Journeys to Zero Trust on AWS
summary
AWS lays out concrete Zero Trust pieces you can deploy now: AWS Verified Access brokers identity and device signals from Okta, Ping, CrowdStrike and Jamf and enforces per‑app Cedar policies with centralized logs sent to SIEMs. VPC Lattice removes service networking complexity, authenticates each east‑west request with short‑lived IAM credentials, and closes open ports. Amazon Verified Permissions uses the open source Cedar language for expressive, provable, high‑performance authorization. Several services hit GA this spring and IAM evaluation runs at roughly a billion calls per second.
AI-written summary · about
chapters (9)
- 0:00Introduction to zero trust
- 1:27Zero trust motivations
- 5:01Zero trust guiding principles
- 8:20Use cases and primitives
- 15:25AWS verified access
- 20:20Amazon VPC lattice
- 24:58Cedar policy language
- 29:37Verified permissions
- 31:59Future vision
related talks
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
17mZero Trust access with zero waiting, zero pain, and zero compromises
47mSecure access to AWS with ZTNA 2.0
59mProvably secure authorization
01h 02mIntroduction to Zero Trust Security
20mZero-Trust Security Strategy in Serverless App Deployment
40mLessons From Our Zero Trust Journey: Successes, Failures & Dodging Pitfalls