AWS re:Inforce 2024
as the organisers put it
Join us in Philadelphia, Pennsylvania, on June 10–12, 2024, for AWS re:Inforce, a security learning conference where you can enhance your skills and confidence in cloud security, compliance, identity, and privacy. As an attendee, you will have access to hundreds of technical and non-technical sessions, an Expo featuring Amazon Web Services (AWS) experts and AWS […]
| title | author | length |
|---|---|---|
| Keynote | Chris Betz | 01h 19m |
AWS announces concrete security advances and launches: Graviton4 encrypts DRAM, PCIe and chip‑to‑chip links and adds pointer authentication while eliminating… | ||
| Explorations of cryptography research | Peter M. O'Donnell | 39m |
AWS applied cryptography research describes concrete work: deploying threshold cryptography into IAM to remove single key points of failure (IAM runs ~billion… | ||
| The building blocks of a culture of security | Tony Gauda, Kurt Kufeld | 57m |
Explains how security becomes company-wide by showing concrete practices: builds a GenAI platform called GenOS and ships it in under a year by reusing security… | ||
| Detecting and responding to threats in generative AI workloads | Anna McAbee, Steve de Vera | 40m |
Framework for investigating Bedrock-based chatbots maps seven concrete signals—access, computing changes, AI changes, data store changes, invocation, private… | ||
| How BBVA relies on Amazon AppStream to avoid data exfiltration | Luis Garcia Terriza, Jose Luis Prieto Priego | 54m |
BBVA implements a serverless, multi-account design that uses Amazon AppStream to prevent data exfiltration by exposing only encrypted pixels and tightly… | ||
| Strengthen open source software supply chain security: Log4Shell to xz | David Nalley, Mark Ryland | 01h 06m |
Open source is deeply pervasive: industry scans show 96% of codebases include OSS and 78% by volume is open source. Past crises produce concrete fixes — a… | ||
| Users and their data: Modern access and audit patterns on AWS | Becky Weiss | 55m |
Shows how AWS implements trusted identity propagation so end users authenticate through IAM Identity Center and their exact identity reaches EMR, Athena… | ||
| Building AI responsibly with a GRC strategy | Diya Wynn, Sai Honig, Larkin Ryder | 38m |
A concrete GRC path: use model evaluation in Amazon Bedrock plus SageMaker Clarify, Model Monitor, Augmented AI, CloudWatch/CloudTrail and S3 logging to… | ||
| Harnessing conversational AI for streamlined security operations | Damian Gitto Olguin | 13m |
Shows a working ChatSecOps pipeline that pulls AWS Security Hub findings into S3 via Firehose, normalizes them with Lambda, and exposes them to Amazon Q so… | ||
| Secure your healthcare generative AI workloads on Amazon EKS | Antoinette Mills, Sai Charan Teja Gopaluni | 19m |
Healthcare generative AI on Amazon EKS is presented as a deployable pattern that combines BioMistral‑7B from Hugging Face with Ray/KubeRay for scaling, a… | ||
| Securing generative AI: Privacy and compliance considerations | Mark Keating, Samuel Waymouth | 20m |
Five deployment Scope 1–5 scoping matrix levels guide choices: use SaaS (Code Whisperer) or Bedrock/SageMaker Jumpstart for pre‑trained and fine‑tuned models… | ||
| Improving your Amazon S3 security with cost-effective practices | Brian Tarbox | 18m |
Recommends concrete S3 steps: flip large, cold datasets into intelligent tiering to capture the 50% savings one genomics customer achieved (saved ~$3M) while… | ||
| Generative AI skills and culture for security organizations | Ashley Smyk | 18m |
AWS security team builds a people-first GenAI program that targets upskill 100% of staff, couples in-house training with selective external hires (McKinsey… | ||
| 5 ways generative AI can enhance cybersecurity | Himanshu Verma, Marshall Jones | 19m |
Generative AI automates five security outcomes: code scanning that pinpoints vulnerabilities and returns replacement snippets via Amazon Inspector… | ||
| Emotionally intelligent security leadership to accelerate innovation | Rich Hua, Sarah Currey | 24m |
Security leaders face 53% burnout and a projected 50% churn by 2025, so the session pushes concrete practices: three-by-three gratitude (three things daily for… | ||
| Securing hundreds of AWS accounts for streamlined governance | Daniel Rankov | 21m |
Around 140 accounts spread across about 40 organizational units are governed using AWS Control Tower for a landing zone with region deny and a centralized… | ||
| Discover emerging threats in cloud security | Catherine Watkins, Will Bowditch | 30m |
MadPot deploys a global fleet of decoy sensors that emulate hundreds of services and feeds over 100 million daily interactions into analytics and ML, enabling… | ||
| Making cloud security more human | Ilan Ponimansky | 13m |
