Stephen Schmidt Keynote at re:Inforce 2021
Tags: aws, cloud, security
Published: 2021-08-24 18:39:12

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/4ciav6xp6bxojcn7uqv6.PNG)


**Statistics from the past year (during COVID19)**

* Number of employees shift to working from home increased by 114%

* Number of mobile phishing attempts increased by 364%



**Threat detection and incident response**

**Amazon GuardDuty**

https://aws.amazon.com/guardduty

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/07d9pno59k5xvm9zfy38.PNG)

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/p8ym3cdm1o6apdikxmjq.PNG)

https://aws.amazon.com/about-aws/whats-new/2021/01/amazon-guardduty-enhances-security-incident-investigation-workflows-through-new-integration-with-amazon-detective/


**AWS Security Hub**

https://aws.amazon.com/security-hub

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/8nyvirqy6t1cs7u9qo1s.PNG)

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp.html

 

**Best practices for fighting against ransomware**

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/iy6ffqes5v4zgpib3lts.PNG)

https://d1.awsstatic.com/WWPS/pdf/AWSPS_ransomware_ebook_Apr-2020.pdf



**Announcement: AWS Backup Audit Manager**

https://aws.amazon.com/about-aws/whats-new/2021/08/aws-backup-audit-manager

https://aws.amazon.com/blogs/aws/monitor-evaluate-and-demonstrate-backup-compliance-with-aws-backup-audit-manager

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/b0gphautiut04nctt80m.PNG)

**Identity and Access Manager**

https://aws.amazon.com/iam

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/0084g2wc4ko22fi8bn1o.PNG)

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/fz2cnl9cj5buk9a55vmd.PNG)

**AWS IAM Access Analyzer**

https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/lqzn3mxzfdx942qu3vr4.PNG)


**Best practices for Identity and Access Management**

* Review permissions regularly

* Use groups for IAM policies

* Use least privilege in IAM



**Security statistics**

* 73% of enterprises have experienced elevated third-party risks amongst their partner and suppliers

* 53% of these teams were already understaffed before the pandemic began



**HBO Max customer story**

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/hhp185jgybl5yeu8bzkp.PNG)

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/ali5kmn1ukjnrpjrhczs.PNG)

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/6ps61oemwxek0lgtev0u.PNG)


**AWS IoT Core and VPC Endpoints**

https://aws.amazon.com/about-aws/whats-new/2021/07/aws-iot-core-supports-vpc-endpoints

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7qed6fxxrhg0vhxbdjy1.PNG)


**AWS Well-Architected test tool**

https://aws.amazon.com/well-architected-tool

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/d1tta30v5s0sndac2g3j.PNG)


**Data privacy at AWS**

https://aws.amazon.com/compliance/privacy-features

https://aws.amazon.com/compliance/sub-processors

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/p240t3ucd3a454tukaip.PNG)


**Best practices for protecting your data**

* Don't store sensitive data without a plan

* Encrypt everything


**AWS acquired Wicker – End to end encrypted communication technology**

https://aws.amazon.com/blogs/security/aws-welcomes-wickr-to-the-team/

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/hbxg4qb7hu10dylrve3o.PNG)


**Cloud Audit Academy**

https://aws.amazon.com/compliance/auditor-learning-path/

![Alt Text](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/fxeuzuwwit15or7dzvwi.PNG)