AWS re:Inforce 2023
| title | author | length |
|---|---|---|
| Keynote | CJ Moses | 01h 08m |
AWS announces concrete security moves: claims that Nitro and Firecracker isolate hosts and functions from operators, AppSec runs 7,500 reviews a year, and… | ||
| How AWS Can Help Navigate Shifts in the Global Regulatory Landscape | Russell Lewis, Samara Moore | 47m |
AWS details concrete work: AWS engages 300+ regulators, evaluates 200+ rules, holds 143 certifications and offers 300+ security services to help customers meet… | ||
| Achieving End-to-end Security on AWS | Kurt Kufeld, Jesse Dougherty | 53m |
AWS claims security-first design across hundreds of services and shows concrete tools and results: centralized logs with Amazon Security Lake (using OCSF)… | ||
| Journeys to Zero Trust on AWS | Jess Szmajda, Quint Van Deman | 41m |
AWS lays out concrete Zero Trust pieces you can deploy now: AWS Verified Access brokers identity and device signals from Okta, Ping, CrowdStrike and Jamf and… | ||
| Security in the Open: OSS and AWS | Mark Ryland, David Nalley | 59m |
AWS states 96% of codebases contain open source and describes concrete work: s2n (≈20k LOC, 80k tests) and libcrypto with FIPS validation; Corretto as a… | ||
| Improving code security analysis with AI/ML | Jas Chhabra, Ifeanyi Okafor | 18m |
Announces Amazon CodeGuru Security launching in preview with a claim of much lower false‑positive rates by retraining models on Amazon’s internal code; scans… | ||
| From code to insight: Amazon Inspector & AWS Lambda in action | Kashish Wadhwa | 19m |
Demo shows Amazon Inspector scanning Lambda apps for real vulnerabilities, not just topics: it runs one-click enablement and detects runtime package CVEs and… | ||
| Increasing trust in software supply chain w/ container image signing | Niaz Khan | 13m |
AWS adds managed container image signing that creates signing profiles, generates Notation-compliant signatures stored in Amazon ECR, and enforces validation… | ||
| A tool to help improve your threat modeling | Darran Boyd, Jessie Wei | 21m |
A lightweight open-source web app called threat-composer helps generate context-rich threat statements by combining attacker, prerequisites, action, impact… | ||
| Understanding the shared responsibility model and AWS KMS XKS | Patrick Palmer | 20m |
AWS KMS can extend to an external key store (XKS) so keys live wholly outside AWS while KMS stays the API frontend; KMS HSMs are FIPS 140-2 Level 3 certified… | ||
| Preventing unauth'd credential access on GitHub using AWS services | Jose Palafox, Welly Siauw | 17m |
GitHub and AWS build a pre-commit scanning service that uses a tuned regex to detect leaked AWS keys and blocks commits before they reach the backend; the… | ||
| Integrating AWS Private CA with SPIRE and baseca at Coinbase | Kenneth Yang, Michael Cieplak | 20m |
Coinbase describes a working system that ties AWS Private CA, SPIRE, and a new gRPC PKI layer called baseca to issue hundreds of thousands of short‑lived… | ||
| Autodesk’s journey to FedRAMP compliance | Alex Bicalho | 16m |
Autodesk describes building a dedicated FedRAMP region on AWS commercial using GitOps templates and deployment automation so a new region deploys in one month… | ||
| Using AI/ML to scale governance, risk management, and audits | Emily Koepke | 12m |
Amazon uses Amazon Comprehend plus Lambda, API Gateway, S3 and CloudWatch to auto-extract security text, map it to internal controls and return confidence… | ||
| How AWS infrastructure addresses Salesforce’s resiliency goals | Nochum Klein | 20m |
Salesforce describes concrete resiliency work on AWS: infrastructure as code with Terraform for immutable builds, containerized services on EKS with… | ||
| Centralize user activity from external sources in AWS CloudTrail Lake | Ania Develter | 18m |
