text:
Release Notes¶
Fugue ensures that cloud infrastructure stays in continuous compliance with enterprise security policies.
Rule Waivers¶
Rule waivers provide exceptions on rule violations that apply to a specific resource. Waived rules no longer count as "Failed" in compliance calculations.
You can view waived resources on the Waivers page.
Refer to Rule Waivers for more information about working with waivers.
Rule Severity on the Compliance by Resource Page¶
Rule severity establishes the level of risk posed by a misconfiguration to your cloud security posture. Severity falls into the following categories: critical, high, medium, or low. Adding rule severity to the Compliance by Resource page makes it easier for you to prioritize fixing the resources that have a higher severity. Refer to Compliance for more information on rule severity.
Two New RBAC Policies¶
Fugue added two new RBAC policies – Contributor and Auditor. The Contributor policy grants all the permissions in the Editor policy, as well as allows users to waive rules, create custom rules, and create environments. The Auditor policy grants all the permissions in the Read Only policy, as well as allows users to run a scan and create notifications. For more information on working with RBAC, refer to Role-Based Access Control (RBAC).
Bug Fixes¶
The rule that checks the CloudFront viewer protocol policy was updated to support redirect-to-https in addition to https-only. Refer to the remediation steps for more information.
Ability to export compliance data via the UI¶
Fugue now supports the capability to export compliance data for multiple environments at the same time for AWS accounts and Azure subscription levels. On the Environment Landing page, clicking on the Export Data button allows you to download the Rule Results with Controls data as a CSV or Excel (.xlsx). Refer to Export Data for more information.
Extended Azure Service Coverage Beta¶
Fugue launched support for resources in the following Azure services in beta:
If you are interested in gaining access to these Azure beta resources, please send an email to firstname.lastname@example.com.
For a full list of supported Azure types, see Service Coverage - Azure.
Visualizer Updates¶
Updates to the visualizer include:
The region name displays when the visualizer is zoomed out.
Expanded support for Azure beta service coverage:
Azure.Automation.Account (AUTO)
Azure.Cdn.Profile (CDN)
Azure.Compute.SharedImageGallery (GALRY)
Azure.Container.Registry (RGST)
Azure.Databricks.Workspace (DATAB)
Azure.MySQL.Server (MYSQL)
Azure.Network.ApplicationGateway (AGW)
Azure.Network.DNSZone (DNS)
Azure.Network.Firewall (FW)
Azure.Network.LoadBalancer (LB)
Azure.PostgreSQL.Server (PGSQL)
Made an UX improvement — clicking the compliance icon redirects you to the compliance section in the panel.
Refer to Visualizer for more information.
Updates to Compliance Rules¶
The following rules were added to the CIS Controls 7.1., ISO 27001, SOC 2, NIST 800-53, and HIPAA Compliance Families:
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 11215 (Memcached SSL)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 135 (MSSQL Debugger)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 137 (NetBIOS Name Service)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 138 (NetBios Datagram Service)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 139 (NetBios Session Service)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 1433 (MSSQL Server)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 1434 (MSSQL Admin)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 2382 (SQL Server Analysis Services browser)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 2383 (SQL Server Analysis Services)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 2484 (Oracle DB SSL)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 3020 (CIFS / SMB)
The following Azure rules were added to the CIS Controls 7.1., ISO 27001, SOC 2, NIST 800-53, HIPAA, GDPR, and PCI Compliance Families:
MySQL Database server firewall rules should not permit start and end IP addresses to be 0.0.0.0
PostgreSQL Database server firewall rules should not permit start and end IP addresses to be 0.0.0.0
Ensure Azure Application Gateway Web application firewall (WAF) is enabled
MySQL Database server 'enforce SSL connection' should be enabled
PostgreSQL Database server 'enforce SSL connection' should be enabled
Updated AWS CIS benchmark 2.1 rule to reflect that it needs to check that there is at least one CloudTrail with multi-region enabled that has logging on and management events set to true.
Visualizer Updates¶
Added compliance details within the resource details panel.
Expanded AWS Service Coverage¶
Fugue launched support for resources in the following AWS services:
AWS Private Certificate Authority
Directory Service
Elastic File System
Kinesis Data Firehose
Systems Manager (SSM)
To enable the services, update the Fugue IAM role to include the required permissions. Scan permissions are below. Enforce permissions for all services are here.
Bug Fixes¶
Updated IAM permissions required for AWS config to include reading tags.
Fixed security group rule message to correctly include the open port on the Compliance by Control section.
Support for CIS Controls 7.1¶
Fugue has added support for the CIS Controls 7.1 compliance family. CIS Controls are a set of actions for cyber defense based on common attack patterns, created by a group of experts such as NSA Red and Blue teams, the US Department of Energy nuclear energy labs, and law enforcement organizations. Refer to Compliance for more information on how to get started using the CIS Control compliance family.
Visualizer Updates¶
Updates include:
Added support for AWS Redshift and AWS EFS
Exporting a diagram of the visualizer now lists AWS regions
Added resource details for stubbed/implicit resources
Updates to Compliance Terminology¶
Fugue has updated terminology in our web user interface to provide more clarity on compliance across resources, rules, and controls.
Changes include:
Adjusting terminology to "controls" (from "rules"), where the product is referring to compliance controls.
Updating control evaluations and resource evaluations to have compliant/noncompliant values, as opposed to pass/fail.
Terminology definitions and explanations of how compliance evaluations are calculated are enumerated on the Compliance page.
Scoping Environments to Multiple Regions¶
You can now create an AWS environment that spans multiple regions, as shown below. For more information on creating an environment that scans multiple regions, refer to Setup - AWS & AWS GovCloud.
Note: You cannot add multiple regions to existing environments. You need to create new environments through the API or UI. Once you have created the new environments, you can update their selected regions through the API. Refer to the AWS User Guide for more information.
You can filter by region on the Compliance by Resource page, as shown below.
When an environment contains more than one region, horizontal brackets labeled by region separate the infrastructure. Global resources, such as the CloudFront distributions below, are labeled global. Refer to Visualizer for more information.
Responsive Registration Page and More¶
The Registration and Forgot Password pages are now responsive, as shown below.
Visualizer Updates¶
Compliance view updates
New References portion in resource details panel
The entire VPC or VNet is no longer shaded all red when it has compliance violations, as shown below. Refer to Visualizing Resource Compliance State for more information.
When you select a resource to view the resource details, a References panel is added, which lists other resources related to the currently selected resource. For example, if you select a VPC, it lists the associated security groups, subnets, networks, and internet gateways. You can click on a resource listed in the Reference section and it redirects you to that resource, as shown below. Refer to Viewing Resource Details for more information.
Role Based Access Control (RBAC)¶
Fugue added a new RBAC policy – Editor. The Editor policy grants all the permissions in the Read Only policy and some of the permissions in the Admin policy. Editors cannot create or delete environments, configure custom rules, manage users, or configure API clients. They can, however, take actions such as changing environment settings, running scans, and configuring notifications and reports. For more information on working with RBAC, refer to Role-Based Access Control.
Cloud Resource Visualization¶
Cloud resource visualization now supports visualizing VPC gateway endpoints (refer to our blog post on Cloud Network Security 101: AWS VPC Endpoints for more information on security for VPC endpoints). VPC gateway endpoints (ENDPT) are shown as a line between a VPC and all S3 buckets or all DDB tables in the same region, as shown below. Refer to Visualizer for more information on working with cloud resource visualization.
UX Improvements¶
In the environment search field, you can enter spaces when searching for an environment, as shown below:
Rule Engine Upgrade¶
All rules evaluated by Fugue now use the open source Fugue Regot Toolkit, also known as Fregot. This yields performance improvements that will increase scan speeds for some large environments. Check out Fregot on GitHub.
New IAM Permissions Required¶
Due to internal upgrades, additional permissions are needed to scan or enforce any of the following AWS services:
Step Functions (SFN)
If your environments are configured to scan or enforce any of these services, you should update your IAM role policy to include these read-only permissions for the services you've enabled:
If these permissions are not included, scans will not fail; however, you may see an Incomplete Scan Results message.
For instructions, see How To: Update the Fugue IAM Role.
For more information about how Fugue handles IAM permissions, see IAM Policy Permissions.
Compliance Event Notifications¶
Previously, Fugue generated notifications when the following events occurred:
Existing resource transitions from compliant to noncompliant, or vice versa
Newly added resource is noncompliant
Existing resource that was missing data transitions to compliant, or vice versa
Existing resource that was missing data transitions to noncompliant, or vice versa
We are changing notifications logic to only summarize events where:
Existing resource transitions from compliant to noncompliant, or vice versa
Newly added resource is noncompliant
Bug Fixes¶
Fixed scan failure when no resources were detected in an environment and drift detection was enabled.
Improved the rules that check for inappropriate port 80 and 5800 ingress to work with ELBv2 and to describe what additional resources are relevant to the failure, if any.
The visualizer now allows selection of VPCs and auto-scaling groups (ASGs) in order to view the resource configuration details for those types.
Fugue now supports indicating a resource is transient in nature. When a resource is tagged with the key
fugue:transientand value
truein AWS or Azure, drift events are not generated for changes to that resource. This is useful in situations where resources are created and destroyed dynamically.
On-Demand Scan via the UI¶
Previously, you could only kick off an on-demand scan via the API. Now, Fugue enables you to use the UI to initiate on-demand scans. From the Actions drop-down, select Start New Scan within an environment to start a scan, as shown below.
Cloud Resource Visualization – View Resource Details¶
You can view configuration details about your resources within the cloud resource visualization. To view the resource details, zoom in and click on a resource, as shown below. See Visualizer for more information.
UX Improvements to Settings and Setting a Baseline¶
The Establish Baseline button and Settings are under the new Actions button, as shown below.
Bug Fixes¶
A bug has been resolved where the custom rule family would still display within an environment even after you delete all custom rules. Now if you delete all custom rules, the custom rule family no longer displays.
Removed Obsolete VPC Flow Logs Rule¶
The rules for confirming VPC flow logs are correctly enabled have been updated. Overall compliance results will remain unchanged; however, you may see compliance events relating to this change to the underlying rules.
Cloud Resource Visualization – Collections & Additional Resource Support¶
An improvement has been made to cloud resource visualization to illustrate a resource that contains other resources, and this is known as a collection. For example, AWS auto scaling groups containing EC2 instances, and ECS services containing tasks, are rendered as collections. A collection is depicted as a square with a thick border containing zero or more nodes. Collections may also be expanded or collapsed to view individual nodes.
Additionally, the cloud resource visualizer now supports visualizing AWS.ECS.Task resources, as well as AWS.EC2.Instance resources belonging to auto scaling groups.
Rule Updates¶
The CIS 1-16 rule was updated to be more comprehensive by flagging users with inline policies.
Additional AWS Resources - Beta¶
Fugue launched support for resources in the following AWS services:
Systems Manager
Directory Service
Kinesis Data Firehose
Elastic File System
If you are interested in gaining access to these beta resources, please email firstname.lastname@example.com.
Bug Fixes¶
The release also includes fixes including:
Ability to query by the "custom" family when retrieving compliance using the API
Optimize a Fugue Best Practices rule that ran slowly in some environments
Allow values greater than or equal to 24 for the CIS 1-10 password reuse control
Fix drift detection with some Cognito User Pool Clients, KMS grants, and Load Balancer Listener Rules
Cloud Resource Visualization – Keyboard Shortcuts¶
The visualizer supports keyboard shortcuts. These shortcuts include:
Arrow Keys: Pan around the visualizer.
Plus (Equals) / Minus (Underscore) Keys: Zoom in and out.
Period Key: Open/close the sidebar.
Spacebar (Double Tap): Recenter the visualizer.
Multi-Factor Authentication Support (MFA)¶
Fugue supports multi-factor authentication (MFA). After you enable MFA, the next time you log in, you are prompted to scan a QR code using an authenticator app, as shown below. When you log into Fugue anytime subsequently, you are prompted to enter a one-time code after authenticating:
Cloud Resource Visualization - Export Functionality¶
Improvements have been made to the export functionality for cloud resource visualization. When you export a .PNG of resources, the environment name, date/time of the scan, and account ID for AWS or subscription ID for Azure are included, as shown below. This makes it easier to identify the environment that you are looking at.
Additionally, the image filename includes the name of the environment, as well as the date/time of the scan.
Cloud Resource Visualization - VPC Peering¶
Cloud resource visualization now shows VPC peering, as shown below. This allows you to see which VPCs have peering relationships.
Search By Environment¶
The All Environments landing page now allows you to search by environment name or ID:
Rule Remediation Steps in Documentation¶
The online documentation includes rule remediation steps for many common compliance violations. Follow the steps to manually bring resources back into compliance using the AWS Management Console, AWS CLI, Azure Portal, or Azure CLI. For the list of rule remediation steps, refer here.
Exporting Visualizer Diagrams and Customizing Your Visualizer View¶
You can export an image of your Fugue visualized environment, as well as customize what information displays within the visualizer, such as compliance information, and collapse/expand all groups. See Exporting a Diagram.
Ability to Delete User Groups¶
You can delete user groups, as shown below. See How to Delete Groups.
Fugue Developer and Fugue Enterprise¶
Fugue is now available in two plans: Developer and Enterprise. For more information, see the documentation in Fugue Plans.
New Account Overview Page¶
The Account Overview page lists your plan type, which is Enterprise for existing customers. Refer to the online documentation for more information.
Single Sign-On (Beta)¶
Fugue is excited to announce support for single sign-on (SSO) in beta. SSO allows users to provision and deprovision users from an existing identity provider (IdP).
The Fugue login page is changing, as shown below. Non-SSO users enter their username and password to log into Fugue:
Once SSO is enabled on your organization, users enter their email address and log into Fugue using your IdP. If you are interested in gaining access to SSO beta, please contact email@example.com.
Additional Compliance Family Support for Azure¶
Fugue now supports the following compliance families for Azure: ISO 27001, SOC 2, HIPAA, GDPR, NIST SP 800-53, and PCI-DSS.
Fugue Best Practices¶
Fugue released a set of Best Practices checks to complement existing controls to detect critical misconfigurations that can be exploited.
