Zaal 9

Rooms & schedule are subject to change! Early september we'll ask everyone to bookmark their favorite sessions and based on popularity we'll update the sessions.

Sessions

ACD308

Advanced VPC Architectures: Saving costs with better connectivity

Room: Zaal 9 | Time: 11:00 | Duration: 60

Every AWS account begins with a default VPC, which is often set up once and then forgotten. However, unlocking the full potential of the VPC can yield numerous benefits. Enhance security with defense in depth within your network, optimize costs by leveraging shared VPC connectivity resources, connect easily using private DNS, and streamline developer access to databases. These best practices are helpful for small startups that want to minimize costs as well as big corporates that wish to enhance security.

Steffan Norberhuis

Founder Rocketleap

ACD305

Sensible Security for AWS Workloads

Room: Zaal 9 | Time: 13:00 | Duration: 30

We’ve all read the Well Architected Framework and followed best practices to build security into our workloads, but of all the controls and recommendations, which make the difference? Using real-world data and his ten years of cybersecurity experience, Nick will talk through the most common attack scenarios against AWS workloads, and the key security controls to have in place. Attendees will come away with a better understanding of the real security threats to their projects, and guidance on which controls to prioritise, why they matter, and how to balance them against engineering effort.

Nick Jones

Global Head of Research @ WithSecure Consulting

ACD207

Migration of a PCI DSS workload to AWS

Room: Zaal 9 | Time: 13:35 | Duration: 30

Summary of how CloudNation designed the architecture and migrated a mobility transaction provider platform that processes cardholder data with VISA to AWS. To adhere to the many requirements of PCI-DSS, we used a combination of Amazon Payment Cryptography, restricted networking in a hub-spoke setup, centralized governance with AWS Landing Zone Accelerator and several other security controls.

Erik van Dijk

Tech Lead AWS / DevOps engineer at CloudNation

Tom Eigenraam

AWS Cloud Consultant at CloudNation

ACD212

Mitigating Layer 7 Threats to E-commerce IAM Solution with WAF

Room: Zaal 9 | Time: 15:30 | Duration: 60

Throughout this presentation, we will together trace the story of an attack targeted at an e-commerce system. I will share my experiences, attempts at mitigation, and the conclusions we drew from this incident to improve our defenses. Analogous to passport control at a border, we decided on a security method that relies on verifying the user through the analysis of unique browser characteristics - a digital fingerprint, instead of solely relying on traditional security methods.

Grzegorz Kalwig

AWS DevOps Professional & Serverless Enthusiast