Network ACLs Made Easy: Establishing Zero Trust Network Policies in a Few C...
summary
Collects seven days of AWS VPC Flow Logs (67 GB compressed, ~1 TB decompressed), aggregates by IP/port and parses hundreds of millions of lines with a Rust parser using rayon to produce initial firewall rules, generates security groups via Terraform from a spreadsheet dashboard, deploys to ~500 instances after merging rules to avoid the five-security-group limit, introduces a Terraform boost proxy in Go to cut AWS rate-limited API calls and speed plans, documents heuristics for client/server inference and reports 17 iterative fixes before stable rollout.
AI-written summary · about
chapters (6)
- 0:00Network ACLs and Zero Trust
- 8:43AWS traffic with VPC flow logs
- 13:31Firewall rules with spreadsheet
- 18:36Troubleshooting Terraform
- 26:51System overview
- 32:15Q&A
related talks
55mSteps toward a Zero Trust architecture on AWS
41mJourneys to Zero Trust on AWS
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
18mEnhance application security at the edge with AWS
32mImplementing Zero Trust
32mGet started with AWS networking: Set up, secure, & monitor global networks
14mConfidence in cloud security: One step ahead of cyber threats
53mBuild secure global connectivity with AWS