Explore incident response strategies for AWS environments in this 51-minute RSA Conference talk. Gain insights into AWS-specific security incidents, learn about the unique architecture and components of Amazon's cloud platform, and discover how traditional incident response principles can be adapted. Delve into detailed use cases, understand the shared responsibility model, and explore key AWS services like CloudWatch and CloudTrail. Examine real-world scenarios, including metadata service incidents and data loss prevention. Learn to leverage AWS Config, snapshot management, and security group modifications for effective incident response. Discover valuable resources such as AWS Labs, Threat Response Repository, and AWS Security Fundamentals training to enhance your cloud security skills. Develop a 90-day plan to improve your organization's AWS incident response capabilities.
Clearing the Clouds - Incident Response in AWS - Isn’t as Bad as You Thought