3 steps to help mitigate cloud risks
summary
Three concrete steps: shift left by inserting image scanning into CI/CD (push images to CrowdStrike registry or connect 13+ registries) to catch vulnerabilities before deploy; harden accounts with CSPM Horizon using an assumed IAM role plus EventBridge near‑real‑time CloudTrail ingest to surface 60+ IOAs mapped to MITRE and reduce misconfigurations; protect runtime with a DaemonSet or sidecar sensor (Fargate), enable drift detection, and wire detections to GuardDuty, Security Hub, Network Firewall and Lambda playbooks for automated remediation.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:07The asks of security teams
- 5:20Cloud-native applications: Lifecycle
- 7:20Securing cloud-native applications at scale
- 8:07Security in the build room
- 10:33Runtime security at the speed of the cloud
- 11:30Securing the cloud in cloud-native applications
- 17:39Falcon CWP and AWS CI/CD
- 19:54Falcon CWP and Amazon ECR
- 21:37Falcon Horizon, AWS Control Tower, and Amazon EventBridge
- 27:49Falcon Intelligence and Amazon GuardDuty
- 29:37Securing cloud environments
- 33:05Securing runtimes
- 35:01Falcon CWP, Amazon EKS, AWS Fargate
- 38:13Falcon CWP and AWS PrivateLink
- 40:17Falcon Intelligence and Amazon $3
- 42:22Falcon and AWS Security Hub
- 43:04Falcon X and AWS Network Firewall
- 45:37Summary
related talks
43mClouds in the forecast: CrowdStrike cloud risk report
45mProtecting you from you: Misconfiguration-caused breaches
43mWalking on Broken Clouds
51mCloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency
21mMake threats visible in your cloud environment — Eric Jung
40mWork Smarter Not Harder: Tips to Approach Cloud Security the Easier Way
50mArchitecting a secure cloud framework
31mA Comprehensive Approach to Cloud Security Posture Management