Automation in action: Strategies for risk mitigation
summary
Demonstrates concrete automation: uses AWS Config rules with automated remediation to stop or terminate EC2 instances and to enforce S3/SG policies, builds a Systems Manager Automation runbook that successfully changes an ALB TLS policy, and wires CloudWatch alarms to Systems Manager Incident Manager which triggers an AppConfig flag flip to increase logging to debug. Claims humans react in ~200 ms (object falls ~19.5 cm vs a $20 bill ~15 cm) to justify automation and recommends shifting left with CloudFormation Guard and hooks to block noncompliant templates before provisioning.
AI-written summary · about
chapters (7)
- 0:00Introduction and context
- 2:36Governance and control types
- 7:18Workload risk management
- 13:21Detective compliance with config
- 33:24Proactive compliance strategy
- 37:30Incident management and app config
- 47:35Conclusion and takeaways
related talks
33mAutomating Cloud Security and Incident Response (DevSecOps)
29mPragmatic Security Automation and DevSecOps in the Cloud
42mHow Citi advanced their containment capabilities through automation
15mAutomation Strategies: Real-World Experiences from F5 and
45mThe Automation of a Landing Zone
59mBeyond the scripts: Governance automation master class
29mImprove Resilience with automated chaos engineering
55mThe Troubles of Automating “all the Things”