Some rules that are part of the Fugue Best Practices compliance family include:
IAM policies should not allow broad list actions on S3 buckets
IAM role trust policies should not allow all principals to assume the role
IAM roles attached to instance profiles should not allow broad list actions on S3 buckets
S3 bucket policies should not allow all actions for all principals
S3 bucket policies should not allow list actions for all principals
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 9200 (Elasticsearch)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 9300 (Elasticsearch)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 2379 (etcd)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 27017 (MongoDB)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 27018 (MongoDB)
VPC security group rules should not permit ingress from '0.0.0.0/0' to TCP port 27019 (MongoDB)
Expanded AWS Service Coverage¶
Fugue now supports the following AWS services:
API Gateway
Guard Duty
Step Functions (SFN)
Secrets Manager
S3: Attributes to block public access
To start scanning for these newly supported services, you should either:
Option 1: Launch a new CloudFormation stack that contains the SecurityAudit read-only policy and add the following resources listed below as part of your inline policy:
"Version": "2012-10-17",
"Statement": [
"Action": [
"Resource": "*",
"Effect": "Allow",
"Sid": "0"
Option 2: Update your existing AWS IAM policy to include the SecurityAudit read-only policy if it is already not attached and add the following resources listed below as part of your inline policy:
Refer to AWS IAM Permissions and Add an Inline Policy for more information.
Updates to the Visualizer¶
Added the ability to pinch on your trackpad to zoom in and out on the visualizer.
Custom Rules¶
Users can now write custom rules to extend Fugue functionality to specific enterprise requirements, with CRUD actions and syntax/testing available via UI, API, and CLI.
Custom rules are written with Open Policy Agent's Rego query language. OPA is a policy-as-code framework and CNCF open source project commonly used for policy on Kubernetes and other cloud technologies.
Collapsed nodes that have a mix of compliant and non compliant resources display as stacks with red and black coloring, as highlighted below:
Visualizer updates¶
Visualizer UX improvements — Added an expand icon and number of resources that exist within a collapsed node. For example, if you have 13 S3 buckets collapsed in a node, the number 13 is shown, as shown below. Clicking the icon expands the collapsed S3 buckets.
Clicking the (warning) icon displays the compliance violations for a resource.
Clicking on a subnet or security group within a node or on the list on the side, highlights all the places within your infrastructure where the security group or subnet resides, as shown below.
Displaying the compliance violations for subnets and security groups.
Performance improvements
IAM role generation updates¶
Updates to IAM role generation for read-only permissions, which allows Fugue to scan and detect drift for your environments. When you create a new IAM role utilizing the Fugue UI, the Security Audit read-only policy is attached to the role along with inline policies to cover other permissions that are not covered by the Security Audit policy. If you have existing environments, you can continue to use your existing IAM role as is or choose to attach the SecurityAudit policy and remove the inline policies covered by the Security Audit policy.
Updates to the navigation within the Environment Details page— the visualizer is located on its own page, Environment Settings have been moved to the top level navigation, and the Drift Events page is renamed to Events.
Updates to the user interface. The Organizations tab is now located at the same level as Environments and updates were made to the environment cards, as shown below. Additionally, on the Environment Landing page, selecting View in Visualizer redirects users to the Visualizer page.
Baseline enforcement is now supported for Azure.
Displaying compliance errors within the visualizer on VPC.
The /resources API endpoint now requires authorization. Previously, users were able to hit this endpoint without authenticating with Fugue. To use the /resources endpoint authentication is now required.
Docs site: The Fugue Documentation site has been redesigned, moved to https://docs.fugue.co, and features the following new content:
The visualizer includes security group and subnet labeling within VPCs. This makes it easier to identify which security groups and subnets are associated with a particular VPC, as shown below. To learn more about the visualizer, refer here.
The visualizer "full screen" fills the browser window, rather than the entire screen.
The visualizer supports Azure, as shown below.
Azure notifications are available to alert on compliance, drift, and baseline enforcement events. To get started using notifications, refer here.
Fixed an issue with the CIS AWS 2-5 rule: "Ensure AWS Config is Enabled in all Regions."
Visualization: Cloud resource visualization displays resources that are not compliant within an environment, as shown below:
Expanded rule coverage:
IAM root account should not be used. Corresponds to the following compliance controls:
Ensure multi-factor authentication (MFA) is enabled for all IAM users that have a console password. Corresponds to the following compliance control:
Ensure credentials unused for 90 days or greater are disabled. Corresponds to the following compliance controls:
Ensure access keys are rotated every 90 days or less. Corresponds to the following compliance controls:
NIST-800-53_IA-4d;NIST-800-53_IA-5 (1)(d)
Ensure no root account access key exists. Corresponds to the following compliance controls:
Ensure hardware MFA is enabled for the "root" account. Corresponds to the following compliance controls:
Ensure MFA is enabled for the "root" account. Corresponds to the following compliance controls:
Expanded service coverage: Fugue now supports the following resource:
IAM.CredentialReport. To start scanning for
IAM.CredentialReport, update your Fugue IAM role to include:
Refer to the Service Coverage page to see the full list of supported service coverage. If you have any questions, reach out to email@example.com.
Improvements to the Compliance by Resource modal: The compliance controls that fail are displayed under the description of the rule, as shown below:
Support for Azure: Cloud service coverage is being expanded to include Azure in addition to AWS. This makes Fugue a multi-cloud solution. For setup instructions, see Setup - Azure. For general information, see Azure.
Notifications: Fugue offers notifications for compliance, drift, and baseline enforcement events within environments, allowing you to be alerted to infrastructure changes detected during a scan without having to log into Fugue.
Within Organization Settings, you may add notifications and choose to be notified by email, AWS SNS topic, or both. By using the SNS integration, you can connect Fugue notifications to third-party tools such as Slack.
Full screen visualizer: You can expand cloud resource visualization to a full screen view. This allows you to better interact with and view your infrastructure. Clicking the
fbutton, as highlighted below, opens the full screen visualization experience.
Here's an example of full screen mode:
Updates to the "Create Environment" workflow: The "create environment" workflow has been updated as follows. In the first step, you enter your environment's name and select the cloud service provider:
In the second step, you select the region and resource types, and then enter the AWS IAM role ARN:
In the third step, you select the compliance libraries you want Fugue to use to assess your infrastructure:
In the fourth step, you can view a summary of the environment name, region, AWS IAM role ARN, the selected compliance standards, and the selected resource types to scan and enforce, as shown below:
For full setup instructions, see Setup.
Fugue Risk Manager is now simply Fugue.
AWS GovCloud regions: Fugue now supports AWS GovCloud regions via the Fugue application and API. All existing functionality for other commercial AWS regions is supported for AWS GovCloud regions including:
Assess AWS GovCloud regions for compliance violations against the following compliance standards: CIS AWS, NIST SP 800-53, PCI-DSS, HIPAA, GDPR, SOC 2, and ISO 27001.
Enable configuration drift detection and optionally, enforcement on baselines.
Cloud resource visualization: Fugue's new cloud resource visualization feature creates detailed, interactive diagrams of your cloud resources. This allows you to quickly visualize cloud infrastructure configurations and relationships without having to create diagrams by hand, which can be a painstaking and error-prone process. Diagrams are generated and updated automatically. You can zoom in or out to more closely inspect the resources:
Improved compliance control messages: The compliance control message contains additional information about what caused a resource to be noncompliant and violate the control, as shown below.
Added service coverage support for
ElastiCache.ParameterGroup, and
To scan for ElastiCache clusters, parameter groups, and replication groups, update your Fugue IAM role to include the following permissions:
ElastiCache.Cluster resources belong to an
ElastiCache.ReplicationGroup, the clusters themselves are not scanned but the replication group is. The replication group manages the clusters and contains all of the relevant settings, so there is no need to scan the clusters individually.
In contrast, ElastiCache clusters that do not belong to a replication group are scanned individually.
Refer to the Service Coverage page to see the full list of supported services. If you have any questions, reach out to email@example.com.
Created the Fugue API Reference, which contains Swagger documentation and examples.
Added service coverage support for AWS S3 bucket ACLs. The new functionality will provide more protection for S3 buckets.
Users who have enabled scanning on S3 buckets must update their Fugue IAM role to include the following permission, or scans involving S3 buckets will be incomplete:
If you have any questions, reach out to firstname.lastname@example.com.
Added service coverage support for SNS subscriptions and CloudWatch Metric Alarms.
To scan for SNS subscriptions and CloudWatch Metric Alarms, update your Fugue IAM role to include the following permissions:
Refer to the Service Coverage page to see the full list of supported services. If you have any questions, reach out to firstname.lastname@example.com.
Added support for SOC 2 and ISO 27001 compliance standards.
SOC 2 governance applies to organizations storing customer data in the cloud.
ISO 27001 is a specification for an information security management system that includes controls for information risk management processes.
Bug Fixes and Improvements¶
Fugue automatically logs users out of the application every 24 hoursinstead of once a month.
Other bug fixes and improvements.
Improved API Clients table to display the client secret age and last activity of the API client. In the previously released API Clients table, the client secret's age and the last activity of the client secret did not display within the table. It is important to know your client secret's age so you can properly rotate it according to your organization's security policy. Additionally, displaying the last activity for the client secret allows you to revoke and/or delete client secrets that are no longer in use. For more information, see the API page.
Improved page load times of the environment list and environment detail pages
Improved link to "Edit IAM Role in AWS Console" to point directly to list of roles in the console
Bug Fixes¶
Fixed an issue where the list compliance results by rule API endpoint would return no results when no compliance family was selected
Various scan fixes
The API has 4 main areas of functionality:
Create, update, and delete environments
Run scans on demand or on a specific schedule
Retrieve scan results by compliance rule or resource type
Retrieve drift and enforcement events
For more information, refer to the API user guide and the API documentation.
Additional compliance checks for PCI and HIPAA have been added.
The new PCI compliance rules include:
AWS Glacier requires that AWS S3 bucket policy only accepts HTTPS. This applies to PCI_DSS_4.1.
Point in time recovery is enabled on the AWS Dynamo database. This applies to PCI_DSS_3.1.
Users specified backup retention periods for AWS RDS. This applies to PCI_DSS_3.1.
Any security group for a private subnet does not have CIDR ingress from 0.0.0.0/0. This applies to PCI_1.2.1 and PCI_1.3.1.
The new HIPAA compliance rules include:
AWS Glacier requires that AWS S3 bucket policy only accepts HTTPS.
Enable transport encryption for AWS ElastiCache.
AWS service coverage has been expanded to support SNS Topics, WAF Web ACLs, and CloudFront Distributions. If you want to scan for these newly released services, you will want to update your IAM Role to include:
Refer to the Service Coverage page to see the full list of supported service coverage. If you have any questions, reach out to firstname.lastname@example.com.
The compliance report email allows you to view the compliance state of your environment without having to log into Fugue.
Additional Payment Card Industry (PCI) rules have been added within Fugue. These rules include:
PCI DSS 8.1.4, which requires that users have a password that contains at least 7 characters and includes both alphabetic and numeric characters.
PCI DSS 8.2.5, which requires users do not submit a new password/phrase that is the same as any of the last four passwords/phrases they used.
PCI DSS 4.1, which requires that AWS CloudWatch metric filter alarms is via SQS and not via HTTPS.
PCI DSS 8.2.4, which requires users to change their passwords/phrases at least once every 90 days.
PCI DSS 10.5.3 and PCI DSS 10.7, which requires that versioning and lifecycle policy be enabled for AWS S3 buckets.
Bug Fixes¶
Addressed an issue where clicking outside a modal window failed to close it.
Addressed an issue where selecting Edit Environment Setting on the Environment landing page failed to redirect users to the Edit Environment Settings modal window.
Addressed an issue where selecting a resource that was not included in your IAM role ARN would cause the scan to fail. Now, the scan completes and the resources not included in your role ARN are listed in a message.
The multi-user feature allows users to invite other parties in their organization to access and collaborate on the same Fugue environments.
PCI DSS rules are now supported within Fugue.
Added service coverage support for CloudTrail, Config, SQS, VPC, and KMS.
Users can select the specific resources that they want to manage within Fugue. Compliance scanning, drift detection, and baseline enforcement only occur on the selected resources. For details, see Setup.
Rules that pertain to resources that Fugue isn't permitted to scan now display with an "Unknown" label.
Service coverage has been expanded to support RDS.
Users can see when their next scan is scheduled to start.
Scan cloud environments for risks and generate risk reports¶
Use Fugue to scan your cloud environment and produce comprehensive reports identifying compliance violations in your cloud infrastructure. Use this report in conjunction with an auditor to address these violations. Once all violations are addressed, the security teams can demonstrate Fugue's functionality to both the CISO and the auditor. Fugue supports scanning and identifying compliance violations for the following compliance standards or benchmarks: CIS, NIST, HIPAA, and GDPR. The report also provides a snapshot of your infrastructure at any point in time.
Scan cloud environments for drift based on the declared baseline¶
Once you work with an auditor to address the compliance violations in your cloud infrastructure, you can establish a baseline. This lets Fugue know that this is the declared baseline and Fugue scans the environment for any changes to this declared baseline. If a change is detected, which is also known as drift, Fugue notifies you via the Drift Detection page.This allows you to proactively review and fix drift in your cloud environment. Use this drift report to show your CISO, security team, and auditor that Fugue detected the drift and enabled you to manually correct the issue. To learn more about enabling drift detection with Fugue, refer to details in Configuration.
Enable baseline enforcement on resources in cloud environments¶
Once you establish a baseline, you can enable self-healing, which is known as baseline enforcement within Fugue. When baseline enforcement is enabled, Fugue scans your environment and if any resources in your baseline are modified, they are reverted back to the baseline state. You can use the Drift report to show your CISO, security team, and auditor that drift occurred, and it was reverted back to the baseline state. To learn more about enabling baseline enforcement, refer to details in Configuration.


