Conquering the Cloud: Defense-in-Depth Strategies for Amazon Web Services

No ratings

Presented at BSidesAtlanta 2020 by

Shane Peden

zoom.us

Poor credential management, mis-configuration, and insider threat are the top causes of Cloud Infrastructure data breaches according to global research and advisory firm, Gartner. In the past two years, the US Department of Defense, US Central and Pacific Command, Accenture, GoDaddy, FedEx, and Cisco all encountered data breaches/unauthorized disclosures due to AWS misconfigurations. This talk focuses on strategies for implementing defense in depth within Amazon Web Services, the most widely used of the cloud Infrastructure-as-a-Service providers.