Diana Initiative 2022-Cassandra Young (muteki)-Essential Guardrails for AWS Organizations
Channel: The Diana Initiative
Date: 2022-10-06

Diana Initiative 2022
Las Vegas, NV

While service-level controls in AWS such as configuring security groups and scoping permission policies are important parts of securing your services and applications within an AWS account, it's easy to forget security beyond the account level. This talk will cover "the essentials" of securing your AWS Organization, including securing root account(s), logically organizing AWS accounts, and designing and applying Service Control Policies (SCPs) to restrict actions within multiple accounts. We'll walk through the implementation and testing of selected SCPs, discuss logging within Organizations, and wrap up with actionable takeaways.

Cassandra Young (muteki)
Security Risk Advisors
Senior Scientist, Cloud Security

Cassandra (aka muteki) works full time in information security consulting, specializing in Cloud Security Architecture and Engineering. She holds a master’s degree in Computer Science, focusing on cloud-based app development and academic research on serverless security and privacy/anonymity technology. As one of the directors of Blue Team Village, she also works to bring free Blue Team talks, workshops and more to the broader security community.