Automated Security Remediation - AWS Summit Sydney

•

1 gostou•473 visualizações

The document discusses automated security remediation on AWS. It describes how Australia Post built automation using AWS services like CloudWatch, GuardDuty, and Lambda to detect security events, assess configurations, remediate issues, and notify teams. This improved outcomes by reducing response times and increasing transparency while lowering costs. Challenges include managing stakeholders, scaling developer education, and influencing upstream changes. The presentation encourages using the same serverless patterns for other monitoring and building automated security.

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Automated security remediation
Michael Stringer
Solutions Architect
Amazon Web Services
Steve Stojanovski
Head of Security, Education & Culture
Australia Post
Ahmed Al-Anim
Cloud Security Specialist
Australia Post

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
What if I told you…
automatically?

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
WHY?
We need to ask some questions about your security

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Low degree
of automation
Lack of
visibility
Why is security incident response so hard?

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Skills shortageSignal-to-noiseLarge datasets
Why is security incident detection so challenging?

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Why do I need guardrails in my AWS accounts?
and scales on AWS
You need your security to keep pace with your agility
As your business builds

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Why do I need to build automation?
<

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Keep humans away from your security and scaling

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
• Automation removes the potential for human error
• It works around the clock, and on weekends and holidays
• Automation enables a self-healing environment
• Multiple incidents can be responded to in parallel
• It allows InfoSec and other teams to better utilise their time for
high-level security tasks
• All easily built and scaled using the power of AWS!
Benefits of automating your security remediation

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Other Log Sources
AWS Lambda
Amazon
Simple Notification Service
Build repeatable serverless automation patterns
AWS Services
Amazon
CloudWatch Events
Events RemediationNotifiers

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Amazon
CloudWatch
Automate with integrated services
Amazon
CloudWatch Events
AWS LambdaAmazon GuardDuty
CloudWatch
Event
AWS Lambda
Lambda
Function

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
But enough of the ’why?’
Now for a real-world
example of how!

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
• Self-funded government business
• Over 70,000 employees in our extended workforce
• Australia's largest retail network with 4,356 post offices
• We deliver to 11.9 million addresses
• We deliver more than 1.3 million parcels across
Australia every day
About Australia Post

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
We AWS

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
How we build
• Agile methodology, iterative development practices
• Hundreds of developers
• Continuous integration and delivery with 8 – 12 production
deployments per day
• Co-located teams – developers, business analysts, PMs, business
stakeholders and security
• Literally hundreds of AWS configuration changes, every single day

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
So how do we scale security?

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Step 1: Detect Step 2: Assess Step 4: Notify
How can we detect
specific events of
interest, such as
key configuration
changes in AWS?
How can we
assess selected
assets against
known security
baseline
policies?
Step 3: Remediate
How can we
treat identified
deviations from
security policy?
How do we
notify the
affected people
and maintain
traceability?
The problem(s)

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Detect: Examples
AWS CloudTrail configuration changes
Route Table changes
AWS RDS encryption enabled
Security Group ingress rules

S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
The solution
Detect
Assess
Remediate
Notify
Ticket Raised & Assigned Message Sent

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Outcomes
improved
reduction in time
transparency
low operating costs

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Challenges
Stakeholder communication and management
Scalability of developer education program
Ability to influence upstream changes
Established and mature security baselines

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T
Try sending the output of AWS monitoring and security services
into the same serverless pattern you have seen here today
Look for AWS Security Blog posts and Quick Starts for more
information on building automated security remediation
Adopt automated security remediation as part of your workflow
Call to action
Go build and let us know what you come up with!

Thank you!
S U M M I T © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Michael Stringer Ahmed Al-AnimSteve Stojanovski

Mais conteúdo relacionado

Mais procurados

This session is designed to introduce you to fundamental cloud computing and AWS security concepts that will help you prepare for the Security Week sessions, demos, and labs. We will ensure you have an AWS account and understand EC2, prepare you to get set up on the AWS Command Line Interface (CLI) to access the AWS Management Console, introduce you to in source repositories, discuss SSH access and necessary SDKs, and more.

AWS Security Fundamentals

Amazon Web Services

Cloud migrations are hardly one size fits all. It can be challenging to migrate from a large-scale data center to an optimized AWS environment without draining IT resources. By leveraging CSC, organizations are able to determine exactly what they need from their IT infrastructure and efficiently migrate to a customized cloud environment on AWS that meets those needs. With 400+ AWS certified architects and 30+ experts with AWS professional-level certification, CSC helps organizations experience seamless, results-oriented migrations. Register for the upcoming webinar to hear speakers from CSC and AWS discuss the ins and outs of a successful large-scale migration to AWS. Join us to learn: How CSC helped a large federal systems integration company migrate their workloads to the AWS Cloud in less than three months How CSC has facilitated customers split from their shared IT environment in less than 3 months The step-by-step process of an efficient data center migration Who Should Attend: IT Manager, IT Security Manager, Solution Architect, Cloud App Architect, System Administrator, IT Project Manager, Product Manager, Business Development

Large-Scale AWS Migrations with CSC

Amazon Web Services

With cloud, you have the flexibility to acquire and use IT resources and services on-demand, which represents a major shift from traditional approaches managing cost. A key first step on your organization’s cloud journey is to establish best practices for cost management in the cloud. AWS' cost optimization techniques help our customers understand cost drivers and effectively manage the cost of running existing application workloads or new ones in the cloud.

Cost Optimization on AWS

Amazon Web Services

Partnership Model

Amazon Web Services

AWS Cloud Security & Compliance Basics Webinar

Amazon Web Services

Data center

Jwala Chapagai

Data Center Migration to the AWS Cloud

Tom Laszewski

21. (SAMREF Salary Certificate)

Abdul Qayum Ghouri

Data Center Migration

Thomas Martin

Weighing the financial considerations of owning and operating a data center facility versus employing a cloud infrastructure requires detailed and careful analysis. In practice, it is not as simple as just measuring potential hardware expense alongside utility pricing for compute and storage resources. The Total Cost of Ownership (TCO) is often the financial metric used to estimate and compare direct and indirect costs of a product or a service. Given the large differences between the two models, it is challenging to perform accurate apples-to-apples cost comparisons between on-premises data centers and cloud infrastructure that is offered as a service. In this session, we explain the economic benefits of deploying applications in AWS over deploying equivalent applications hosted in an on-premises environment.

B4 - The TCO of cloud applications

Amazon Web Services

Cloud business case

Amos Kosgei

How to choose the right database for your workload

Amazon Web Services

Alex Fiber Experience Certificate

Karim Ahmed (TÜV FS Engineer PH/RA),Ops / HSE , PTW Specialist

As AWS continues to expand, enterprise customers are increasingly looking to our partner ecosystem to assist in migrating their workloads to the cloud. This session describes the challenges, lessons learned and best practices for large scale application migrations. We will use real examples from our consulting partners and AWS Professional Services to illustrate how to move workloads to the cloud while modernizing the associated applications to take advantage of AWS’ unique benefits. We will also dive into how to use an array of AWS services and features to improve a customer’s security posture as they are migrating and once they are up and running in the cloud.

Cloud Migration, Application Modernization and Security for Partners

Amazon Web Services

Hybrid cloud and azure stack

TechsternSolutions

Lower TCO and Higher ROI

dreamforce2006

Introduction to AWS Security

Amazon Web Services

Creating the Cloud Business Case

Amazon Web Services

How to backup, restore and archive your data on AWS

Amazon Web Services

AZ-900 Azure Fundamentals.pdf

ssuser5813861

Mais procurados (20)

AWS Security Fundamentals

Large-Scale AWS Migrations with CSC

Cost Optimization on AWS

Partnership Model

AWS Cloud Security & Compliance Basics Webinar

Data center

Data Center Migration to the AWS Cloud

21. (SAMREF Salary Certificate)

Data Center Migration

B4 - The TCO of cloud applications

Cloud business case

How to choose the right database for your workload

Alex Fiber Experience Certificate

Cloud Migration, Application Modernization and Security for Partners

Hybrid cloud and azure stack

Lower TCO and Higher ROI

Introduction to AWS Security

Creating the Cloud Business Case

How to backup, restore and archive your data on AWS

AZ-900 Azure Fundamentals.pdf

Semelhante a Automated Security Remediation - AWS Summit Sydney

Security issues in your environment need to be identified and corrected faster than ever. AWS makes this easier with increased visibility and automated remediation capabilities. Australia Post will show you how they built an effective automated remediation pipeline that took the potential for human error out of the equation. Presenters: Michael Stringer, Solutions Architect, AWS; Jason Gorringe, Manager Cloud Services, Australia Post; Ahmed Al-Anim, Cloud Security Specialist, Australia Post.

Automated Security Remediation

Amazon Web Services

Data exfiltration is a key concern for financial institutions, which often store personally identifiable information, payment card information, and proprietary methods or algorithms. Balancing security and agility in identity and access management (IAM) policies is critical. To achieve this balance, Millennium Management developed a security framework that integrates into CI/CD pipelines. This framework utilizes semantic reasoning, proprietary security evaluations, and AWS Zelkova to achieve provably secure IAM policies pre-deployment in a distributed, multi-account environment. Learn how Millennium combined Zelkova with services such as AWS Step Functions, AWS Lambda, and AWS CodePipeline—for rapid development while mitigating data exfiltration risk.

How Millennium Management achieves provable security with AWS Zelkova - FSV30...

Amazon Web Services

Sicurezza in AWS automazione e best practice

Amazon Web Services

In this session, learn how to address threat detection and remediation in the AWS Cloud. We summarize the challenges of traditional threat detection efforts and explain how AWS helps you address them in a cloud environment. We also provide an overview of key AWS services that detect and remediate threats, such as Amazon GuardDuty. Be sure to also check out the corresponding threat detection chalk talk.

Threat detection and mitigation at AWS - SEC201 - Atlanta AWS Summit

Amazon Web Services

IT organizations often see governance control and innovation as competing priorities. Compliance-minded individuals may view rapid innovation as disruptive to the security, health, and stability of their organizations. Innovation-minded individuals may view governance control as inhibiting growth. With AWS, you don’t have to choose between governance control and growth—you can have both. In this session, we provide an overview of the common challenges in this area and share how to use AWS services to solve them. We explain how to establish guardrails to improve security and compliance while empowering builders to speed innovation.

The Zen of governance - Establish guardrails and empower builders - SVC201 - ...

Amazon Web Services

Customers trust AWS with mission-critical workloads because AWS is designed and built to deliver the most flexible, reliable, scalable, and secure cloud computing environment available today. AWS works to earn that trust by offering transparency, demonstrating consistency, and providing best practices to keep themselves secure. As customers adopt AWS, they traverse several trust-building milestones with due-diligence activities, such as assurance report and AWS Well-Architected Tool reviews and deep dives with AWS subject matter experts. This session addresses these milestones at common AWS adoption stages with examples, questions that customers often ask, and suggestions for how to get started.

Establishing AWS as a trusted partner - GRC325 - AWS re:Inforce 2019

Amazon Web Services

By applying microservices powered by serverless technology, you can innovate faster, at scale. In this session, we share insights into the Amazon Culture of Innovation and explain how the company went from four million to over 60 million deployments per year. We discuss how the company benefitted from its own key learnings through building modern apps at Amazon. We also discuss how Amazon transitioned from a monolithic application environment to an event-driven serverless microservices environment. Learn why more and more organizations are choosing the serverless operational model.

How to speed up and scale your innovation efforts - MAD203 - Chicago AWS Summit

Amazon Web Services

The Australian Cyber Security Centre (ACSC) awarded PROTECTED certification to AWS for 42 cloud services in the AWS Asia-Pacific (Sydney) Region. This is the highest data security certification available in Australia for the cloud, and AWS has the most PROTECTED services of any public cloud service provider. This session will cover the services that were certified, a reference architecture that allows you to build applications which handle highly sensitive government data, and the benefits this provides to public sector and commercial organisations in Australia. Presenter: Dr. John Hildebrandt, Senior Solutions Architect, AWS

AWS PROTECTED - Why This Matters to Australia.

Amazon Web Services

Castles in Castles - Secure Operational Scale - AWS Summit Sydney

Amazon Web Services

This session will show how Telstra uplifted their forensics and incident response capabilities by using AWS services and automation to deliver a scalable forensics platform. You will learn how to use AWS to simplify forensics and incident response in the cloud. Come see how automation enables investigators to easily retrieve the data they need to make decisions and respond faster during security incidents.

Automated Forensics and Incident Response on AWS - AWS Summit Sydney

Amazon Web Services

In this session you will learn about how the adoption of a Cloud Operating Model can accelerate your cloud transformation. You will learn about some of the effective Cloud Operating models (centralised, decentralised and distributed), how they affect organisational structures, and the role they play in digital transformation. Learn the role training plays in your accelerated transformation. Learn how to build and bootstrap a Cloud Center of Excellence (CCOE) and how they evolve as you transform your business in the adoption of cloud.

Cloud Operating Models for Accelerated Cloud Transformation - AWS Summit Sydney

Amazon Web Services

Nubank, Latin America’s first (and largest) cloud-native bank, has relied on AWS since day one. Operating in the cloud allows Nubank’s developers to create software that scales and quickly adapts to the changing needs of a complex market and a growing business. Nubank relies on services like Amazon EC2, Amazon DynamoDB, Amazon VPC, Amazon S3, and AWS CloudFormation to let 8.5 million customers make around 2.5 million purchases per day—all without a dedicated infrastructure team. Learn how Nubank’s fully automated, cell-based architecture allows the bank to provide the best customer experience while generating reliable audited financial records for regulators.

How Nubank is building a customer-obsessed bank - FSV201 - New York AWS Summit

Amazon Web Services

Speaker: Olivier Klein, Head of Emerging Technologies, AWS Building applications is changing rapidly and data is now key to success. The code that powers your distributed applications needs to be portable and embrace open-source frameworks to fast-track dev efforts and abstract away difficult concepts. A rapid expansion of ecosystems and cloud computing are driving an incredibly fast pace of innovation with rapid growth in cloud-connected systems and edge devices, whilst advances in machine learning create increasingly intelligent systems. So, in this fast-paced, complex world, what are the strategies and techniques that builders can use to create successful, data-driven platforms of the future? How can they embrace distributed computing models in a highly-available and scalable manner and derive business value through data-centric deployments? Join us for our Techfest keynote to hear about new concepts, services, open-source frameworks, and methodologies in conjunction with AWS to help builders innovate faster in a lean fashion.

AWS Summit Singapore 2019 | AWS Techfest Opening Keynote

AWS Summits

Pensi di essere pronto per i microservizi?

Amazon Web Services

This session introduces AWS Global Accelerator, a new global service that enables you to optimally route traffic to your multi-regional endpoints via static anycast IP addresses that are announced from the expansive AWS edge network. This session walks through the architecture, features, and customer use cases for Global Accelerator and content delivery use cases for Amazon CloudFront. We demonstrate how you can use Global Accelerator to achieve near-zero application downtime and reduce latency. This session is for those who want to accelerate performance of global applications, achieve high availability for mission-critical applications, and easily manage multiple IP addresses.

Introduction to AWS Global Accelerator - SVC212 - New York AWS Summit

Amazon Web Services

Architecting security & governance across your AWS environment

Amazon Web Services

Speaker: Alejandra Artiguez, FSI Compliance Program Manager, APAC, AWS Customer Speaker: Clara Lee Hui Theng, Head Technology & Operations, RHB Bank Berhad (Singapore) Security and Compliance is a shared responsibility between AWS and the customer. In this session we will examine the AWS Shared responsibility model, and AWS compliance programs customers can use to gain assurance of security controls in the cloud. We will dive-deep into a number of cloud native security services that customers can use to protect their critical systems when migrating to AWS. Finally we will review a next-generation approach to audit and continuous compliance leveraging automation to identify mis-configurations and perform automatic remediatation to protect your AWS workloads.

AWS Summit Singapore 2019 | Next Generation Audit & Compliance - Learn how RH...

AWS Summits

Drive Business Transformation Using ML/AI & Key Lessons Learnt AWS及客戶在AI/ML的數位運行過程中得到的重要經驗與學習 Level: 200, 中文演講講師: Young Yang, Solutions Architect, AWS & Tim Lin, Manager, Accton Technology 這場議程涵蓋了 Amazon.com & AWS 客戶在零售、醫療、智慧家庭的案例及反饋。最後，我們將分享我們從數位轉型之路所學到的 6 大重要經驗。聯繫銷售: https://aws.amazon.com/tw/contact-us/ 與銷售線上聊天: https://pages.awscloud.com/tw-hkt-sales-chat.html

AWS及客戶在AI/ML的數位運行過程中得到的重要經驗與學習

Amazon Web Services

AWS Managed Services (AMS) accelerates the cloud journey by taking ownership of the critical but undifferentiating task of infrastructure operations. As a result, customers can focus on organisational outcomes such as application modernization, cloud skills development, and process integration. Last year, data showed that customers were able to move up to 10X faster by leveraging AMS and a systems integrator together. With 88% of enterprise IT organisations pushing a cloud-first strategy and 86% of their infrastructure spend still on premises, more enterprises than ever could benefit from this service. Come learn how you could too. Speaker: James Windsor, Business Development Lead, Managed Services, AWS

Leaping Over the Skills Gap - Accelerate Your Journey with AMS

Amazon Web Services

Migration Disaster Recovery and Business Continuity in the Cloud

Amazon Web Services

Semelhante a Automated Security Remediation - AWS Summit Sydney (20)

Automated Security Remediation

How Millennium Management achieves provable security with AWS Zelkova - FSV30...

Sicurezza in AWS automazione e best practice

Threat detection and mitigation at AWS - SEC201 - Atlanta AWS Summit

The Zen of governance - Establish guardrails and empower builders - SVC201 - ...

Establishing AWS as a trusted partner - GRC325 - AWS re:Inforce 2019

How to speed up and scale your innovation efforts - MAD203 - Chicago AWS Summit

AWS PROTECTED - Why This Matters to Australia.

Castles in Castles - Secure Operational Scale - AWS Summit Sydney

Automated Forensics and Incident Response on AWS - AWS Summit Sydney

Cloud Operating Models for Accelerated Cloud Transformation - AWS Summit Sydney

How Nubank is building a customer-obsessed bank - FSV201 - New York AWS Summit

AWS Summit Singapore 2019 | AWS Techfest Opening Keynote

Pensi di essere pronto per i microservizi?

Introduction to AWS Global Accelerator - SVC212 - New York AWS Summit

Architecting security & governance across your AWS environment

AWS Summit Singapore 2019 | Next Generation Audit & Compliance - Learn how RH...

AWS及客戶在AI/ML的數位運行過程中得到的重要經驗與學習

Leaping Over the Skills Gap - Accelerate Your Journey with AMS

Migration Disaster Recovery and Business Continuity in the Cloud

Mais de Amazon Web Services

Il Forecasting è un processo importante per tantissime aziende e viene utilizzato in vari ambiti per cercare di prevedere in modo accurato la crescita e distribuzione di un prodotto, l’utilizzo delle risorse necessarie nelle linee produttive, presentazioni finanziarie e tanto altro. Amazon utilizza delle tecniche avanzate di forecasting, in parte questi servizi sono stati messi a disposizione di tutti i clienti AWS. In questa sessione illustreremo come pre-processare i dati che contengono una componente temporale e successivamente utilizzare un algoritmo che a partire dal tipo di dato analizzato produce un forecasting accurato.

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...

Amazon Web Services

La varietà e la quantità di dati che si crea ogni giorno accelera sempre più velocemente e rappresenta una opportunità irripetibile per innovare e creare nuove startup. Tuttavia gestire grandi quantità di dati può apparire complesso: creare cluster Big Data su larga scala sembra essere un investimento accessibile solo ad aziende consolidate. Ma l’elasticità del Cloud e, in particolare, i servizi Serverless ci permettono di rompere questi limiti. Vediamo quindi come è possibile sviluppare applicazioni Big Data rapidamente, senza preoccuparci dell’infrastruttura, ma dedicando tutte le risorse allo sviluppo delle nostre le nostre idee per creare prodotti innovativi.

Big Data per le Startup: come creare applicazioni Big Data in modalità Server...

Amazon Web Services

Ora puoi utilizzare Amazon Elastic Kubernetes Service (EKS) per eseguire pod Kubernetes su AWS Fargate, il motore di elaborazione serverless creato per container su AWS. Questo rende più semplice che mai costruire ed eseguire le tue applicazioni Kubernetes nel cloud AWS.In questa sessione presenteremo le caratteristiche principali del servizio e come distribuire la tua applicazione in pochi passaggi

Esegui pod serverless con Amazon EKS e AWS Fargate

Amazon Web Services

Vent'anni fa Amazon ha attraversato una trasformazione radicale con l'obiettivo di aumentare il ritmo dell'innovazione. In questo periodo abbiamo imparato come cambiare il nostro approccio allo sviluppo delle applicazioni ci ha permesso di aumentare notevolmente l'agilità, la velocità di rilascio e, in definitiva, ci ha consentito di creare applicazioni più affidabili e scalabili. In questa sessione illustreremo come definiamo le applicazioni moderne e come la creazione di app moderne influisce non solo sull'architettura dell'applicazione, ma sulla struttura organizzativa, sulle pipeline di rilascio dello sviluppo e persino sul modello operativo. Descriveremo anche approcci comuni alla modernizzazione, compreso l'approccio utilizzato dalla stessa Amazon.com.

Costruire Applicazioni Moderne con AWS

Amazon Web Services

L’utilizzo dei container è in continua crescita. Se correttamente disegnate, le applicazioni basate su Container sono molto spesso stateless e flessibili. I servizi AWS ECS, EKS e Kubernetes su EC2 possono sfruttare le istanze Spot, portando ad un risparmio medio del 70% rispetto alle istanze On Demand. In questa sessione scopriremo insieme quali sono le caratteristiche delle istanze Spot e come possono essere utilizzate facilmente su AWS. Impareremo inoltre come Spreaker sfrutta le istanze spot per eseguire applicazioni di diverso tipo, in produzione, ad una frazione del costo on-demand!

Come spendere fino al 90% in meno con i container e le istanze spot

Amazon Web Services

In recent months, many customers have been asking us the question – how to monetise Open APIs, simplify Fintech integrations and accelerate adoption of various Open Banking business models. Therefore, AWS and FinConecta would like to invite you to Open Finance marketplace presentation on October 20th. Event Agenda : Open banking so far (short recap) • PSD2, OB UK, OB Australia, OB LATAM, OB Israel Intro to Open Finance marketplace • Scope • Features • Tech overview and Demo The role of the Cloud The Future of APIs • Complying with regulation • Monetizing data / APIs • Business models • Time to market One platform for all: a Strategic approach Q&A

Open banking as a service

Amazon Web Services

Per creare valore e costruire una propria offerta differenziante e riconoscibile, le startup di successo sanno come combinare tecnologie consolidate con componenti innovativi creati ad hoc. AWS fornisce servizi pronti all'utilizzo e, allo stesso tempo, permette di personalizzare e creare gli elementi differenzianti della propria offerta. Concentrandoci sulle tecnologie di Machine Learning, vedremo come selezionare i servizi di intelligenza artificiale offerti da AWS e, anche attraverso una demo, come costruire modelli di Machine Learning personalizzati utilizzando SageMaker Studio.

Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...

Amazon Web Services

Con l'approccio tradizionale al mondo IT per molti anni è stato difficile implementare tecniche di DevOps, che finora spesso hanno previsto attività manuali portando di tanto in tanto a dei downtime degli applicativi interrompendo l'operatività dell'utente. Con l'avvento del cloud, le tecniche di DevOps sono ormai a portata di tutti a basso costo per qualsiasi genere di workload, garantendo maggiore affidabilità del sistema e risultando in dei significativi miglioramenti della business continuity. AWS mette a disposizione AWS OpsWork come strumento di Configuration Management che mira ad automatizzare e semplificare la gestione e i deployment delle istanze EC2 per mezzo di workload Chef e Puppet. Scopri come sfruttare AWS OpsWork a garanzia e affidabilità del tuo applicativo installato su Instanze EC2.

OpsWorks Configuration Management: automatizza la gestione e i deployment del...

Amazon Web Services

Vuoi conoscere le opzioni per eseguire Microsoft Active Directory su AWS? Quando si spostano carichi di lavoro Microsoft in AWS, è importante considerare come distribuire Microsoft Active Directory per supportare la gestione, l'autenticazione e l'autorizzazione dei criteri di gruppo. In questa sessione, discuteremo le opzioni per la distribuzione di Microsoft Active Directory su AWS, incluso AWS Directory Service per Microsoft Active Directory e la distribuzione di Active Directory su Windows su Amazon Elastic Compute Cloud (Amazon EC2). Trattiamo argomenti quali l'integrazione del tuo ambiente Microsoft Active Directory locale nel cloud e l'utilizzo di applicazioni SaaS, come Office 365, con AWS Single Sign-On.

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Amazon Web Services

Computer Vision con AWS

Amazon Web Services

Amazon Web Services e VMware organizzano un evento virtuale gratuito il prossimo mercoledì 14 Ottobre dalle 12:00 alle 13:00 dedicato a VMware Cloud ™ on AWS, il servizio on demand che consente di eseguire applicazioni in ambienti cloud basati su VMware vSphere® e di accedere ad una vasta gamma di servizi AWS, sfruttando a pieno le potenzialità del cloud AWS e tutelando gli investimenti VMware esistenti. Molte organizzazioni sfruttano i vantaggi del cloud migrando i propri carichi di lavoro Oracle e assicurandosi notevoli vantaggi in termini di agilità ed efficienza dei costi. La migrazione di questi carichi di lavoro, può creare complessità durante la modernizzazione e il refactoring delle applicazioni e a questo si possono aggiungere rischi di prestazione che possono essere introdotti quando si spostano le applicazioni dai data center locali.

Database Oracle e VMware Cloud on AWS i miti da sfatare

Amazon Web Services

Molte aziende oggi, costruiscono applicazioni con funzionalità di tipo ledger ad esempio per verificare lo storico di accrediti o addebiti nelle transazioni bancarie o ancora per tenere traccia del flusso supply chain dei propri prodotti. Alla base di queste soluzioni ci sono i database ledger che permettono di avere un log delle transazioni trasparente, immutabile e crittograficamente verificabile, ma sono strumenti complessi e onerosi da gestire. Amazon QLDB elimina la necessità di costruire sistemi personalizzati e complessi fornendo un database ledger serverless completamente gestito. In questa sessione scopriremo come realizzare un'applicazione serverless completa che utilizzi le funzionalità di QLDB.

Crea la tua prima serverless ledger-based app con QLDB e NodeJS

Amazon Web Services

Con l’ascesa delle architetture di microservizi e delle ricche applicazioni mobili e Web, le API sono più importanti che mai per offrire agli utenti finali una user experience eccezionale. In questa sessione impareremo come affrontare le moderne sfide di progettazione delle API con GraphQL, un linguaggio di query API open source utilizzato da Facebook, Amazon e altro e come utilizzare AWS AppSync, un servizio GraphQL serverless gestito su AWS. Approfondiremo diversi scenari, comprendendo come AppSync può aiutare a risolvere questi casi d’uso creando API moderne con funzionalità di aggiornamento dati in tempo reale e offline. Inoltre, impareremo come Sky Italia utilizza AWS AppSync per fornire aggiornamenti sportivi in tempo reale agli utenti del proprio portale web.

API moderne real-time per applicazioni mobili e web

Amazon Web Services

Molte organizzazioni sfruttano i vantaggi del cloud migrando i propri carichi di lavoro Oracle e assicurandosi notevoli vantaggi in termini di agilità ed efficienza dei costi. La migrazione di questi carichi di lavoro, può creare complessità durante la modernizzazione e il refactoring delle applicazioni e a questo si possono aggiungere rischi di prestazione che possono essere introdotti quando si spostano le applicazioni dai data center locali. In queste slide, gli esperti AWS e VMware presentano semplici e pratici accorgimenti per facilitare e semplificare la migrazione dei carichi di lavoro Oracle accelerando la trasformazione verso il cloud, approfondiranno l’architettura e dimostreranno come sfruttare a pieno le potenzialità di VMware Cloud ™ on AWS.

Database Oracle e VMware Cloud™ on AWS: i miti da sfatare

Amazon Web Services

Tools for building your MVP on AWS

Amazon Web Services

How to Build a Winning Pitch Deck

Amazon Web Services

Building a web application without servers

Amazon Web Services

Fundraising Essentials

Amazon Web Services

AWS_HK_StartupDay_Building Interactive websites while automating for efficien...

