Cloud compliance journey: Compliance and audits
summary
Automates cloud controls using AWS Config with managed rules, conformance packs, CloudFormation Guard and optional RDK, storing configuration items to S3 and CloudTrail Lake and triggering Systems Manager runbooks for auto remediation. Centralizes findings in Security Hub and Security Lake, enables Bedrock/QuickSight Q queries and SageMaker models, and applies preventative hooks into CI/CD via Control Tower. Audit evidence lands in Audit Manager with Artifact for auditor reports and the team reports 27–52% audit cost reduction when 25% of controls are automated.
AI-written summary · about
chapters (7)
- 0:00Introduction and agenda
- 1:47Cloud security governance
- 5:36Modernizing compliance
- 12:09Control automation tools
- 23:54Continuous compliance
- 36:59Landing zone implementation
- 40:46Audit and evidence collection
related talks
29mCloud compliance and assurance
58mImplementing compliance, assurance, and auditing on
30mHow to implement compliance at scale with the Three Lines of Defense model
32mContinuously assess controls for risk and compliance
50mOptimizing audits with automation
55mModernizing your security and GRC strategy with AWS
27mIntroduction to AWS Security
33mCompliance as Code - Lessons Learned From Regulated Organizations