aws re:invent 2015 re:cap

32
re:Cap Mark Nunnikhoven https://markn.ca @marknca

Upload: mark-nunnikhoven

Post on 28-Jan-2018

883 views

Category:

Internet


0 download

TRANSCRIPT

Page 1: AWS re:Invent 2015 re:Cap

re:CapMark Nunnikhoven https://markn.ca @marknca

Page 2: AWS re:Invent 2015 re:Cap

aws.trendmicro.com

Page 3: AWS re:Invent 2015 re:Cap

reinvent.awsevents.com

Page 4: AWS re:Invent 2015 re:Cap

New Services

Page 5: AWS re:Invent 2015 re:Cap

bit.ly/aws-official-reinvent-wrap

Page 6: AWS re:Invent 2015 re:Cap

Security Services

Page 7: AWS re:Invent 2015 re:Cap

Amazon Inspector Amazon Config Rules AWS WAF

Page 8: AWS re:Invent 2015 re:Cap

Amazon Inspector

On instance analysis of workload

Limited time frame for analysis

Findings compared against; Common vulnerabilities (CVE) Network security issues OS hardening

Preview

Page 9: AWS re:Invent 2015 re:Cap
Page 10: AWS re:Invent 2015 re:Cap

AWS Config Rules

Event triggered AWS Lambda functions

Reacts to changes in some services

Fantastic for compliance reporting

Preview

Page 11: AWS re:Invent 2015 re:Cap
Page 12: AWS re:Invent 2015 re:Cap
Page 13: AWS re:Invent 2015 re:Cap

AWS WAF

Examines HTTP/HTTPS requests

Rules on source IP or HTTP header

Global service

Sits in front of CloudFront (not just a CDN)

Page 14: AWS re:Invent 2015 re:Cap
Page 15: AWS re:Invent 2015 re:Cap

Data Services

Page 16: AWS re:Invent 2015 re:Cap

Amazon Elasticsearch Service

Amazon QuickSightAWS Database Migration Service

Page 17: AWS re:Invent 2015 re:Cap

Amazon Elasticsearch Service

Elasticsearch + Kibana

Good community support for plugins

Excellent log analysis tool

Page 18: AWS re:Invent 2015 re:Cap

Best way to get a DB in the AWS Cloud

Schema migration helps to switch DBs

Great migration path to AuroraAWS Database

Migration Service

Page 19: AWS re:Invent 2015 re:Cap

Fast way to slice & dice your data

Excellent visualization toolset

Simple interface for complex modellingAmazon QuickSight

Page 20: AWS re:Invent 2015 re:Cap

“Magic” Services

Page 21: AWS re:Invent 2015 re:Cap

AWS Lambda Amazon CloudWatch Dashboards

Page 22: AWS re:Invent 2015 re:Cap

Event driving compute

Trigger from SNS or API Gateway

“Glue” AWS services togetherAWS Lambda

Page 23: AWS re:Invent 2015 re:Cap

Highly customizable

ShareableAmazon CloudWatch

Dashboards

Page 24: AWS re:Invent 2015 re:Cap

Talks

Page 25: AWS re:Invent 2015 re:Cap

https://medium.com/@marknca/5-ways-aws-re-invent-2015-rocked-ee40b9b3c203

(ARC403) From One to Many: Evolving VPC Design (NET403) Another Day, Another Billion Packets

(MBL311) AWS IoT: Securely Building, Provisioning, & Using Things (MBL313) AWS IoT: Understanding Hardware Kits, SDKs, & Protocols

(DVO304) AWS CloudFormation Best Practices (SEC323) Securing Web Applications with AWS WAF

(DAT405) Amazon Aurora Deep Dive

(DVO209) JAWS: The Monstrously Scalable Serverless Framework — AWS Lambda, Amazon API Gateway, and More!

Page 26: AWS re:Invent 2015 re:Cap

Just For Fun

Page 27: AWS re:Invent 2015 re:Cap

https://medium.com/aws-activate-startup-blog/internet-of-beer-introducing-simple-beer-service-63c987037e9e

Page 28: AWS re:Invent 2015 re:Cap

https://aws.amazon.com/iot/button/

Page 29: AWS re:Invent 2015 re:Cap

AWS IoT

Page 30: AWS re:Invent 2015 re:Cap

github.com/deep-securityPythonSDKChefcookbookAnsibleplaybookMorecomingsoon

Page 31: AWS re:Invent 2015 re:Cap

aws.trendmicro.com/reinvent

Page 32: AWS re:Invent 2015 re:Cap

aws.trendmicro.com

30 day free trial