Securing the Future- A Deep Dive into the re-Invent:2024 Security Announcements

Transcript

1. Securing the Future: A Deep Dive into the re: Invent 2024 Security Announcements Sena Yakut, 2025
2. About Me! All links about me Sena Yakut Cloud Security Architect @CyberWhiz
3. Everything starts with security!
4. Everything starts with security!
5. • Culture of security importance in AWS • Security should be internal mindset • Ownership → required • Threat modeling • Training • AWS Security Team teaches other teams to be security champ.
6. New: Centrally Managing Root Access • Root account management is most critical thing in AWS environment. • Lots of AWS accounts • Enable MFA • Delete access key / secret key • Centrally manage the root access of all your AWS accounts within an organization • New term: Root sessions → AWS root sessions give temporary access to specific tasks that need root-level permissions. • Manage these tasks from one central account, so you don’t have to log in to each account separately
7. New: Centrally Managing Root Access
8. New: Centrally Managing Root Access • All accounts in your AWS Organizations
9. New: Centrally Managing Root Access
10. • Define and enforce configurations for all AWS accounts • Apply configuration at scale • Declare and enforce desired configuration for a given AWS service at scale across your organization → Declarative Policies New: Declarative Policies for EC2
11. New: Declarative Policies for EC2
12. New: Declarative Policies for EC2
13. New: Amazon GuardDuty Extended Threat Detection
14. New: Amazon GuardDuty Extended Threat Detection
15. New: Amazon GuardDuty Extended Threat Detection
16. New: Amazon GuardDuty Extended Threat Detection
17. New: Amazon GuardDuty Extended Threat Detection
18. New: Amazon GuardDuty Extended Threat Detection
19. New: AWS Security Incident Response Responding security incidents is hard work. • Communications • Alert prioritization • Tools / mechanisms
20. New: AWS Security Incident Response
21. New: AWS Security Incident Response To solve all of these: Please see pricing page before use it ☺
22. New: AWS Security Incident Response Proactive Security Response Amazon GuardDuty AWS Security Hub + Customer metadata + Service Intelligence = True Positive False Positive
23. New: AWS Security Incident Response Streamlined and Coordinated Incident Response Customer Managed Self managed or AWS CIRT supported
24. Thank you!!