Advance securely: Safely migrating to
summary
Migration checklist with concrete outcomes: use Terraform and version control for IAM and images, avoid one-account orgs and aim for account-per-application to reduce blast radius, and automate patching so EC2 AMIs don’t age into vulnerable states. Watch for misconfigs like public S3 buckets and exposed EBS snapshots — Gartner-style claim: 95% customer fault for cloud failures. Favor guardrails not roadblocks and integrate existing tools (Rapid7, Metasploit, InsightVM, AppSec, CyberArk/HashiCorp) via APIs to shift security left with code.
AI-written summary · about
chapters (12)
- 0:00Introduction and agenda
- 1:04Security mindset in migration
- 2:31Paradigm shift to code
- 4:57Cloud misconfigurations and breaches
- 6:21Shared responsibility model
- 7:45Guardrails not roadblocks
- 9:07Partnering with developers
- 10:32Common migration pitfalls
- 12:18AWS account segmentation
- 13:23Tool reuse over new purchases
- 14:47Version control importance
- 15:56Closing and Q&A
related talks
01h 03mContinuous Security in the Cloud
39mPerils of the cloud
51mAWS Security Essentials
44mGuardrails in the Cloud
17mCloud Security in Continuous Delivery
45mSecurity Lessons Learned Moving a Bank 100% in the Cloud
31mSeeing Through the Fog - Navigating the Security Landscape of a Cloud-First World
21mPitfalls of Infrastructure as Code (And how to avoid them!)