Block replaces thousands of static IAM and GCP service-account keys by deploying one-click Terraform modules, issuing short-lived credentials with IAM Roles… | ||
| A close look at compliance with AWS Cloud Audit Academy | Paul Hong | 19m |
Cloud Audit Academy teaches how to gather audit evidence in AWS by walking through consoles, sample artifacts and automated checks for services like Amazon… | ||
| Using generative AI to create more secure applications | Brian Beach | 20m |
Generative AI is used to find and fix real issues: Amazon Q Developer scans a TypeScript ECS app, reporting 11 problems (10 in the app) including a hardcoded… | ||
| Build, deploy, and manage your applications securely with AWS | Justin Kurpius | 17m |
Builds a reusable baseline Web ACL named cloudfront_baseline_policy and shows two ways to deploy it: create the policy in AWS WAF with three AWS Managed Rules… | ||
| Strengthening security with DNS Firewall | Alex Waddell | 17m |
Describes deploying Amazon Route 53 Resolver DNS Firewall with Firewall Manager to centrally apply managed domain lists (aggregate, malware, botnet C&C and a… | ||
| Securing workloads using data protection services | Raj Parthaje, Ade Oseni-Adegbite | 20m |
Fannie Mae describes an event-driven system that automatically vaults and rotates application credentials using AWS Secrets Manager, provisions service… | ||
| Keeping people away from data: A generative AI use case | Isimah Emmanuel | 19m |
Argues that many projects should delete data when not needed rather than store it; when storage is required the recommended pattern uses SageMaker RAG +… | ||
| Mind your business: Secure your generative AI application on AWS | Nitin Kumar | 19m |
Walks through a concrete RAG architecture that uses embeddings, a vector store and Amazon Bedrock for inference and guardrails and shows how documents get… | ||
| Deep dive into Amazon Bedrock security architecture | Raj Pathak | 20m |
Amazon Bedrock hosts vendor model weights inside AWS, encrypts with Amazon KMS and TLS 1.2, and enforces IAM, CloudWatch and CloudTrail logging and VPC… | ||
| Security controls for generative AI use cases | Dutch Schwartz, Maitreya Ranganath | 19m |
Scoping matrix divides generative AI into five levels and most customers land in Scope 3 or Scope 4; controls scale from normal RBAC, CASB and WAF at Scopes… | ||
| Building PCI-compliant real-time payment processing with AsapCard | Marco Grecco | 16m |
AsapCard is a cloud-native card processor that builds a cloud-native authorizer and connector with no on-prem HSMs, claiming live PCI DSS and PCIP compliance… | ||
| Enhance AppSec: Generative AI integration in AWS testing | Wesley Snell Jr., David Mattson | 54m |
AWS describes a three‑layer generative AI testing model—infrastructure, model/tooling, and application—and shows concrete findings: 35 CVEs in libh5 lead to… | ||
| Access management: Customer use of Cedar policy & Verified Permissions | Julian Lovelock, Abhishek Panday, Daniel Anisziewicz, Justin McCarthy | 52m |
Cedar is an open policy language that claims 60x faster than Rego in benchmarks, with a formally verified reference and millions of test cases behind it… | ||
| Staying ahead of threat actors with Amazon Cognito | Mahmoud Matouk, Aleister Cachón Guillén, Caleb Ziamba | 52m |
A concrete recipe for hardening customer identity: use Amazon Cognito with AWS WAF rate limits and bot control, front‑end Cognito SDK for device/context, and… | ||
| Building resilient event-driven architectures | Hemal Jani, Isael Pelletier, Vinay Patil | 59m |
United Airlines migrates PSS mainframe capabilities into an event-driven system that uses Amazon MSK, Solace event mesh, DynamoDB, EKS/ECS, API Gateway… | ||
| Balancing responsible AI: Privacy and data protection on AWS | Soumya Sagiri, Tracy Hickey | 21m |
AWS shows an implementation path: use Amazon Bedrock and PartyRock to run a Privacy Nexus demo that scans content, flags 40 exposed records of PII (names… | ||
| Supply chain security: AWS Signer for build attribution | Thomas Tusia | 15m |
Cisco describes a working build-attribution setup that uses AWS Signer to add verifiable signatures to Lambda zips and ECR images, integrated into GitHub… | ||
| Control without compromise: AWS European Sovereign Cloud | Addy U | 17m |
AWS announces a net new independent infrastructure called AWS European Sovereign Cloud with the first region in Brandenburg Germany and a targeted launch at… | ||
| Accelerate securely: The Generative AI Security Scoping Matrix | Matt Saner, Mike Lapidakis | 38m |
Generative AI security centers on a five‑scope matrix: scope one: consumer apps, scope two: enterprise buy, scope three: pre‑trained models via APIs, scope… | ||
| Continuous resilience: Managing your application risks | Shllomi Ezra, Christina Yakomin | 17m |
