AWS Well-Architected for network security
summary
Shows how AWS Network Firewall plus Transit Gateway and an centralized Inspection VPC lets large fleets route subnet, VPC, cross‑region and on‑prem egress/ingress through one policy plane while avoiding per‑VPC appliances. Uses Network Firewall + Firewall Manager for policy deployment and CloudWatch, VPC flow logs and GuardDuty for detection. Mercado Libre runs ~900M requests/min, ~300 TB/day and routes logs into S3→SQS→ECS enrichment pipeline to attribute tenants and enable per‑tenant blocking and cost allocation.
AI-written summary · about
chapters (5)
- 0:00Introduction and agenda
- 1:22Network security foundations
- 11:53Network firewall overview
- 23:31Centralized inspection models
- 35:39Scaling security at Mercado Libre
related talks
11mUse AWS Network Firewall for enterprises: Egress & ingress inspection
44mElevando la postura de seguridad con AWS Network Firewall
52mFirewalls, and where to put them
33mNetwork and application protection on AWS
47mNetwork operations management and governance
32mGet started with AWS networking: Set up, secure, & monitor global networks
39mOutbound security implementation with AWS Network Firewall & Route 53
32mCentrally managing Palo Alto Networks Cloud NGFW with AWS Firewall Manager