AWS re:Invent 2018

Latest Episodes:

SEC309: Moody's: Deploying Cloud-Native Architectures with Automation Dec 01, 2018

Show notes

As Moody's AWS presence continues to grow, automation becomes a critical tool that can facilitate the rapid onboarding of new applications, VPCs, and acquisitions while ensuring they are secured appropriately. Moody's has chosen Terraform as their tool of choice to define and deploy their application and security infrastructure for a range of different use cases on AWS. In this session, we dive deep into a range of automation use cases, including: AWS infrastructure creation; deployment of a shared service environment; onboarding of new/existing lines-of-business; and Integration with threat intelligence services such as Amazon GuardDuty. This session is brought to you by AWS partner, Palo Alto Networks.

SEC310: The Tension Between Absolutes & Ambiguity in Security Dec 01, 2018

Show notes

Security is an optimization problem. A security team's goal is to enable the delivery of maximum business value at minimum risk and at minimum cost. Over investment in security is inefficient and slows the business down. Under investment in security can lead to expensive breaches and slows the business down. Striking the right balance requires careful risk management decisions and judgement calls. There are rarely absolutes when dealing with security, yet we've found a few situations where it's useful to apply absolutes to a field filled with shades of grey. Join this session to learn what they are. Complete Title: AWS re:Invent 2018: 0x32 Shades of #7f7f7f: The Tension Between Absolutes & Ambiguity in Security (SEC310)

SEC311: AWS and Symantec: Cyber Defense at Scale Dec 01, 2018

Show notes

Learn how Symantec uses AWS to provide complete, integrated security solutions that monitor and protect companies and governments from hackers. Hear about lessons learned from how Symantec scaled up its infrastructure to analyze billions of logs every day to detect the world's most sophisticated cyber attacks, and you'll see how Symantec integrates with native AWS services, like Amazon GuardDuty, AWS Lambda, and AWS Systems Manager, into its own security solutions to provide even better security in the cloud. This session is brought to you by AWS partner, Symantec Corporation.

SEC312: The Perimeter is Dead. Long Live the Perimeters. Dec 01, 2018

Show notes

Traditional data center environments have regarded the network boundary as a stable perimeter of defense, using gateway firewalls for effective protection. The public cloud, however, is exposing a plethora of hosted services directly to its users, bypassing traditional network filtering technologies, and effectively creating new perimeters around the various services and data element. Examples of these new perimeters include Amazon S3 buckets, Amazon EBS snapshots, and AWS Lambda functions. This session is brought to you by AWS partner, Dome9 Security Inc.

SEC313: A 360-Degree Cloud-Native Approach to Secure Your AWS Cloud Stack Dec 01, 2018

Show notes

Users are increasingly adopting AWS Cloud for their IT strategy to drive digital transformation. Securing clouds requires shared security responsibility. In this session, learn about the inherent threats and solutions needed to secure your entire cloud stack, from infrastructure to applications. Learn the importance of total visibility across your public clouds, and how to set up security for workloads from both internal and in the perimeter. Avoid issues such as data leaks and crypto-mining attacks through your cloud infrastructure with continuous security monitoring. Learn best practices from real-world examples of customers transparently orchestrating security into their practices and DevOps pipelines. This session is brought to you by AWS partner, Qualys.

SEC314: Securing SaaS/Web and Windows Apps in a Hybrid Cloud World Dec 01, 2018

Show notes

Hybrid cloud architecture creates security, governance, user experience, and performance challenges. In this session, learn to use Citrix Workspace to create a secure digital perimeter, enhancing security policy controls. Provide instant access for users to manage SaaS and virtualized Microsoft apps and unique data loss prevention features with on-premises data centers and AWS. Use Citrix to deploy machine learning (ML)-enhanced, user behavior analytics (UBA) with new security insights. Learn how your network can deeply inspect and optimize traffic, increasing the resiliency, performance, and security of hybrid application stacks. Build and move workloads onto AWS, improve legacy approaches to securing data, and create a world-class user experience. This session is brought to you by AWS partner, Citrix.

SEC316: Become an IAM Policy Master in 60 Minutes or Less Dec 01, 2018

Show notes

Are you interested in becoming a IAM policy master and learning about powerful techniques for controlling access to AWS resources? If your answer is yes, this session is for you. Join us as we cover the different types of policies and describe how they work together to control access to resources in your account and across your AWS organization. We walk through use cases that help you delegate permission management to developers by demonstrating IAM permission boundaries. We take an in-depth look at controlling access to specific AWS regions using condition keys. Finally, we explain how to use tags to scale permissions management in your account. This session requires you to know the basics of IAM policies.

SEC318: How Verizon is Accelerating Cloud Adoption & Migration with the AWS Service Catalog Connector for ServiceNow Dec 01, 2018

Show notes

Many enterprises want to drive faster cloud adoption and time to market (TTM) by allowing their developers, who have various skill sets, to onboard onto AWS quickly using self-service. However, enabling security, governance, and compliance while not compromising user experience can be a challenge. In this session, Verizon demonstrates how they use the AWS Service Catalog Connector for ServiceNow to create a robust self-service computing environment while meeting Verizon's governance and security controls and achieving their goal of migrating 30% of their applications onto AWS in a short timeframe.

SEC322: Using AWS Lambda as a Security Team Dec 01, 2018

Show notes

Operating a security practice on AWS brings many new challenges and opportunities that have not been addressed in data center environments. The dynamic nature of infrastructure, the relationship between development team members and their applications, and the architecture paradigms have all changed as a result of building software on top of AWS. In this session, learn how your security team can leverage AWS Lambda as a tool to monitor, audit, and enforce your security policies within an AWS environment.

SEC323: Augmenting Security & Improving Operational Health w/ AWS CloudTrail Dec 01, 2018

Show notes

Enabling AWS CloudTrail for auditing purposes is often a corporate mandate, but do you know how to use CloudTrail events to improve your security and operational posture? Come learn how CloudTrail can help improve your operational monitoring and troubleshooting, security analysis, and compliance auditing processes. Discover best practices for setting up and using CloudTrail; explore use cases for data mining CloudTrail event data; learn how to set up alerts based on activity in your account; and learn about advanced use cases. Also learn how to implement data plane governance automation using data events from Amazon S3 and AWS Lambda. Complete Title: AWS re:Invent 2018: [REPEAT 1] Augmenting Security Posture & Improving Operational Health with AWS CloudTrail (SEC323-R1)

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected

Our TOPPODCAST Picks

Follow Us

Stay Connected

AWS re:Invent 2018

Related Podcasts

1

2

3

4

5

6