeholders.enable(); }jQuery( "#gform_1" ).on( 'submit', function( event ) { jQuery( '<input>' ) .attr( 'type', 'hidden' ) .attr( 'name', 'gf_zero_spam_key' ) .attr( 'value', '9yNXNd4LVreiNiLOmvEyry0ajnXRXYvz8uNYnkNBUvP41HeAThDjrfN7tcpLsk04' ) .attr( 'autocomplete', 'new-password' ) .appendTo( jQuery( this ) ); } );} } );jQuery(document).on('gform_post_conditional_logic', function(event, formId, fields, isInit){} ) } ); /* ]]> */ </script> <script type="text/javascript"> /* <![CDATA[ */ gform.initializeOnLoaded( function() {jQuery(document).trigger("gform_pre_post_render", [{ formId: "1", currentPage: "1", abort: function() { this.preventDefault(); } }]); if (event && event.defaultPrevented) { return; } const gformWrapperDiv = document.getElementById( "gform_wrapper_1" ); if ( gformWrapperDiv ) { const visibilitySpan = document.createElement( "span" ); visibilitySpan.id = "gform_visibility_test_1"; gformWrapperDiv.insertAdjacentElement( "afterend", visibilitySpan ); } const visibilityTestDiv = document.getElementById( "gform_visibility_test_1" ); let postRenderFired = false; function triggerPostRender() { if ( postRenderFired ) { return; } postRenderFired = true; jQuery( document ).trigger( 'gform_post_render', [1, 1] ); gform.utils.trigger( { event: 'gform/postRender', native: false, data: { formId: 1, currentPage: 1 } } ); gform.utils.trigger( { event: 'gform/post_render', native: false, data: { formId: 1, currentPage: 1 } } ); if ( visibilityTestDiv ) { visibilityTestDiv.parentNode.removeChild( visibilityTestDiv ); } } function debounce( func, wait, immediate ) { var timeout; return function() { var context = this, args = arguments; var later = function() { timeout = null; if ( !immediate ) func.apply( context, args ); }; var callNow = immediate && !timeout; clearTimeout( timeout ); timeout = setTimeout( later, wait ); if ( callNow ) func.apply( context, args ); }; } const debouncedTriggerPostRender = debounce( function() { triggerPostRender(); }, 200 ); if ( visibilityTestDiv && visibilityTestDiv.offsetParent === null ) { const observer = new MutationObserver( ( mutations ) => { mutations.forEach( ( mutation ) => { if ( mutation.type === 'attributes' && visibilityTestDiv.offsetParent !== null ) { debouncedTriggerPostRender(); observer.disconnect(); } }); }); observer.observe( document.body, { attributes: true, childList: false, subtree: true, attributeFilter: [ 'style', 'class' ], }); } else { triggerPostRender(); } } ); /* ]]> */ </script> <script>window.lazyLoadOptions=[{elements_selector:"img[data-lazy-src],.rocket-lazyload,iframe[data-lazy-src]",data_src:"lazy-src",data_srcset:"lazy-srcset",data_sizes:"lazy-sizes",class_loading:"lazyloading",class_loaded:"lazyloaded",threshold:300,callback_loaded:function(element){if(element.tagName==="IFRAME"&&element.dataset.rocketLazyload=="fitvidscompatible"){if(element.classList.contains("lazyloaded")){if(typeof window.jQuery!="undefined"){if(jQuery.fn.fitVids){jQuery(element).parent().fitVids()}}}}}},{elements_selector:".rocket-lazyload",data_src:"lazy-src",data_srcset:"lazy-srcset",data_sizes:"lazy-sizes",class_loading:"lazyloading",class_loaded:"lazyloaded",threshold:300,}];window.addEventListener('LazyLoad::Initialized',function(e){var lazyLoadInstance=e.detail.instance;if(window.MutationObserver){var observer=new MutationObserver(function(mutations){var image_count=0;var iframe_count=0;var rocketlazy_count=0;mutations.forEach(function(mutation){for(var i=0;i<mutation.addedNodes.length;i++){if(typeof mutation.addedNodes[i].getElementsByTagName!=='function'){continue} if(typeof mutation.addedNodes[i].getElementsByClassName!=='function'){continue} images=mutation.addedNodes[i].getElementsByTagName('img');is_image=mutation.addedNodes[i].tagName=="IMG";iframes=mutation.addedNodes[i].getElementsByTagName('iframe');is_iframe=mutation.addedNodes[i].tagName=="IFRAME";rocket_lazy=mutation.addedNodes[i].getElementsByClassName('rocket-lazyload');image_count+=images.length;iframe_count+=iframes.length;rocketlazy_count+=rocket_lazy.length;if(is_image){image_count+=1} if(is_iframe){iframe_count+=1}}});if(image_count>0||iframe_count>0||rocketlazy_count>0){lazyLoadInstance.update()}});var b=document.getElementsByTagName("body")[0];var config={childList:!0,subtree:!0};observer.observe(b,config)}},!1)</script><script data-no-minify="1" async src="https://www.lastweekinaws.com/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js"></script></body></html>