Keynote
summary
AWS announces concrete security advances and launches: Graviton4 encrypts DRAM, PCIe and chip‑to‑chip links and adds pointer authentication while eliminating SMT, Nitro Enclaves integrated with KMS and planned GPU/accelerator support for end‑to‑end encrypted ML, new IAM engine that handles ~1 billion API calls/sec verified by automated reasoning, automated reasoning checking ~10^94 ACL permutations, S3 protections that denied 24 billion bucket enumeration attempts and blocked 2.6 trillion service scans, Rust ShardStore for S3 and AWS Libcrypto for Rust (129M+ downloads).
AI-written summary · about
chapters (21)
- 0:00Start
- 2:52Culture of security
- 9:09AWS Graviton 4
- 12:00AWS Nitro System
- 15:30Reinventing up the stack
- 16:00Rust
- 17:20Amazon S3 Shardstore
- 18:15AWS Libcrypto for Rust
- 30:00Network Telemetry Analyzer
- 33:54Customer Speaker - Ash Edmondson, Eli Lilly AVP of Security Architecture and Engineering
- 41:20Zero Trust
- 43:45LAUNCH - Preview - AWS Private CA Connector for SCEP
- 44:30LAUNCH - Passkeys as 2nd Factor Authenticators in AWS IAM
- 45:00LAUNCH - IAM Access Analyzer unused access findings recommendation
- 46:30Amazon Security Lake
- 49:50LAUNCH - Malware Protection for S3 Amazon GuardDuty
- 53:45Generative AI Stack
- 56:40Amazon Q - security vulnerability scanning
- 58:40LAUNCH - Generative AI Powered query generation AWS CloutdTrail Lake
- 1:01:10Guest Speaker - Steve Schmidt, Amazon Chief Security Officer
- 1:15:50Closing