text:
Rolex Oyster Ref.6424 c.1966
Opening this update is one of the largest of the vintage, time only, Rolex Oyster models. The handsome silvered dial has multi-faceted tapered indexes with broader, twin tapered indexes at 3, 6 and 9 o'clock. Reference 6424 is similarly styled to the Ref. 6426, however the 6424 is considerably rarer and has a number of distinctive features. First, in size terms, not only does the 6424 have a large case diameter of 36mm, but the overall length (including lugs) measures 43mm, this compares to the 41.5mm of the 6426 reference. Unlike the ref. 6426, the 6424's lugs are un-pierced to the outside of the case, leaving an unbroken sweep to the polished case sides and are designed to take a 20mm wide strap or bracelet. This example of the reference is fitted with a Rolex model 78360 heavy gauge Oyster link bracelet with adjustable folding clasp. As part of this watch's service and overhaul it has been pressure tested for water resistance for depths up to 100 metres. Prior to the servicing we have recently had carried out on this watch, the watch was overhauled by Rolex in 2012 and is accompanied by the numbered service card of that date.
Omega Seamaster Ref.165.010 c.1967
A really great looking Seamster model, this wristwatch has a bold design. The satin finished dial has a crosshair motif which quarters the dial, whilst the applied indexes and dauphine hands are heightened with black inserts. The stainless steel case retains good definition with a polished chamfered bezel and satin finished case sides which terminate in broad flowing lugs with polished upper surfaces. To the centre of the screw-down case back a medallion contains the Seahorse logo of the Seamaster line. The watch retains its original signed crown and Omega crystal.
Cyma Retailed by Goldsmiths & Silversmiths c.1940
This pocket watch has a fabulous three-tone dial which comprises a high sheen centre, matt finished chapter ring carrying the black hour indexes and finally an outer dark grey ring which is graduated for minutes – this final element is also present in the graduations for the subsidiary seconds dial. The dress-style case with its multi-faceted bow is typical of the period. Made by Cyma, the watch was supplied to the Goldsmiths & Silversmiths Company. Established in 1880 at 112 Regent Street, London, the Goldsmiths and Silversmiths Company was later amalgamated with Garrard & Co in 1952.
Omega Ref.720 c.1952
This is a classic example of the Omega Ref. 720, with a handsome silvered dial that is set with applied Arabic and faceted triangular numerals. Omega's Ref. 720 is an archetypal vintage wristwatch model with a brilliantly proportioned case featuring a chamfered bezel, gently down-turned lugs and flat, snap-on back. The model was available with a variety of different dial designs and the steel case was made for Omega by the English based Dennison case company. The manually wound movement is an Omega calibre 266 which forms part of the famous and highly successful '30' series, one of the most highly respected vintage watch movements.
Omega Ref.166.041 c.1968
Reference 166.041 was first introduced by Omega in 1968. The model incorporates the excellent automatic Omega calibre 565 movement with 24 jewels and precision regulation. Calibre 565 includes provision for fast date adjustment via a secondary crown setting. This example of the model features a satin finished, silvered dial with applied indexes, each centred with black inserts. The stainless steel two-piece case has satin finished surfaces and a screw-down case back.
Record 9ct gold hallmarked 1953
Vintage watches by Record are popular for their classic designs and good quality movements. Founded in Tramelan, Switzerland, in 1903, The Record Watch Company moved its headquarters to Geneva in 1924. In 1961, a majority interest in the Record Watch Company was purchased by Longines. This 9ct gold wristwatch is in lovely original condition, the silvered dial has an excellent lustre and is handsomely arranged with raised, gilded, Arabic numerals and an engine-turned subsidiary seconds. The 9ct gold case has slim but substantial down-turned lugs and a smooth chamfered bezel.
Watch Straps
We've recently increased our range of watch straps. The straps shown above are wonderfully smooth and supple with silk matt sheen to their upper surfaces. Available in 5 difference colours – fawn, tan, dark brown, dark blue, black – they are just £17 each.
Watch Straps
Also new to the site are these rugged and thick calf leather straps which have lightly grained surfaces. Their stitching is recessed into the surface which maintains a smooth finish. These straps are £20 each and have heavy duty buckles with satin finishes which are available in either gold plated or steel versions.
To automatically receive these updates via email, please select the 'Join our Mailing List' tab at the bottom of any of our web pages.

