WorkshopOn-siteMay 2024

Practical tips around AWS Well-Architected: Security

How to improve your security posture

A safeINIT-hosted session on the Security pillar of the AWS Well-Architected Framework: practical guidance on identity, detection, infrastructure protection, data protection, and incident response.

AWS Well-Architected Security session — Cosmin presenting
AWS Well-Architected Security session — workshop floor
AWS Well-Architected Security session — attendees
AWS Well-Architected Security session — discussion

About this talk

Improving security posture with AWS Well-Architected

An on-site session on the Security pillar of the AWS Well-Architected Framework. The framework's Security pillar covers identity and access management, detection, infrastructure protection, data protection, and incident response — five areas that together define how a workload protects information, systems, and assets while delivering business value.

The session is practical, not theoretical. The aim is to leave with concrete moves to take back to your own AWS environment, and a way to assess where the gaps are.

Key takeaways

A working checklist for evaluating the security posture of your AWS workloads.

Identity and detection

  • IAM Identity Center, least privilege, role boundaries
  • CloudTrail, Config, GuardDuty as the detection baseline
  • Findings centralisation and triage

Protection and response

  • Network and infrastructure protection patterns
  • Data protection: encryption at rest and in transit, key ownership
  • Incident response: runbooks, automation, recovery

Bring this kind of work to your AWS environment.

If something here lined up with what you're building, the next step is a working call with the team that delivered it.