re:Invent 2022 – Security

In nutshell: The world is asynchronous. A big focus on asynchronous and event-driven architectures. A lot of exciting announcements around serverless and software development.

To make it easier to deepen a knowledge, I have categorised the videos I am interested in according to:

  1. Innovation
  2. Infrastructure
  3. Data and AI
  4. Security
  5. Costs
  6. Use Cases

Today I am sharing the Security part.

All below comes from a public AWS channel, I only share selected and classified by me, the texts come from AWS youtube channel, links in the description.

  • Architecting secure serverless applications

This session explores how to think about security from the front to the back of a typical serverless application. How do you configure AWS serverless services to provide least-privileged access while helping to ensure functionality? How should you think about managing IAM policies for your AWS Lambda functions? This session covers all of this and more, leaving you with concrete examples applicable to almost any workload.

My comment: An effective security programs for Organisations.

The above description and video can be found here: https://www.youtube.com/watch?v=A8iHQjHv8nY

  • Modernize identity and enhance security with Okta and AWS

Identity management is part of virtually every software, company, and interaction in the modern IT world. In this talk, learn how to solve your identity needs with the Okta product portfolio (which now includes Auth0). From enabling remote work to helping users secure credentials, discover how to thoroughly prepare your employees and customers for an all-cloud world. This presentation is brought to you by Okta, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=-nkdy1DbD8g

  • How code-to-cloud security encourages innovation on AWS

AWS empowers organizations to unlock incredible innovation and value. However, companies are often challenged to maintain best practices for security in the cloud. In fact, AWS services are frequently so groundbreaking, many organizations haven’t developed security policies around them. To take advantage of cloud business advantages, organizations must implement new technologies securely. That’s why automated cloud security and risk elimination are so important. Organizations that protect workloads, functions, and code with enterprise-grade security can maximize their protection as they adopt the latest AWS technologies. Join this talk to chart your journey from code to cloud! This presentation is brought to you by Check Point, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=J3vNHK2ra0M

  • A day in the life of a billion requests

Every day, sites around the world authenticate their callers. That is, they verify cryptographically that the requests are actually coming from who they claim to come from. In this session, learn about unique AWS requirements for scale and security that have led to some interesting and innovative solutions to this need. How did solutions evolve as AWS scaled multiple orders of magnitude and spread into many AWS Regions around the globe? Hear about some of the recent enhancements that have been launched to support new AWS features, and walk through some of the mechanisms that help ensure that AWS systems operate with minimal privileges.

The above description and video can be found here: https://www.youtube.com/watch?v=tPr1AgGkvc4

  • What we can learn from customers: Accelerating innovation at AWS Security

In this leadership session, CJ Moses, CISO at AWS, showcases part of the peculiar AWS culture of innovation—the working backwards process—and how new security products, services, and features are built with the customer in mind. AWS Security continuously innovates based directly on customer feedback so that organizations can accelerate their pace of innovation while integrating powerful security architecture into the heart of their business and operations. Hear from CJ how organizations use the latest AWS security innovations to ship securely, ship faster, and maximize the value of their teams.

The above description and video can be found here: https://www.youtube.com/watch?v=8MIULUh75v8

  • Governance and security with infrastructure as code

In this session, learn how to use AWS CloudFormation and the AWS CDK to deploy cloud applications in regulated environments while enforcing security controls. Find out how to catch issues early with cdk-nag, validate your pipelines with cfn-guard, and protect your accounts from unintended changes with CloudFormation hooks.

The above description and video can be found here: https://www.youtube.com/watch?v=7cYzYWcDyiM

  • Dev-first security: From code to cloud, and back to code

The need for faster development has changed the way applications are built. DevOps processes, daily deployments, and cloud-native technologies have accelerated modern development. To scale and manage risk in this environment, security teams need to shift from gatekeepers to guides—empowering developers to become the front line in the security process, while including elements that used to be understood as infrastructure in the scope of AppSec instead. In this session, learn the four key steps to transition to a developer-first security process, and hear a firsthand account of Neiman Marcus’s transition. This presentation is brought to you by Snyk, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=BH2GY5GrsQM

  • What’s next for security, development, and CloudSec teams?

Today’s applications are made up of source code, API code, infrastructure as code, container code, and open source. Vulnerable code in production clearly increases your organization’s risk profile. Are you scanning all of your code for vulnerabilities, and do you currently know where best to direct your remediation efforts? In this talk, learn how organizations are moving away from the antiquated approach of vulnerability management, triage, and remediation, and see how an entirely new, comprehensive set of tools can measurably reduce your application risks. Finally, Checkmarx demonstrates their approach to results correlation and the value it can bring to almost any organization. This presentation is brought to you by Checkmarx, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=5dqQ6LxfZ1Q

  • It’s an application-first world: Shouldn’t your cloud security match?

