WWHF | Why the Basics are Hard — AWS Cloud Security Fundamentals Andrew Krug

•Recorded 2021-04-21
0:00:00 - PreShow Banter™ — Saddled With a Shoe Store
0:05:33 - LINK: PreShow Banter™ — Con-A-Thon Registration -
0:06:04 - FEATURE PRESENTATION: Why the Basics are Hard - AWS Cloud Security Fundamentals
0:06:51 - About Andrew Krug
0:08:15 - Agenda
0:10:29 - AWS Cloud Problems to Solve
0:11:31 - Heroes of AWS Cloud
0:13:17 - Taking the First Step
0:14:16 - What are Fundamentals anyway?
0:16:01 - Defining Greatness for Cloud Security
0:17:32 - Famous Data Breaches
0:23:45 - Common Themes Amongst Famous Data Breaches
0:26:49 - Stages of InfoSec Grief
0:28:56 - Palo Alto State of Cloud Native Security Report
0:29:55 - Training and Tools
0:30:21 - Well Architected Framework
0:31:30 - IAM
0:37:30 - Cool Conditions
0:41:03 - AWS Permissions Boundaries
0:43:21 - AWS Organizations
0:46:46 - Guardrail #1 - Stop Users from Stopping Monitoring
0:47:22 - Guardrail #2 - Restrict Regions
0:47:49 - Guardrail #3 - Restrict Instance Sizing
0:48:16 - Least Privilege
0:51:43 - Breaches Prevented?
0:53:31 - Favorite Auditing Tools - Cloudmapper
0:58:02 - Detection and Response
0:59:59 - Wrap-up
1:00:59 - QnA

Andrew’s Securing The Cloud Class:

PreShow Banter™ — Con-A-Thon Registration -

**All YouTube ad revenue donated to the Innocent Lives Foundation**

[brodude]

I have been building cloud security for a startup and I didn't know too much about the cloud when I joined. The issues you bring up are so relatable. The WAF used to allow requests with over 8kb of body to bypass all checks by default. You have to do detailed research about every component and a lot of sites give bad or mediocre advice. There's a million ways for privilege escalation to occur. Some resources have global arn and the names can be hijacked by bad actors during deployment. How do you even give cloud access to your CI/CD pipeline securely? Tag-based policies are a nightmare. Very stressful, there's so many problems to solve.