DevSecOps: Spin Up Cloud Security, Discover, Classify and Protect Sensitive Data
summary
A practical how-to for building cloud security using AWS services: Macie for machine-learning discovery and classification of sensitive data, GuardDuty for threat detection, Inspector and Config for hardening, and feeding findings into Security Hub and OpsGenie via Terraform. Shows concrete deployment steps, a cost comparison for Macie (about $150/GB with recommendation to analyze a 5–10% snapshot to reduce spend), deployment time measured in days, dashboarded security scores, and which automations actually blocked or alerted versus noisy false positives.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 2:56DevSecOps value
- 7:14AWS shared responsibility
- 9:44Cloud security setup
- 14:51AWS security automation
- 16:42Amazon Macie discovery
- 20:01Amazon Inspector audit
- 24:39Amazon GuardDuty detection
- 28:21AWS Config compliance
- 31:11Security Hub centralization
- 34:27DevSecOps steps
- 37:02DevSecOps cost & risk
- 39:53Q&A
- 41:40Q&A Docker & Kubernetes
- 43:27Q&A DevSecOps training
- 45:15Q&A audits comparison
- 46:20Q&A code review
related talks
27mProactively identifying threats & protecting sensitive data in S3
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
51mInnovations in AWS detection and response services
29mPragmatic Security Automation and DevSecOps in the Cloud
33mAutomating Cloud Security and Incident Response (DevSecOps)
51mBuilding a Cloud Security Flywheel: Lessons from the Field
01h 02mSecuring data and democratizing the alert landscape
29mAutomating Threat Detection and Remediation