Companies face $1.5–2.5B losses from unplanned downtime, so this session explains a concrete continuous resilience lifecycle and which AWS tools to use: AWS… | ||
| How Deloitte helps navigate generative AI compliance for customers | John Fischer, Elaine Li | 22m |
Deloitte and AWS present a generative AI compliance framework that maps 8 domains to 110 controls and about 30 objectives inside AWS Audit Manager, now… | ||
| Cloud compliance journey: Compliance and audits | Jessie Skibbe, Chad Lorenc, Nivas Durairaj | 56m |
Automates cloud controls using AWS Config with managed rules, conformance packs, CloudFormation Guard and optional RDK, storing configuration items to S3 and… | ||
| IAM policy power hour | Brigid Johnson | 52m |
Five live demos show concrete controls and results: an org-level SCP that denies S3 copy outside the org blocks a developer from copying into a Pickles bucket… | ||
| Accelerating auditing and compliance for generative AI on AWS | Kajal Deepak, John Fischer, Andres Silva | 55m |
AWS shows an actionable compliance path: 110 controls across eight domains in AWS Audit Manager that automatically collects CloudTrail, Config and other… | ||
| Use generative AI and Amazon Security Lake to enhance threat analysis | Himanshu Verma, Ross Warren | 22m |
Centralized logs land in Amazon Security Lake normalized to OCSF and stored as Parquet in S3 so analytics and cost-conscious federated queries can run without… | ||
| Protect your internet-facing web applications hosted on AWS | Tom Adamski, Mun Hossain | 51m |
Shows a live attacker vs defender sequence and then maps concrete controls to each attack, using AWS Shield Standard (99% volumetric mitigation ~1 minute… | ||
| Network inspection design patterns that scale | Pratik R. Mankad, Scott Morrison | 51m |
Shows how AWS Network Firewall plus Gateway Load Balancer, Transit Gateway/Cloud WAN, Route 53 Resolver DNS Firewall and Firewall Manager combine into concrete… | ||
| Bridging runtime and build time intelligence to reduce friction | Joshua Burgin | 47m |
Claims that bridging runtime and build time cuts alert noise by about 95% and speeds root‑cause to 10x faster by combining runtime sensors, cloud scanners and… | ||
| Cloud data and AI security in 2024: What you need to know | Dan Benjamin, Tomer Gershoni | 51m |
Claims that 90% can't answer what data exists and that a typical enterprise owns ~20 data store types guide a demo of automated discovery that snapshots and… | ||
| Developing an autonomous framework with Security Lake & Torc Robotics | Matthew Meck, Ross Warren, Jason Fox, Matthew Green | 47m |
Centralized S3 ingestion via Security Lake automatically enrolls hundreds of AWS accounts and forwards normalized OCSF logs to subscribers like DataDog… | ||
| Cloud security reimagined: The generative AI advantage | Aaron Kornhauser | 16m |
Lacework claims generative AI plus machine learning reduces alert noise to about 2–3 critical alerts per day by detecting behavioral deviations, surfaces a… | ||
| Security lifecycle management in a multicloud world | Mike Doheny | 14m |
Customer survey shows leaked credentials top cloud security worry and Verizon data says 9 of 10 web app breaches stem from stolen creds; HashiCorp Cloud… | ||
| Innovate w/ confidence across your AI-powered software supply chain | Ben Desjardins | 19m |
Survey of ~400 companies finds 96% use generative AI coding tools while 75% of teams report unauthorized use and the c-suite is 5x more likely to call that… | ||
| Securing cloud innovation: Lessons learned | Chris Hosking | 18m |
Cloud incidents and cloud-specific tradecraft increase—MITRE cloud techniques grow from 50 to 61 in three years—threats mix container, pipeline and identity… | ||
| Diversity and accessibility in the age of generative AI | Amani Johnson, Ashley Smyk | 48m |
Statistics show 1.3 million US / 5.5 million global cybersecurity pros, with 24% women, 26% ethnic minorities, 25% people with disabilities… | ||
| AWS Security Partners: Maximize visibility & accelerate growth | James Kang, Ann Marie Woodburn | 19m |
AWS outlines concrete partner mechanics: list on AWS Marketplace to drive 80% more spend per deal, lift win rates from 22% to 28% and shorten procurement from… | ||
| Using AWS SCPs to achieve least privilege while supporting devs | Sandy Bird | 16m |
Analysis of multi-account AWS estates finds almost half of identities hold a sensitive permission but only 8% use them in 90 days, and 61% of identities are… | ||
| I don’t always do AppSec testing, but when I do, it’s in production | Larry Maccherone | 16m |
Argues production AppSec is cheaper, faster and more accurate than pre-prod by running low‑overhead agents that modify Java classes at runtime to insert trust… | ||
| DSPM everywhere: Secure your data wherever it lives | Matt Bisceglia | 13m |
