Architect for ISM compliance on AWS
summary
Outlines a practical ISM-to-AWS mapping: notes there are 900 controls and shows how 164 IRAP‑assessed AWS services map to ISM principles. Demonstrates specific patterns—AWS Identity Center for unique identities, AWS Config + Systems Manager for asset discovery, Amazon Bedrock with VPC PrivateLink, KMS and OpenSearch vectors for LLM apps, Bedrock guardrails covering about five of the OAS LLM top‑10 issues, Shield/WAF/Network Firewall for DDoS and NIDS, GuardDuty for centralized detection, and multi‑account, multi‑region AWS Backup for recoverability and restore testing.
AI-written summary · about
chapters (9)
- 0:00Introduction to ISM compliance
- 1:47Understanding ISM fundamentals
- 3:42Mapping ISM principles to AWS
- 8:40Protecting with technical controls
- 17:47Networking and database security
- 19:13Detecting security events
- 23:35Responding to incidents
- 25:00Data backup and resilience
- 28:15Summary and resources
related talks
27mIntroduction to AWS Security
27mIntroduction to AWS Security
01h 02mWhy IAM is the new perimeter, and how to govern it
23mSecurity Best Practices: The Well-Architected Framework
58mImplementing compliance, assurance, and auditing on
31mIAM and why it is important in Cloud environments
36mJourney towards Secure Architecture in the Cloud
25mGetting started with AWS Identity Services