AWS Survival Guide 2.0

Presented at RVAsec 2017, June 8, 2017, 3 p.m. (50 minutes).

In this talk, we discuss harnessing existing AWS functionality to strengthen your organization's AWS infrastructure against practical attacks. Ken will show you what attackers are looking for, how they are finding you, and how to secure your environment. Additionally, attendees will be given code that assists those using AWS in better understanding how their environment's IAM policies are configured and automate tasks like S3 bucket policy review, volume encryption statuses, and security group configurations.

Presenters:

• Ken Johnson - nVisium
  Ken Johnson, CTO of nVisium, has been hacking web applications professionally for 8 years. Ken is both a breaker and builder and currently leads the nVisium product team. Previously, Ken has spoken at DerbyCon, AppSec USA, RSA, AppSec DC, AppSec California, DevOpsDays DC, LASCON, RubyNation, and numerous Ruby, OWASP, and AWS events. Ken is currently investing his time between OWASP’s Railsgoat, Elxir and Go, as well as all aspects of AWS offerings. Twitter: @cktricky

Links:

• https://rvasec2017.sched.com/event/AT46/aws-survival-guide-20
• https://infocon.org/cons/RVAsec/RVAsec 2017/Ken Johnson AWS Survival Guide 2.0.mp4
• https://infocon.org/cons/RVAsec/RVAsec 2017/Ken Johnson AWS Survival Guide 2.0.eng.srt (subtitles)

Similar Presentations:

• THOTCON 0x8 (2017) / Transitioning to AWS in a Hurry Without Getting Owned
• DeepSec 2019 „Internet of Facts and Fears“ / Mastering AWS Pentesting and Methodology
• CackalackyCon 2 (2023) / AWS Security Reference Architecture: A Well-Structured Foundation