Security best practices for End User Computing Services
summary
Architectural checklist and concrete tools: use Amazon WorkSpaces (persistent) or AppStream 2.0 (non‑persistent) with ENIs placed in two customer subnets, route traffic through a transit gateway to a centralized inspection VPC, and run GuardDuty, Security Hub, AWS Config and CloudTrail for account monitoring. Encrypt user volumes with KMS, enforce MFA/SAML, collect session logs via CloudWatch/Kinesis to S3, and choose always‑on vs auto‑stop (or run the Lambda cost‑optimizer) to control costs.
AI-written summary · about
chapters (9)
- 0:00Introduction to EUC security
- 1:28About the speaker and EUC services
- 6:33Shared responsibility model
- 9:54Protecting your AWS account
- 12:49Centralized data inspection design
- 14:35Securing session access
- 18:11Protecting the session itself
- 21:48Summary of best practices
- 22:35Q&A with audience
related talks
51mAWS Security Essentials
53mAchieving End-to-end Security on AWS
25mUse lessons learned from the field to build for security
44mGuardrails in the Cloud
28mSecuring Multi-Cloud and Hybrid Environments
23mSecurity Best Practices: The Well-Architected Framework
16mSecuring your Cloud infrastructure: a first baseline
17mCloud Security in Continuous Delivery