AWS re:Invent 2019
Download as PPTX, PDF0 likes135 views
The document announces several new AWS security services that were revealed at re:Invent 2019, including Amazon S3 Access Points for managing data access, IAM Access Analyzer for identifying accessible resources, Amazon CodeGuru for finding code issues, Amazon Fraud Detector for fraud detection, Amazon Detective for security investigations, and AWS Nitro Enclaves for isolated execution environments. It also provides links to re:Invent workshop and presentation pages related to security topics.
AWS re:Invent 2019
- 3. Workshops • Amazon SageMaker Workshop • https://sagemaker-workshop.com/ • CI/CD WITH AWS FARGATE • https://cicd-with-aws-fargate-lambda-bg.workshop.aws/en • AMAZON MQ WORKSHOP • https://master.d1l1ei0bin3mnd.amplifyapp.com/ • re:Invent 2019 - Elasticsearch Workshops • https://reinvent.aesworkshops.com/ • WPS311 - How public sector organizations enforce governance & compliance • https://www.portal.reinvent.awsevents.com/connect/sessionDetail.ww?SESSION_ID =96294&csrftkn=C8ZG-OFM3-X17I-HKZQ-Z6DW-MUTG-DF9X-JUUP
- 5. AWS re:Invent 2019 Security Announcements Summary • Along with the bunch of ML products Amazon has announced the following #security services: • Amazon S3 Access Points: Amazon S3 Access Points, a feature of S3, simplifies managing data access at scale for applications using shared data sets on S3. Access points are unique hostnames that customers create to enforce distinct permissions and network controls for any request made through the access point. • IAM Access Analyzer: IAM Access Analyzer generates comprehensive findings that identify resources that can be accessed from outside an AWS account. IAM Access Analyzer does this by evaluating resource policies using mathematical logic and inference to determine the possible access paths allowed by the policies. • Amazon CodeGuru (Preview): With CodeGuru, you can find and fix code issues such as resource leaks, potential concurrency race conditions, and wasted CPU cycles. • Amazon Fraud Detector: Amazon Fraud Detector is a fully managed service that makes it easy to identify potentially fraudulent online activities such as online payment fraud and the creation of fake accounts. • Amazon Detective: Amazon Detective automatically collects log data from your AWS resources and uses machine learning, statistical analysis, and graph theory to build a linked set of data that enables you to easily conduct faster and more efficient security investigations. • AWS Nitro Enclaves: Enclaves offers an isolated, hardened, and highly constrained environment to host security-critical applications. Nitro Enclaves includes cryptographic attestation for your software, so that you can be sure that only authorized code is running, as well as integration with the AWS Key Management Service, so that only your enclaves can access sensitive material.
- 7. AWS re:Invent 2019 Breakout Sessions Security, Compliance, and Identity https://www.youtube.com/playlist?list=PL2y QDdvlhXf9Ub-ekxAq0wMJpslV562SP