Centralized Security

Join AWS subject-matter experts for a deep dive into centralized security posture management on AWS using AWS Security Hub. Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. You will get practical experience using Security Hub, Amazon GuardDuty, and other security services in AWS-provided sandbox accounts and will leave knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Container Security

Join AWS subject-matter experts for a deep dive into container security for Amazon Elastic Kubernetes Service (Amazon EKS). You will learn how to use AWS Config for configuration management, AWS Security Hub for cloud security posture management, AWS Secrets Manager for secure secrets management, Amazon GuardDuty for threat detection, Amazon Detective for simplifying the investigative process for security issues, and Amazon Inspector for scanning container images for software vulnerabilities. Along the way, we'll dive into Kubernetes security best practices. You will get hands-on experience using all of these services in AWS-provided sandbox accounts and will walk away knowing when, why, and how to set up and use the services.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Amazon Detective, Amazon GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, consult the Amazon Detective Prerequisites.

Continuous Compliance

Join AWS subject-matter experts to learn how to establish the foundation for continuous compliance in your AWS accounts using AWS Audit Manager, AWS Security Hub, and AWS Config. You can use Audit Manager to map your compliance requirements to AWS usage data with prebuilt and custom frameworks and automated evidence collection. Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. AWS Config continually assesses, audits, and evaluates the configurations and relationships of your resources. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Data Discovery

Join AWS subject-matter experts for a deep dive into data discovery AWS using Amazon Macie to find sensitive data. The Data Discovery Activation Day provides organizations with a thorough understanding of data discovery principles, how to implement a data discovery program, as well as hands-on scenarios with Macie and deployment in your AWS accounts. Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

During the event, we will demonstrate how to set up the service across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. This is not required for attendance.

Data Encryption

AWS is committed to providing the ability to encrypt everything everywhere; we give customers features and controls to encrypt data, whether in transit, at rest, or in memory.

Join AWS subject-matter experts for a deep dive into securing your sensitive data on AWS, using AWS Private Certificate Authority (AWS Private CA), AWS Key Management Service (AWS KMS), and AWS CloudHSM. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services, and the best practices when doing so across multiple accounts and regions.

During the event, we will demonstrate how to set up the services across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Firewall Security

The AWS Firewall Security Activation Day provides you with hands-on scenarios and deployment of AWS Network Firewall, Amazon Route 53 Resolver DNS Firewall, and AWS Firewall Manager into your AWS accounts to establish the foundation for effective network egress controls in Amazon Virtual Private Cloud (Amazon VPC), and to learn how Firewall Manager can be used to implement these services at scale. You will get hands-on experience in AWS-provided sandbox accounts and will come away knowing when, how, and why to set up the services to improve the security posture of your AWS network infrastructure, and the best practices when doing so.

During the event, we will demonstrate how to set up the services in the sandbox environment. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access.

If you choose to follow along in your own account, you will have an operational Route 53 Resolver DNS Firewall deployment to continue testing, and will be equipped with the knowledge to use Network Firewall, Route 53 Resolver DNS Firewall, and Firewall Manager to help protect your AWS network infrastructure. Attendees from the same company may work together to set up the architecture in a single account or across multiple accounts. Multi-account setup requires that AWS Organizations be set up in advance.

Secrets Management

Join AWS subject-matter experts for a deep dive into secrets management on AWS using AWS Secrets Manager to securely store, retrieve, and rotate database credentials and other types of application secrets. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

During the event, we will demonstrate how to set up the service across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the service in, and ensure that you have the appropriate access.

Threat Detection & Response

Join AWS subject-matter experts for a deep dive into threat detection and response on AWS using Amazon GuardDuty, Amazon Detective, Amazon Security Lake, and AWS Security Hub to analyze, investigate, and respond to potential security issues or suspicious activities in your environment. GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity. Detective simplifies the investigative process and helps security teams conduct faster and more effective investigations. Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization. You will get practical experience using AWS-provided sandbox accounts and will leave knowing when, how, and why to set up and use the services.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Detective, GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, visit Amazon Detective prerequisites.

Vulnerability Management 

Join AWS subject-matter experts for a deep dive into vulnerability management on AWS using Amazon Inspector and AWS Systems Manager Patch Manager. Amazon Inspector is an automated vulnerability management service that continually scans for software vulnerabilities and unintended network exposure in AWS workloads such as Amazon EC2, AWS Lambda functions, and container images in Amazon ECR and within continuous integration and continuous delivery (CI/CD) tools, in near-real time. AWS Systems Manager Patch Manager is used to automate the process of patching managed EC2 instances with both security-related and other types of updates. You will get hands-on experience using Amazon Inspector and AWS Systems Manager in AWS-provided sandbox accounts and will leave knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up Amazon Inspector across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Web Application Protection

Join AWS subject-matter experts for a deep dive into protecting web applications on AWS using AWS WAF and AWS Shield. AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. AWS Shield is a managed DDoS protection service that safeguards applications running on AWS. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up AWS WAF. You may optionally choose to follow along in one of your own accounts during the event. Determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access.