subset: commoncrawl


text:
It's not uncommon for people to take to social media and indulge in fun hashtags -- like #MotivationMonday and #WomanCrushWednesday. But when a certain Duggar hubby decided to share an old photo, fans couldn't help but think it meant something more. Derick Dillard made Duggar fans think Jill gave birth, thanks to a recent throwback pic the dad-to-be shared that left everyone screaming at their screens.
It's hard not to laugh at the accidental gotcha Derick created when he shared this old photo of son Israel on Instagram that immediately left people celebrating what many thought was the arrival of baby number two, little Samuel.
More from CafeMom: Duggar Fans Are Concerned for Jill & Derick After Latest Belly Pic
"Newborn pic with Israel when he was just a tiny 9.5 lbs back in 2015. #tbt #prouddad," Dillard captioned.
No matter the reference to Israel, 2015, or the use of the Throwback Thursday hashtag, people couldn't help themselves and just had to celebrate what they thought was the newest addition to the family.
"I thought this was baby dilly 2 and I got so freaking excited," one Instagram commenter wrote on Derick's post.
More from CafeMom: 15 Baby Shower Ideas Inspired by the Duggars
"100% thought this was the new baby!!" wrote another.
Who knows if Derick intended to cause a few heart palpitations among fans, or if this photo was simply meant to be just a loving share. Still, Duggar fans aren't letting it go as some believe it could symbolize Jill and Derick are getting closer to becoming a party of four.
"Is this a hint???" one Instagram commenter questioned.
Hmm ... guess we'll have to wait and see!