Rubrik combines DSPM with backup/recovery so teams can auto-discover and classify sensitive data across AWS, multicloud, SaaS and on‑prem, then take actions… | ||
| Fine-tune the COE process with generative AI | Johnny Hanley, Juan Ossa | 21m |
Lightning proof of concept shows generative AI turning human incident notes into a full COE document: a Jupyter notebook sends timeline and facts (10,000 files… | ||
| Boosting security for devs & their apps with identity security | Mike Bykat, Joe McDermott | 17m |
Claims that credential theft can be prevented by removing standing cloud privileges and by centrally managing native secrets stores with CyberArk are… | ||
| Identify and solve security risks faster with Application Signals | Gabriel Costa, Jacob Abbott | 17m |
CloudWatch Application Signals launches GA in 28 regions and automatically collects metrics, traces, logs and synthetics for EKS/Java/Python apps so teams tie… | ||
| Security, and AI... so happy together? | Aliaksei Ivanou, Gilson Wilson | 20m |
Researchers demonstrate AI autonomously exploits zero‑day flaws with a 53% success rate (and 85–90% for one‑day bugs in prior work), while AI‑powered detection… | ||
| AWS Heroes launch insights | Chris Farris, Chris Williams, Ian Mckay | 18m |
Keynote reactions focus on concrete launches: GuardDuty for S3 adds automatic malware scanning and tagging for user uploads and is pitched as ready-to-enable… | ||
| Learn about the AWS Cyber Insurance Competency | Stephanie Rice, Phillip Simpson | 18m |
AWS offers a Cyber Insurance Competency that lets customers share AWS Security Hub findings (via Security Hub CSV export or secure link) so vetted partners can… | ||
| Secure and scale your cloud foundations using AWS Built-in | Anthony Paladino, Kishore Vinjam | 15m |
AWS Built-in supplies co‑built integration packages (examples: Sumo Logic, CrowdStrike, Wiz, Lacework, Trend Micro) that combine partner product logic with AWS… | ||
| Ransomware & disaster recovery with AWS Elastic Disaster Recovery | Diego Dalmolin, Karin James | 17m |
Elastic Disaster Recovery (DRS) uses agent-based block-level replication to copy x86 servers from on‑prem, other clouds or physical hosts into a low‑cost AWS… | ||
| Protecting data in generative AI applications with Amazon Bedrock | Gerardo Castro Arica | 21m |
Amazon Bedrock integrates with Amazon Q Developer, Inspector and Detective and enforces encryption in transit (TLS 1.2+) and at-rest with AWS KMS backed by… | ||
| Manual versus automated penetration testing on AWS | Teri Radichel | 17m |
Argues that neither pure automation nor pure manual testing wins and shows concrete practices: uses Burp and other scanners, finds thousands of scan outputs… | ||
| Developer’s security survival guide | Brian H. Hough | 20m |
An actionable checklist for developers: use CloudTrail event logs to answer who what where why during an intrusion, onboard Security Hub (expect 11–24 hours… | ||
| Accelerating privacy & security in AI with Amazon Bedrock and Tines | Stephen O'Brien | 16m |
Tines builds an end-to-end solution that runs language models inside a VPC using Amazon Bedrock over PrivateLink so no data leaves the infrastructure and… | ||
| DoD FedRAMP Equivalency on AWS | Tim J. Sandage | 12m |
PreVeil encrypted email and file‑share is configured and assessed to meet FedRAMP Equivalency for Defense Industrial Base contractors after SecureIT (an AWS… | ||
| Managing your cloud security universe as one | Arick Goomanovsky | 18m |
Claims that 90% of cloud users hold administrative or privileged access while only a third actually use those permissions, S3 exposes 94 distinct permissions… | ||
| Accelerate compliance & enable global growth with AWS Marketplace | Cheryl Cage | 13m |
AWS GSCA partner bundles package ISV, SI and consulting services with automation tools to speed compliance: Humanforce buys an Eden Data + Drata + Assurance… | ||
| Choosing the right cloud infrastructure for digital sovereignty | Mario Velez | 17m |
AWS lays out concrete infrastructure choices and measurable results for sovereignty: a 2022 Digital Sovereignty Pledge, a physically isolated European… | ||
| Closing the security visibility gap | William DeForest | 13m |
Claims a practical pipeline: ingest EDR, SIEM, vuln and TIP telemetry into Amazon Security Lake normalized by OCSF Common Data Framework, run AI/ML enrichment… | ||
| Securing AI models and using AI to maintain compliance | Matt Simons, Jayesh Kamat | 18m |
IBM demonstrates an alpha service called Autonomous Security and Compliance (ASC) that runs on AWS Bedrock to ingest customer policies via RAG, generate and… | ||
| Merging cloud security with on-premises: How to centralize your SOC | Sam Wolfshohl | 14m |
Demonstrates a central SOC that merges on‑premise network taps and virtual probes with agentless AWS log collection (assumed‑role) and optional agents for… | ||
