Architecting for Security in the Cloud
summary
Builds and hosts the open-source SimpleRisk on AWS, claiming you can start secure from a clean slate and avoid novice-opponent failures by using concrete controls: Apache/PHP back end behind Nginx load‑balancing, MySQL via multi‑AZ RDS, GitHub for source control with GitHub + Chef/Puppet automation for consistent deployments, bastion host + VPN + SSH keys and MFA, IAM with least privilege, HTTPS with Let’s Encrypt and SSL Labs checks, OWASP Top 10 hygiene, and regular asset/vuln scanning (Nessus/Qualys/OpenVAS) plus CIS-hardened images.
AI-written summary · about
chapters (16)
- 0:00Intro
- 4:00The Challenge
- 5:26SimpleRisk Architecture
- 8:07Generic Coding Best Practices
- 9:35How do we keep the application updated?
- 12:41Securing Your Servers
- 16:07Our Architecture
- 16:42Securing the Database
- 21:50What is our current attack surface?
- 23:58Attack Vectors
- 24:43Attack Vector: Insider Threat
- 26:31Attack Vector: Amazon
- 27:40Attack Vector: GitHub
- 29:39Attack Vector: Web Application
- 32:07Attack Vector: Remote Access
- 34:02Recommendations
related talks
29mPragmatic Security Automation and DevSecOps in the Cloud
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
53mAchieving End-to-end Security on AWS
45mUsing Linux Securely in the Cloud
17mAdvance securely: Safely migrating to
12mCloud Security from Scratch
36mJourney towards Secure Architecture in the Cloud
45mProtecting you from you: Misconfiguration-caused breaches