How AWS Partners use observability to strengthen customer security
summary
Shows three concrete threat cases and the exact AWS tools used to stop them: S3 data exfiltration detection via CloudTrail, CloudWatch metrics and logs, Config and SNS alerts; serverless API abuse detected with API Gateway + WAF, X‑Ray tracing and Inspector, then escalated into Security Hub and automated Lambda remediation; and SaaS/PaaS tenant abuse found with AMP/OpenTelemetry, GuardDuty + MadPod network signals and a managed network firewall. Demonstrates baselining, alarms, ETL/visualization with QuickSight and real remediation that scales.
AI-written summary · about
chapters (9)
- 0:00Introduction to AWS observability
- 1:04CloudOps Competency overview
- 2:50AWS observability services
- 3:54Observability strategy for security
- 6:01Data exfiltration threat case
- 9:12Serverless security example
- 11:58SaaS/PaaS security example
- 15:06Kubernetes observability
- 17:14Partner solutions and wrap-up
related talks
32mAdvanced threat detection and response on AWS
34mWhat “Security Needs to Be Our Top Priority” Means for Aws Builders/Customers
27mProactively identifying threats & protecting sensitive data in S3
20mFantastic AWS Attacks and Where to Find Them
53mAchieving End-to-end Security on AWS
01h 01mBetter reliability and uptime with analytics and observability
54mHow to layer threat detection & monitoring security services
56mContinuous innovation in AWS detection and response services