| How Fortinet uses AWS services to deliver a secure cloud experience | Aidan Walden | 28m |
Fortinet consolidates a runaway fleet of 5,500 shadow AWS accounts into Organizations with IAM, SCPs and automated account provisioning via CloudFormation and… | ||
| Building a better lake: Federated search for Amazon Security Lake | Colin Gibbens | 20m |
Splunk announces a two-part integration with Amazon Security Lake that lets Splunk run searches and detections against Lake data without long‑term ingestion… | ||
| Patterns to securely manage your AWS services with Meta | Ekansh Grover, Robin Rodriguez | 11m |
Meta runs AWS for roughly four billion users using AWS Organizations with OUs like Staging, Main, Prod, Dev, Sandbox (two-week accounts), DMZ for root… | ||
| Elevating security investigations with generative AI | Anna McAbee | 17m |
Shows an implemented pipeline that links Amazon Detective evidence graphs to generative AI summaries (via Amazon Bedrock) and outputs concise findings from… | ||
| Accelerate business with tri-party engagements | Senthil Arumugam | 14m |
Claim: AWS tri‑party engagements (customer + ISV + consulting partner) deliver turnkey fixes that cut discovery time from weeks to minutes. Example: DAY2… | ||
| Build responsible AI applications with Guardrails for Amazon Bedrock | Anubhav Mishra | 18m |
Configures Bedrock guardrails that intercept both user prompts and model outputs to enforce denied topics (e.g., investment advice, cryptocurrency), six… | ||
| Secure your container environment with CrowdStrike Falcon security | Rob Solomon, Brett Shaw | 47m |
CrowdStrike Falcon Cloud Security scans images in pipelines and registries (supports 16 registries), runs dynamic sandbox analysis, and enforces policies via a… | ||
| Securely accelerating generative AI innovation | Hart Rossman | 01h 00m |
AWS lays out concrete controls and examples: identity and least‑privilege with IAM, Access Analyzer and Control Tower, a published Security Reference… | ||
| Provably secure authorization | Neha Rungta | 59m |
AWS applies automated reasoning to prove access-control properties end to end, building a proven-correct IAM engine (specs in Dafny, proofs in Lean… | ||
| Amazon S3 presigned URL security | Bryant Cutler | 20m |
Presigned URLs are S3-specific signed GET/PUT requests that pack signature data into query parameters and use X-Amz-Expires to set lifetime (example 300 = five… | ||
| How to fail at building a security champions program | Ana Malhotra | 20m |
Describes a reproducible failure mode and a practical alternative: treating a champions program as a mechanism with defined inputs and outputs and piloting… | ||
| How PicPay achieved temporary elevated access control on AWS | Edgar Loro | 12m |
PicPay implements AWS TEAM for just‑in‑time elevated access across 200+ AWS accounts and 2,000+ cloud users, gating production changes behind strict SCPs and… | ||
| Scaling incident response with AWS developer tools | James Seward | 16m |
Shows concrete, working recipes: a shell script that uses aws cli to enable Organizations service access idempotently, list active account IDs, exclude the… | ||
| Managing customer identities with Amazon Cognito | Abrom Douglas III | 13m |
Amazon Cognito centralizes four primary customer identity patterns: B2C sign‑up/sign‑in that returns ID access and refresh tokens, B2B/SaaS federation via… | ||
| Level up security: Advanced AWS WAF rules & bot detection techniques | Harith Gaddamanugu | 15m |
Demoed an AWS WAF deployment on Amazon CloudFront that uses AWS WAF Bot Control managed rule groups (common and targeted), ML labeling and device… | ||
| Generative AI to identify potential risks in architectural diagrams | Sean MacDonald | 12m |
Demonstration uses Amazon Bedrock with the Claude model to parse PNG architecture diagrams and pasted CloudFormation JSON, returning two lists: best practices… | ||
| Enhance application security at the edge with AWS | Justin Kurpius | 18m |
Demonstrates building a baseline web ACL in AWS WAF and the one‑click option in Amazon CloudFront, applying three AWS managed rules — Amazon IP reputation… | ||
| Amazon Q Builder: Securing your code | Ron Ledwich, Mikhail Shapirov | 14m |
Amazon Q Developer integrates the Code Whisperer engine into IDEs (VS Code, IntelliJ; Neovim and Eclipse coming) to run SAST and infra-as-code checks on Java… | ||
| How to protect generative AI models using GenAI Secure | Rich Vorwaller | 18m |
GenAI Secure ships as a serverless, in-account protection stack (deploys in ~5–6 minutes) that scans S3/EBS/EFS/FSx and other storage for malware and sensitive… | ||
| Shielding innovation: Safeguarding cloud and AI development | Shaked Rotlevi | 19m |
Wiz demonstrates an agentless cloud security approach that maps resources back to source code, uses a Wiz Security Graph to detect end-to-end attack paths, and… | ||
