Journey to protected workloads on AWS
summary
AWS showcases concrete tools and outcomes: an open-source Secure Environment Accelerator (45 customers deployed) that covers about 70% of CCCS Cloud Medium technical controls and cuts implementation from months to days; a sanitized generic evidence package (91 technical controls) from CBSA for reuse; and AWS Audit Manager that maps the CCCS profile (165 control sets, 602 controls — 206 automated, 396 requiring manual evidence), collects immutable evidence for two years, integrates with Organizations, and costs $1.25 per 1,000 assessments after a two-month free tier.
AI-written summary · about
chapters (10)
- 0:00Introduction to session
- 1:04Security assessment process overview
- 5:49Shared responsibility model explained
- 13:17Shifting security responsibility to AWS
- 15:27Automation for security controls
- 17:15Generic evidence package benefits
- 19:05Stack assessments for faster ATO
- 21:15Automated evidence collection with AWS Audit Manager
- 31:48Demo of AWS Audit Manager setup
- 47:07Summary and resources
related talks
32mContinuously assess controls for risk and compliance
58mImplementing compliance, assurance, and auditing on
56mCloud compliance journey: Compliance and audits
27mIntroduction to AWS Security
49mCloud operations: A catalyst for innovation
15mSecurely configure your AWS environments with CIS & Qualys
20mBuilding secure AWS app workloads using automated best practices
27mIntroduction to AWS Security