text:
18 Jan Iridient X Transformer: what can you expect from this tool that converts RAF to DNG
Source: Fujifilm Insider
When I moved from the Canon DSLR system to Fuji I wrote an article about my new post processing workflow of the photographs I'm doing. After testing some softwares – suggested by other Fuji camera users – in the end I continued using the Lightroom, even though I know it has a difficult relationship with the fine detail of the RAF files – when we abuse the 'Amount' of the 'Sharpening' option, the so called 'worms' that everyone complains about, or the 'paint' effect, starts to appear. But I will not dwell on this subject, already so much discussed and debated on the Internet.
However, a few days ago a new tool that caught my attention: the Iridient X-Transformer. For now in Beta stage and Windows version only (Mac users will have to wait a few more days – it will be released this month)…
Iridient X Transformer: what can you expect from this tool that converts RAF to DNG posted on Fujifilm Insider on .


text:
It's easy to request an appointment with this provider. Just choose your preferred time and location, and we'll help you get started.Schedule Appointment
Karen Samuels, NP
Nurse Practitioner,
Medical GroupAscension Medical Group
Languages Spoken
Primary Location
Ascension St. Vincent Kokomo Trinity House Behavioral Services
Book Appointment(765) 456-5900
Why Ascension
Ascension doctors are committed to getting to know you. They take time for real back-and-forth conversations with you so they can understand all aspects of you and your life. Because great care starts with seeing your whole picture.
Schedule a Visit


text:
Thankfully all minor
So the day I was going to Houston for Christmas, I finally installed the radio mount brackets and... The radio didn't work afterward. I have no idea why and I haven't bothered to look at it since.
That same day as I stopped to fill up on gas before driving to Houston. The turn signals quite working! Since I was just going to be cruising in the right lane the whole way I wasn't worried about it. However a few days later I turned the hazards on to see if they worked and they did, and then the turn signals started working again after that and have been.
Also the Accord gets approximately 30mpg hwy and 20mpg city. So now you know!


text:
When your electrician comes by to do the electrical works, ask him to install the "Smarttube" as well. This is a cable certified by Proximus. Your electrician can take care of everything; you don't need to be present during the installation.
It's important to foresee your connection to the Proximus infrastructure during the construction/renovation phase. That way you avoid more work later, in your new offices or outside of your building. You're free to choose Proximus later on, for your products and services.
Request your connection when the structural works are done and roof, windows and doors are placed. The connection will coincide with other providers (water, gas, electricity and sewage system).
Foresee a 60-cm deep trench, in a straight line and perpendicular to the building line
The trench is done and structural works are also finished? Then request your connection
We call you within 2 hours to plan the visit of the technician. You can also order new products
The technician installs everything as agreed, and connects your home
Our network is available, your services can be activated quickly once you're moving in
There are some things you have to foresee before we can install the external cabling and connect your building to our infrastructure:
When your electrician comes by to do the electrical works, ask him to install the "Smarttube" as well. This is a cable certified by Proximus. Your electrician can take care of everything; you don't need to be present during the installation.
Want more information about installing a future-proof internal cabling (in the building or habitation)? Check these documents:
The connection to the infrastructure costs €90* and contains:
It's best to have the existing connection to our infrastructure temporarily removed by our services when you're busy with a structural renovation. That way you will avoid damaging our network.
As soon as you send your order, we remotely check your technical situation.
You can keep your mobile numbers, fixed numbers if you stay in the same zone.
You can continue to use the e-mail address from your former operator free of charge for max. 18 months after your transfer. Time enough to warn your contacts about your new address!
The mentioned price of € 90 is only valid for work on private domain, when the trench is well present. If Proximus needs to dig the trench, you will be charged by the metre and the cost depends on the state of the ground (soil, concrete (with or without sawing work) or pavement).
If the Proximus infrastructure isn't present in the public domain (street), Proximus will send you an estimate of the costs before starting the work. Insert your data in the form behind "Request your connection".


text:
Get In Front Of Your Target Market
The most important thing for a new business owner is to know their target market. When you know who your best prospect is going to be, then you need to find as many ways as you can to get in front of them. Here are 4 simple tips to get in front of your perfect prospect and start to create a connection.


text:
Image Web Server Control Overview
The Image Web server control enables you to display images on an ASP.NET Web page and manage these images in your own code.
This topic contains:
Code Examples
Class Reference
You can specify the graphics file for an Image control at design time or at run time programmatically. You can also bind the control's ImageUrl property to a data source to display graphics based on database information.
Unlike most other Web server controls, the Image control does not support any events. For example, the Image control does not respond to mouse clicks. Instead, you can create an interactive image by using the ImageMap or the ImageButton Web server controls.
Specifying Text Elements
In addition to displaying a graphic, the Image control enables you to specify various types of text for the image, such as the following:
ToolTip The text that is displayed in a tooltip in some browsers.
AlternateText The text that is displayed if the graphics file cannot be found. If no ToolTip property is specified, some browsers will use the AlternateText value as a tooltip.
If the GenerateEmptyAlternateText property is set to true, the alt attribute of the rendered image element will be set to an empty string.
Back to top
Code Examples
How to: Add Image Web Server Controls to a Web Forms Page
Class Reference
The following table lists the classes that relate to the Image control.
The main class for the control.
An enumeration that represents the alignment options for an image relative to the text of a Web page.
Back to top
See Also
Button Web Server Controls Content Map


