Secure your APIs the Well-Architected way from foundation to perimeter
summary
Shows how AWS WAF, Firewall Manager and OpenSearch combine with CloudFront, API Gateway, Cognito, Inspector, GuardDuty, EventBridge, Config and Lambda to protect APIs at scale — Twilio runs protections across 1.7 trillion interactions for 306,000 customers. Describes a Terraform/GitHub workflow that auto-applies a tag-driven pair policy (true = block, false = count) to enroll CloudFront/ALB/API Gateway resources, ships logs via Firehose to OpenSearch for centralized observability, and cuts rule deployment and remediation to minutes.
AI-written summary · about
chapters (9)
- 0:00Session introduction
- 2:13API security challenges
- 7:38Well-Architected Framework
- 13:08Security design patterns
- 22:50Threat detection services
- 28:27AWS WAF and security tools
- 34:13Twilio security solution
- 48:59Key takeaways
- 51:02Resources and conclusion
related talks
33mNetwork and application protection on AWS
45mSecure Your APIs the AWS Well-Architected Way
35mThe Good, the Bad and the Ugly — one year of integrating AWS security services
15mBuilding a secure perimeter with AWS WAF
49mProtecting API workloads OWASP Top 10
23mSecurity Best Practices: The Well-Architected Framework
27mSecuring Applications and Managing WAFs at a large scale
29mWeb application protection on AWS