Folien zu den Vorträgen von Bertram Dorn vom AWS Initiate Berlin Event 1) Sicher in die Cloud: Bewährte Methoden für Cloud-Security auf AWS 2) AWS Services für die Intrusion Detection und Intrusion Prevention Sprecher: Bertram Dorn, Solutions Architect - AWS

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Mitigating Cyber Risks on AWS
Bertram Dorn, Specialized Solutions Architect for Security
and Compliance

3. On demand Pay as you go
Uniform Available
Cloud

4. Cloud
Services

5. What is AWS?
AWS Global Infrastructure
Application Services
Networking
Deployment & Administration
DatabaseStorageCompute

6. API
• WebInterface
• CLI
• SDK
• API
Architect
AWS
IAM
Resource / Application
User
Amazon
S3
Amazon
DynamoDB
Amazon API
Gateway Amazon
SES
Amazon
SQS
Application
API Features
• DDoS Protected
• MultiAZ
• Available
• Encryption in
Transport
• Authenticated
• Logging

7. Shared Responsibility
Cross-service Controls
Service-specific Controls
Managed by
AWS
Managed by
Customer
Security of the Cloud
Security in the Cloud
Cloud Service Provider
Controls
Optimized
Network/OS/App Controls
Request reports at:
aws.amazon.com/compliance/#contact
ISO
27000
ISO
9001

8. The Paths
CloudData Path
Command
Path
Application
Path
Managed by
Customer

10. Services Command Path
Amazon
Macie
Amazon
CloudWatch
AWS
CloudTrail
AWS
Config
IAMAWS
Organizations
AWS KMS
flow logs
Amazon ES
EBS
S3
SQS
Work*
SSM
Guard Duty

11. Services Data Path
AWS Shield
AWS WAF
Elastic Load
Balancing*
AWS Direct
Connect
Amazon
CloudFront
Amazon
Route 53
Amazon
Inspector
AWS Certificate
Manager
Amazon API
Gateway
AWS
Lambda
virtual private cloud
customer
gateway
Internet
gateway
VPC
peering
VPN
gateway
Amazon EC2
Systems Manager
AWS
CloudHSM

13. Thank you