AutoScaling Web Application Security in the Cloud
summary
Shows how to run WAFs and other security layers on AWS so they scale with web tiers: uses Elastic Load Balancer, Auto Scaling groups, CloudWatch triggers and CloudFormation templates, with bootstrapping target <5 minutes. Architecture separates control plane vs worker (master min/max =1, workers autoscale), pushes configs to S3 and persists logs on EBS, and uses SQS/CloudWatch for events. Demonstrated 34 WAF workers handling ~10 Gbps and ELB peaks of 20–40k TPS; warns WAF learning takes weeks so keep components stateless and loosely coupled.
AI-written summary · about
chapters (24)
- 0:00Introduction
- 0:29Topics We'll Cover
- 1:34Cloud Architecture is Evolving
- 2:55Security vs DevOps
- 5:42Basic Auto Scaling Tools
- 7:55Basic Auto Scaling Capabilities
- 9:15Elastic Load Balancer
- 10:18Configuring Auto Scaling in AWS
- 16:03Creating an Auto Scaling Group
- 17:58Create Auto Scaling Policy
- 19:07Auto Scaling In Action
- 19:43Designing for Scale
- 20:39Architecture Principles
- 22:22Auto Scaling Web App Firewalls?
- 24:45Abstracting Application Security Components
- 30:261. Separate Processing & Control Planes
- 32:03Reduce and Abstract Interactions
- 33:22Store Persistent Data on EBS
- 34:17Web Traffic Flow
- 35:09Complete Stack - Prior to Automation
- 36:23Using CloudFormation Templates
- 37:13Command Line Example
- 38:29Base WAF Stack Ready
- 38:4510gbps Environment Test
related talks
11mAWS On Air ft. Automatic Application Layer DDoS
15mBuilding a secure perimeter with AWS WAF
29mWeb application protection on AWS
17mBuild, deploy, and manage your applications securely with AWS
39mPrinciples of Automatic Application Scaling in AWS
27mSecuring Applications and Managing WAFs at a large scale
18mEnhance application security at the edge with AWS
40mWAF Made Easy