text:
|This article is about a/an episode in Kamen Rider OOO.
Ice, Greeedification, and Broken Wings (氷とグリード化と砕けた翼 Kōri to Gurīdo-ka to Kudaketa Tsubasa) is the forty-second episode of Kamen Rider OOO. This episode is the last appearance of Ankh (Lost)
Doctor Maki approaches Eiji about the truth of the Greeed, themselves and the Purple Medals within them while working with Ankh to regain his final desire.
While on his way to save Ankh from being completely absorbed by Ankh (Lost), Eiji crosses paths with Maki. Though Eiji tries to escape, Maki blocks his way while revealing the purple Core Medals are turning him into a Greeed. After the Ankylosaurus Yummy escaped them, overhearing Maki telling Eiji the tell-tale signs of Greeedification and how advanced his own is, Kamen Rider Birth and Satonaka manage to save Eiji before Maki can rip the Core Medals out of him. As Satonaka reports Maki's condition to Kougami, Shintaro tells the Izumi siblings about Eiji's change with Hina coming to the conclusion that Eiji must stop fighting. The next day, on Maki's orders, the Ankylosaurus Yummy proceeds to freeze people in order to have them call Eiji. Though Hina and Shingo try to stop him, the former is distraught by the sound of people begging for Eiji's help as he runs off. Using Latorartar Combo to make his way there while Kamen Rider Birth holds the Yummy at bay, Kamen Rider OOO thaws everyone out. Once everyone is out of harm's way, Kamen Rider OOO finds Ankh (Lost) waiting for him, revealing that he has completely absorbed Ankh. Refusing to hand the last Taka Medal over to him, Kamen Rider OOO assumes Putotyra Combo to battle the Greeed while Kamen Rider Birth destroys the Ankylosaurus Yummy. Watching the fight, Shingo has Hina realize that Eiji is fighting because Hina wants Ankh saved. Eventually, Kamen Rider OOO Putotyra Combo goes berserk and overwhelms Ankh (Lost) before destroying him by breaking three of his Core Medals. Hina then arrives to talk Eiji back to normal, but they watch Ankh (Lost)'s remains reform into Ankh as he creates a new body modeled after the possessed Shingo. However, Ankh approaches his former human vessel with a malevolent intent.
Core Medals
- Medals Used:
- Head - Lion, Ptera
- Arms - Tora, Tricera
- Legs - Cheetah, Tyranno
- Combos Used:
- Latorartar Combo, Putotyra Combo
- Eiji Hino (火野 映司 Hino Eiji): Shu Watanabe (渡部 秀 Watanabe Shū)
- Ankh/Shingo Izumi (アンク/泉 信吾 Anku/Izumi Shingo): Ryosuke Miura (三浦 涼介 Miura Ryōsuke)
- Hina Izumi (泉 比奈 Izumi Hina): Riho Takada (高田 里穂 Takada Riho)
- Shintaro Goto (後藤 慎太郎 Gotō Shintarō): Asaya Kimijima (君嶋 麻耶 Kimijima Asaya)
- Erika Satonaka (里中 エリカ Satonaka Erika): Mayuko Arisue (有末 麻祐子 Arisue Mayuko)
- Kousei Kougami (鴻上 光生 Kōgami Kōsei): Takashi Ukaji (宇梶 剛士 Ukaji Takashi)
- Kiyoto Maki (真木 清人 Maki Kiyoto): Yu Kamio (神尾 佑 Kamio Yū)
- Kazari (カザリ): Taito Hashimoto (橋本 汰斗 Hashimoto Taito)
- Gamel (ガメル Gameru): Hiroyuki Matsumoto (松本 博之 Matsumoto Hiroyuki)
- Mezool (メズール Mezūru, Voice): Yukana (ゆかな)
- Ankh (Lost) (アンク(ロスト) Anku (Rosuto), Voice): Miyu Irino (入野 自由 Irino Miyu)
- Ankh (Lost) (Human State) (アンク(ロスト)(人間形態) Anku (Rosuto) (Ningen Keitai)): Hikari Tobita (飛田 光里 Tobita Hikari)
Guest cast
- Ankylosaurus Yummy (アンキロサウルスヤミー Ankirosaurusu Yamī, Voice): Daisuke Kirii (桐井 大介 Kirii Daisuke)
- Salary Man: Kiyoshi Koga (古賀 清 Koga Kiyoshi)
- Eimi (エイミ): Eimi Saito (斎藤 映海 Saitō Eimi)
- Woman: Sachiko Kurosawa (黒澤 佐知子 Kurosawa Sachiko)
- Victim: Norihisa Yasumura (安村 典久 Yasumura Norihisa)
- As part of Super Hero Time, this episode aired alongside Kaizoku Sentai Gokaiger episode 21, Ep. 21: The Adventurer Heart.
- Viewership: 6.8%
- OOO's Core Medal Collection
- Final appearance of Ankh (Lost).
DVD/Blu-ray releases
Kamen Rider OOO Volume 11 features episodes 41-44: Siblings, the Rescue, and Eiji Leaves, Ice, Greeedification, and Broken Wings, The Vulture, the Confrontation, and Ankh Returns and Everyone Together, the Perfect Resurrection, and Your Greed.


text:
Let's be friends
Hi, my name is Cody and I am almost 10 months old. I am an active young guy that loves to play with other dogs and all my toys. I wasn't real sure what exactly I was supposed to do with my toys at first and then my foster brother and sisters showed me how fun it could be to chase balls and wrestle with rope toys and balls. I love attention and cuddle up to my foster Mom as much as possible. I am learning new things like "sit" and "no" and listen very well for my young age. I am working on my housebreaking and gaining some weight while waiting for the perfect family to come along to call my own. I am up to date on shots, neutered and on heartworm preventative. I will grow a little more and will be a strong, handsome, striking young fella! My foster Mom tells everyone what a gorgeous "mover" I am…..whatever that means. I just run real pretty I think and she also makes a fuss over how handsome I look when I am on point.
If you are ready to take me into your home and refine me to my full potential, please fill out a PRO Adoption Application.
Uploaded by Cherie Edwards


