AWS re:Invent 2018

Latest Episodes:

SEC201: Chart Your Journey with AWS Best Practices Dec 01, 2018

Show notes

As with everything in life there is an easy way and a hard way when it comes to adopting security framework recommendations. Featuring the AWS Well-Architected and Cloud Adoption Frameworks, we will walk you through a complete security journey. We'll start with identification of requirements, then move through a series of how-tos from classifying your data, automating controls, to running fun incident response game days. There will be code giveaways and more!

SEC202: Top Cloud Security Myths - Dispelled! Dec 01, 2018

Show notes

In this session, we cover the most common cloud security questions that we hear from customers. We provide detailed answers for each question, distilled from our practical experience working with organizations around the world. This session is for everyone who is curious about the cloud, cautious about the cloud, or excited about the cloud.

SEC203: A Practitioner's Guide to Securing Your Cloud Dec 01, 2018

Show notes

New to AWS? Given the number of AWS services there are, you may think that it's going to take a lot of work to get your security house in order in the cloud. In fact, across AWS, there are only a few simple patterns you need to know to be effective at security in the cloud. In this session, we'll focus on the permissions controls offered by Identity and Access Management (IAM) and the network security controls offered by Virtual Private Cloud (VPC). You'll walk away having seen concrete examples that illustrate the patterns that enable you to properly secure any workload in AWS. Complete Title: AWS re:Invent 2018: [REPEAT 1] A Practitioner's Guide to Securing Your Cloud (Like an Expert) (SEC203-R1)

SEC301: The Theory and Math Behind Data Privacy and Security Assurance Dec 01, 2018

Show notes

Data privacy and security are top concerns for customers in the cloud. In this session, the AWS Automated Reasoning group shares the advanced technologies, rooted in mathematical proof, that help provide the highest levels of security assurance in today's data-driven world. The Automated Reasoning group co-presents with Bridgewater, a customer that has leveraged these technologies to help confirm that security requirements are being met, an assurance not previously available from conventional tools.

SEC302: How LogMeIn Automates Governance and Empowers Developers at Scale Dec 01, 2018

Show notes

In this session, learn how LogMeIn moves quickly and stays secure through the power of automation on AWS. We walk through core AWS security building blocks, such as IAM, AWS CloudTrail, AWS Config, and Amazon CloudWatch. We dive deep into LogMeIn's approach for empowering developers on AWS while also meeting required security controls.

SEC303: Architecting Security & Governance across your AWS Landing Zone Dec 01, 2018

Show notes

Whether it is per business unit or per application, many AWS customers use multiple accounts to meet their infrastructure isolation, separation of duties, and billing requirements to establish their AWS Landing Zone. In this session, formerly called "Architecting Security & Governance across a Multi-Account Strategy," we discuss the latest updates around establishing your AWS Landing Zone. We cover considerations, limitations, and security patterns when building a multi-account strategy. We explore topics such as thought pattern, identity federation, cross-account roles, consolidated logging, and account governance. In addition, BP shares its journey and approach to establishing its AWS Landing Zone. At the end of the session, we present an enterprise-ready landing zone framework and provide the background needed to implement an AWS Landing Zone. We encourage you to attend the full AWS Landing Zone track; search for #awslandingzone in the session catalog. Please join us for a speaker meet-and-greet following this session at the Speaker Lounge (ARIA East, Level 1, Willow Lounge). The meet-and-greet starts 15 minutes after the session and runs for half an hour. Complete Title: AWS re:Invent 2018: [REPEAT 1] Architecting Security & Governance across your AWS Landing Zone (SEC303-R1)

SEC304: Best Practices for Managing, Retrieving, & Rotating Secrets at Scale Dec 01, 2018

Show notes

In this session, learn how to use AWS Secrets Manager to simplify secrets management and empower your developers to move quickly while raising the security bar in your organization. Also, learn how you can use these changes to more easily meet your compliance requirements. Finally, learn how the service enables you to control access to secrets using fine-grained permissions and centrally audit secret rotation for resources in the AWS Cloud, third-party services, and on-premises.

SEC306: Moving 400 Engineers to AWS: Our Journey to Secure Adoption Dec 01, 2018

Show notes

Join us, and learn how we made AWS our backbone, modularized our software for the cloud, and gained an immediate surge in velocity. In this session, we walk you through some of the unexpected security challenges we faced and hopefully save you a few headaches. Discover what security issues you need to address, how to avoid costly unused instances in your deployments, and why your current security tools won't help. We show you how a major transformation landed us on AWS, and we share how we overcame challenges and advanced our business while innovating in a new direction. This session is brought to you by AWS partner, Barracuda Networks Inc.

SEC307: McAfee Skyhigh: Elevating Your AWS Security Posture Dec 01, 2018

Show notes

According to Gartner, the IaaS market grew at a blistering 42.8% in 2017-twice as fast as SaaS. And with last year's high-profile data exposures, the focus on bolstering IaaS security practices has increased. We've worked with AWS and hundreds of IaaS security professionals to develop a list of security practices specifically designed to protect AWS environments and the applications and data within them. In this session, you'll discover: common yet preventable scenarios that can result in the loss of corporate data, security best practices for user and admin behavior monitoring, secure auditable configuration, Amazon S3 data loss and threat prevention, blueprints for how a solution-based approach (including bridging to your on-premises best practices) can provide IaaS visibility and control, step-by-step guidance on how to gain visibility across all workloads, protect against advanced threats, and discover insights into lateral threat movements, and recommendations for creating a successful DevOps workflow that integrates security.

SEC308: Orion Health CISO & Ops Unite for a Secure DevOps Practice Dec 01, 2018

Show notes

The race is on. Development teams are moving fast while security teams play catch-up to protect the business. Security is often the department of ‚ÄòNo', slowing DevOps, but imagine what transpires when security says ‚ÄòYes' and collaborates. In this session, Marnie Wilking, CISO and Gavin Martin, VP, Operational Engineering at Orion Health, share their global AWS deployment and steps taken to facilitate cross-team collaboration. The team alignment around security and automation enabled them to a deliver a faster, more secure solution, achieve automation benefits, and meet HIPAA, HITrust, and GDPR compliance. Learn how this was achieved without slowing development and operations teams. This session is brought to you by AWS partner, Trend Micro.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected