Managing security with a unified strategy, featuring Nubank
summary
Nubank describes a reproducible platform that centralizes compliance across Brazil, Mexico and Colombia by aggregating account data into a control account (aggregation in us‑west‑1) and enforcing baselines with CloudFormation stack sets, Lambdas (deployed via container SAM) and Terraform modules. The operational claim is Know‑Prevent‑Fix: use AWS Config + Security Hub to discover 7,000+ resources across dozens of accounts, remediate 44 IAM.7 failures, apply SCPs to stop regressions, and output centralized findings and rising security scores — a solution that proves scalable and effective.
AI-written summary · about
chapters (13)
- 0:00Session introduction
- 2:24FSI security challenges
- 5:51Regulatory landscape
- 9:13AWS shared responsibility
- 12:43Defense and automation
- 16:57Nubank history
- 20:18Nubank business challenges
- 26:13No-Prevent-Fix strategy
- 30:59Security baseline
- 36:24Operational security
- 41:43Preventing security failures
- 45:09Fixing security issues
- 48:04Outcomes and lessons
related talks
46mHow Nubank Automates Security on AWS
30mHow to implement compliance at scale with the Three Lines of Defense model
12mCloud Security from Scratch
47mCentralizing security at scale w/ Security Hub & Intuit’s experience
28mSecuring Multi-Cloud and Hybrid Environments
12mArmor cloud security: Security & compliance in the public cloud
53mAchieving End-to-end Security on AWS
22mLaunch Control - Automating a Security Baseline...