Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Segurança na Nuvem — OWASP / Campus Party 12

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Flávio Pimenta Flávio Pimenta PRO
September 11, 2026
Technology
5
1

Segurança na Nuvem — OWASP / Campus Party 12

Segurança em ambientes de nuvem sob a ótica do OWASP: principais riscos, configuração segura, gestão de identidade e acesso, proteção de dados e boas práticas. Apresentado na Campus Party 12 por Flávio Pimenta.

Avatar for Flávio Pimenta

Flávio Pimenta PRO

September 11, 2026

More Decks by Flávio Pimenta

See All by Flávio Pimenta
Distributed Load Testing na AWS
Avatar for Flávio Pimenta flap
PRO
1
3
AWS re:Invent 2025 — Learn With Us
Avatar for Flávio Pimenta flap
PRO
0
2
Amazon Q Developer CLI na prática — Campus Party Brasil 17
Avatar for Flávio Pimenta flap
PRO
1
3
APIs na era dos LLMs — APIcon
Avatar for Flávio Pimenta flap
PRO
1
3
Containers na AWS — do desenvolvimento à produção
Avatar for Flávio Pimenta flap
PRO
0
2
Segurança na Nuvem — BSides
Avatar for Flávio Pimenta flap
PRO
1
2
Criando apps com IA generativa usando PartyRock — HackTown
Avatar for Flávio Pimenta flap
PRO
0
4
AWS Summit São Paulo 2026
Avatar for Flávio Pimenta flap
PRO
1
3
Deploy simplificado com AWS App Runner — TDC São Paulo
Avatar for Flávio Pimenta flap
PRO
0
2

Other Decks in Technology

See All in Technology
Benchmarking Vector Databases: pgvector vs. LanceDB
Avatar for tsho tsho
0
150
TinyGo 開発サイクルを高速化する：Go で作るエミュレータ入門
Avatar for ZOZO Developers zozotech
PRO
1
120
[DroidKaigi 2026] Making UI specifications visible: Android UI development in the AI agent era supported by Compose Screenshot Testing and galleries
Avatar for syarihu syarihu
0
600
Bet AI Day 2026丨Agentは、「金融」という巨大産業の何を変えられるのか
Avatar for LayerX layerx
PRO
0
1.2k
こんなアーキテクチャ図は嫌だ BEYOND THE TIME: 半年後の自分へ贈る15のメッセージ / 15 of Anti-pattern in AWS Architecture Diagrams
Avatar for Naomi Yamasaki naospon
3
260
推論の観測、できていますか？ 〜 Google Cloud Gemini Enterprise Agent Platformで 3つの Gemini モデルを実測して踏んだ、評価の罠 〜
Avatar for Shu Kobuchi shukob
PRO
0
170
PM領域でのAI Agentの活用
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
280
Genie Code ワークショップ 応用編 / Genie-Code-Workshop-advanced
Avatar for Databricks Japan databricksjapan
PRO
0
360
DGX Sparkを2台使って いろいろ動かす話
Avatar for そのだ sonoda_mj
1
140
KPIだけでは評価できないプロダクトが考えるべき Evalsという第二の評価系 / Beyond KPIs: Evals as a Second Evaluation Framework for Products #PdEConf
Avatar for Aki / @LoveIdahoBurger aki_iinuma
4
3.7k
Tab5をRubyで動くパソコンにする
Avatar for Katsuhiko Kageyama kishima
2
250
AIで仕事のやり方を変える
Avatar for Kentaro Matsumoto matsu7874
2
980

Featured

See All Featured
Navigating Weather and Climate Data
Avatar for Ryan Abernathey rabernat
0
510
The untapped power of vector embeddings
Avatar for Frank van Dijk frankvandijk
2
1.9k
Balancing Empowerment & Direction
Avatar for Lara Hogan lara
6
1.3k
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.3k
Reality Check: Gamification 10 Years Later
Avatar for Sebastian Deterding codingconduct
0
2.3k
The Anti-SEO Checklist Checklist. Pubcon Cyber Week
Avatar for Ryan Jones ryanjones
0
230
Distributed Sagas: A Protocol for Coordinating Microservices
Avatar for Caitie McCaffrey caitiem20
333
23k
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
45
9.2k
Music & Morning Musume
Avatar for Bryan Veloso bryan
47
7.4k
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
ラッコキーワード サービス紹介資料
Avatar for ラッコ株式会社 rakko
1
4.8M
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
Avatar for Tammy Everts tammyeverts
56
3.5k

Transcript

  1. None

  2. Cloud Security Flávio Pimenta

  3. On Premise x Cloud: Acesso físico Energia Internet Temperatura Manutenção

  4. Notebook HD

  5. MFA

  6. Access Keys

  7. Network

  8. Network Firewall

  9. Network subnets INTERNET NAT APP DB

  10. App credentials properties? env var ? vault !!

  11. App credentials x Instance Profile

  12. • Geo-blocking • Regex matches • IP blacklist • Logs

    • Machine Learning • Throttle Application Firewall

  13. Logs Monitoramento

  14. E a Aplicação !! OWASP Juice Shop Tool Project

  15. Obrigado! Para mais informações, acesse: www.owasp.org Flávio Pimenta [email protected]