Securi-Tay 2020: Sunshine Through the Clouds: Successful Penetration Testing in Cloud Environments
Talk Description:
Running world-class, scalable infrastructure in the cloud means deploying cloud-native security that is resilient, adaptive, and responsive. We can use penetration tests to give us confidence that the infrastructure has been implemented correctly. Cloud infrastructure, though, is best secured using cloud-native mechanisms. Testing that infrastructure, then, means looking at new and different aspects of the infrastructure. This is not your father's penetration test. If you're going in cold to test cloud infrastructure, what should you look for? What are the cloud-specific checks that have the best value? How can we ensure that the clouds are full of rainbows and remain a safe place for unicorns to frolic and play?
About Paco Hope:
Paco Hope is a Principal Security Consultant with Amazon Web Services. Formerly based in London, he's now based in us-east-1. Paco helps enterprise customers build secure landing zones in AWS, migrate applications securely, and configure their AWS services securely to meet their security, risk, and compliance goals in the cloud. He has been known to dress as a rainbow unicorn to drive home the importance of cloud security. Read his most recent blog post and other great security resources on the AWS Security Blog: https://aws.amazon.com/blogs/security/