Centralized Security

Join AWS subject-matter experts for a deep dive into centralized security posture management on AWS using AWS Security Hub. Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. You will get hands-on experience using Security Hub, along with Amazon GuardDuty and AWS Config, in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Container Security

Join AWS subject-matter experts for a deep dive into container security for Amazon Elastic Kubernetes Service (Amazon EKS). You will learn how to use AWS Config for configuration management, AWS Security Hub for cloud security posture management, AWS Secrets Manager for secure secrets management, Amazon GuardDuty for threat detection, Amazon Detective for simplifying the investigative process for security issues, and Amazon Inspector for scanning container images for software vulnerabilities. Along the way, we'll dive into Kubernetes security best practices. You will get hands-on experience using all of these services in AWS-provided sandbox accounts and will walk away knowing when, why, and how to set up and use the services.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Amazon Detective, Amazon GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, consult the Amazon Detective Prerequisites.

About the event

With IT infrastructures consistently churning out record amounts of new data, ITOps teams are often challenged to manage and analyze with traditional tools. A new approach is needed to help IT shift from reactive to proactive management of incident resolution to boost application availability, save time to detect and resolve the most critical issues and, lower costs.

Join this virtual, hands-on workshop comprising of live presentations and interactive labs, to learn how you can leverage a fully managed AIOps solution from AWS to detect, diagnose and remedy anomalous application behavior in your infrastructure.

This session is also available in other regions and time zones: APJ | AMER

 
You will learn how to:

• Proactively monitor and optimize your infrastructure for performance bottlenecks and operational issues

 
• Easily detect and resolve the most critical issues with ML-powered insights

 
• Reduce time-to-resolve operational issues from days to minutes

Feature topics

 
Amazon DevOps Guru

Amazon CloudWatch

 
Amazon Aurora 
 
AWS Lambda 
 
Amazon DynamoDB 

Amazon API Gateway

Data Discovery

Join AWS subject-matter experts for a deep dive into data discovery AWS using Amazon Macie to find sensitive data. The Data Discovery Activation Day provides organizations with a thorough understanding of data discovery principles, how to implement a data discovery program, as well as hands-on scenarios with Macie and deployment in your AWS accounts. Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

During the event, we will demonstrate how to set up the service across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. This is not required for attendance.

Data Encryption

AWS is committed to providing the ability to encrypt everything everywhere; we give customers features and controls to encrypt data, whether in transit, at rest, or in memory.

Join AWS subject-matter experts for a deep dive into securing your sensitive data on AWS, using AWS Private Certificate Authority (AWS Private CA), AWS Key Management Service (AWS KMS), and AWS CloudHSM. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services, and the best practices when doing so across multiple accounts and regions.

During the event, we will demonstrate how to set up the services across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. If you choose to follow along in your own account, you will leave the event with a fully operational CA hierarchy hosted in AWS Private CA.

Secrets Management

Join AWS subject-matter experts for a deep dive into secrets management on AWS using AWS Secrets Manager to securely store, retrieve, and rotate database credentials and other types of application secrets. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

During the event, we will demonstrate how to set up the service across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the service in, and ensure that you have the appropriate access.

Threat Detection & Response

Join AWS subject-matter experts for a deep dive into threat detection and response on AWS using Amazon
GuardDuty, Amazon Detective, and AWS Security Hub to analyze, investigate, and respond to potential security issues or suspicious activities in your environment. GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity. Detective simplifies the investigative process and helps security teams conduct faster and more effective investigations. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services.

During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Detective, GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, see Amazon Detective prerequisites.

Vulnerability Management

Join AWS subject-matter experts for a deep dive into vulnerability management on AWS using Amazon Inspector and AWS Systems Manager Patch Manager. Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (EC2), Serverless, and container workloads for software vulnerabilities and unintended network exposure. AWS Systems Manager Patch Manager is used to automate the process of patching managed EC2 instances with both security-related and other types of updates. You will get hands-on experience using Amazon Inspector and AWS Systems Manager in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up Amazon Inspector across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Web Application Protection

Join AWS subject-matter experts for a deep dive into protecting web applications on AWS using AWS WAF and AWS Shield. AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. AWS Shield is a managed DDoS protection service that safeguards applications running on AWS. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up the services, and the best practices when doing so.

During the event, we will demonstrate how to set up AWS WAF. You may optionally choose to follow along in one of your own accounts during the event. Determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access.