Innovations in AWS detection and response services
summary
AWS now stitches GuardDuty, Inspector, Macie, Security Hub, Detective and Security Lake into a single workflow: real-time S3 malware protection that tags objects and blocks access, eBPF-based runtime agents auto-deployed to EC2/EKS/Fargate with backend rule processing, Inspector’s SBOM and CI/CD image-scanning plugin to catch CVEs pre-deploy, Security Hub org-wide configurable controls, Detective grouping with a generative-AI finding summary, and Security Lake normalizing >10 log sources into OCSF Parquet for SQL and analytics.
AI-written summary · about
chapters (10)
- 0:00Session introduction
- 2:19Service portfolio pillars
- 4:10Orchestration and scale
- 9:20Centralized management
- 12:10Threat detection expansion
- 20:45Malware protection for S3
- 25:52Vulnerability management
- 31:14Security Hub and compliance
- 38:05Risk management and analysis
- 42:11Security data aggregation
related talks
56mContinuous innovation in AWS detection and response services
32mAdvanced threat detection and response on AWS
54mHow to layer threat detection & monitoring security services
27mProactively identifying threats & protecting sensitive data in S3
34mLayering AWS security services to automate incident response
01h 02mSecuring data and democratizing the alert landscape
55mStreamline security analysis with Amazon Detective
06mDemo - Amazon S3 security posture management and threat detection