How Amazon MGM Studios protects its most important data
summary
Amazon MGM Studios secures exabytes of media by scanning incoming S3 objects with Trend Micro Cloud One and a serverless Lambda scanner that uses S3 event notifications, range GETs and pre-signed URLs. The pipeline handles 80 million objects/month across 27 regions and creates 20–50 buckets/month, scans very large files without moving full blobs, quarantines or promotes files, and drops scan time from minutes to seconds while avoiding EC2 upkeep and global scaling pain.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:43Context
- 2:59Assets
- 5:32Scaling
- 6:41Architecture
- 7:15Storage Stack
- 7:36Scanner Stack
- 8:27PostScan Stack
- 9:11Deployment
- 10:27Productizing infrastructure
- 14:24Scanning for malware
- 16:56Building the solution
- 18:22S3 integration
- 22:26S3 object Lambda
- 24:13Extension
- 27:57Advantages
- 29:28Trend Cloud One dashboard
- 30:16Growth in the future
- 31:07Summary
related talks
43mSimplify and accelerate security for simple storage: Case studies (PRT276)
38mFully managed malware and antivirus protection for Amazon S3
27mProactively identifying threats & protecting sensitive data in S3
01h 03m3 innovations that redefine data protection for Amazon S3
21mOptimize and manage data on Amazon S3
22mBest practices for data discovery with the new Amazon Macie
27mManaged file transfers to Amazon S3 and EFS over SFTP, FTPS, and FTP
10mArchiving and digitally preserving your data with AWS