Posted on

Amazon Rekognition Introduces Streaming Video Events

Amazon Rekognition Introduces Streaming Video Events

AWS recently announced the general availability of Streaming Video Events, a new feature of Amazon Rekognition to provide real-time alerts on live video streams.

The managed service for image and video analysis can help camera manufacturers and service providers detect objects such as people, animals, and packages in live video streams from connected cameras. Streaming Video Events triggers a notification to the device as soon as the expected object is detected. Prathyusha Cheruku, principal product manager at AWS, explains how it works:

The service starts analyzing the video clip only when a motion event is triggered by the camera. When the desired object is detected, it sends a notification that includes the objects detected, bounding box coordinates, zoomed-in image of the objects detected, and the timestamp. The Amazon Rekognition pre-trained APIs provide high accuracy even in varying lighting conditions, camera angles, and resolutions.

Source: https://aws.amazon.com/rekognition/connected-home

Amazon Rekognition Video relies on Kinesis Video Streams to receive and process the video stream: the AWS::Rekognition::StreamProcessor type creates a stream processor used to detect and recognize faces or to find connected home labels.

To better manage the machine learning inferencing costs, customers can specify the length of the video clips to be processed (between 10 and 120 seconds) and can choose one or more objects such as people, pets, and packages, minimizing false alerts from camera motion events. Cheruku clarifies the benefit of Streaming Video Events over traditional motion detectors:

Many camera manufacturers and security service providers offer home security solutions that include camera doorbells, indoor cameras, outdoor cameras, and value-added notification services to help their users understand what is happening on their property. Cameras with built-in motion detectors are placed at entry or exit points of the home to notify users of any activity in real time, such as “Motion detected in the backyard”. However, motion detectors are noisy, can be set off by innocuous events like wind and rain, creating notification fatigue, and resulting in clunky home automation setup.

According to AWS, service providers can use the feature to create better in-app experiences, for example Alexa announcements such as “a package was detected at the front door”. In a separate article, Mike Ames, Prathyusha Cheruku, and David Robo explain how 3xLOGIC uses the new feature to provide intelligent video analytics on live video streams to monitoring agents.

Streaming Video Events is not the only new feature of Amazon Rekognition. Among the 2022 announcements, Rekognition Video added new languages for text detection, introduced new Face APIs for improved accuracy and improved content moderation.

Video Streaming Events is a feature available in a subset of AWS regions, including Northern Virginia, Ohio, Ireland and Mumbai. The label detection is charged at $0.00817/min, with minute increments. The processing of Kinesis Video Streams is charged separately.

Posted on

Amazon Rekognition Introduces Streaming Video Events

Amazon Rekognition Introduces Streaming Video Events

AWS recently announced the general availability of Streaming Video Events, a new feature of Amazon Rekognition to provide real-time alerts on live video streams.

The managed service for image and video analysis can help camera manufacturers and service providers detect objects such as people, animals, and packages in live video streams from connected cameras. Streaming Video Events triggers a notification to the device as soon as the expected object is detected. Prathyusha Cheruku, principal product manager at AWS, explains how it works:

The service starts analyzing the video clip only when a motion event is triggered by the camera. When the desired object is detected, it sends a notification that includes the objects detected, bounding box coordinates, zoomed-in image of the objects detected, and the timestamp. The Amazon Rekognition pre-trained APIs provide high accuracy even in varying lighting conditions, camera angles, and resolutions.

Source: https://aws.amazon.com/rekognition/connected-home

Amazon Rekognition Video relies on Kinesis Video Streams to receive and process the video stream: the AWS::Rekognition::StreamProcessor type creates a stream processor used to detect and recognize faces or to find connected home labels.

To better manage the machine learning inferencing costs, customers can specify the length of the video clips to be processed (between 10 and 120 seconds) and can choose one or more objects such as people, pets, and packages, minimizing false alerts from camera motion events. Cheruku clarifies the benefit of Streaming Video Events over traditional motion detectors:

Many camera manufacturers and security service providers offer home security solutions that include camera doorbells, indoor cameras, outdoor cameras, and value-added notification services to help their users understand what is happening on their property. Cameras with built-in motion detectors are placed at entry or exit points of the home to notify users of any activity in real time, such as “Motion detected in the backyard”. However, motion detectors are noisy, can be set off by innocuous events like wind and rain, creating notification fatigue, and resulting in clunky home automation setup.

According to AWS, service providers can use the feature to create better in-app experiences, for example Alexa announcements such as “a package was detected at the front door”. In a separate article, Mike Ames, Prathyusha Cheruku, and David Robo explain how 3xLOGIC uses the new feature to provide intelligent video analytics on live video streams to monitoring agents.

Streaming Video Events is not the only new feature of Amazon Rekognition. Among the 2022 announcements, Rekognition Video added new languages for text detection, introduced new Face APIs for improved accuracy and improved content moderation.

Video Streaming Events is a feature available in a subset of AWS regions, including Northern Virginia, Ohio, Ireland and Mumbai. The label detection is charged at $0.00817/min, with minute increments. The processing of Kinesis Video Streams is charged separately.

Posted on

Ermetic launches open source tool that analyzes AWS CloudTrail AccessDenied events – Help Net Security

Ermetic launches open source tool that analyzes AWS CloudTrail AccessDenied events - Help Net Security

Ermetic released a free open source tool for managing AccessDenied Events in Amazon Web Services (AWS) that automates time consuming cloud access policy troubleshooting and correction.

Ermetic Access Undenied on AWS

Access Undenied on AWS analyzes AWS CloudTrail AccessDenied events, scans the environment to identify and explain the reasons for the events, and offers actionable least-privilege remediation suggestions.

The project is led by Noam Daham, research lead at Ermetic.

“Even if you know the policy type causing ‘access denied’, which isn’t always the case, you still need to find the policy and the statement inside the policy causing the denial, and replace it with a least-privilege alternative,” Noam Dahan. “Basically, you give the Access Undenied on AWS tool a CloudTrail event with an “Access Denied” outcome, and it will tell you how to fix it!”

Access Undenied on AWS addresses some of the peskiest Access Denied challenges encountered by DevOps and security teams on a daily basis, including:

  • Some AccessDenied messages still do not provide details. Among the services for which some, or even many, messages are lacking in detail are: S3, IAM, STS, CloudWatch, EFS, DynamoDB, Redshift, Opensearch and ACM.
  • When the reason for AccessDenied is an explicit deny, users can have difficulty tracking down the specific policy and statement that generated the explicit deny. Specifically, when the reason is an explicit deny in a service control policy (SCP), it is difficult to find and assess every single policy in the organization that applies to the account.
  • Meanwhile, when the problem is a missing allow statement, it can still be challenging to create the least-privilege policy that allows the desired access without granting excessive permissions.

Access Undenied on AWS is available now and supports policies for many resources and some of the most common condition keys. This open source project is also soliciting input from the community through contributions of new issues in the repository.