In addition to discussing various AWS authorisation tips and tweaks to ensure API and asset access authorisation is scoped to a minimum, I'll be introducing the use of AWS Organizations for Mandatory Access Control and an early look at how to integrate compliance measures into a multi-account logging and analysis architecture. Dave Walker is a Specialist Solution Architect for Security and Compliance at AWS. Dave helps customers to not only meet their compliance requirements, but also to characterise and assess their further threats and design and build the means of addressing them using AWS technology. Before joining AWS, Dave worked on technical security standards and frameworks for a number of UK and US “4-letter organisations”. Originally a Security Subject Matter Expert at Sun Microsystems by way of Acorn Computers, he has been helping companies and public sector organisations to meet industry-specific and Critical National Infrastructure security requirements since 1993, and has filed a number of patents on cloud-focussed security technologies. He has a BSc in Chemical Physics and an MSc in the Physics of Advanced Electronic Materials from the University of Bristol. Dave has an executive role on Security and e-Crime at the Conservative Science and Technology Forum, and occasionally contributes to technical security initiatives at the British Computer Society and the Information Assurance Advisory Council.