Implementing compliance, assurance, and auditing on
summary
Shows a concrete compliance pipeline using AWS Config rules and conformance packs (about 60 samples for PCI, NIST, FedRAMP, HIPAA) that detect misconfigurations and trigger SSM automation to remediate — examples: auto-enable S3 encryption and close open SSH ports. Demonstrates audit evidence collection with Audit Manager (demo holds 380,066 pieces of evidence), CloudTrail/CloudTrail Lake for immutable logs, and Security Hub for consolidated findings; also explains targeting by account, remediation windows, and custom-rule options.
AI-written summary · about
chapters (6)
- 0:00Introduction to cloud ops
- 3:20Defining preventive controls
- 6:50Systems manager and audit
- 12:33Hands-on config demo
- 24:32Using conformance packs
- 40:53Audit manager and wrap-up
related talks
56mCloud compliance journey: Compliance and audits
30mHow to implement compliance at scale with the Three Lines of Defense model
32mContinuously assess controls for risk and compliance
29mCloud compliance and assurance
55mAccelerating auditing and compliance for generative AI on AWS
33mCompliance as Code - Lessons Learned From Regulated Organizations
54mCompliance-As-Code For API Security
48mJourney to protected workloads on AWS