Simplified cloud deployment for Burp Suite Enterprise Edition
Summary: PortSwigger released version 2021.3.1 of Burp Suite Enterprise Edition with cloud deployment changes for AWS and Azure, following its 2020 move to make the product cloud-friendly. The AWS update replaces a single template with nested CloudFormation templates, drops the requirement for an access key ID and secret key in favor of Role Based Access Control, adds an optional PostgreSQL database, obfuscates credentials in nested templates, and enables application logging at deployment so database migration errors are captured in CloudWatch; on Azure, nested ARM templates now allow separate deployment of infrastructure and application.
Key Takeaway: The release removes long-lived AWS access keys from the deployment template in favor of RBAC and obfuscates credentials in nested templates - the kind of change that alters what a leaked template exposes and who can act on it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026