Claims CloudTrail Lake can centralize audit logs from AWS and non‑AWS sources and make them queryable and immutable. Demonstrates a Python script that reads… | ||
| Accelerate your business with AWS Directory Service | Rodney Underkoffler | 16m |
AWS Directory Service runs real Active Directory on Windows Server 2019, single‑tenant DCs in two AZs, with Standard (≈30,000 objects) and Enterprise Edition… | ||
| Move toward least privilege with IAM Access Analyzer | Mathangi Ramesh | 19m |
IAM Access Analyzer provides three concrete controls: policy validation that runs hundreds of checks during policy authoring and can gate CI/CD, external… | ||
| Validate your IAM policies with AWS CloudFormation hooks | Matt Luttrell | 17m |
CloudFormation hooks run at provisioning time and invoke a Lambda that calls the IAM Access Analyzer ValidatePolicy API to check IAM identity and resource… | ||
| Manage temporary elevated access with AWS IAM Identity Center | Taiwo Awoyinfa | 17m |
An open‑source solution called TEAM integrates with AWS IAM Identity Center to grant time‑bound elevated access across multiple accounts, orchestrating… | ||
| Navigating a cybersecurity event in real time | Mable Moore | 22m |
University systems migrate 90% of critical applications in AWS, run dual offsite backups, and restore operations during four 2022 incidents while building a… | ||
| Use AWS Network Firewall for enterprises: Egress & ingress inspection | Matt Serio | 11m |
GE replaces EC2 squid proxy fleets with AWS Network Firewall across a distributed model covering hundreds of AWS accounts and tens of thousands of compute… | ||
| Setting up AWS Verified Access | Shovan Das | 19m |
Sets up an AWS Verified Access instance, connects it to IAM Identity Center as the trust provider, and creates a group policy that explicitly allows user… | ||
| Building a secure perimeter with AWS WAF | Justin Kurpius | 15m |
Shows a concrete setup: build a CloudFront distribution in front of an S3 origin and apply an AWS WAF Web ACL with three managed rules so the site is live and… | ||
| Streamline security operations and improve threat detection with OCSF | Keith Gilbert | 13m |
OCSF normalizes security telemetry into event classes with verified datatypes, objects and nested attributes, plus observables object and enrichments so… | ||
| Security monitoring for connected devices across OT, IoT, edge, cloud | Ryan Dsouza | 15m |
AWS lays out a concrete stack to monitor OT, IoT, edge and cloud devices: AWS IoT Device Defender for audit/detect (including ML Detect to learn normal device… | ||
| Bolstering incident response with AWS Wickr enterprise integrations | Wesley L. Wood | 11m |
Shows a working integration that pushes Amazon GuardDuty JSON findings into an AWS Wickr room via EventBridge, Amazon API Gateway, a WAF and load balancer to… | ||
| Securing the future of mobility: Automotive threat modeling | Adewale O. Omoniyi | 19m |
AWS describes a concrete pipeline that ingests vehicle telemetry (IoT FleetWise), builds a VSOC threat model, trains detection models with SageMaker and Code… | ||
| AWS-LC: FIPS certification journey and how it’s used on AWS | Andrew Hopkins | 16m |
AWS-LC earns FIPS 140-3 validation and is deployed as a shared C crypto module used by s2n-tls, aws-lc-rs (Rust) and the Amazon Corretto Crypto Provider… | ||
| Inclusive security: Building diverse teams for stronger defenses | Sarah Currey, Carl Bryant | 56m |
Claims: there are 4.7M cybersecurity workers and 3.4M open roles, with only 24% women, 9% Black, 4% Hispanic, 30% aged 19–34, 14% disabled and 10% LGB+… | ||
| How AWS and MongoDB raise the security bar with distributed ownership | Amy Berman, Paul Hawkins | 42m |
AWS and MongoDB describe concrete programs that embed trained builders into teams to scale security: over 2,000 Guardians volunteer, attend cohort… | ||
