There’s a new sheriff in town; dynamic security group recommendations with Grouper and Dredge
summary
Grouper ingests application metadata and, via Dredge mapping VPC flow logs to live instances, generates concrete AWS security group recommendations (tighten specific ports, remove unused rules). It runs across >100 AWS accounts, surfaces a health score, and pushes recommendations to app owners; it reduces overly permissive rules and cleans cruft but remains 50-rule limit constrained and best-effort when flows are rare. Planned additions include canarying config changes and automatic rollback to avoid breaking infrequently exercised dependencies.
AI-written summary · about
chapters (8)
- 0:00Intro
- 0:37Security Groups.
- 7:52Migration Compromises.
- 10:29Netflix Culture.
- 12:35Security Group Maturity.
- 17:33How Grouper works.
- 24:10Challenges.
- 27:51Future State.
related talks
51mInnovations in AWS detection and response services
55mStreamline security analysis with Amazon Detective
55mModernizing your security and GRC strategy with AWS
56mContinuous innovation in AWS detection and response services
01h 02mSecuring data and democratizing the alert landscape
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
34mLayering AWS security services to automate incident response
38mBuilding Security at Speed