Achieving a higher level of security so you can sleep better
summary
CSPM checks against the AWS CIS Benchmark produce a startling result: 95–100% of S3 buckets flag as violations, so alerts are useless unless filtered. Use classification tools like openraven or AWS Macy to identify PII/health data, apply lifecycle rules to delete what retention policy allows, and enable intelligent tiering to surface anomalous access. A region-mapping view that shows stray buckets proves effective at finding unexpected data and it works for prioritizing cleanups.
AI-written summary · about
chapters (14)
- 0:00Cloud security challenges
- 2:05Scale of cloud data
- 4:36Cloud breaches and exposure
- 7:03CSPM tools overview
- 8:27Limitations of default policies
- 12:30Understanding where your data comes from
- 16:02Data classification
- 17:48Bucket write access
- 19:14Intelligent tiering anomalies
- 20:17Lifecycle and retention rules
- 21:22Riskiest buckets first
- 23:08Data classification importance
- 24:53Cloud security strategies
- 25:13Summary
related talks
27mProactively identifying threats & protecting sensitive data in S3
19mSecuring your AWS environment with automated DSPM
48mJourney to protected workloads on AWS
18mImproving your Amazon S3 security with cost-effective practices
43mWalking on Broken Clouds
18mManaging your cloud security universe as one
38mChanging Perspectives: A Deep Dive into the Security Posture of 600+ Real-World AWS Environments
43mSimplify and accelerate security for simple storage: Case studies (PRT276)