Going Bananas for Cloud Security: AWS deployment with security_monkey
summary
security_monkey monitors and audits dozens of AWS accounts, polling Amazon APIs (boto) and saving revisions to RDS/Postgres so it records every IAM S3 ELB SSL SES SNS SQS EIP change, shows a JSON diff, and sends alerts (email or SQS). It claims to prove “the firewall” didn’t break at 2am, expand wildcard IAM policies to enumerate hidden permissions, help compare regions, back up and restore configurations, and scales to a couple dozen accounts; it was open sourced in June 2014.
AI-written summary · about
chapters (15)
- 0:00Start
- 3:20Security Monkey can
- 5:55Architecture
- 10:52AWS Trusted Advisor
- 11:38AWS Config
- 13:32Cloudsploit
- 14:27Reddalert by Prezi
- 15:43evident.io
- 16:56What's Changing?!
- 17:46How and When did this change?
- 20:04Policy Expansion
- 20:49Policy Minimization
- 22:09Object Discussion
- 22:36Security Monkey identifies problems.
- 25:25Issues can be Justified!
related talks
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
20mFantastic AWS Attacks and Where to Find Them
31mCloud Security Wildlife: A Tale of Otters, Monkeys and Security?
38mAdventures in Cloud Security: What DevOps Can Learn from a Security Engineer
56mPivoting in Amazon Clouds
01h 08mKeynote
27mProactively identifying threats & protecting sensitive data in S3
40mBringing a Machete to the Amazon