Modernizing your security and GRC strategy with AWS
summary
Modern cloud GRC focuses on making compliance proactive and automated: teams map controls to services and run checks in CI/CD, use AWS Config (including the new resource exclusion by type feature) for pre-deployment validation and automated remediation, and centralize telemetry in CloudTrail Lake (now with CloudTrail Lake dashboards) plus GuardDuty and Security Hub for detections. Expect scale: AWS reports 80% of containerized apps run on AWS, 13 billion image pulls/week, Lambda trillions of requests, and use IAM Access Analyzer, Macie, KMS, CodeWhisperer, CodeCatalyst and Fault Injection Simulator to reduce drift and privilege creep.
AI-written summary · about
chapters (6)
- 0:00Modernization overview
- 14:12GRC and the shift left
- 26:23Compliance and proactive controls
- 34:34Automation and security practices
- 39:40Access management and auditing
- 50:00Data privacy and success stories
related talks
56mCloud compliance journey: Compliance and audits
44mGuardrails in the Cloud
27mIntroduction to AWS Security
49mCloud operations: A catalyst for innovation
32mAdvanced threat detection and response on AWS
13mA guide to strengthening your threat detection and response
33mCompliance as Code - Lessons Learned From Regulated Organizations
21mCentralized security analysis in hybrid & multicloud with partners