Beyond the scripts: Governance automation master class
summary
Defines enterprise governance as code that enforces thousands of concrete policies, not PDFs, and shows a working architecture built with AWS Organizations, CloudTrail, CloudWatch, Lambda, DynamoDB, S3, Athena, SSM and session manager. Recommends multi-account isolation (dozens to thousands of accounts) to limit blast radius and hit fewer AWS limits, describes a cloud-scale CMDB from event streams, and demos real-time remediation that detects a bad S3/SSH config and auto-corrects it within seconds.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 3:26Defining cloud governance
- 7:22Challenges in cloud governance
- 14:18Multi-account isolation strategy
- 22:27Maturity models and governance
- 31:18Solution architecture
- 41:06Demonstration and remediation
- 57:50Conclusion
related talks
57mBest practices for cloud governance at scale
33mCompliance as Code - Lessons Learned From Regulated Organizations
21mSecuring hundreds of AWS accounts for streamlined governance
58mCreate enterprise-wide preventive guardrails
33mAutomating Cloud Security and Incident Response (DevSecOps)
27mIntroduction to AWS Security
50mAutomation in action: Strategies for risk mitigation
32mAgile governance on AWS GovCloud (US)