fwd:cloudsec 2026

Paying More for Worse Security: An AWS Marketplace Horror Story
2026-06-02 , Room 2

What if I told you there's a class of product on the AWS Marketplace that charges up to 18x the underlying infrastructure cost, makes your instances less secure than the free alternative, carries a "Deployed on AWS" trust badge, and has been operating for seven years despite violating AWS's own published seller policies?

This talk presents original technical research comparing what you're sold versus what you get, names the players, quantifies the financial impact, and asks the uncomfortable question: what exactly is AWS curating?

Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure.