Initiate Edinburgh 2019 - Top Cloud Security Myths Dispelled

© 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Top Cloud Security Myths - Dispelled!
Declan Brady: Manager Solutions Architecture
World Wide Public Sector - Dublin

SECURITY IS
JOB ZERO

The three stages of cloud security curiosity
General cloud
security
Specific service
security
Data
security
New to cloud
and / or
business teams
Experienced in cloud
and / or
technology teams
Advanced in cloud
and / or
risk teams

Cloud security
Service security
Data
security

Myth 01
“The public cloud is not as secure as
my on-premises infrastructure and not
as secure as my private cloud.”

Zoom In: AWS Region Zoom In: AWS AZ
Sample Region
Data centre Data centre
Data centre
Sample Availability Zone
Availability
Zone B
Availability
Zone A
Availability
Zone C

01: AWS security of the cloud and in the cloud
Visible AutomatedPhysical
AWS’s global infrastructure is built to meet the requirements of the
most security-sensitive organizations in the world

Myth 02
“When I put my data in the cloud I
lose ownership of it, and it may move
across national borders.”

02: You own and control your content
Access TraceabilityOwnership
You retain ownership and control of your content, and you choose
which region that content resides in

Myth 03
“I am a highly regulated business and I
cannot use the cloud because of my
compliance requirements.”

03: AWS global compliance program
Countries Enterprise
agreement
Certifications
Our security assurance program meets or exceeds industry,
country-specific, and global security requirements

Myth 04
“My business requires sensitive
personal data, I cannot use the cloud.”

04: Using encryption on AWS
AWS KMS High
standards
Ubiquitous
AWS encryption services are integrated into dozens of our services
and meet the strictest industry requirements

Myth 05
“I have a requirement for security
testing, I cannot do that in the cloud.”

05: Security testing on AWS
Seek
approval
Or use
pre-approved
Shared
responsibility
AWS permits security testing of your resources in line with our
acceptable usage policy, and we provide tools to help you

Myth 06
“All of my operating systems are
patched automatically in the cloud.”

06: Patch management on AWS
How we help Our
responsibility
Your
responsibility
You are responsible for patching operating systems that you
manage. AWS is responsible for patching services that we manage

Myth 07
“I cannot use the cloud to store
sensitive data because everyone will
have access to it.”

07: How to secure data in Amazon Simple Storage
Service (Amazon S3)
Notify RespondProtect
Amazon S3 and our other storage services are secure by default.
Customers control who can access their data, and AWS provides
multiple tools so you can understand how access is configured

Myth 08
“I hear about secret keys being stolen,
the way you grant access is not
secure.”

08: How to protect AWS credentials
Amazon
GuardDuty
Multi-factor
authentication
AWS provides a number of tools to protect your identity and access
credentials and to help you detect misuse
Temporary
access

Myth 09
“I cannot control the deletion of my
data and I cannot verify it has been
deleted.”

09: How AWS manages data deletion
Physical ValidatedLogical
When you delete your data we take multiple steps to wipe it and
eventually destroy it. This process is validated by independent
third parties

Myth 10
“Serverless services are not secure
because they are shared between
customers.”

10: How AWS protects serverless services
Identity Limited
surface
When you use AWS’s serverless services you inherit the multiple
layers of strong security controls that are built into our core services
Building
blocks

Myth 11
“The government can access my data
at any time.”

11: How AWS manages information requests
Notification EncryptionValid requests
Amazon does not disclose customer information unless we’re
required to do so to comply with a legally valid and binding order.
Where we need to act publicly to protect customers, we do.

Myth 12
“A malicious insider can look at my
data via your shared administrative
access.”

12: How AWS manages administrative access
Process
controls
Technology
controls
AWS strictly controls our infrequent administrative access to
services. This process has executive oversight within AWS and is
validated by independent third parties
Automation

Myth 13
“It is possible to bypass your isolation
technology and access someone else’s
data.”

13: How AWS secures the hypervisor
Experience
AWS has over a decade of experience securing our virtualization
technology. We provide a deep level of isolation within the cloud
Customization
& innovation
Isolation

Security benefits of the AWS cloud
Automate
with deeply
integrated
security
services
Inherit
global
security and
compliance
controls
Highest
standards
for privacy
and data
security
Largest
network
of security
partners and
solutions
Scale with
superior
visibility and
control

SECURITY IS
JOB ZERO
http://amzn.to/2FZdEgH

“CIOs and CISOs need to stop obsessing over
unsubstantiated cloud security worries, and instead
apply their imagination and energy to developing new
approaches to cloud control, allowing them to securely,
compliantly, and reliably leverage the benefits of this
increasingly ubiquitous computing model.”
Source: “Clouds Are Secure: Are You Using Them Securely?”

Thank you!

The AWS Way to Smart Cities
Chris Masey
Non Profit Sector Account Manager

Smart City – what is it?
Customer success stories
Cloud Computing & AWS
Voice – the new frontier
Q & A
Agenda

The evolution of a Smart City
The journey towards citizen-centricity
1.0 2.0
Emergence of IoT
Technologies
Overwhelming
amounts of Data
Strategic
roadmaps
Experimental pilot
Solutions Using a Data-Driven
strategy
Focusing on a
Citizen- centric
approach
Graph :

ACCORDING TO
THE UK GOV
ACCORDING TO
THE EU
ACCORDING TO
THE LITERATURE
’…a Smart City should enable
every citizen to engage with all
the services on offer, public as
well as private, in a way best
suited to his or her needs.’
-- Smart Cities Background Paper
Gov.uk (2013)
’…a Smart City is a city seeking to
address public issues via ICT-based
solutions on the basis of a multi-
stakeholder, municipally based
partnership.’
-- Mapping Smart Cities In The EU: Study
– European Parliament (2014).
‘…a City may be called ‘Smart’
when investments in human and
social capital and traditional and
modern communication
infrastructure fuel sustainable
economic growth and a high
quality of life, with a wise
management of natural resources
through participatory governance.’
-- Schaffers et al. (2011)
Mobility &
Urban
Planning
Innovation
Citizen
Centric
Services

Smart City is a horizontalS M A R T C I T I E S

T E C H N O L O G I E S
Internet of
things
Augmented
reality
VoiceData lakesArtificial intelligence /
machine learning

Companies want more value from their data
Complications:
Siloed approaches don’t work anymore
It’s too expensive and limiting to store data
on-premises
Data is:
Implication:
A new approach is needed to extract insights
and value
Growing
exponentially
From new
sources
Increasingly
diverse
Used by
many people
Analysed by
many applications

Cloud Data Lakes are the future
Customers want:
To eliminate siloes of data
To move to a single store, i.e. a data lake in the
cloud
To store data securely in standard formats
To grow to any scale, with low costs
To analyse their data in a variety of ways
To have real-time analytics
To predict future outcomes
Data lake

Data warehouse
Business intelligence
OLTP ERP CRM LOB
• Relational and nonrelational data
• TBs–EBs scale
• Diverse analytical engines
• Low-cost storage & analytics
Devices Web Sensors Social
Data lake
Big data processing,
real-time, machine learning
Data Lakes on the rise

Internet of Things (IoT) is a set
of products, services and
processes that converts real-
world things into digital
equivalents for data processing.

The IoT Stack
AWS IoT Device Management
AWS IoT Core – secure device
connectivity and messaging
Connectivity
Edge
Sense Amazon Free RTOS
AWS IoT Greengrass
Store
Data
Platform AWS IoT SiteWise & IoT Events
AWS IoT Analytics
Amazon SageMakerAI / ML
Analytics
IoTDeviceDefender
AuditandProtection

© 2019, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
N E W P O R T
ARRIVE IN T HE
FUT URE , T ODAY
“We were able to complete a full
evaluation ahead of schedule and quickly
see our smart city initiative, the Newport
Intelligence Hub, coming to light.”
Shaun Powell
Shaun Powell, Intelligence Hub Manager, Newport City Council

of digital transformation initiatives
supported by AI in 201940% —IDC 2018
Centerpiece for digital transformation
Customer
experience
Business
operations
Decision
making
Innovation Competitive
advantage

ML frameworks
& infrastructure
AI services
Vision | Documents | Speech | Language | Chatbots | Forecasting | Recommendations
ML services
Data labeling | Pre-built algorithms and notebooks | One-click training and deployment
Build, train, and deploy machine learning models fast
Easily add intelligence to applications without machine learning skills
Flexibility and choice, highest-performing infrastructure
Support for ML frameworks | Compute options purpose-built for ML
Amazon ML: Broadest and deepest functionality

Ambient Computing
Howweinteractwithmachines?
Character
GUI
Web
Mobile
VUI
1970’s 1980’s 1990’s 2000’s NOW

Language Support:
 English (Australia)
 English (Canada)
 English (India)
 English (UK)
 English (US)
 French (FR)
 German
 Italian
 Japanese
 Spanish (ES)
 Spanish (MX)
“It's giving more liberal access to people that are vulnerable or at
home or are lonely, or partially satisfied," says Grant. "It gives it's
a much more democratic way of getting people services they
want, rather than them having to phone us up or even to come in.
It's pushing that cost down, but also the value up of other
interactions with the council.”
-- Aylesbury Vale District Council
Access information using voice
Natural way humans interact

And interactively… with Augmented Reality

The Culture of Innovation at Amazon:
Driving Customer Success
David Bibbs
Account Manager Public Sector

Culture of
Innovation
Enabling Innovation
for Everyone

Jeff Bezos
CEO, Amazon.com
“Invention comes in many
forms and at many scales. The
most radical and
transformative of inventions
are often those that empower
others to unleash their
creativity – to pursue their
dreams.”

Amazon Started with Books…

Innovation has Manifested Across Many Domains…
Drone Development
Advanced Shopping
Kindle Reader
Home
Entertainment
Grocery Delivery
Video Streaming
Home Automation Cloud Computing

« …innovation is now recognised as
the single most important ingredient
in any modern economy…In short, it
is innovation – more than the
application of capital and labor –
that makes the world go round »

OUR MISSION
We want to be earth’s most
customer centric company

OUR COMMITMENT
We make our customers’ lives
easier

WHERE INNOVATION STARTS
We start with the customer and
work backwards

Our beliefs for
building a culture
of innovation
»Customer obsession
“Start every process with the customer and work backwards”
»Long term thinking
“Be stubborn on the vision but flexible on the details”
»If you want to be inventive, you have to be willing to fail
“We are willing to go down on a bunch of dark alleys and occasionally we
find something that really works”
»You have to be willing to be misunderstood for a long
time
“We are very comfortable being misunderstood”

Amazon’s Growth Flywheel
Value
Selection
Convenience

STUBBORN ON THE VISION
But flexible on the details

WILLINGNESS TO BE
MISUNDERSTOOD
For a long period of time

» Mechanisms
Working Backwards Process
Press Release
FAQ & Visualisations
» Architecture
Micro-services Architectures
Loosely Coupled Applications
Self Service Platforms – No Gatekeepers
» Culture
Our People: we hire builders, innovators, entrepreneurs
Our Beliefs: Amazon Leadership Principles
» Organisation
Experimentation
Two Pizza Teams
How do we
organise for
innovation?

ALWAYS WORK
BACKWARDS
FROM THE
CUSTOMER
CUSTOMER OBSESSION

Write the press release

Include both Customer FAQs and Stakeholder
FAQs
Include the hard questions
Share your press release early to gather
questions
Customer FAQs - Customers ask the best questions
because they are fundamental to any experience:
How much will this cost?
What type of support will I get?
Where can I find this?
How do I cancel this?
Stakeholder FAQs - What will your VP, partner teams,
internal Amazon resources ask about your idea?
What is the underlying technology?
What will customers be most disappointed
about in your initial release?
How does this impact current systems?
What is the business impact?
How do we know what the customer needs?
How can we launch this more quickly?
What is provoking the most internal debate?
write the FAQs

Visualize the user interaction and
write the manual

» Mechanisms
Press Release
FAQs & Visualisations
» Architecture
» Culture
» Organisation
Experimentation
Two Pizza Teams
How do we
organise for
innovation?

“We have the good fortune of a large, inventive team and a
patient, pioneering, customer-obsessed culture – great
innovations, large and small, are happening everyday on behalf of
customers, and at all levels throughout the company. This
decentralized distribution of invention throughout the company –
not limited to the company’s senior leaders – is the only way to
get robust, high-throughput innovation. What we’re doing is
challenging and fun – we get to work in the future.”
Jeff Bezos
2014 Annual Letter to Shareholders

Amazon.com Services (theory)

Single-purpose
Connect only through
APIs
Connect over HTTPS
Largely “black boxes” to
each other
“Microservices”

Self-service Platforms without Gatekeepers
“We are creating powerful self-
service platforms that allow
thousands of people to boldly
experiment and accomplish things
that would otherwise be
impossible or impractical."

HYBRID
ARCHITECTURE
Data Backups
Integrated
App
Deployments
Direct
Connect
Identity
Federation
Integrated
Resource
Management
Integrated
Networking
MARKETPLACE
Business
Apps
DatabasesDevOps
Tools
NetworkingSecurity Storage
Business
Intelligence
ENTERPRISE
APPS
Virtual
Desktops
Sharing &
Collaboration
Corporate
Email
Backup
IoT
Rules
Engine
Device
Shadows
Device
SDKs
Registry
Device
Gateway
DEVELOPMENT & OPERATIONSMOBILE SERVICESAPP SERVICESANALYTICS
Data
Warehousing
Hadoop/
Spark
Streaming Data
Collection
Machine
Learning
Elastic
Search
Queuing &
Notifications
Workflow
Search
Email
Transcoding
One-click App
Deployment
Identity
Sync
Mobile App
Testing
Push
Notifications
DevOps Resource
Management
Application Lifecycle
Management
Containers
Triggers
Resource
Templates
API
Gateway
Streaming Data
Analysis
Business
Intelligence
Mobile
Analytics
Single Integrated
Console
TECHNICAL & BUSINESS SUPPORT
Support
Professional
Services
Account
Management
Partner
Ecosystem
Solutions
Architects
Training &
Certification
Security &
Billing Reports
GAMING
3D Game
Engine
Character
Designer
Multiplayer
Service
Twitch
Integration
Cloud
Integration
Regions
Availability
Zones
Points of
Presence
INFRASTRUCTURE
CORE SERVICES
Compute
VMs, Auto-scaling, Load Balancing,
Containers, Cloud functions
Storage
Object, Blocks, File,
Archivals, Import/Export
Databases
Relational, NoSQL,
Caching, Migration
CDN Networking
VPC, DX, DNS
Access Control
Identity
Management
Key
Management &
Storage
Monitoring
& Logs
SECURITY & COMPLIANCE
Resource &
Usage Auditing
Configuration
Compliance
Web application
firewall
Assessment and
reporting
AWS: Most Robust, Fully-Featured Technology Infrastructure Platform

Public Sector Innovations Powered by AWS
70PB of Earth data
Analyzes 75B financial
record daily
Enables 1000s of online
businesses in Asia
Unite a global research
community
Digital services for
constituents
Fighting child trafficking

» Mechanisms
Press Release
FAQs & Visualizations
» Architecture
» Culture
» Organisation
Experimentation
Two Pizza Teams
How do we
organise for
innovation?

Every one of us
is a leader on
our mission.

The
Institutional
YES!

Learn from Failures…

Decompose to Primitive Problems
Single-threaded Focus
Enables Self-directed Teams
Fosters Ownership & Autonomy

INNOVATION AT THE EDGE
Enable everyone to innovate

Interested in innovating like Amazon?
Let’s build something people will love.
EXPLORE innovation at
Amazon – the principles
behind our organisation,
architecture, mechanisms
and culture
DEFINE a new service or
enhance a digital experience that
will delight your customers; start
with the customer and work
backwards
BUILD, prototype and
experiment, in the cloud
to bring your new
digital offering to life;
test it with your
customers
1
2
3

How do we
organise for
innovation?
» Mechanisms
Press Release
FAQs & Visualisations
» Architecture
» Culture
» Organisation
Experimentation
Two Pizza Teams

AMAZON’S INNOVATION EQUATION
f(innovation) = (org * arch)
(mechanisms * culture)

We had three big ideas at
Amazon that we have stuck
with for 20+ years, and they
are the reason we are
successful: put the customer
first, invent, and be patient.
Jeffrey P. Bezos
Founder and Chief Executive Officer
Amazon.com, Inc.

Initiate Edinburgh 2019 - Top Cloud Security Myths Dispelled

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Initiate Edinburgh 2019 - Top Cloud Security Myths Dispelled

Semelhante a Initiate Edinburgh 2019 - Top Cloud Security Myths Dispelled (20)

Mais de Amazon Web Services

Mais de Amazon Web Services (20)

Initiate Edinburgh 2019 - Top Cloud Security Myths Dispelled