No matter where your data and applications are used, they touch the network, but with the rise of remote access, legacy models aren’t always reliable. What if you changed the approach to network security with an application-first perspective? What if you could unite application visibility and control across all environments with your cloud infrastructure while enriching data and visibility for threat hunting? In this session, learn how to merge application-to-application controls with the network while maintaining the integrity of existing policy and your Cisco Validated Design. Explore how this can provide teams with the visibility, flexibility, and actionable intelligence to rapidly adapt to change. This presentation is brought to you by Cisco, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=UaPjKFLQi2E

  • Revitalize your security with the AWS Security Reference Architecture

As your team continually evolves its use of AWS services and features, it’s important to understand how AWS security services work together to improve your security posture. In this session, learn about the recently updated AWS Security Reference Architecture (AWS SRA), which provides prescriptive guidance for deploying the full complement of AWS security services in a multi-account environment. Discover different ways to use the AWS SRA, such as bootstrapping the implementation of your security architecture and defining your target security state. Explore AWS SRA customer case studies that illustrate methods for tailoring these recommendations to suit your organization’s environment and security needs.

The above description and video can be found here: https://www.youtube.com/watch?v=uFrj0jHN848

  • Evolving your security capabilities through key growth stages

You may know what key security capabilities your startup needs, but this session will help you establish which stage of growth to introduce new capabilities. Starting from the AWS Startup Security Baseline while building your MVP, this session provides recommended security best practices you can use as your startup progresses through the phases of scaling up in your initial market to scaling out to additional markets and beyond. After this session, you’ll be able to assess where your startup is along the growth spectrum and if there are security capabilities you can implement to help you stay secure while growing quickly.

The above description and video can be found here: https://www.youtube.com/watch?v=_i4YcLkZrLc

  • Advancing security analytics with Snowflake and AWS at Snyk

Snyk uses Snowflake and AWS as core components of their data stack, enabling Snyk’s customers to measure their security posture, prioritize risk remediation, and inform strategic decisions to secure their applications. It is critical that Snyk customers not only identify risk quickly , but also have the information needed to support rapid remediation. In this session, join Seth Rosen, Director of Product Management at Snyk, to learn how Snyk’s modern data stack gives its global customers insight to help improve their security posture and programs with the necessary performance. This presentation is brought to you by Snowflake, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=68wvuNgeQcQ

  • Security alchemy: How AWS uses math to prove security

AWS helps you strengthen the power of your security by using mathematical logic to answer questions about your security controls. This is known as provable security. In this session, explore the math that proves security systems of the cloud. Dive into using automated reasoning (the application of mathematical logic) to help bring your cloud security posture to the next level. Then, dive deep into access controls, critical security questions, and the math that answers those questions.

The above description and video can be found here: https://www.youtube.com/watch?v=MlgsOKpNDw4

  • Proactive security: Considerations and approaches

Security is our top priority at AWS. In this session, discover how the partnership between builder experience and security helps everyone ship securely. Hear about the tools, mechanisms, and programs that help AWS builders and security teams. Finally, learn how to apply the same principles at your organization to help you make it easier to ship quickly and securely to delight your customers.

The above description and video can be found here: https://www.youtube.com/watch?v=u2z3nukhdXc

  • A deep dive on the current security threat landscape with AWS

In this session, deep dive on the most common threat vectors and vulnerabilities that AWS customers faced in 2022, and learn some practical ways to mitigate them. Review key AWS security services along with best practices, reference architectures, and resources that you can use to validate and strengthen your security posture when building on AWS.

The above description and video can be found here: https://www.youtube.com/watch?v=h7WvCyygb8U

  • Layered VPC security and inspection

An important step in securing your AWS network is creating the right traffic inspection architecture. In this session, learn about locking down access to and from your AWS environments. The session begins with the components of VPC security, including VPC security groups and network access control lists (NACLs), and how they help secure your VPC. Then, look at how services like AWS Network Firewall, Amazon Route 53 Resolver DNS Firewall, and third-party security appliances can help you inspect the traffic running in and out of your network.

The above description and video can be found here: https://www.youtube.com/watch?v=Ya4WFO9P0i8

  • A guide to strengthening your threat detection and response

Gartner predicts that more than 85 percent of organizations will embrace a cloud-first approach over the next four years. You are likely wondering how you should be thinking about detecting threats in an ever-expanding cloud environment. When should you detect suspicious behavior? How should you respond? This session takes you through best practices for strengthening your detection and response. Topics include how to create multiple layers of threat detection and what automated actions you should take when a threat is detected. This presentation is brought to you by Rapid7, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=Q5jUYCoxL_o

  • Protect against ransomware with a Zero Trust architecture

NIST defines Zero Trust as an evolving set of cybersecurity controls that shift from static, network-based perimeters to active defense in depth focused on users, assets, and resources. Join this session to learn how to protect your application data against ransomware using a Zero Trust architecture with AWS data protection services.

The above description and video can be found here: https://www.youtube.com/watch?v=ELSm3WgR8RE

  • Enterprise service networking with HashiCorp Consul and AWS

Businesses often have important applications running across different runtimes: Amazon ECS, Amazon EKS, AWS Fargate, AWS Lambda, and on-premises virtual machines, to name a few. Frequently, development teams need to securely connect their services running in these different environments. HashiCorp Consul, a cloud service networking product, is a popular choice for this scenario. In this session, learn how Comcast bridged the gap between services running on multiple AWS data centers across AWS Regions and runtimes as well as in on-premises environments. Further, find out how Consul helped manage this complexity with increased security. This presentation is brought to you by HashiCorp, an AWS Partner.

The above description and video can be found here: https://www.youtube.com/watch?v=2BbZ-YXqwSk