accelerating your cloud adoption by leveraging aws ... · © 2018, amazon web services, inc. or its...
Post on 22-May-2020
3 Views
Preview:
TRANSCRIPT
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Accelerating your cloud adoption by leveraging AWS security and compliance services
Ekkarat KlinbubpaTerritory ManagerAmazon Web Services (Thailand)
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Why is security traditionally so hard?
Lack of visibility
Low degree of automation
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ORMove fast Stay secure
Before…
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
“CIOs and CISOs need to stop obsessing over unsubstantiated cloud security worries, and instead apply
their imagination and energy to developing new approaches to cloud control, allowing them to securely,
compliantly, and reliably leverage the benefits of this increasingly ubiquitous computing model.”
Source: Clouds Are Secure: Are You Using Them Securely?
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
ORANDMove fast Stay secure
Now…
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
“I have come to realize that as a relatively small organization, we can be far more secure in the cloud and achieve a higher level of assurance at a much lower cost, in terms of effort and dollars invested. We
determined that security in AWS is superior to our on-premises data center across several dimensions, including patching, encryption, auditing and logging, entitlements, and compliance.”
• Looks for fraud, abuse, and insider trading over nearly 6 billion shares traded in U.S. equities markets every day
• Processes approximately 6 terabytes of data and 37 billion records on an average day
• Went 3–4 weeks for server hardening to 3–4 minutes
• DevOps teams focus on automation and tools to raise the compliance bar and simplify controls
• Achieved incredible levels of assurance for consistencies of builds and patching via rebooting with automated deployment scripts
—John Brady, CISO FINRA
Financial industry regulatory authority
AWS CUSTOMERS IN THAILAND
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Understanding shared responsibility
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
Shared responsibility model
AWS
Security OF the Cloud
AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud
Security IN the Cloud
Customer responsibility will be determined by the AWS Cloud services that a customer selects
Customer
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Automatewith deeply integrated
security services
Inheritglobal
security and compliance
controls
Highest standards for privacy and data security
Largest network
of security partners and solutions
Scale with superior visibility and
control
Move to AWS Strengthen your security posture
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Inherit global security and compliance controls
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Scale with visibility and control
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Encryption at scale with keys managed by
our AWS Key Management System (AWS KMS) or managing your own
encryption keys with AWS CloudHSM using
FIPS 140-2 Level 3 validated HSMs
Meet data residency requirements
Choose an AWS Region and AWS will not replicate it elsewhere unless you choose
to do so
Access services and tools that enable you to
build compliant infrastructure on top of AWS
Comply with local data privacy laws
by controlling who can access content, its lifecycle, and disposal
Highest standards for privacy
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Automate with integrated services
CloudWatch Events
Amazon CloudWatch
CloudWatch Event
Lambda
Lambda Function
AWS Lambda
GuardDuty
Amazon GuardDuty
Automated threat remediation
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Infrastructure security
Logging & monitoring
Identity & access control
Configuration & vulnerability
analysis
Data protection
Largest ecosystem of security partners and solutions
Infrastructure security
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Complete Tools for Highest Security
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
n
Identity & access management
Detectivecontrols
Infrastructureprotection
Incidentresponse
Dataprotection
AWS security solutions
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
Identity & accessmanagement
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank you
https://aws.amazon.com/security/https://aws.amazon.com/compliance
top related