| CyberSphere by Deloitte: A simplified platform integrated with AWS | Julie Bernard, Joe Tobolski | 12m |
Deloitte builds CyberSphere as a cloud platform on AWS with a centralized anonymized data repository and multi‑tenant logical separation, ingesting client… | ||
| Confidence in cloud security: One step ahead of cyber threats | Tony Bailey | 14m |
Claim: map every cloud workload and its traffic using VPC Flow Logs and AWS object metadata, then author and push policies to AWS security groups to block… | ||
| Securing the software supply chain with detection as code | Ashley-Yvonne Howard | 19m |
Panther claims to be a cloud-native SIEM that implements Detection-as-Code so detections live in version control and CI/CD, ingesting GitHub, CloudTrail, S3… | ||
| Data lake deep dive: Using accelerated indexing for threat detection | Colin Gibbens, Javier Santoyo | 20m |
Splunk integrates with Amazon Security Lake to run detections without ingesting high-volume logs by using federated search for Security Lake and a data lake… | ||
| 20 minutes + 8 security layers = secure Amazon EKS and Kubernetes | Tracy Walker | 19m |
Shows NeuVector (open source, available on AWS Marketplace) applied to EKS with a claimed eight security layers (five deployable in minutes): Zero Trust… | ||
| Automation in action: Strategies for risk mitigation | Erik Weber, Steve Rice | 50m |
Demonstrates concrete automation: uses AWS Config rules with automated remediation to stop or terminate EC2 instances and to enforce S3/SG policies, builds a… | ||
| How NatWest uses AWS services to manage vulnerabilities at scale | Gal Ordo, Greg Wilson, Kenny Dunn | 58m |
NatWest adopts AWS Security Hub and Amazon Inspector, enabling centralized findings via EventBridge and automated responses with Lambda and Systems Manager… | ||
| Building a secure MLOps pipeline, featuring PathAI | Raghavarao Sodabathina, Harsha Vardhan Pokkalla | 55m |
Secure MLOps pipeline on AWS uses SageMaker plus KMS, S3 Object Lock, Macie, GuardDuty, Inspector and Security Lake to protect data and detect threats, with… | ||
| Secure your APIs the Well-Architected way from foundation to perimeter | Jerry Chen, Frank Phillis, Syed Shareef, Jorge L Gomez | 55m |
Shows how AWS WAF, Firewall Manager and OpenSearch combine with CloudFront, API Gateway, Cognito, Inspector, GuardDuty, EventBridge, Config and Lambda to… | ||
| Accelerating innovation securely, featuring JPMorgan Chase | Greg Eppel, Alexis Robinson, Scott Cruickshanks | 54m |
Claims that 100 governance checks let teams ship faster while staying compliant, backed by JPMorgan Chase’s rollout across thousands of accounts and multiple… | ||
| How Catch Group uses AWS WAF Bot Control on their ecommerce platform | Robbie Cooray, Cameron Hall, Etienne Münnich | 47m |
Catch Group recounts a DDoS that produces an 11x request spike and forces rapid changes: they deploy CloudFront + Route 53, upgrade to AWS Shield Advanced… | ||
| Explore cloud workload protection with GuardDuty, feat. Booking.com | SUJAY DOSHI, Shachar Hirshberg, Georgia Bekiaridou, Kushagra Sharma | 53m |
Amazon GuardDuty adds runtime monitoring with a lightweight agent (SSM-managed on EC2, auto-injected sidecar on Fargate, daemonset on EKS) that streams kernel… | ||
| Proving the correctness of AWS authorization | Lucas Wagner, Sean McLaughlin | 59m |
AWS replaces its IAM authorization engine with a formally specified, machine-checked implementation called One Billion Times Per Second and proves its… | ||
| Innovations in AWS detection and response services | Himanshu Verma, Ryan Holland | 51m |
AWS now stitches GuardDuty, Inspector, Macie, Security Hub, Detective and Security Lake into a single workflow: real-time S3 malware protection that tags… | ||
| Cloud upgrade: Modern TLS encryption for all AWS service connections | Janelle Hopper, Steven Collison, Mark Ryland | 01h 00m |
AWS updates all public API endpoints to require TLS 1.2+ and removes TLS 1.0/1.1 across ~9,000 endpoints for 200 services, detecting 185,000 accounts still… | ||
| Keeping your code secure | Chandan Mishra, Pranav Garg | 54m |
AWS built a single SAST engine that powers Amazon Q Developer, CodeGuru Security, and Amazon Inspector, running 2000 detection rules across 10 languages and… | ||
| Verifying code using automated reasoning | Remi Delmas | 46m |
AWS describes how Kani, an open-source Rust verification engine, translates Rust code (including unsafe blocks) into symbolic logic and uses bounded model… | ||
| Managing security with a unified strategy, featuring Nubank | Ricardo Marques, Dave Hannigan, Thiago Rahal | 52m |
Nubank describes a reproducible platform that centralizes compliance across Brazil, Mexico and Colombia by aggregating account data into a control account… | ||
