Plan and deploy your own security architecture based on the AWS SRA
summary
AWS SRA gives a concrete multi-account blueprint and a code library that deploys foundations via an Easy Setup CloudFormation flow (CodeBuild + Lambda + staging S3) to install org CloudTrail, AWS Config aggregator, Security Hub, IAM Access Analyzer, GuardDuty and Inspector, and offers both centralized security tooling account and decentralized key/ACM patterns. The demo launches stacks and finishes cleanly, showing Network Firewall, CloudFront+WAF+Shield patterns, KMS placement guidance, and automated aggregation of findings into the security tooling account.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 0:39Welcome
- 1:23Agenda
- 3:07Overview
- 6:12Cloud Adoption Framework
- 7:05WellArchitected Framework
- 8:21Setting the Foundation
- 10:00Planning Your Account Structure
- 12:29Organization Management Account
- 13:09Identity Access Management
- 20:44Build a secure network
- 23:06Endpoint prediction
- 25:05Data protection
- 28:26Data loss prevention
- 29:25EC2 example
- 29:54Recommendations
- 32:46Shield
- 40:40Demo
- 48:22Update Security Hub
- 51:34Verify Security Hub
related talks
01h 00mAWS Security Reference Architecture: Visualize your security
27mIntroduction to AWS Security
27mIntroduction to AWS Security
40mCreating a managed, governed, and secure SaaS foundation on
15mSecure and scale your cloud foundations using AWS Built-in
12mCloud Security from Scratch
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
23mSecurity Best Practices: The Well-Architected Framework