How to implement compliance at scale with the Three Lines of Defense model
summary
Provides a concrete implementation: a GitHub “cloud compliance and assurance jumpstart” repo with CloudFormation templates and CloudFormation StackSets that enable AWS Config across multiple accounts and regions, org trails for CloudTrail, aggregators, and automated remediations wired to Security Hub findings via EventBridge and Systems Manager. Shows mapping CSVs that produce an Audit Manager custom framework from conformance packs, demonstrates delegated Security Hub admin for org-wide oversight, and captures audit evidence to S3—automation works end-to-end.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:44Agenda
- 1:19How to get started
- 1:37Three Lines of Defense
- 3:51Samples
- 4:10Compliance as Code
- 5:15Managed Risk
- 6:18Demo
- 11:28CloudTrail
- 12:46Data Protection
- 14:22AWS Security Hub
- 16:37Enabling Security Hub
- 21:50AWS Audit Manager Conformance Packs
- 26:38Key takeaways
related talks
56mCloud compliance journey: Compliance and audits
58mImplementing compliance, assurance, and auditing on
29mCloud compliance and assurance
12mCloud Security from Scratch
33mCompliance as Code - Lessons Learned From Regulated Organizations
32mContinuously assess controls for risk and compliance
27mIntroduction to AWS Security
52mManaging security with a unified strategy, featuring Nubank