Overview

DAP303 | Build code signing and crypto PKI tooling, featuring NVIDIA

I’m especially looking forward to learning about NVIDIA’s journey to securing its cryptographic assets on AWS. This is especially useful for anyone wanting to gain insights into NVIDIA’s company-wide code signing and crypto PKI services using AWS services including AWS CloudHSM.

APS302 | From IDE to production: Actionable ML-powered code security analysis

In this breakout session you will hear a discussion on how to improve the quality and security of your code early in the development cycle. Explore how you can integrate Amazon Code Whisperer, Amazon CodeGuru Reviewer, and Amazon Inspector into your development workflow to help you identify potential issues and automate your code review process.

DAP401 | Security design of the AWS Nitro System

This session is fascinating to me because it explores the unique design of the AWS Nitro System’s purpose-built hardware and how that hardware provides a root of trust and cryptographic system to ensure data integrity.

In this breakout session you will hear an expert discuss the AWS Nitro System and the underlying platform for all modern Amazon EC2 instances.

You learn about the inner workings of the Nitro System and discover how it is used to help secure your most sensitive workloads.

TDR353-R | Detecting suspicious activity in Amazon S3

In this builders’ session you will experience a guided simulation of suspicious activity within an AWS account involving unauthorized data exfiltration and Amazon S3 bucket and object data deletion.

This is a highly recommended session that will help you to learn how to detect and respond to malicious activity using AWS services like AWS CloudTrail, Amazon Athena, Amazon GuardDuty, Amazon CloudWatch, and nontraditional threat detection services like AWS Billing and Cost Management to uncover evidence of unauthorized use.

TDR431-R | The anatomy of a ransomware event

In this chalk talk you’ll learn about the anatomy of a ransomware event that targets data residing in Amazon RDS and get detailed best practices for detection, response, recovery, and protection.

This is a much-anticipated session if you are interested in learning more about ransomware events and how to ensure that that you have appropriate measures for early detection and automated responses to limit your organization’s exposure.

IAM431 | A tour of the world of IAM policy evaluation

In this chalk talk you can go beyond the basics of identity and access management (IAM) policy evaluation to focus on how policy evaluation works with some more advanced AWS features. I am keen to receive prescriptive guidance on what to do and what to avoid when designing authorization schemes and learn how policies are evaluated alongside AWS KMS key grants, Amazon S3 and Amazon EFS access points, Amazon VPC Lattice, and more.

GRC441-R | Proactive compliance in CI/CD pipelines with Amazon CodeCatalyst

In this code talk you will hear speakers discuss how to implement proactive compliance in continuous integration and continuous delivery (CI/CD) pipelines using Amazon CodeCatalyst and AWS Config. This interesting talk will be beneficial to help you to integrate applications that comply with industry standards and regulations using CI/CD pipelines.

DAP342 | Protecting data in use with Cryptographic Computing for Clean Rooms

In this code talk, you’ll hear about Cryptographic Computing for Clean Rooms (C3R), which is a feature of AWS Clean Rooms that provides organizations the ability to protect data even while it’s in use.

This will be a great code talk to further your learning with example queries and explanations of the C3R encryption client settings that need to run to help you understand how to protect, use, collaborate, and not share raw data.

TDR222 | Security monitoring for connected devices across OT, IoT, edge & cloud

In this lightning talk hear from an expert who teaches you how to stay ahead of cybersecurity threats and help IT leaders, CIOs, and CISOs manage cybersecurity risks for all connected devices that include operational technology. This will be an important lightning talk to join as you learn how AWS makes it easier to monitor, detect, and respond to threats across the entire attack surface, which includes OT, IoT, edge, and cloud, while protecting your security investments in existing third-party security tools.

NIS372 | Building a DDoS-resilient perimeter and automatic protection at scale

In this workshop you can acquire practical knowledge on how to build a DDoS-resilient perimeter, analyze logs to make informed decisions with Amazon Athena, and see how to use services like AWS Shield, AWS WAF, AWS Firewall Manager, and Amazon CloudFront to architect for DDoS resiliency and maintain robust operational capabilities that allow for rapid detection and engagement during high-severity events. This will be an excellent session to help you learn how to detect and filter out malicious web requests, reduce the attack surface, and protect at scale with maximum automation and visibility.