~/talk

Improving your Amazon S3 security with cost-effective practices

Talkat AWS re:Inforce 2024 · 2024-06-10..06-12· [security, cloud-infrastructure]
links:none on file
slides:none on file

Recommends concrete S3 steps: flip large, cold datasets into intelligent tiering to capture the 50% savings one genomics customer achieved (saved ~$3M) while keeping millisecond reads; use S3 Inventory + S3 Batch to apply and extend locks; enable versioning and cap versions to stop “denial by wallet” attacks; test object lock in governance mode with short retention (one week → month) before moving to compliance; avoid single‑zone, watch lifecycle rules (creation vs access) and never apply a seven‑year compliance lock to the wrong bucket.

AI-written summary · about

  1. 0:00Introduction and warnings
  2. 2:11Bucket naming and security risks
  3. 3:59S3 storage classes and cost
  4. 10:09Lifecycle rules and transitions
  5. 10:31S3 Object Lock basics
  6. 12:15Versioning and denial by wallet
  7. 14:43Horror stories and lessons
  8. 15:49Call to action and best practices
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.