| AppSec tooling & culture tips from AWS & Toyota Motor North America | Danny Cortegaca, Megan Lee, Joseph Adams | 43m |
AWS scales AppSec by training 2,000 Guardians — builders who run threat models, create tickets and mitigations, and speed reviews — while Toyota embeds a… | ||
| More easily validate the components of the software you build | Rick Anthony, Kashish Wadhwa, Crispin Weißfuß | 56m |
Automated vulnerability management that continuously scans EC2, ECR images and Lambda, with one-click enablement across an AWS Organization and delegated admin… | ||
| A deep dive into container security on AWS | Aviv Sasson, Daniel Prizmant | 44m |
Walks through Linux container security layers (namespaces, cgroups, capabilities, seccomp) and shows how to profile real containers with strace and top to… | ||
| Recognizing and avoiding cloud security survival mode | Andrew J Krug, Rishi Ilangomaran | 21m |
Datadog demonstrates a concrete stack: observability (metrics/traces/logs + APM), Cloud SIEM ingesting CloudTrail/GuardDuty, and an agent using eBPF to surface… | ||
| How Okta empowers devs to find & fix security issues with Snyk | Zaher Jarjoura, Jim Armstrong | 20m |
Okta uses Snyk to continuously scan images added when the release manifest is committed, enriches findings with runtime location and source-repo links, and… | ||
| How Snowflake uses Snyk to give data-driven analytics for security | Jacob Salassi, Mic McCully | 52m |
Snowflake shows concrete results: it ingests Snyk SCA and vulnerability telemetry into a curated AppSec store, wires fixes into CI/CD (auto-PRs for many… | ||
| Securely build generative AI apps & control data with Amazon Bedrock | Dr. Andrew Kane, Mark Ryland | 55m |
Amazon Bedrock exposes Amazon Titan plus Anthropic, AI21 and Stability models through one API, enforces TLS 1.2 and AES-256/KMS encryption, logs KMS and API… | ||
| Rethinking the “Sec” in DevSecOps for modern architectures | Maria Sokolova, Gerald Bachlmayr | 01h 01m |
Cuscal describes a move to product teams with a mono-repo, a self‑service registry and Terraform Cloud workspaces that cut cloud team bottlenecks; toolset… | ||
| From IDE to production: Actionable ML-powered code security analysis | Jas Chhabra, Omer Tripp, Ifeanyi Okafor | 48m |
Amazon demonstrates a cloud service that combines Amazon CodeGuru Security, Amazon Code Whisperer and Amazon Inspector to cut noise with ML and program… | ||
| Empower innovation and agility with security in DevOps | Maria Ane Dias, Vinicius Golin | 55m |
A working multi-account, multi-region deployment pipeline (the DPRA deployment pipeline reference architecture) is built with AWS CDK and… | ||
| FINRA and Fannie Mae deliver data resilience with AWS | Nancy Wang, Palak Desai, Matthew L. Mauriello, John Simon | 38m |
FINRA and Fannie Mae describe concrete implementations: FINRA ingests several hundred billion records nightly into an S3-based lake with versioning… | ||
| Post-quantum cryptography migration strategy for cloud services | Matthew Campagna, Peter M. O'Donnell | 44m |
NIST selects lattice KEM Kyber and signatures like Dilithium (plus SPHINCS+ and Falcon) for standardization, and AWS reports working implementations: s2n-tls… | ||
| Build code signing and crypto PKI tooling | Daniel Major, Karthik Jayaraman, Dmitry Kovalev | 50m |
NVIDIA builds a company-wide code-signing service on AWS using AWS CloudHSM, handling over 60,000 signing events per day and more than 1 million assets signed… | ||
| Improve data control for customers with AWS KMS | Amit Kumar Agrawal, Karthik Raman, Hasan Tariq | 50m |
Zoom and AWS demonstrate a live customer managed key pattern using AWS KMS and CloudTrail where Zoom routes encrypt/decrypt requests through a Zoom Key Broker… | ||
