Stephen Schmidt’s Security Leadership Session at AWS re:Invent 2021
8 minute read | Last updated 7-Aug-2022 | 
AWS AWS re:Invent Cloud Security
The leadership session at AWS re:Invent provide a deeper dive into a specific area of focus. Stephen Schmidt, CISO at AWS takes the stage to talk all things security.
I missed the first 10 minutes of the session and will update this post when I watch it on demand.
The First 10 Minutes
THe session is now available on demand so I was able to watch the first ten minutes. Here are my takeaways as a list, instead of a tweet storm;
- “If we wanted continuous improvement, we need to lower the friction of security”, Stephen Schmidt
- “If a process is inefficient or overly taxing, people will just work around. We’ve got to make security as easy choice.”, Stephen Schmidt
- “Getting start is simple, and you start seeing value quickly…” This was mentioned in relation to making security easier to use. 100% spot on
- Guard Duty has added a bunch of great Amazon S3 findings
- AWS Security Hub now allows you to designate an “aggregation region.” This makes using AWS Security Hub so much easier
- Amazon Detective uses a bunch of techniques (machine learning, statistical analysis, and graph theory) to help accelerate your security investigations
- AWS’s security strategy is to remain focused on tangible ways to make customers safer
- “We need to train people on security best practices in a manner that’s engaging”, Stephen Schmidt. He segues this into highlight the newly released & free security awareness training
- The launch of Incident Manager from AWS Systems Manager was highlighted. Lots to love in this feature set
- Focus on making the service better through collaboration with builders. That’s critical for better security outcomes. “Let’s makes security a great experience for developers”, Stephen Schmidt
Live Tweets
This is the Twitter thread of my coverage of the keynote…
#reinvent https://twitter.com/66780587/status/1466510060784394253
her plates…
#reinvent
#reinvent
#reinvent #security
#reinvent #security
#reinvent #security
#reinvent
more at https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html
#reinvent #security
more on that new release at https://aws.amazon.com/blogs/aws/new-amazon-vpc-network-access-analyzer/
#reinvent #securtiy
more on that at https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-validation.html
#reinvent #security
more at https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-policy-generation.html
#reinvent #security
#reinvent #security
#reinvent #security
- VPC endpoint support (https://docs.aws.amazon.com/securityhub/latest/userguide/security-vpc-endpoints.html)
#reinvent
more at https://aws.amazon.com/about-aws/whats-new/2021/09/amazon-detective-s3-dns/
#reinvent #security
more: https://aws.amazon.com/about-aws/whats-new/2021/12/aws-shield-advanced-application-layer-ddos-mitigation/
#reinvent #security
lots of great stuff in this complete revamp
#reinvent #security
#reinvent #security
more on that at https://aws.amazon.com/blogs/security/update-the-alternate-security-contact-across-your-aws-accounts-for-timely-security-notifications/
#reinvent #security
more https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/welcome.html
#reinvent #security
#reinvent #security
be sure to bookmark this one and watch it later
#reinvent
#reinvent
#reinvent #infosec
#reinvent #infosec
#reinvent #infosec
#reinvent
#reinvent
#reinvent
#reinvent #security
#reinvent #infosec
#reinvent #infosec
#reinvent #infosec
#reinvent
#reinvent #infosec
#reinvent
#reinvent #infosec
#reinvent #security
/ #reinvent #security
