Protect your internet-facing web applications hosted on AWS
summary
Shows a live attacker vs defender sequence and then maps concrete controls to each attack, using AWS Shield Standard (99% volumetric mitigation ~1 minute, CloudFront edge reduces to ~1 second) plus Shield Advanced for alerts and cost protection, and AWS WAF on CloudFront or ALB for rate limiting, bot tokens, CAPTCHA, SQLi and account takeover rules. Also covers Gateway Load Balancer, third‑party appliances, AWS Network Firewall, Global Accelerator client IP preservation, and centralized vs distributed ingress architectures with Firewall Manager for policy roll‑out.
AI-written summary · about
chapters (14)
- 0:00Introduction and agenda
- 1:31Security architecture overview
- 3:25Defining the application scope
- 7:00Security roles and threats
- 10:20Reconnaissance and defense
- 14:44Volumetric DDoS protection
- 18:33L7 attacks and bot control
- 24:48SQL injection protection
- 27:50Account takeover prevention
- 29:20Non-HTTP application security
- 37:22Traffic routing strategies
- 41:00Global Accelerator security
- 44:44Multi-VPC security approaches
- 48:44Centralized control and summary
related talks
33mNetwork and application protection on AWS
29mWeb application protection on AWS
42mProtect your workloads from DDoS attacks with Shield Advanced
31mProtecting Networks and Applications on AWS
53mHow AWS threat intelligence becomes managed firewall rules
11mAWS On Air ft. Automatic Application Layer DDoS
35mBetter User Experience and Security with Edge Services
15mBuilding a secure perimeter with AWS WAF