Security monitoring for connected devices across OT, IoT, edge, cloud
summary
AWS lays out a concrete stack to monitor OT, IoT, edge and cloud devices: AWS IoT Device Defender for audit/detect (including ML Detect to learn normal device behavior and custom metrics), agentless active/passive network monitoring for PLCs/HMIs, and remediation via AWS IoT Device Management jobs and secure tunneling. Alerts consolidate into Security Hub and Amazon Security Lake, and partner feeds (Claroty xDome) appear alongside Defender alerts for cross‑domain detection and incident response.
AI-written summary · about
chapters (6)
- 0:00Security landscape overview
- 3:04AWS IoT Device Defender
- 7:49Alerts and mitigation
- 10:08OT and enterprise monitoring
- 12:17Centralized security data
- 13:54Conclusion and summary
related talks
54mHow to layer threat detection & monitoring security services
51mInnovations in AWS detection and response services
32mAdvanced threat detection and response on AWS
27mProactively identifying threats & protecting sensitive data in S3
28mAWS security at scale
21mSecuring hundreds of AWS accounts for streamlined governance
18mHow AWS Partners use observability to strengthen customer security
34mLayering AWS security services to automate incident response