Amazon Web Services on sentinelchangelog.nethttp://sentinelchangelog.net/tags/amazon-web-services/Recent content in Amazon Web Services on sentinelchangelog.netHugo -- 0.157.0enThu, 28 May 2026 10:37:30 +0000AWS S3 and CrowdStrike Connectors: Non-Analytics Tier Query Support for Basic/Auxiliary Planshttp://sentinelchangelog.net/posts/2026-05-28-pr-14264/Thu, 28 May 2026 10:37:30 +0000http://sentinelchangelog.net/posts/2026-05-28-pr-14264/AWS S3 and CrowdStrike Falcon S3 Data Replicator connectors now support Usage table fallback queries for deployments using Basic/Auxiliary Log Analytics plans.AWS Content Quality Overhaul: Standardized Detection Rules and Improved Entity Mappingshttp://sentinelchangelog.net/posts/2026-05-18-pr-14101/Mon, 18 May 2026 07:30:57 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14101/Comprehensive quality improvements to 61 AWS Analytic Rules and 35 Hunting Queries with standardized naming conventions, normalized MITRE technique mappings, and updated entity field references from legacy AccountCustomEntity to UserIdentityUserName.AWS CloudWatch Connectors: Critical Python 3.13 Compatibility Fixhttp://sentinelchangelog.net/posts/2025-11-13-pr-13104/Thu, 13 Nov 2025 03:41:19 +0000http://sentinelchangelog.net/posts/2025-11-13-pr-13104/Removed problematic CSV handling causing Lambda function failures on Python 3.13 runtime in CloudWatch connectors.AWS S3 Connector: Python 3.11 Runtime Migrationhttp://sentinelchangelog.net/posts/2025-11-12-pr-13115/Wed, 12 Nov 2025 07:51:47 +0000http://sentinelchangelog.net/posts/2025-11-12-pr-13115/AWS S3 Function App connector updated to Python 3.11 runtime following Python 3.9 deprecation.AWS and VMware ESXi: Three New Analytic Rules for Execution, Exfiltration, and Lateral Movementhttp://sentinelchangelog.net/posts/2025-10-09-pr-12696/Thu, 09 Oct 2025 12:07:12 +0000http://sentinelchangelog.net/posts/2025-10-09-pr-12696/Three new Analytic Rules added across AWS CloudTrail and VMware ESXi — detecting EC2 startup script tampering (T1059), anonymous S3 object exfiltration (T1530), and SSH enablement on ESXi hosts (T1021).