how aws security - aurelijus banelis · aurelijus banelis pgp 0x320205e7539b6203 130d c446 1f1a...
TRANSCRIPT
![Page 1: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/1.jpg)
Aurelijus Banelis
How AWS handles security
ŠiauliaiPHP v172019-11-28
![Page 2: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/2.jpg)
Aurelijus Banelis
PGP 0x320205E7539B6203130D C446 1F1A 2E50 D6E33DA8 3202 05E7 539B 6203
Backend/[email protected]
![Page 3: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/3.jpg)
Security patternsin AWS
![Page 4: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/4.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 5: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/5.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 6: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/6.jpg)
AWS
![Page 7: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/7.jpg)
AWSInfrastructure as a service
Pay on demand
![Page 8: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/8.jpg)
Cloud vs Hosting
![Page 9: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/9.jpg)
Cloud vs Hosting
Innovate with provider
Thinking model
![Page 11: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/11.jpg)
Security toolsNetwork, storage, auditing, reaction,
application level
Complex system
![Page 12: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/12.jpg)
Security toolsNetwork, storage, auditing, reaction,
application level
Complex system
![Page 14: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/14.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 15: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/15.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 16: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/16.jpg)
Monolithicvs
Distributed
![Page 17: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/17.jpg)
Monolithic
![Page 18: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/18.jpg)
Onion-like architecture
![Page 19: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/19.jpg)
Distributed
![Page 20: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/20.jpg)
Sidecar-like architecture
![Page 21: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/21.jpg)
Monolithicvs
Distributed
![Page 22: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/22.jpg)
Traditionalvs
Cloud-native
![Page 23: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/23.jpg)
Traditional
![Page 24: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/24.jpg)
Enforced and validated by humans
![Page 25: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/25.jpg)
Cloud-native
![Page 26: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/26.jpg)
Enforced and validated by computers
![Page 27: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/27.jpg)
Traditionalvs
Cloud-native
![Page 28: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/28.jpg)
Hierarchical vs
graph-based
![Page 29: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/29.jpg)
Hierarchical
![Page 30: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/30.jpg)
Graph-based
![Page 31: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/31.jpg)
![Page 32: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/32.jpg)
Hierarchical vs
graph-based
![Page 33: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/33.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 34: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/34.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 35: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/35.jpg)
Upload from frontend
![Page 36: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/36.jpg)
![Page 37: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/37.jpg)
https://gist.github.com/aurelijusb/527c07e0f47b6dcbd1bdca27d265ac72
![Page 38: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/38.jpg)
Automation without root
![Page 39: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/39.jpg)
https://gist.github.com/aurelijusbanelis/c29dc37e50fc95f5ecec47ea7ac6b69a
![Page 40: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/40.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 41: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/41.jpg)
What is AWSCloud vs HostingCore security tools
Introduction
By comparison
By example
Monolithic vs distributedTraditional vs cloud-nativeHierarchical vs graph-based
Upload from frontendAutomation without root
![Page 43: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/43.jpg)
Problemsharder
Perspectivewider
![Page 44: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/44.jpg)
● AWS Best practices: https://aws.amazon.com/architecture/well-architected/
● Summaries as illustrations:https://www.awsgeek.com/
● Community managed resources:https://github.com/open-guides/og-aws#security-and-iam
● Thinking about the Cloud: from application perspective:http://shop.oreilly.com/product/0636920072768.do
● Thinking about the Cloud: from infrastructure tools perspective:http://shop.oreilly.com/product/0636920075837.do
References and further reading
![Page 45: How AWS security - Aurelijus Banelis · Aurelijus Banelis PGP 0x320205E7539B6203 130D C446 1F1A 2E50 D6E3 3DA8 3202 05E7 539B 6203 Backend/DevOps aurelijus.banelis.lt aurelijus@banelis.lt](https://reader034.vdocuments.site/reader034/viewer/2022042802/5f396df9f33b5e65fd7ecf5c/html5/thumbnails/45.jpg)
Aurelijus Banelis
How AWS handles security
ŠiauliaiPHP v172019-11-28
Thank youDiscussion?