Proactively identifying threats & protecting sensitive data in S3
summary
Amazon provides a layered S3 security stack: Amazon Macie discovers sensitive data at scale using managed identifiers and scheduled jobs that scan only classifiable objects by file type, prefix, size or modification date; GuardDuty automatically ingests CloudTrail/VPC/DNS/S3 telemetry to emit policy, malicious-access and anomaly findings; Security Hub aggregates results, runs 90+ continuous controls, and triggers EventBridge/Lambda or Step Functions for automated remediation. Services enable one‑click enablement, AWS Organizations central management, and ongoing monitoring without ingesting raw logs.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:51Data is valuable and often regulated
- 2:15Defense-in-depth for security and compliance
- 3:30Security program fundamentals to reduce risk
- 5:19Fundamental risk reducing services
- 7:26What is Amazon Macie?
- 10:26Run inspection jobs on data sets Discover sensitive data
- 11:32Continuous inventory evaluation and data governance
- 11:56What is Amazon Guard Duty?
- 12:57Detect malicious & anomaly behavior Proactively detect threats to data in Amazon $3
- 14:04Threat detection and monitoring
- 14:52AWS Security Hub
- 16:28Customizable response and remediation actions
- 17:09Automated response and remediation
- 17:36AWS security services working together to protect S3
related talks
51mInnovations in AWS detection and response services
32mAdvanced threat detection and response on AWS
38mFully managed malware and antivirus protection for Amazon S3
54mHow to layer threat detection & monitoring security services
34mLayering AWS security services to automate incident response
48mDevSecOps: Spin Up Cloud Security, Discover, Classify and Protect Sensitive Data
56mContinuous innovation in AWS detection and response services
27mIntroduction to AWS Security