| Using AWS data protection services for innovation and automation | Ritesh Desai, Zach Miller | 58m |
Covers concrete tools and outcomes: ACM plus AWS Private CA issues and auto‑renews TLS certs, Private CA supports three‑tier hierarchies and cross‑account… | ||
| Amazon S3 encryption and access control best practices | Meg Rose, Will Cavin | 45m |
New S3 defaults automatically apply encryption by default (SSE‑S3) to all new objects and block public access enabled by default for new buckets, while… | ||
| Security design of the AWS Nitro System | J.D. Bean | 55m |
Nitro is a purpose-built EC2 platform that splits I/O into Annapurna-designed Nitro cards, a Nitro controller, a minimized KVM-based hypervisor and a Nitro… | ||
| Optimizing audits with automation | Dhiraj Mehta, John Fischer, Shar Qureshi, Lauren Goodchild | 50m |
Cloud audit automation claim: collect once map many and stop chasing screenshots. AWS Audit Manager ingests Config and Security Hub checks, CloudTrail user… | ||
| Scaling compliance with AWS Control Tower | Chad Lorenc, Krista Gorman | 57m |
Control Tower deploys a multi-account landing zone with a log-archive and audit account, Identity Center, an account vending factory and 400 managed controls… | ||
| Managing risk in a regulated environment | Greg Eppel, Akihiro Umegai, Norihito Yamamoto, Takahiko Otombe | 01h 01m |
Japan’s Digital Agency builds a multi-account, IaC-driven landing zone using AWS Control Tower, AWS Config, AWS Organizations and CDK to enforce region limits… | ||
| Security practices for customizing multiple environments | Eric Westfall, Sidharth Nabar | 59m |
Three customization paths exist with concrete tradeoffs: Account Factory Customizations is a managed Control Tower feature that uses Service Catalog blueprints… | ||
| Engineer application resilience with compliance in mind | Seth Eliot, Tony Politano, Kevin Quaid | 55m |
Resilience Hub runs automated Resilience Hub assessment against CloudFormation, Terraform, resource groups or AppRegistry to map RTO/RPO across four failure… | ||
| Best practices for cloud governance at scale | Svetlana Kolomeyskaya, Nivas Durairaj, Eric Westfall | 57m |
Practical guidance for bootstrapping multi-account AWS governance: use accounts as security boundaries and group them into OUs, enforce least privilege with… | ||
| Plan and deploy your own security architecture based on the AWS SRA | Eric Rose, Damindra Bandara, Liam Schneider | 55m |
AWS SRA gives a concrete multi-account blueprint and a code library that deploys foundations via an Easy Setup CloudFormation flow (CodeBuild + Lambda +… | ||
| Modernizing your security and GRC strategy with AWS | Roland Barcia, Rory Richardson, Andres Silva | 55m |
Modern cloud GRC focuses on making compliance proactive and automated: teams map controls to services and run checks in CI/CD, use AWS Config (including the… | ||
| A first-principles approach: AWS Identity and Access Management (IAM) | Becky Weiss | 57m |
A practical tour of IAM from first principles that shows how authentication and authorization actually work: STS issues short‑term creds via assumeRole to EC2… | ||
| Establishing a data perimeter on AWS | Tatyana Yatskevich, Caleb McDonald, Tyler Warren | 57m |
USAA implements an AWS data perimeter by codifying trust with VPC endpoint policies for S3 and applying them automatically across 100+ accounts; telemetry… | ||
| Create enterprise-wide preventive guardrails | Swara Gandhi, Túlio Bittar | 58m |
Explains concrete guardrails: use AWS Organizations and Service Control Policies with 5120 byte policy limit and five SCPs per OU; prefer coarse-grain denies… | ||
| Balance least privilege & agile development | Alex Batts, Jagmohan Hooda, Harvinder Nagpal, Valentine Reid | 55m |
