Demo - Amazon S3 security posture management and threat detection
summary
Amazon GuardDuty adds S3 protection (launched July 2020) and can be auto-enabled across Organizations with a 30-day free trial for new accounts; it ingests S3 data events without enabling per-bucket data event logging to avoid extra costs. It uses Zelkova to evaluate bucket policies and ACLs for effective public access and machine learning that profiles roles, APIs and locations to surface anomalies like large GetObject reads from Indonesia, unusual PutBucketPolicy/DeleteBucketPolicy calls, or data exfiltration patterns.
AI-written summary · about
chapters (4)
related talks
32mAdvanced threat detection and response on AWS
56mContinuous innovation in AWS detection and response services
51mInnovations in AWS detection and response services
38mFully managed malware and antivirus protection for Amazon S3
29mAutomating Threat Detection and Remediation
53mExplore cloud workload protection with GuardDuty, feat. Booking.com
55mStreamline security analysis with Amazon Detective
54mHow to layer threat detection & monitoring security services