text:
This blog seems to be reaching people that I would have never even imagined it would reach and for that I am inspired to keep posting! Thank you again for reading and I hope you continue to be inspired. Today Im going to share a paper that I just wrote for school. This paper explains a lot of what i have already learned in class about helping others overcome addiction. I feel strongly that you will also benefit from reading it. Remember that God is your Father in Heaven and he loves us all very much. That is who you are. YOU ARE A CHILD OF THE MOST HIGH....EVEN GOD! NEVER FORGET THAT YOU ARE A UNIQUE CHILD OF GOD...THERE WILL NEVER BE ANOTHER EXACTLY LIKE YOU. LIFE IS A MIRACLE IN AND OF ITSELF.. BE YOU AND.LOVE LIFE!!! Here is my paper......
"A Few Things I've learned Since Mid-Term"
By: Daniel Blankenship
I have learned so many things in this class since mid-term that I have decided to write
about many of these lessons. I will also start off by saying that I have been in recovery
for almost 3 years now, and I went through a six-month treatment facility and I have
learned more here in this class than my entire time in treatment. I do realize that this is
the right time for me to hear it. I feel very strongly that God has put you were you are,
and that I am meant to be in this class at this time. I am a firm believer that God truly is
involved in the very details of our lives. I appreciate very much the passion and
enthusiasm that you have for helping others. Your impact in this world for good is very
powerful. Mr. Lewis, "You are doing good"!!!
The "is a handicap a curse or a blessing?" lecture hit home for me. I mentioned in class
that I have a nephew (Travis) that has a traumatic brain injury, and I deal with him on a
daily basis. He was in a car accident when he was eleven, and has had to learn to do
everything over again. He will be 24 this month. He was in a coma and couldn't eat, or
walk. Through lots of therapy, hard work and determination he can now do all of those
things. Although his speech never returned and he can't use his right arm functionally, he
has an unusual gift to communicate. Through your lecture you helped me realize just how
much of a blessing he has been and continues to be in my life. He is such a blessing in
my life, and in all those who are around him. He stays upbeat and positive most of the
time. I realized that I will someday soon be able to give this same lecture to clients and
use Travis as an example. Much like you used your friend that was in the motorcycle
wreck and became a victim instead of a victor. I have been watching you and listening to
you very closely. In this lecture I learned how to help clients make the connection
between others with handicaps and in the handicap of addiction. I have learned haw to
help them make the connection between someone with a physical handicap and in
themselves as they strive to overcome addiction. I have learned how to help them realize
that you can either become better or bitter. I have learned from you how to help clients
realize that they can actually use the adversity in their lives as stepping stones to reach
their full potential. I have learned how to help others see drug addiction in a different
light with a different perspective.
Again I just can't stress enough how much I have learned in your class. It's as if I was
brought into this class by divine intervention. Well, its not "as if" it is real. You made a
comment that "there are hundreds of people depending on you to become an educated
counselor to help them through their problems". That comment hit me in the heart
because I can feel that it's true. I have learned from you that if I can create the right
relationship and environment that the client will be the expert. It is my job to help them
stumble upon their own truths. The counselor that is the quietest is the best counselor. I
will be a "Fisher of Men"! I will be friendly to the clients, but not their friend. My mind
has been opened by you to become as educated as I possibly can on ALL theories of
psychology and in counseling others. I have realized the power in teaching clients many
diffirent theories and topics and allowing them to think for them selves. I will never just
shove one theory down their throat and expect them to embrace the theory that I am most
passionate about. I will help them find their own path.
I have learned that the family as a whole will play a large role in recovery. I have learned
that a dysfunctional family will work against a member trying to change for the better. I
have learned that a person will often do really well in treatment because they are pulled
out of the current or "whirlpool" that a family naturally creates. And many times once
they are released if not separated from the family they will be trying to swim upstream so
to speak. A lot of times its just better to separate until necessary adjustments are made.
As counselors we need to help clients realize that as adults we need to learn to meet our
own needs. I have learned that as professional counselors we need to help clients pay
attention to their thoughts and focus on the positive thoughts. We need to find out what is
really going on in their minds. I have learned that it is good to be dramatic when working
with clients in a group setting and to get them involved and excited about their recovery.
Now I know why Dr. Phill says "I want you to get excited about your life" before every
I have learned that as a counselor we should realize that the person that is struggling the
most in recovery is the person that needs our help the most. It takes effort and sincere
care and concern to reach these individuals. As a counselor I will treat each individual as
the unique person that they are. I will help them discover the reality and miracle that we
are all unique individuals, and there will never be another exactly like you. I have learned
that each of us is a spiritual being and that on the inside most addicts feel the same,
whether they are successful or not. This is why you may hear someone say "I'm stupid or
I'm ugly", this is coming from how they feel on the inside. I have learned that if I don't feel
good on the inside I may constantly look for something on the outside to help me feel
better such as work, food , sex, power, or money. We need to work on how we feel on the
inside, work on feeling good on the inside. As counselors we will help clients change
how they feel on the inside. As a recovering addict it is necessary to change how we feel
on the inside so that we can accept the great things that come from recovery. As children
we are programmable, but as we grow older we are self programmable. We must be very
careful what we tell ourselves. As a counselor I will ask clients to think about the things
they were told as a child and help them change their perception of themselves. I will be
the one that helps get the ball rolling. I have learned the importance of working with
clients on the "feeling level", and the importance of helping them realize their own hopes
and dreams. Recovery is rediscovery, finding out how you really are. I have learned that
once we develop "core beliefs" we naturally reject information that goes against those
beliefs. We will attract what we believe that we deserve in life. This is why a woman that
has prayed for a good man may reject him once he appears in her life. She rejects him
because of what she feels on the inside. I have learned that the past is unchanging, it is
only our perception of it that changes.
Anger is a big issue for us as human beings. It is necessary to become as educated as
possible in understanding anger. Understanding anger can literally save a person from so
much sorrow and even save them from prison or death. Once we understand that we all
have anger we just need to recognize it, own it, and then discharge it in a positive way we
will be much better off. Since mid-term I have learned so much about helping others and
myself along the road of life. I am a firm believer that we are not just human beings
having a spiritual experience, but we are spiritual beings having a human experience. I
will strive to help my clients realize that they are unique and that they truly have a life
purpose. I have learned from you the value in teaching others by my own experiences. I
will work hard to develop my own unique counseling style that will hopefully impact
others as much as you have impacted me. Thank you again Mr. Lewis for choosing to be
a positive force for good in this world. I am a much better person because of you, and I
already know that I will use a lot of your teaching style as a professional. Your influence
for good in this world is immeasurable. These are just a few lessons I've learned from
you since mid-term.
After a few days, I was finally able to separate from John. I went back to
and picked up my vehicle. I went home and packed my bags, gathered what little money I could, and hit the highway! I didn't know where I was going; I just knew that I was going out of state. I was on the run! I was still strung out on Meth, and very scared. I ended up in Salt Lake when I called home, only to be informed that the local news channels were broadcasting my picture, and name as "UTAHS MOST WANTED"!!! They said that I was a murder suspect, and considered to be armed and dangerous! I made arrangements to meet up with my father, and speak with an attorney. We immediately made arrangements for me to turn my self in. The attorney thought it would be best if we gave a statement to the media, so against my better judgment we prepared a statement to give to the K.S.L. news channel. It was all live on television when I turned myself into the Grand Junction, Colorado authorities on May 13th, 2007, Mother's Day! Salt Lake City
I was booked into the
charged with several first degree felonies. If convicted each charge carries five years to life in prison! I was charged with Murder, aggravated kidnapping, and aggravated burglary. I served fourteen months there at the Salt Lake City Adult Detention Center . John told the police that he was with a friend at the time of the murder, and that he bought the gun from me the day after on our way to wendover! John was arrested with the murder weapon on him a short time later. John was arrested as soon as the injured women found the courage to speak up and tell the police that they knew who shot them. As you can imagine, at first they were scared for their lives, so they were not talking. In June of 2008, I agreed to testify against John in the event that the capitol murder case went all the way to trial. I plead guilty to a burglary charge. I also agreed to wait until after the murder trial to be sentenced. Salt Lake City Detention Center
After fourteen months I was finally released from the
Salt Lake City detention center, my brother was there to pick me up. We headed south down Interstate 15 to my sisters beautiful home in Davis . I was so happy to be free! It was a warm sunny day and most of my immediate family was there to greet me. They were already gathered together celebrating my nephew Dallas' birthday. It was such a warm and beautiful feeling to be reunited with my family. And you can imagine just how delicious that steak dinner was after eating that jail food for so long. I was so happy to be free! Highland, Utah
I had been praying that I would be able to find employment, and sure enough just a few days later I ran into an old missionary friend that owned and operated his own business. I ended up going to work for him at "Western Paving" through the entire summer. Would you believe that the job even came with golf privileges at a near by golf course? Once again I was living a happy, productive, and sober lifestyle. The job was a seasonal job, so once the winter time came, the job was over. About this same time my parents had decided to move back to
Texas to escape the freezing cold winters in . My Dad decided to open a bar-b-q restaurant in N.W. Houston, Texas. When "B.J.'s Brisket & Rib Company" opened for business, my father invited me to come and work for him. I accepted his invitation, and I was so excited to be moving back to Utah . I hit the highway very excited to start life over again back in Texas . I moved back in with Mom and Dad. I tried to work with my Dad, but it turned out to be very difficult for me to work with him. I began to hang around old friends and before long I started the vicious cycle of addiction all over again. I was using meth again! Texas
I will now share another spiritual experience with you for two reasons. #1 reason: It is my hope that you will be able to relate to me by reading my experiences, and that your desire to change your own life will grow stronger. #2 reason: One of the main objectives of this book is to help you to realize that this war between God and Satan is a reality. The experience happened like this…I had been awake for several days high on meth when I found out that my sister, and her family were planning to move back to
. They were scheduled to arrive at their new home the following day, and they needed my help to unload. My desire to be there to help them was very sincere, and very strong. I knew I needed to get some rest and show up clear minded. I was at a motel in N.W. Houston hanging out and getting high with an old using buddy of mine. I was just about to leave the motel and return to my parent's home to get some rest when my buddy offered me $300.00 to give him a ride down the road. I agreed to pick him up at a pre arranged spot. I arrived at the pre arranged spot, and just a few minutes later, he came running up with a stack of one-hundred dollar bills! He had a bad habit of setting up drug deals and running off with the money! The next thing you know we were back at the motel with a large quantity of drugs. After a while I remembered that my sister was coming into town, and that I needed to rest. I was too messed up to drive home, and it was way too loud in the hotel room for me to sleep. We then decided to rent the room next door. I just really wanted to be there to help my sister and her family, and my desire to get some rest was very strong. I some how mustered up the will power, and courage to push the drugs aside and go get some sleep. I retired to my new room alone, locked both doors (there was a jointing door that would allow us to go from one room to the other). I began to think of my sister and her family, and my desire to get some rest grew even stronger. It was at this point when I was alone in that room that I begin to realize that I was going to need help from above if I was going to have any chance at being there on time to help my sister. I decided to take a quick shower, and this is where the spiritual experience began. Realizing that I needed God's help, after I turned on the shower and the warm water was running, I kneeled down right there in the bath-tub, and began to plead with my Father in Heaven to help me. I was only able to get out two or three short sentences when immediately my tongue was bound so that I could not speak!!! Some strange force and power from the unseen world of spirits took complete control of my entire being! I tried to break the captive powers by jumping out of the tub, but I did not have the strength or power to do so. The water pressure began to change from high to low, and move up and down! At this moment of great fear I begin to see an unearthly like light begin to appear right in front of my face. This light became brighter, and brighter and commanded my attention! It was as if an angel of light was appearing to me. I was still down on my knees with my hands crossed, and I was being forced to raise my bowed head to pay attention to this bright light. For a brief moment I actually had a good feeling come over me, as if this was going to be a positive experience. Then instantaneously the good feeling was gone, and so was the light. This very real and thick black darkness took its place. I could actually see this thick and almost tangible cloud of darkness in front of me. At this moment of great alarm I had this feeling of extreme fear that overcame me. My mind and body was filled with terror, and I instantly knew that Satan was there! I could FEEL his evil presence! The devil came down to Texas looking for a soul to steal, and it was mine! Houston
I begin to see my life flash right before my eyes. I actually saw in my minds eye my parents standing over me crying and grieving over my dead body. There I was on my knees in this bathtub of a run down cheap motel room with this vision of my own dead body being viewed by my parents. I believe it was that vision, and the terrible feeling inside of me that gave me the strength to finally break the captive powers of the adversary. I could not stand the thought of my parents finding me dead in that motel. I was finally able to jump up and run to unlock the door and seek help. I knew that the devil himself was there with me in that motel room! I was now scared to death to be in this motel room alone with the devil himself. I will never forget that thick darkness or the extreme feeling of fear and terror that came over me. I have learned for myself that evil forces are real. I have also learned that the power of prayer is real. Why else would this evil influence attack me right when I began to pray?
Thank you again for reading....I hope you have been uplifted and encouraged to be better and keep on keeping on down the road of life....Please feel free to leave a comment here or email me privately with any message or comment that you might have. My email is danielisatruesoldier@aol,com.


