Room 4

Sessions

KEY04

Serverless, The Hard Parts

Room: Room 4 | Time: 09:00 | Duration: 90

If other keynotes are about serverless, Yan will change his keynote to: “Event-Driven Architecture, The Hard Parts”

Yan Cui

Developer Advocate at Lumigo | AWS Serverless Hero

ACD402

Your AWS root credential set

Room: Room 4 | Time: 11:00 | Duration: 30

Is it secret? Is it safe? Managing the one credential set to rule them all comes with a considerable amount of effort. Even worse, AWS provides APIs to effectively privilege escalate a normal AWS admin role/user to root. What paths can a hacker take to completely takeover your AWS account, or even organization, and what mechanisms can you implement to combat this?

Carlo van Overbeek

Security DevOps Engineer Cloud

ACD302

Drowning in Security Alerts? Automating Security Posture Automation at Scale using Security Hub

Room: Room 4 | Time: 13:00 | Duration: 30

Drowning in security alerts from CVE Scans & EKS audit logs? Time to wear your Security Hat. Automate your security alerts - From Finding to Remediation. Learn how to build a global central custom security posture for a large enterprise using AWS Security Hub, Security Lake, EventBridge, Lambda, GuardDuty, and Inspector. This Level 300 deep-dive shows how to normalize Security Hub findings, optimize data for efficient querying, and automate response and remediation.

Masoom Tulsiani

AWS Community Builder

ACD301

Breaking the Security vs. Speed Trade-off with AWS Config

Room: Room 4 | Time: 15:00 | Duration: 60

Getting AWS Platforms just right is hard. You want to set tight permission policies, but developers still need to be able to do their job. You want to have an environment that is both secure and reliable, ensuring compliance while also giving developers the freedom to experiment and innovate. AWS Config is often the missing puzzle piece to solve this paradox. In this talk, I will demonstrate you can create synergy between providing Infrastructure as Code templates to support your developers, granting the right amount of permissions to enable them to do their job, and finally utilizing AWS Config to ensure everything remains within security constraints.

Steffan Norberhuis

Founder Rocketleap