Amazon Web Services

Amazon Elastic Container Service (Amazon ECS) è un servizio di gestione dei container altamente scalabile, che semplifica la gestione dei contenitori Docker attraverso un layer di orchestrazione per il controllo del deployment e del relativo lifecycle. In questa sessione presenteremo le principali caratteristiche del servizio, le architetture di riferimento per i differenti carichi di lavoro e i semplici passi necessari per poter velocemente migrare uno o più dei tuo container.

Introduzione a Amazon Elastic Container Service

Amazon Web Services

Mais de Amazon Web Services (20)

Come costruire servizi di Forecasting sfruttando algoritmi di ML e deep learn...

Big Data per le Startup: come creare applicazioni Big Data in modalità Server...

Esegui pod serverless con Amazon EKS e AWS Fargate

Costruire Applicazioni Moderne con AWS

Come spendere fino al 90% in meno con i container e le istanze spot

Open banking as a service

Rendi unica l’offerta della tua startup sul mercato con i servizi Machine Lea...

OpsWorks Configuration Management: automatizza la gestione e i deployment del...

Microsoft Active Directory su AWS per supportare i tuoi Windows Workloads

Computer Vision con AWS

Database Oracle e VMware Cloud on AWS i miti da sfatare

Crea la tua prima serverless ledger-based app con QLDB e NodeJS

API moderne real-time per applicazioni mobili e web

Database Oracle e VMware Cloud™ on AWS: i miti da sfatare

Tools for building your MVP on AWS

How to Build a Winning Pitch Deck

Building a web application without servers

Fundraising Essentials

AWS_HK_StartupDay_Building Interactive websites while automating for efficien...

Introduzione a Amazon Elastic Container Service

Automated Security Remediation - AWS Summit Sydney

1. S U M M I T SYDNEY

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Automated security remediation Michael Stringer Solutions Architect Amazon Web Services Steve Stojanovski Head of Security, Education & Culture Australia Post Ahmed Al-Anim Cloud Security Specialist Australia Post

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Why do I need guardrails in my AWS accounts? and scales on AWS You need your security to keep pace with your agility As your business builds

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T • Automation removes the potential for human error • It works around the clock, and on weekends and holidays • Automation enables a self-healing environment • Multiple incidents can be responded to in parallel • It allows InfoSec and other teams to better utilise their time for high-level security tasks • All easily built and scaled using the power of AWS! Benefits of automating your security remediation

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Other Log Sources AWS Lambda Amazon Simple Notification Service Build repeatable serverless automation patterns AWS Services Amazon CloudWatch Events Events RemediationNotifiers

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Amazon CloudWatch Automate with integrated services Amazon CloudWatch Events AWS LambdaAmazon GuardDuty CloudWatch Event AWS Lambda Lambda Function

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T • Self-funded government business • Over 70,000 employees in our extended workforce • Australia's largest retail network with 4,356 post offices • We deliver to 11.9 million addresses • We deliver more than 1.3 million parcels across Australia every day About Australia Post

17. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T How we build • Agile methodology, iterative development practices • Hundreds of developers • Continuous integration and delivery with 8 – 12 production deployments per day • Co-located teams – developers, business analysts, PMs, business stakeholders and security • Literally hundreds of AWS configuration changes, every single day

19. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Step 1: Detect Step 2: Assess Step 4: Notify How can we detect specific events of interest, such as key configuration changes in AWS? How can we assess selected assets against known security baseline policies? Step 3: Remediate How can we treat identified deviations from security policy? How do we notify the affected people and maintain traceability? The problem(s)

20. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Detect: Examples AWS CloudTrail configuration changes Route Table changes AWS RDS encryption enabled Security Group ingress rules

24. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Challenges Stakeholder communication and management Scalability of developer education program Ability to influence upstream changes Established and mature security baselines

25. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.S U M M I T Try sending the output of AWS monitoring and security services into the same serverless pattern you have seen here today Look for AWS Security Blog posts and Quick Starts for more information on building automated security remediation Adopt automated security remediation as part of your workflow Call to action Go build and let us know what you come up with!

Automated Security Remediation - AWS Summit Sydney

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Automated Security Remediation - AWS Summit Sydney

Semelhante a Automated Security Remediation - AWS Summit Sydney (20)

Mais de Amazon Web Services

Mais de Amazon Web Services (20)

Automated Security Remediation - AWS Summit Sydney