Merck automates account provisioning with DynamoDB streams, Lambda, CloudFormation stack sets and CI/CD to cut setup from weeks to about an hour and runs… | ||
| Migrating to Amazon Cognito, featuring approaches from | Mahmoud Matouk, Deepak Bhardwaj, Nouman Saleem | 45m |
Four migration patterns arrive: just-in-time migration using Cognito Lambda triggers to validate credentials against the legacy store (seamless for users)… | ||
| Scaling access with AWS IAM Identity Center, feat. | Daniel Creed, Steve Vinsik, Moumita Saha | 34m |
Demonstrates automating IAM Identity Center role entitlement so teams get least‑privilege access from day one: it uses Lambda + 3 EventBridge rules to react to… | ||
| Managing hybrid workloads with IAM Roles Anywhere, featuring | Robert (Bob) Alcorn, Mohamed Keshk, Steven Joy, Rodolfo (Rudy) Trevino | 45m |
IAM Roles Anywhere issues temporary AWS credentials to off‑AWS workloads using X.509 and a trust anchor tied to an AWS Private CA, validated via CreateSession… | ||
| Steps toward a Zero Trust architecture on AWS | Yuri Duchovny | 55m |
Covers concrete Zero Trust patterns on AWS and new managed tools that simplify doing the work: identity-signed calls with SigV4 (AWS IAM signs ~1 billion… | ||
| Fine-grained authorization for apps with Amazon Verified Permissions | Julian Lovelock, Neha Rungta, Abhishek Panday, Plamen Garkov | 59m |
Amazon Verified Permissions offers a hosted authorization service using the Cedar policy language and a policy store model; 500 customers requested preview… | ||
| Behind the scenes: AWS investments in security innovation | J.D. Bean, Peter M. O'Donnell | 01h 00m |
AWS describes concrete infrastructure and cryptography work: the Nitro system uses custom Nitro cards, a minimized hypervisor, and a security chip to provide… | ||
| Help prevent account fraud with AWS WAF | Kaustubh Phatak, Nitin Saxena | 39m |
Newly released AWS WAF Fraud Control adds an AWS WAF token and client interrogation flow that runs proof‑of‑work JavaScript, collects hundreds of client… | ||
| Building a new cloud security operating model | Ami Luttwak, Ariel Geffen | 51m |
Cloud security needs a new operating model: use a SaaS scanner (Wiz) to scan everything all the time, tie every resource to an owner via a service catalog, and… | ||
| Protecting your hybrid cloud with Zero Trust | Mukesh Gupta, Felix Asare | 39m |
Hybrid cloud security strategy claims that 87% of businesses use hybrid clouds and that Palo Alto’s stack—VM Series, CN Series, and Cloud NGFW—delivers… | ||
| How AWS threat intelligence becomes managed firewall rules | Paul Bodmer, Kaustubh Phatak | 53m |
AWS collects 5.6 billion sensor interactions in three months and extracts IPs, malware and C2s to turn into mitigations used by services like WAF, Shield and… | ||
| Build secure global connectivity with AWS | Alexandra Huides, Pratik R. Mankad, Shovan Das | 53m |
Shows how to build a global, segmented WAN with Cloud WAN (core network, JSON policy, regional core edges, segments and attachments) and insert inspection VPCs… | ||
| How Zillow uses AWS security services to build a secure perimeter | Joshua McKiddy, Damindra Bandara, Shivani Sharma, Mun Hossain | 46m |
Zillow centralizes WAF via AWS Firewall Manager with tag-based deployment, sending WAF logs through Kinesis Firehose to a centralized S3 bucket and analyzing… | ||
| Advanced approaches to traffic inspection & network diagnosis w/ | Geoff Sweet, Ashraf Altalleh | 51m |
Shows how to combine specific AWS features to inspect packets and diagnose slow or noisy networks: use VPC Flow Logs (1–10 minute intervals, Nitro supports 1… | ||
| Outbound security implementation with AWS Network Firewall & Route 53 | Jesse Lepich, Paul Radulovic | 39m |
AWS Network Firewall plus Route 53 DNS Firewall enforce outbound controls using managed rule groups (Suricata signatures, Recorded Future and GuardDuty feeds)… | ||