| Outpacing threats w/ CrowdStrike, Anthropic Claude & Amazon Bedrock | Rob Solomon, Jenn Reed, Lucia Stanham, Larkin Ryder | 58m |
CrowdStrike shows concrete numbers (232 tracked adversaries, 34 new in 2023; average breakout 62 minutes, fastest 2m7s; 75% of attacks malware-free) and a… | ||
| Cyber threat intelligence sharing on AWS | Jess Modini, Xavier Hutchinson | 51m |
Demo of a national CTI platform shows a working build: ACSC CTIS on AWS ingests STIX/TAXII/MISP feeds, enriches indicators, and distributes actionable blocks… | ||
| Empowering small teams with Amazon ECS Fargate and Datadog | Michael Wise, Amber Bennoui | 53m |
KirkpatrickPrice runs its Online Audit Manager across 25+ AWS accounts using Amazon ECS Fargate orchestrated by Terraform and task definitions, and it pairs… | ||
| Streamlining security auditing with generative AI | Jigna Gandhi | 16m |
Automates turning Security Hub findings into a filled incident runbook by piping events through EventBridge and Lambda, using Amazon Kendra to index org docs… | ||
| Secure and increase mobile workforce productivity with AWS for MDM | Dan Choi, Divy Gupta | 56m |
AWS shows a managed AWS Private CA integrated with a connector for SCEP that issues HSM‑backed, non‑exportable private certificates in minutes. The demo… | ||
| Fully managed malware and antivirus protection for Amazon S3 | SUJAY DOSHI, Akshat Sandh, Scott Ward | 38m |
Fully managed malware scanning for new S3 uploads that uses multiple AWS and industry engines to agentless detect threats, write GuardDuty findings and emit… | ||
| Simplify compliance and security investigations with generative AI | Suchita Verma, Rodolfo Brenes | 27m |
Demo shows AWS Config and CloudTrail Lake generating SQL from plain English to speed investigations: natural‑language queries produce runnable queries that… | ||
| Refine unused access confidently with IAM Access Analyzer | Nini Ren, Florian Holzhauer | 41m |
AWS IAM Access Analyzer shows where permissions go unused across an organization, surfaces unused access recommendations (at no extra cost) and provides… | ||
| AWS Cloud WAN service insertion: Simplifying network inspection | Alexandra Huides, Shridhar Kulkarni | 58m |
AWS launches Cloud WAN service insertion (announced yesterday) that auto-inserts inspection routes and removes hundreds of per-region static routes by creating… | ||
| Preserving privacy on data collaboration with AWS Clean Rooms | Richard Fan | 19m |
Explains how AWS Clean Rooms uses AWS Glue and S3 to run SQL over joined datasets while enforcing rules like aggregation with minimum threshold and blind match… | ||
| Driving cost-effective solutions to reduce carbon footprints | Frank Schwarzenau, Scott Kellish | 23m |
Shows how partners cut cloud emissions by treating cost as a proxy for energy and by measuring real outcomes: use the Carbon Footprint Tool (data is accurate… | ||
| How AWS Partners use observability to strengthen customer security | Jacob Abbott, Austin Quam | 18m |
Shows three concrete threat cases and the exact AWS tools used to stop them: S3 data exfiltration detection via CloudTrail, CloudWatch metrics and logs, Config… | ||
| How organizations are actually applying AWS security best practices | Shun Yoshie, Keisuke Usuda, Hirokazu Yoshida | 19m |
Security-JAWS publishes a 130‑page survey of AWS security practice in Japan and Korea and finds concrete gaps: 100% of users with 10+ years reference the… | ||
| Expect the unexpected: Building resilience with AWS | Diego Dalmolin, Ross Chernick | 14m |
Claims an automated DR system that reduces RTO from weeks to minutes and cuts DR ops overhead ~50% by orchestrating failover and failback across regions. It… | ||
| Elevate your AWS security with CloudFastener, assisted by gen AI | Tyler Wendland | 14m |
CloudFastener claims a fully managed AWS security stack that deploys via CloudFormation, uses a cross-account IAM role to ingest native services (WAF… | ||
| Cybersecurity w/ PwC: Compliance, generative AI & cost optimization | Marianne Olsen, Nausheen Jawed | 20m |
PwC describes a hands‑on AWS pattern: ingest vendor logs into Security Lake, surface analytics in QuickSight, and run a Step Functions–powered recovery engine… | ||
| Persona-based access to enterprise data for generative AI apps | Hardik Vasa, Bani Sharma | 19m |
Practical recipe for restricting RAG search to role‑appropriate documents using Knowledge Bases for Amazon Bedrock: ingest S3 objects with metadata, index… | ||
| Evolving from patch management to risk mitigation | Sanaz Yashar | 20m |
Vulnerability exploitation rates triple year over year and known-exploit ransoms total $1.1B while most orgs still average 67 days exploitation window from… | ||
| Find an AWS Partner, faster: Credentials, resources, and success | Brian Mendenhall | 17m |
