AWS security at scale
summary
AWS claims a hardware-to-edge security stack: Graviton 4 encrypts memory and hardware interfaces and Nitro enforces no human admin access with live firmware updates. Threat intelligence ingests a trillion DNS requests daily, predicting ~124,000 malicious domains and Active Defense blocks 27 billion S3 enumeration attempts in 2023 and 2.7 trillion service discovery tries. Native tools named include GuardDuty, Security Hub, KMS, Shield Advanced, CloudFront, Detective, Inspector, Macie, IAM Access Analyzer and Bedrock/Q; generative AI is used to automate detection, improve runbooks and flag anomalous configs.
AI-written summary · about
chapters (13)
- 0:00Introduction and overview
- 2:09Security challenges and AWS approach
- 3:11Security at the silicon level
- 6:01Nitro system architecture
- 7:04Threat intelligence and active defense
- 9:53Your security in the cloud
- 11:59Security at the edge with CloudFront
- 13:01Generative AI security overview
- 14:43Defense in depth for GenAI
- 19:22Using GenAI to secure workloads
- 23:01AWS security services with GenAI
- 25:29Customer success stories
- 27:18Resources and closing
related talks
01h 08mKeynote
53mAchieving End-to-end Security on AWS
01h 00mBehind the scenes: AWS investments in security innovation
51mInnovations in AWS detection and response services
01h 19mKeynote
56mContinuous innovation in AWS detection and response services
27mProactively identifying threats & protecting sensitive data in S3
51mAWS Security Essentials