| Firewalls, and where to put them | Ivo Pinto, Tzoori Tamam, Buzor Okoye | 52m |
Compares concrete options: AWS WAF for HTTP Layer‑7 allow/block, rate limits, bot control and CloudFront edge deployment; AWS Network Firewall for L3–L7 DPI… | ||
| Achieving Zero Trust with AWS application networking | Jamie Wenzel, Tom Adamski | 59m |
Application Load Balancer handles OIDC/Cognito authentication and injects headers like X-Amzn-OIDC-AccessToken but does not enforce authorization; AWS Verified… | ||
| Policy and Suricata compatible rule creation for AWS Network Firewall | Jesse Lepich, Michael Leighty | 51m |
AWS Network Firewall uses the Suricata engine for deep packet inspection and the session lays out concrete, working patterns: configure strict order and drop… | ||
| Understanding DevSecOps: Risk defense across your SDLC | James Brotsos | 13m |
Claims that security must shift everywhere not just left and that correlating engines cuts noise drive the message: Checkmarx lists SAST, SCA, DAST, container… | ||
| Centralize and manage secrets with HashiCorp Cloud | Sridhar Krishnamurthy | 12m |
HashiCorp launches HCP Vault Secrets (Public beta) as a managed SaaS for centralized secrets: UI, CLI and Terraform support let teams create app-scoped… | ||
| Security data gravity: Visibility & threat detection for data lakes | Martin Holste | 12m |
Centralizes SaaS, AWS Security Lake and endpoint data into an OCSF-formatted data lake with bidirectional feeds so detections and enrichments flow in and out… | ||
| Secure the software supply chain w/ detection as code & modern SIEM | Ken Westin | 14m |
Panther shows a cloud-first SIEM that applies detection-as-code in Python, running real-time Lambda detections and storing raw logs in Snowflake as a security… | ||
| Identity and permissions concerns to watch out for | Sandy Bird, Fritz Kunstler | 12m |
Cloud accounts often show concrete, fixable risks: Sonrai claims as many as 10% of identities can delete your cloud, and in a sampled customer 25% of… | ||
| The power of preventative cloud security with Tenable and | Shantanu Gattani | 14m |
Argues that shifting security left with policy as code prevents most cloud exposure by enforcing checks before deployment, showing an example where one… | ||
| Helping security and developers to understand one another | Erin Sindelar | 15m |
Cloud security teams and developers reconcile by mapping vulnerabilities to applications rather than resource lists and sharing runtime and dev signals as… | ||
| Protect hybrid workforce & cloud applications w/ SASE built on AWS | Indrajit Roy | 15m |
Forcepoint ONE is a SASE platform built 100% on AWS that combines CASB, ZTNA, web and email security with a risk-adaptive data engine that scores user and data… | ||
| Behind the scenes w/ SentinelOne’s MDR: Detecting cloud ransomware | Albert Caballero | 14m |
Cloud ransomware examples and numbers: 1,200 ElasticSearch databases publicly ransomed last year; a crypto‑miner that spiked AWS bills ~$45,000 while the… | ||
| Data command center for all your AWS data | Srinivas Avasarala, Nikhil Girdhar | 14m |
Claims that only 32% of data is usable and that Securiti built a single DataControls Cloud that unifies discovery, classification, access governance and… | ||
| Protect your apps from digital attacks w/ a modern defense strategy | Jeff Zitomer | 15m |
HUMAN’s data from 500+ customers shows automated attacks rising (account takeover +15%, content scraping +240%), and defenders need visibility, rapid… | ||
| Supplement your AWS security with JIT access and CNAPP | Lior Zatlavi | 15m |
Ermetic presents a CNAPP feature that enforces just-in-time access via AWS IAM Identity Center, granting temporary elevated roles for fixed durations in hours… | ||
