Neptune: Using graphs to gain security insights
summary
Graph-driven cloud security built on Amazon Neptune ingests millions of assets and supports hundreds of billions of triples across dozens of data centers, enabling queries that find real attack paths. Demo tools include Neptune Notebooks and OpenCypher, ingestion via the open-source Altimeter, and optional Neptune ML with SageMaker. Example result: a blanket S3 policy plus star IAM permissions resolve to roles used by EC2 instances, two with public IPs, showing the graph both locates vulnerable policies and traces the exact exposure path for mitigation.
AI-written summary · about
chapters (18)
- 0:00Intro
- 1:15Customers are excited to use graphs
- 4:39Security graph business problems
- 5:33Security graph challenges
- 6:45Logical flow-Security graph example
- 8:10Why use a graph database service?
- 23:57Wiz: Redefining cloud security
- 24:39Revolutionizing cloud security with an agentless, graph-based approach 1
- 26:04The world is a graph
- 26:39What is the most critical risk in my cloud? Finding critical risks in the cloud is a complex graph question
- 28:05Security graph use case: Network exposure
- 29:20Security graph use case: Prioritize vulnerabilities
- 30:08Security graph use case: Escalation path
- 31:18Wiz security graphs: Detecting critical risks
- 34:23Enabling unique capabilities with
- 36:30Graphs are revolutionizing cloud security
- 40:39Free trial - Build graph applications for free
- 42:07Additional resources
related talks
50mBuilding a customer 360 graph application with Amazon Neptune
28mFraud Graph with Amazon Neptune and Machine Learning
11mReducing exposure in the cloud
22mInside Out - The Cloud has Never been so Close
47mFuture-proofing cloud security: A new operating model
32mFINRA's knowledge graphs improve regulatory investigations
24mYour company, as a Knowledge Graph - the foundation of cybersecurity’s future
21mCloud-Based Contextual Analysis as Code