Cloud compliance and assurance
summary
Cloud compliance focuses on automating what 80% of orgs still do manually and reducing the 60% who spend heavy time gathering audit evidence. It maps concrete services to the three lines of defense: AWS Config (record, evaluate, remediation, conformance packs), CloudTrail data events piped to CloudWatch logs with Log Insights for DeleteObject and access queries, Systems Manager automations for auto-remediation, Security Hub for aggregation, and Audit Manager to continuously collect evidence and produce auditor-ready reports. Demo shows a CloudTrail data-events trail + Log Insights finds deleted readme.md entries.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:50Challenges
- 2:53Survey
- 3:49AWS compliance services
- 4:31The three lines of defense
- 7:03AWS Config
- 9:10Additional features
- 11:07CloudTrail
- 11:47Data Events
- 12:43Systems Manager
- 14:47Data
- 15:41Overseeing risk
- 17:05Cloudwatch
- 17:50Audit Manager
- 20:18Demo
- 25:51Key takeaways
- 27:41Next steps
- 28:38Resources
related talks
56mCloud compliance journey: Compliance and audits
30mHow to implement compliance at scale with the Three Lines of Defense model
58mImplementing compliance, assurance, and auditing on
50mOptimizing audits with automation
19mA close look at compliance with AWS Cloud Audit Academy
12mCloud Security from Scratch
43mWalking on Broken Clouds
55mAccelerating auditing and compliance for generative AI on AWS