Build secure global connectivity with AWS
summary
Shows how to build a global, segmented WAN with Cloud WAN (core network, JSON policy, regional core edges, segments and attachments) and insert inspection VPCs (Network Firewall or GWLB) for traffic inspection; uses Direct Connect or VPN + TGW peering for hybrid sites. Introduces VPC Lattice for service networks, DNS-based discovery (Lattice FQDNs, 169.254/IPv6 targets), IAM auth policies to enforce per-service zero trust and avoid private NAT for overlapping IPs. Adds AWS Verified Access as a reverse proxy that integrates IdP and device posture, uses Hyperplane ENIs, and pairs with WAF for user-to-service zero trust.
AI-written summary · about
chapters (5)
- 0:00Session introduction
- 2:08Security fundamentals
- 6:25Global networks with Cloud WAN
- 18:45Service security with Lattice
- 45:50End-user access and conclusion
related talks
29mBuild resilient and secure global cloud networks
58mAWS Cloud WAN service insertion: Simplifying network inspection
17mAWS On Air ft. Cloud WAN & Direct Connect SiteLink
01h 04mnetworking fundamentals: Set up your global network
32mGet started with AWS networking: Set up, secure, & monitor global networks
44mElevando la postura de seguridad con AWS Network Firewall
28mAWS Networking Fundamentals
46mAWS Networking : Building your Network from 0 to Millions of Clients