| From security theater to DevSecOps: Why security must be ingrained | Galen Emery | 14m |
Argues that checkbox controls become security theater and promotes DevSecOps as a continuous, end-to-end approach; recommends a CNAPP that ingests CloudTrail… | ||
| Our AWS Marketplace success story - Armis | Adam Vandenberg | 10m |
Armis lists as available in AWS Marketplace since late 2022 and claims an agentless and passive cloud-native product that discovers devices (make, model… | ||
| The origin of security challenges & a revolutionary solution | Ty Murphy | 15m |
Cloud security is still stuck using on‑prem patterns so less than 50% of cloud assets get covered and teams drown in about 10,000 alerts per 100 assets. Orca… | ||
| Beyond detection and response with Eviden and AWS | Vinod Vasudevan, Gary Meshell | 15m |
A new managed service called AIsaac Cyber Mesh ties Eviden’s generative-AI AIsaac platform into Amazon Security Lake using OCSF connectors to ingest cloud… | ||
| Going beyond AppSec integration, correlation, and orchestration | Idan Plotnik | 14m |
Apiiro builds a code-aware ASPM that pulls read-only from source control, maps APIs, dependencies, data models and ownership into a risk graph within 30–60… | ||
| Get the most out of Splunk Enterprise, OCSF & Amazon Security Lake | James Young | 15m |
Splunk shows a concrete integration path with Amazon Security Lake: Security Lake uses OCSF 1.0 RC2 and requires Parquet files, and Splunk ingests those… | ||
| API sprawl & open API: Potential risks of application modernization | Peter Klimek | 14m |
Modernization accelerates API churn: 48% of developers push an API to production within one week while 44% have under two years’ experience, and monitoring… | ||
| Comprehensive data security across multiclouds with IBM and AWS | Matt Simons | 16m |
IBM presents a hybrid multicloud data security platform centered on Guardian Insights that aggregates logs from on‑prem and AWS sources, scores and… | ||
| Drive differentiation with security and compliance automation | Chintan Patel | 15m |
Vanta is a trust management platform that automates security and compliance across cloud, endpoints and SaaS by mapping 200+ integrations to 20+ standards… | ||
| Managing cloud risk with Fortinet cloud security | Aidan Walden | 27m |
Fortinet runs FortiGate as a regional SaaS firewall with gateway load balancer insertion, a dedicated inspection cluster per customer, auto‑scaling data planes… | ||
| Static versus dynamic ML for securing modern cloud architectures | Kien Tran | 12m |
Darktrace claims dynamic ML that learns your environment across DETECT, RESPOND, PREVENT and upcoming HEAL, supports agent-based and agentless AWS deployments… | ||
| Kyndryl security operations platform with AWS | Daniel S. Riley | 13m |
Kyndryl presents a security operations platform that ingests normalized security findings into Amazon Security Lake using OCSF, stores data in S3 and an AWS… | ||
| Empowering cybersecurity startups: Build, collaborate & scale on AWS | Ilan Leiferman | 16m |
Explains concrete startup support on AWS: free credits, account managers and solutions architects, and engineering co-build with native telemetry from… | ||
| Securing the spotlight: Amazon Prime & the NBAs data security journey | Brian Lozada, Christian Petermann, Sean Ir | 15m |
Cloud-first media teams describe adopting DSPM (Laminar touted as a pioneer) to automatically discover shadow data across dev and prod, correlate data… | ||
| How CyberArk built an identity security platform with AWS Partners | Uzi Ailon, Yael Kahn, Nicole Moldovan | 15m |
CyberArk builds a unified identity security platform on AWS, claiming support for over 8,000 customers and more than 50% of the Fortune 500, with 25 prebuilt… | ||
