This event took place in 2024. Click here to visit the most recent event.

15:30 - 16:30 Breakout 5

ACD327

Focus on what matters - automating a comprehensive security overview in AWS Security Hub

Room: Zaal 7 | Time: 15:30 | Duration: 60

Getting overwhelmed by the amount of findings Security Hub throws at you? It can provide a very good security overview of your AWS account or organization. Still, you will need to find a way to sieve out the clutter and consolidate the rest of the findings. In this talk, I’ll share some tips & tricks on how to do this; in theory, with any tool you like: Security Hub Automations or any other popular 3rd party SIEM tool.

Carlo van Overbeek

Security DevOps Engineer Cloud

ACD212

Mitigating Layer 7 Threats to E-commerce IAM Solution with WAF

Room: Zaal 9 | Time: 15:30 | Duration: 60

Throughout this presentation, we will together trace the story of an attack targeted at an e-commerce system. I will share my experiences, attempts at mitigation, and the conclusions we drew from this incident to improve our defenses. Analogous to passport control at a border, we decided on a security method that relies on verifying the user through the analysis of unique browser characteristics - a digital fingerprint, instead of solely relying on traditional security methods.

Grzegorz Kalwig

AWS DevOps Professional & Serverless Enthusiast

ACD314

More Network Security: Forward Proxy on AWS Network Firewall & Fargate

Room: Zaal 10 | Time: 15:30 | Duration: 60

We’ve crafted a robust, scalable forward proxy solution integrating AWS Network Firewall, Squid Proxy, Fluentbit, Dnsmasq, and Telegraf - all components in containers. 🌐 The AWS Network Firewall serves as a transparent proxy, applying stateful and stateless whitelist blocking rules. 🦑 Squid Proxy, operating as an explicit proxy, is deployed in an ECS container alongside Fluentbit, which forwards logs to AWS CloudWatch. 🔧 Dnsmasq, also in an ECS container, resolves DNS issues related to Let’s Encrypt, ensuring smooth SSL/TLS certificate management.

Michal Salanci

Senior DevOps Engineer in Deutsche Telekom Systems Solutions, Slovakia

ACD322

Next-Gen Developer Experience: Boosting Developer Productivity

Room: Zaal 11 | Time: 15:30 | Duration: 60

Developers seek ways to improve speed, cost, security, and reliability without compromises. This session explores how next-generation developer tools help address these challenges. Through technical demonstrations, attendees will learn practical ways to streamline development processes and boost their productivity when building on AWS. The session will showcase examples beneficial for both experienced and beginner AWS developers, offering insights to enhance efficiency and simplify cloud application development.

Gunnar Grosch

Principal Developer Advocate at Amazon Web Services

ACD325

OCR-ing with AWS managed services

Room: Silent Disco | Time: 15:30 | Duration: 60

In today’s digital age, efficiently processing and extracting text from scanned documents and images is crucial for many businesses. This session will explore how to leverage AWS managed services to perform Optical Character Recognition (OCR) effectively. Attendees will be introduced to AWS Textract, a powerful OCR service that automatically extracts printed text, handwriting, and data from documents. Key features such as form extraction will be covered and how to improve inaccurate extracts by creating adapters and integrating other AWS services like Augmented AI for a comprehensive document processing pipeline.

Petar Damjanovic

Software Architect at Levi9

ACD411

Serverless as an Orchestration Platform - Managing cloud video editing workloads with Lambda.

Room: Zaal 8 | Time: 15:30 | Duration: 60

People often think Serverless is just used for building simple web apps, but it can do so much more. In this talk we show how we use Serverless services to automate AWS account creation, provisioning and managing GPU powered video editing suits, automating media workflows and much more. Combining Serverless solutions with more traditional architectures can result in incredibly versatile and powerful products.

Sam Williams

The Serverless Obsessive