text: Sexual assault includes rape, forced vaginal, anal or oral penetration, forced sexual intercourse, inappropriate touching, forced kissing, child molestation, and torture of the victim in a sexual manner. The fact whether an act amounts to sexual assault or not is determined by the laws of the jurisdiction where the assault takes place, which vary considerably, and are influenced by local social and cultural attitudes. Sexual assault can be verbal, visual, or anything that forces a person to join in unwanted sexual contact or attention. Rape, child sex abuse, Voyeurism, exhibitionism, incest, and sexual harassment are some examples of sexual assaults.


text:
Case study: Northern Switchgear
Northern Switchgear has been providing electrical switchgear and energy management solutions to the North East market since 1993. The business has grown steadily in recent years under the leadership of two new directors, and when they identified the opportunity to maximise the potential of the business by creating a new website and developing and delivering an effective marketing strategy, they sought dodio's help.
When we were first approached by Northern Switchgear, the company was clear in its ambition to improve its marketing strategy to bring it in line with not just local but national and international competitors. One of the first steps we took on behalf of our client was to conduct extensive competitor analysis to better understand the company's position in the market and to help articulate its strategic goals and objectives. Alongside stakeholder workshops, this informed the development of Northern Switchgear's marketing and communications plan.
Northern Switchgear sought a new website which would set them on track to achieve their growth ambitions by showcasing the capabilities of the business to their target audience. This meant demonstrating the company's highly technical offer to prospective customers through an increased emphasis on eye-catching imagery and engaging content.
We planned, directed and delivered a number of creative photoshoots to capture imagery which told the company's story and demonstrated its USPs to potential customers. Alongside this, we designed several creative sliders for the website homepage to further demonstrate Northern Switchgear's process, from design through to installation and maintenance. These assets formed the backdrop to the company's new website, for which we also developed engaging new content.
We've also been commissioned by the client to deliver a number of design projects to enhance their physical space. These have included the design of wall vinyls for the company's client-facing space, van vinyls for its fleet of transport, as well as pop-up banners for their extensive exhibition schedule and other promotional materials.
We continue to monitor the website via Google Analytics, identifying potential areas for development and improvement to enhance conversion rates.
One of the main barriers identified by the client to increasing their customer base was the ability to interpret their highly technical offer to potential clients who are often project managers working outside of the electrical industry. We identified the need for a comprehensive content marketing strategy to demonstrate Northern Switchgear's offer through engaging and insightful content, as well as thought leadership pieces to enhance their authority within the sector.
We set up and continue to manage the client's social media platforms and also develop regular case studies, news articles, thought leadership pieces and social media posts on behalf of Northern Switchgear.
Since we started working with dodio over a year ago, we've completely overhauled our online presence. Our new website is appealing and accessible to potential customers and really demonstrates what we have to offer, and we continue to reach out to new customers through the engaging content dodio are producing on our behalf. They really understand what we do and have used their expertise to interpret this effectively to our customers.


text:
The Death of A Musician: A Musical Tragedy
September 25, 2018
The death of a musician is a very tragic event, and unfortunately it seems to happen quite frequently in modern times, and although these are tragedies, it is still important to realize how and what led to their deaths.
As mentioned before, a musicians passing is, unfortunately, not a rare event and the environment in which a famous person is put into is often a factor in these tragedies. In these environments, the life of a famous musician could be one of the worst because, although being famous does mean many, many fun things, it also factors in to instances of drug abuse and alcoholism in musicians of all ages.
Not to mention that being famous comes with an expectation of more and more releases to retain that fame, this pressure can lead to constant nervousness, anxiety, and even depression, which sadly, can lead to suicides and some of the most tragic deaths in music history.
However, besides the tragedy of a musician's death, it seems that communities often try to make the best out of these passings. In fact, many fans of musicians hold special events to honor an artist such as candlelight vigils, festivals and concerts in their honor, memorials, and many more. In fact, some can even view the death of a musician as a tragedy that causes new art to flourish.
Due to this, many people seem to take a lot of notice in deceased artist, one of the most notable things to come out of this is the 27 Club.
The 27 Club is a "club" that documents the hundreds of artists that died at the strangely specific age of 27. People started to take notice of this occurrence when a fake statistic stated that an abnormal amount of people were dying at the age of 27. SInce then the 27 club has became more popular than ever, even having a record company named after it with a studio in Hollywood. Notable members of the 27 Club include Kurt Cobain, Amy Winehouse, Jim Morrison, Jimi Hendrix, and many more.
Not to mention that the death of a musician often puts more of their music in the public, making more and more people appreciate their art. However, it still is a tragedy to see that artists can't see their success in it's full form.
In the end, the death of a musician is undoubtedly sad, but it's in the wake of tragedy where we should try to be more optimistic and find a way to appreciate art more than we did before.


text:
I couldn't let 2017 slip away without indulging one more look back at the year in pop culture. Here are a few things that brought me joy. (And here are a few more.)
I couldn't let 2017 slip away without indulging one more look back at the year in pop culture. Here are a few things that brought me joy. (And here are a few more.)
Here are predictions for this year's Emmy awards from me and my podcast partner Devin Mitchell. They are official and binding, and we arrived at them separately. If you bet on our picks and come up short, you may sue us for all we are worth.
For the Emmy nominations to "get it right" in 2017 — when there has never been more television shows or places to find them — they must reflect the landscape's diverse options by rewarding shows that expand the boundaries of the medium or innovate within it.
With so much to choose from, it's never been harder for the Emmy nominations to get it completely right. But it's still not that hard for them to get it wrong. Case in point: Yesterday!
Each day this month (assuming I don't get busy or bored!), I'll reflect on a tiny sliver of pop culture that I enjoyed or appreciated this year — scenes, shots, gestures, verses, sights, sounds, moments. Today: two episodes of half-hour shows that pushed the boundaries of the form.
One of the most talked about TV moments of 2015 came at the end of the fourth episode of HBO's True Detective: a violent and visceral eight-minute raid scene, presented in a single uninterrupted take. Some observers praised director Cary Joji Fukunaga for the technical virtuosity required to pull off a filmmaking feat of such complexity, while others dismissed the sequence as a visually dazzling distraction that lacked narrative weight or thematic depth. The blatant showmanship of the camerawork in that scene served only to flatter the audience, not to deepen its experience of the unfolding story, those critics argued.
I saw two sequences on TV this year that reminded me of that True Detective debate, but neither one got the same attention, and neither one inspired a similarly vigorous discussion. FXX's You're the Worst devoted most of an episode to an uninterrupted shot that carried the camera across a wedding party venue to several overlapping conversations. One night later, Pamela Adlon's FX star vehicle Better Things dedicated a third of its first season finale to a scene showing a typical whirlwind morning in the household of Adlon's loosely autobiographical character Sam Fox — three daughters hollering and whining; multiple visitors cluttering the messy front foyer; flirtatious messages distracting Sam from her hustle. Both of these sequences showcased their respective shows' most appealing qualities, and both employed a technically challenging stylistic technique in service of an idea and an impact. Both were a joy to watch, even at their saddest moments.


text:
The History Commons makes it possible for people at the grassroots level to assume a dominant role in public and private sector oversight. By supporting this effort, you are helping civil society end its reliance on the corporate media, which has failed in its presumed role as a government and corporate watchdog. Since June of 2002, more than 20,946 new events have been added to the History Commons. These entries dealt with a variety of topics ranging from NSA domestic spying, global warming, free trade, 9/11, "the war on terrorism," civil liberties, the Iraq war, the Iran confrontation, and more.
Source: History Commons