Explore auto-scaling web application security in cloud environments through this conference talk from AppSecUSA 2014. Learn practical approaches for securing rapidly scaling cloud applications, with a focus on Amazon Web Services. Discover common techniques and tools for auto-scaling security, including Chef/Puppet, CloudFormation, and Elastic Load Balancer. Understand the role of auto-scaling groups, management APIs, and scaling triggers in deploying web security infrastructure. Examine the impact of Platform-as-a-Service on application security and strategies for embedding controls directly into web applications. Gain insights into designing scalable security architectures, abstracting application security components, and implementing CloudFormation templates for efficient deployment. While primarily aimed at advanced audiences with strong networking and cloud security experience, this talk also offers valuable information for intermediate attendees involved in cloud security strategy and requirements. Read more