--- title: "Suddenly Nobody Wants to Build Heroku" id: "12556" type: "podcast" slug: "suddenly-nobody-wants-to-build-heroku" published_at: "2022-05-12T10:00:00+00:00" modified_at: "2026-08-20T05:30:36+00:00" url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/suddenly-nobody-wants-to-build-heroku/" markdown_url: "https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/suddenly-nobody-wants-to-build-heroku.md" taxonomy_shows: - "Last Week In AWS Podcast" --- About the Author Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure. [https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305](https://podcasts.apple.com/us/podcast/aws-morning-brief/id1466344305) [https://overcast.fm/itunes1466344305/aws-morning-brief](https://overcast.fm/itunes1466344305/aws-morning-brief) [https://pca.st/AKs0](https://pca.st/AKs0) [https://podcastaddict.com/podcast/2382583](https://podcastaddict.com/podcast/2382583) [https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU](https://open.spotify.com/show/3A04JNrNAcZMvn8cvDWpWU) [https://feeds.transistor.fm/aws-morning-brief](https://feeds.transistor.fm/aws-morning-brief) ## Episode Summary Last week in security news: Heroku is all over the security news headlines, a charity has leaked some sensitive images, Mandoogle takes a long look at AWS, Azure puts the “Squeal” in “PostgreSQL,” and more! ## Episode Show Notes & Transcript **Links:** - [S3 Bucket Negligence Award](https://www.hackread.com/breast-cancer-charity-exposed-sensitive-images-patients/) - Mandoogle on how AWS's instance metadata service [can be abused by attackers](https://www.mandiant.com/resources/cloud-metadata-abuse-unc2903) - [Heroku](https://www.theregister.com/2022/05/04/heroku_security_communication_dubbed_complete/?td=rt-3a) apparently had its entire database breached last week - Wiz Research discovered [a new vulnerability](https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/) in Azure’s PostgreSQL Flexible Server service. - [AWS deleted packages](https://www.whitesourcesoftware.com/resources/blog/aws-targeted-by-a-package-backfill-attack/) they'd pushed to public repositories - A guide to [Cloud Security Orienteering](https://tldrsec.com/blog/cloud-security-orienteering/) View Full Transcript Hide Full Transcript ## You might also like [More Podcast Episodes](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/) ### [The Cost of Prime Day](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) Last Week In AWS Podcast 10.12.2026 5 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-cost-of-prime-day/) ### [Your Database Is a Data Lake Now, Apparently](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) Last Week In AWS Podcast 10.05.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/your-database-is-a-data-lake-now-apparently/) ### [The Week AWS Was Wrong, Not Broken](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/) Last Week In AWS Podcast 09.28.2026 6 Minutes [Listen Now](https://www.lastweekinaws.com/podcast/last-week-in-aws-podcast/the-week-aws-was-wrong-not-broken/)