AWS re:Invent 2016

Latest Episodes:

NET404: Making Every Packet Count Dec 25, 2016

Show notes

Many applications are network I/O bound, including common database-based applications and service-based architectures. But operating systems and applications are often untuned to deliver high performance. This session uncovers hidden issues that lead to low network performance, and shows you how to overcome them to obtain the best network performance possible.

NET405: Amazon s2n: Cryptography and Open Source at AWS Dec 25, 2016

Show notes

Launched in June of 2015, s2n is an AWS open-source implementation of the TLS and SSL network security protocols, which focus on security, simplicity, and performance. With development led by engineers from Amazon EC2, Amazon S3, Amazon CloudFront, and AWS security and cryptography services, s2n is a unique opportunity to observe how we develop and test security and availability for critical software at AWS. Learn how we iterate and code, how we automate software verification beyond the usual code reviews, and how open source works at Amazon.

SAC201: Lessons from a Chief Security Officer: Achieving Continuous Compliance in Elastic Environments Dec 25, 2016

Show notes

Does meeting stringent compliance requirements keep you up at night? Do you worry about having the right audit trails in place as proof?

SAC303: Become an AWS IAM Policy Ninja in 60 Minutes or Less Dec 25, 2016

Show notes

Are you interested in learning how to control access to your AWS resources? Have you ever wondered how to best scope down permissions to achieve least privilege permissions access control? If your answer to these questions is 'yes', this session is for you. We take an in-depth look at the AWS Identity and Access Management (IAM) policy language. We start with the basics of the policy language and how to create and attach policies to IAM users, groups, and roles. As we dive deeper, we explore policy variables, conditions, and other tools to help you author least privilege policies. Throughout the session, we cover some common use cases, such as granting a user secure access to an Amazon S3 bucket or to launch an Amazon EC2 instance of a specific type.

SAC304: Predictive Security: Using Big Data to Fortify Your Defenses Dec 25, 2016

Show notes

In a rapidly changing IT environment, detecting and responding to new threats is more important than ever. This session shows you how to build a predictive analytics stack on AWS, which harnesses the power of Amazon Machine Learning in conjunction with Amazon Elasticsearch Service, AWS CloudTrail, and VPC Flow Logs to perform tasks such as anomaly detection and log analysis. We also demonstrate how you can use AWS Lambda to act on this information in an automated fashion, such as performing updates to AWS WAF and security groups, leading to an improved security posture and alleviating operational burden on your security teams.

SAC305: How AWS Automates Internal Compliance at Massive Scale using AWS Services Dec 25, 2016

Show notes

Is your IT environment getting bigger and more complex than your compliance team can handle? Get a peek under the hood of how the AWS Compliance team manages and automates security assurance and compliance in the AWS environment. We’ll tell you what we’re doing to automate controls, match up huge data sets to validate compliance, how we perform game day simulations of entire region outages, and how we manage our ever-present external audits. With each example, we’ll give you some ideas on how to use AWS services to manage the security and compliance of your AWS and on-prem environments. In this session, Chad Woolf, Director of Risk and Compliance for AWS, and Sara Duffer, Director of Security Assurance Automation discusses how the AWS Compliance team uses AWS services like Amazon Inspector, Amazon CloudWatch Logs, AWS CloudTrail, and AWS Config to manage risk, compliance, and audit in the massive scale of the AWS IT environment.

SAC306: Encryption: It Was the Best of Controls, It Was the Worst of Controls Dec 25, 2016

Show notes

Encryption is a favorite of security and compliance professionals everywhere. Many compliance frameworks actually

SAC307: The Psychology of Security Automation Dec 25, 2016

Show notes

Historically, relationships between developers and security teams have been challenging. Security teams sometimes see developers as careless and ignorant of risk, while developers might see security teams as dogmatic barriers to productivity. Can technologies and approaches such as the cloud, APIs, and automation lead to happier developers and more secure systems? Netflix has had success pursuing this approach, by leaning into the fundamental cloud concept of self-service, the Netflix cultural value of transparency in decision making, and the engineering efficiency principle of facilitating a “paved road.”

SAC320: Deep Dive: Implementing Security and Governance Across a Multi-Account Strategy Dec 25, 2016

Show notes

Now that you have decided to move forward with an AWS multi-account strategy, how should you help secure and manage your accounts? This session is a deep dive into some of the tools and processes that you can use to help ensure that you have a hardened blast radius between your AWS accounts while still being able to manage your security baseline across them. Some of the topics we cover are:

SAC322: NEW LAUNCH! AWS Shield—A Managed DDoS Protection Service Dec 25, 2016

Show notes

At re:Invent 2016, we are launching AWS Shield, a managed DDoS protection service. With AWS Shield, you can help protect Amazon CloudFront, Elastic Load Balancing, and Amazon Route 53 resources from DDoS attacks. In addition to introducing AWS Shield, this session presents some of the things we do behind the scenes to detect and mitigate Layer 3/4 network attacks and highlights ways you can use this new service to protect against Layer 7 application attacks.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected