The Good, the Bad and the Ugly — one year of integrating AWS security services
summary
Runs security across 60 AWS accounts with ~700 EC2, 100+ RDS and hundreds of S3/IAM resources and shows exactly what was built: centralized GuardDuty aggregation into a master account with CloudWatch→Lambda→Rocket.Chat alerts and automated VPC/WAF blocks; a custom Inspector patch bot that schedules scans, collects findings via SNS into S3 and exports metrics to Google Sheets for prioritization; WAF request logging to S3 + Athena for queries and rate‑limit automation; an open‑source MFA helper (2 GitHub stars) for access key workflows.
AI-written summary · about
chapters (13)
- 0:00Start
- 3:12The Good the Bad and the Ugly
- 4:06Agenda
- 7:23Credential Loss
- 7:50Multi-Factor Authentication in Aws
- 10:19I Am Access Advisor
- 13:04Guard Duty
- 20:45Lambda for Filtering
- 22:44Firewall Manager
- 24:26Blocking of Known Bad Actors
- 24:55Ss Inspector
- 27:31Inspector Patch Bot
- 31:20Security Hub
related talks
51mInnovations in AWS detection and response services
32mAdvanced threat detection and response on AWS
01h 08mKeynote
34mLayering AWS security services to automate incident response
29mAutomating Threat Detection and Remediation
56mContinuous innovation in AWS detection and response services
49mCloud operations: A catalyst for innovation
15mSecure and scale your cloud foundations using AWS Built-in