How RBI strengthens network security with AWS(SEC303)
summary
RBI runs seven AWS organizations with more than a thousand accounts and over 50% of apps migrated, and defends against repeated DDoS by fronting internet services with CloudFront, AWS Shield Advanced and WAF, moving inspection to a centralized inspection VPC (Transit Gateway → inspection) backed by a Palo Alto fleet behind a Gateway Load Balancer plus optional AWS Network Firewall. Application teams self-deploy public endpoints via a Service Catalog product and push firewall policies through per-account Git repos validated by GitHub Actions; logs flow to Kinesis/Firehose → S3 → Glue/Athena for per-account querying.
AI-written summary · about
chapters (9)
- 0:00Introduction and agenda
- 3:19Well-architected framework
- 4:46Infrastructure protection
- 11:33Network firewall overview
- 12:46Firewall solutions and scale
- 16:24Deployment models at RBI
- 21:53Self-managed firewall rules
- 24:22Monitoring and logging
- 31:19Conclusion and resources
related talks
33mNetwork and application protection on AWS
53mAchieving End-to-end Security on AWS
32mAdvanced threat detection and response on AWS
30mAnti-ransomware strategies on the cloud
45mSecurity Lessons Learned Moving a Bank 100% in the Cloud
50mAWS Well-Architected for network security
01h 08mKeynote
28mAWS security at scale