# AppSec Newsletter 0017

### Links

* \[video\] [FIDO Promises a Life Without Passwords](https://www.youtube.com/watch?v=lRFeuSH9t44)
    
* \[repo\] [Introduction to CodeQL](https://github.com/skills/introduction-to-codeql)
    
* \[artigo\] [Demystifying the AWS shared security responsibility model](https://snyk.io/pt-BR/blog/aws-shared-security-responsibility-model/?utm_campaign=aom_2023&utm_content=snyk-blog-post&utm_medium=social&utm_source=linkedin-organic)
    
* \[tool\] [Bambdas - the next big thing in customization - BurpSuite](https://portswigger.net/burp/pro/features/bambdas?ps_source=twitter&ps_medium=social&ps_campaign=Bambdas_launch_14_11_2023_LI_post_1_promoted&ps)
    
* \[report\] [State of Cloud Security - Datadog](https://www.datadoghq.com/state-of-cloud-security/)
    
* \[artigo\] [Driving Actionable Work From a Threat Model](https://blog.aquia.us/blog/2023-11-13-threatmodcon-recap/)
    
* \[artigo\] [Terraform Security Best Practices](https://sysdig.com/blog/terraform-security-best-practices/)
    
* \[artigo\] [Bypassing API rate limiting using IP rotation in Burp Suite](https://danaepp.com/bypassing-api-rate-limiting-using-ip-rotation-in-burp-suite)
    

### **Siga o Guia de AppSec nas redes!**

* Youtube: [**youtube.com/@GuiadeAppSec**](http://youtube.com/@GuiadeAppSec)
    
* Twitter / X: [**twitter.com/guiadeappsec**](http://youtube.com/@GuiadeAppSec)
    
* Site: [**guiadeappsec.com.br**](http://youtube.com/@GuiadeAppSec)