Episode 29: The Cloud Pod Re:Inforces Security

We recap the AWS Reinforce conference from Boston Massachusetts.  Draft results, overall impressions of the conference and we break down each announcement.

Sponsors:

• Foghorn Consulting – fogops.io/thecloudpod
• Turbonomic – turbonomic.com/cloudpod

Reinforce Results

Justin

1. DLP Cloud solution on AWS
2. SIEM for AWS
3. Endpoint Security Tools

Jonathan

1. Redlock or Trusted Advisor for security
2. VPC Security Group Improvements
   1. Lists of Source IP’s 
   2. IP/Name matching/Tag sources for Security Groups
3. Machine Learning around Flowlogs and Payload data

Peter – Wins!

1. L7 Egress Firewall/proxy
2. Flowlogs with Payload data/Packet Capture –  VPC Traffic Flow Mirroring
3. Security Scanning of Container for ECR

Honorable Mention

• Justin
  • WAF Enhancement
  • Client VPN based Dynamic Access/Security Groups
  • Tagging Namespace fix
• Jonathan
  • Organizations enhancements to make security easier across a set of accounts
• Peter
  • Lunch will be free

Reinforce Announcements

• AWS Certificate Manager Private CA now supports Root CA hierarchy
• You can now use IAM access Advisor with AWS Organizations to set permission guardrails confidently
• Network Load Balancer Now Supports UDP Protocol
• Amazon FSx for Windows File Server Now Enables you to use your File Systems  Directly with Your organizations self-managed active directory 
• Amazon FSX for WIndows File Server now enables you to use a single AWS Managed AD with file systems across VPC’s and Accounts
• File Gateway Adds options to enforce encryption and signing for SMB shares
• New Service Quotas: View and manage your quotas for AWS services from one central location
• Amazon DynamoDB now supports up to 25 unique items and 4 MB of data per transactional request
• AWS Security Hub is now Generally Available
• AWS Control Tower is now generally available
• AWS Marketplace now integrates with your procurement systems
• Announcing the Amazon VPC Traffic mirroring for EC2 Instances
• APN Navigate Security Track
• AWS Direct Connect launches first location in Italy 
• Amazon Cloudwatch adds Visibility for your .NET and SQL Application Health