| How Citi advanced their containment capabilities through automation | Damien Burks, Elvis Veliz, Harikumar Subramonion | 42m |
Citi describes an automated containment framework that cuts containment time from about four hours to under 15 minutes and claims >10x faster mean time to… | ||
| Wix’s layered security strategy to discover & protect sensitive data | Guy Gutman, Roy Haroush, Matan Ofir | 45m |
Wix describes a production system that scans terabytes daily (30 PB ingested per day, 95,000 deploys/day, 240M users) by feeding databases and object stores… | ||
| Vulnerability management at scale drives enterprise transformation | Rick Anthony, Brandon Stevens | 01h 00m |
Amazon announces that Amazon Inspector continually scans EC2, Lambda and ECR images, adds deep inspection of JAR/Golang/Python artifacts, and exposes an SBOM… | ||
| Continuous innovation in AWS detection and response services | Himanshu Verma, Ryan Holland | 56m |
Amazon consolidates detection and response: GuardDuty adds EKS audit and EBPF-based runtime agent telemetry, two dozen container/runtime detections, Lambda… | ||
| Build your security data lake w/ Amazon Security Lake, featuring | Jonathan Garzon, Ross Warren, Troy Wilkinson | 54m |
Amazon Security Lake centralizes logs into customer-owned S3 buckets and normalizes them to the OCSF schema, ingesting AWS sources (VPC Flow, CloudTrail… | ||
| Building the future: A bold vision for space, Earth, and cyber | Fiona Williams, Kevin Urbanowicz, James Disher, Gary Meshall | 45m |
Blue Origin adopts Deloitte and AWS to deploy Converge Security, a modular cloud‑native stack combining managed MDR/XDR, SaaS incident management, and policy… | ||
| Stories from the cutting edge: Cloud security in 2023 | Alon Schindel, Jose Veitia | 46m |
Claims and hard numbers: 600% rise in supply‑chain attacks, 55% of organizations have at least one publicly exposed database, an S3 bucket with a common name… | ||
| Clouds in the forecast: CrowdStrike cloud risk report | Rob Solomon, Brett Shaw | 43m |
CrowdStrike reports rapid cloud attacks: median lateral movement takes 84-minute breakout, cloud exploitation rises 95% and cloud‑conscious adversaries triple… | ||
| Centralizing security at scale w/ Security Hub & Intuit’s experience | Craig Simon, Matt Gravlin, Dora Karali | 47m |
Shows how Intuit centralizes AWS findings into Security Hub and streams them via EventBridge into a custom ACP pipeline that uses Lambda, Kinesis, MongoDB and… | ||
| Streamline security analysis with Amazon Detective | Rich Vorwaller, Rima Tanash, Jordan Kramer | 55m |
Amazon Detective automatically ingests GuardDuty, Inspector, CloudTrail, VPC flow logs and Security Hub findings and builds a year-long behavior graph with… | ||
| Supercharge your incident response with Trek10 and Datadog | Nate Case, Mike Norris | 43m |
Claims a shrink in IR time by automating triage, remediation and recovery using Datadog and Trek10 patterns, with concrete tools: Jupyter notebooks as… | ||
| Enhance container security with CrowdStrike Falcon Cloud Security | Rob Solomon | 49m |
CrowdStrike asserts cloud exploitation cases rose 95% and cloud-conscious actors nearly tripled, and reports an 84 minutes average to lateral movement with… | ||
| Developing new findings using machine learning in Amazon GuardDuty | Baris Coskun, Amit Megiddo | 53m |
Amazon built contextual encoder‑decoder models (autoencoders) to model "normal" behavior across CloudTrail, S3 data events and RDS login logs, then scores tens… | ||
| Securing data and democratizing the alert landscape | Scott Ward, Himanshu Verma, Matt Derenski | 01h 02m |
Claim: AWS native detectors plus EventBridge-driven serverless orchestration let teams triage and remediate at cloud scale. The pipeline uses GuardDuty, Macie… | ||
| nothing matches | ||