AWS explains which credentials actually matter and how to use concrete tools to find qualified security partners: use Partner Solution Finder and the AWS… | ||
| Securing your AWS environment with automated DSPM | Mike Thompson | 19m |
Varonis shows an automated DSPM workflow that inventories all sensitive data across AWS and SaaS, ties it to permissions and CloudTrail activity, and raises… | ||
| Critical security mechanisms to guard your cloud environment | Mike Reed, Nick Franklin | 20m |
Fortra outlines a data-first defense that maps data → infrastructure → application → edge, emphasizes unified telemetry and AI/ML driven detection, and offers… | ||
| Use AWS WAF to help avoid cost-prohibitive traffic in LLM apps | Alan Erdley | 19m |
Public-facing LLM apps see roughly 47% bot traffic and face model denial-of-service that drives inference costs up. A 1,200-word RAG prompt (~1,400 input… | ||
| Reinforce AI security: Protecting AI applications, models, and data | Jaimin Patel | 37m |
Palo Alto Networks unveils three products—AI Access, AI-SPM, AI Runtime Security—that claim real-time discovery of apps, models and datasets, Terraform-based… | ||
| How H2O.ai bridges runtime & build time intelligence for security | Ophir Zahavi, Amiram Shachar | 37m |
H20 migrates from a noisy, costly stack to a single eBPF agent on EKS that installs in about 24 hours, consolidates GuardDuty/Inspector and other tools, and… | ||
| Traffic safety: Auditing and enforcing IAM best practices | Tara Schofield | 50m |
Datadog demonstrates an identity-focused workflow: Datadog CIEM auto-enriches findings with AWS IAM Access Analyzer data, flags users who use <40% of granted… | ||
| Segment & secure your cloud network with Cisco Multicloud Defense | Murali Rathinasamy | 15m |
Claims that 53% of security teams lack visibility and 46% lack control; 39% of breaches cross environments and only 15% feel prepared. Multicloud Defense… | ||
| Securing Amazon Q Business custom apps with AWS IAM Identity Center | Abhinav Jawadekar | 16m |
Amazon Q Business connects its more-than-40 built-in connectors to enterprise sources, downloads documents, vectorizes content and ingests ACLs into the search… | ||
| Building a secure end-to-end generative AI application in the cloud | Brandon Carroll | 20m |
Reference architecture shows an end‑to‑end RAG pipeline that keeps data off the public internet by routing Bedrock calls over AWS PrivateLink. Documents land… | ||
| Mitigate OWASP Top 10 for LLM risks with a Zero Trust approach | Jason Garman, Yuri Duchovny | 20m |
A patient‑info assistant prototype uses Amazon Bedrock agents, API Gateway, Lambda, DynamoDB, KMS, PrivateLink, VPC Lattice, Verified Access and GuardDuty but… | ||
| Protect your generative AI applications against jailbreaks | Nihir Chadderwala | 21m |
Short practical checklist for defending prompt injection: shows concrete attacks (affirmative instructions, base64 encoding, low-resource language bypass… | ||
| approach for secure and resilient applications | Sunny Wang, Eduardo Patrocinio, Akshay Aggarwal | 49m |
Capital One manages thousands of AWS accounts and millions of secrets and builds a centralized lifecycle system: a gatekeeper API in a control account that… | ||
| Safeguarding sensitive data used in generative AI with RAG | Myeongsu Jeon | 17m |
Shows a working RAG pipeline built on Amazon S3 → Bedrock embeddings → OpenSearch and identifies five concrete security risk points. Recommends AWS Direct… | ||
| Centralized security analysis in hybrid & multicloud with partners | Frank Schwarzenau, James Devine | 21m |
AWS says 81% of organizations run more than one cloud while only a few run distributed workloads and a 200+ person multi‑cloud team ships guidance and 16 new… | ||
| Navigating privacy and compliance while securing gen AI applications | Maitreya Ranganath, Samuel Waymouth | 44m |
A five‑scope scoping matrix maps consumer apps through enterprise apps to pre‑trained, fine‑tuned, and self‑trained foundation models, and shows most customers… | ||
| Not another chatbot: How Trellix virtual analyst automatically scales | Martin Holste | 12m |
Trellix Wise uses Amazon Bedrock plus data lakes, S3 and indexing to auto-investigate alerts with 20 Q&A per alert in sub-second, turning noisy detection into… | ||
| Establishing a data perimeter on AWS | Laura Reith, Chris Schultz, Lauren Bator | 54m |
Capital One claims a working “data perimeter” that uses VPC endpoint policies plus service control policies with condition keys (PrincipalOrgID, ResourceOrgID… | ||
| AWS Well-Architected for network security | Alpana Goolab, Ashraf Altalleh, Kevin Frachtenberg Goldsmit | 50m |
Shows how AWS Network Firewall plus Transit Gateway and an centralized Inspection VPC lets large fleets route subnet, VPC, cross‑region and on‑prem… | ||
| nothing matches | ||