Evolving your security capabilities through key growth stages (STP306-R)
summary
Roadmap maps security to four stages: prototype, scale up, scale out, sustain. It prescribes concrete actions: start with the AWS Startup Security Baseline and a clean management account with Identity Center and AWS Organizations; create a log archive account and a security tooling account that runs Athena + QuickSight, Security Hub and GuardDuty; use IAM Access Analyzer, Secrets Manager rotation and Service Control Policies; automate account creation via Service Catalog/Control Tower; adopt permission boundaries, Audit Manager and Config conformance packs; build guardians, playbooks, tabletop exercises and threat hunting; aim for Zero Trust with VPC endpoints, Verified Access and VPC Lattice.
AI-written summary · about
chapters (14)
- 0:00Introduction and overview
- 3:56Prototyping stage overview
- 5:21Scaling up stage centralization
- 15:13Security operations and logging
- 24:57Key takeaways from scaling up
- 25:37Scaling out stage delegation
- 35:36Building security team and guardians
- 39:38Incident response playbooks
- 42:59Compliance certification process
- 45:32Key takeaways from scaling out
- 46:13Sustaining stage refinement
- 51:59Refining security operations
- 55:31Zero Trust principles
- 1:00:32Summary and conclusion
related talks
47mAsegura tu startup utilizando AWS Startup Security Baseline
55mPlan and deploy your own security architecture based on the AWS SRA
51mAWS Security Essentials
38mBuilding Security at Speed
36mOvercoming Obstacles in Operationalizing Security
44mAchieve your identity, security, and compliance goals on
53mAchieving End-to-end Security on AWS
27mIntroduction to AWS Security