re:Invent 2016 was a whirlwind of announcements and new possibilities. AWS unleashed a torrent of new functionality across all 50+ services. Join leading cloud expert, Mark Nunnikhoven, as he reviews the highlights of the show, unearths the hidden gems, and discusses how these new features could impact your approach to security in the AWS Cloud.

1. AWS re:Invent re:Cap 2016
Mark Nunnikhoven, Vice President, Cloud Research
Audience: Public
1

2. © Trend Micro, 20162

3. © Trend Micro, 20163
AWS YouTube Channel
re:Invent 2016 Playlist
http://bit.ly/2016-recap-01
AWS SlideShare
http://bit.ly/2016-recap-02

4. © Trend Micro, 20164
AWS re:Invent main site http://bit.ly/2016-recap-03

5. © Trend Micro, 20165
AWS re:Invent main site http://bit.ly/2016-recap-03
Great insight in AWS internal technology

6. © Trend Micro, 20166
Detailed in a keynote
Break out session
Brief mention in a keynote
Mention in a break out session
Blog post (http://bit.ly/2016-recap-06)
Mention in a blog post
Week In Review (http://bit.ly/2016-recap-05)
Documentation update (http://bit.ly/2016-recap-04)

7. © Trend Micro, 20167
Detailed in a keynote
Break out session
Brief mention in a keynote
Mention in a break out session
Blog post (http://bit.ly/2016-recap-06)
Mention in a blog post
Week In Review (http://bit.ly/2016-recap-05)
Documentation update (http://bit.ly/2016-recap-04)
Most people know about these
Some real gold here

8. © Trend Micro, 201611
Amazon EC2

9. © Trend Micro, 201612
IPv6 support in us-east-2 (http://bit.ly/2016-recap-07)
Bigger T2 burstable instance types (xlarge, 2xlarge)
R4 memory optimized instance types
I3 I/O intensive instance types
C5 compute intensive instance types (leveraging Intel Skylake)
Elastic GPUs For EC2 (coming soon, http://bit.ly/2016-recap-08)
F1 instances: configurable FPGA (limited preview, http://bit.ly/2016-recap-09)
Amazon Lightsail (http://bit.ly/2016-recap-10)

10. © Trend Micro, 201613
Amazon EC2 Systems Manager
(http://bit.ly/2016-recap-11)
NEW

11. © Trend Micro, 201614

12. © Trend Micro, 201614

13. © Trend Micro, 201615

14. © Trend Micro, 201616

15. © Trend Micro, 201617

16. © Trend Micro, 201618

17. © Trend Micro, 201619

18. © Trend Micro, 201620
Blox
(http://bit.ly/2016-recap-30)
NEW

19. © Trend Micro, 201621
Blox project site http://bit.ly/2016-recap-31

20. © Trend Micro, 201622
AWS Shield

21. © Trend Micro, 201623
AWS Shield
(http://bit.ly/2016-recap-12)
NEW

22. © Trend Micro, 201624

23. © Trend Micro, 201624

24. © Trend Micro, 201625

25. © Trend Micro, 201626

26. © Trend Micro, 201626

27. © Trend Micro, 201627
AWS Shield AWS WAF
Amazon
CloudFront
Amazon ALB

28. © Trend Micro, 201628
AWS Shield AWS WAF
AWS
Lambda@Edge
Amazon ALB
Amazon
CloudFront
More at http://bit.ly/2016-recap-13
and http://bit.ly/2016-recap-14
More at http://bit.ly/2016-recap-15

29. © Trend Micro, 201629
Amazon S3

30. © Trend Micro, 201630
Amazon Athena
(http://bit.ly/2016-recap-16)
NEW

31. © Trend Micro, 201631

32. © Trend Micro, 201631

33. © Trend Micro, 201632

34. © Trend Micro, 201633

35. © Trend Micro, 201634

36. © Trend Micro, 201635
Amazon QuickSight
(http://bit.ly/2016-recap-17)
NEW
(ish)

37. © Trend Micro, 201636

38. © Trend Micro, 201637

39. © Trend Micro, 201638

40. © Trend Micro, 201639

41. © Trend Micro, 201640
Event Sources
AWS CloudTrail
• All API calls
• IAM identity for action
Available data;
• Δ to expected (Alarms)
• Host logs (Logs)
• 3rd party logs (Logs)
• API call push (Events)
Available data;
Amazon CloudWatch

42. © Trend Micro, 201641
S3 data storage is inexpensive
Use S3 Infrequent Access to lower costs (S3 IA, http://bit.ly/2016-recap-18)
Bucket policies to push to Amazon Glacier (http://bit.ly/2016-recap-19)
Very inexpensive, highly effective data store for ops

43. © Trend Micro, 201642
AI

44. © Trend Micro, 201643
Amazon Rekognition
(http://bit.ly/2016-recap-20)
NEW

45. © Trend Micro, 201644

46. © Trend Micro, 201645
Use case from http://bit.ly/2016-recap-20

47. © Trend Micro, 201646
Use case from http://bit.ly/2016-recap-20

48. © Trend Micro, 201647
Use case from http://bit.ly/2016-recap-20

49. © Trend Micro, 201648
Use case from http://bit.ly/2016-recap-20

50. © Trend Micro, 201649
Amazon Polly
(http://bit.ly/2016-recap-21)
NEW

51. © Trend Micro, 201650

52. © Trend Micro, 201651
Use case from http://bit.ly/2016-recap-21

53. © Trend Micro, 201652
Amazon Lex
(http://bit.ly/2016-recap-22)
NEW

54. © Trend Micro, 201653

55. © Trend Micro, 201654
Use case from http://bit.ly/2016-recap-22

56. © Trend Micro, 201655
Use case from http://bit.ly/2016-recap-22

57. © Trend Micro, 201656
Use case from http://bit.ly/2016-recap-22

58. © Trend Micro, 201657
MXNet
(http://bit.ly/2016-recap-32)
NEW

59. © Trend Micro, 201658
MXNet project site http://bit.ly/2016-recap-33

60. © Trend Micro, 201659
AWS Lambda

61. © Trend Micro, 201660
C# support in AWS Lambda (http://bit.ly/2016-recap-23)
AWS Lambda@Edge (http://bit.ly/2016-recap-24)
AWS GreenGrass (http://bit.ly/2016-recap-25)
AWS Import/Export Snowball Edge (http://bit.ly/2016-recap-26)

62. © Trend Micro, 201661
AWS Step Functions
(http://bit.ly/2016-recap-27)
NEW

63. © Trend Micro, 201662

64. © Trend Micro, 201663
Use case from http://bit.ly/2016-recap-29

65. © Trend Micro, 201664
Use case from http://bit.ly/2016-recap-29

66. © Trend Micro, 201665
Use case from http://bit.ly/2016-recap-29

67. © Trend Micro, 201666
AWS X-Ray
(http://bit.ly/2016-recap-28)
NEW

68. © Trend Micro, 201667

69. © Trend Micro, 201668

70. © Trend Micro, 201669
What’s Next

71. © Trend Micro, 201670
Mark Nunnikhoven
Vice President, Cloud Research
Trend Micro
@marknca

72. © Trend Micro, 201671
AWS YouTube Channel
re:Invent 2016 Playlist
http://bit.ly/2016-recap-01
AWS SlideShare
http://bit.ly/2016-recap-02

73. © Trend Micro, 201672
IOT401
Serverless IoT Backends (http://bit.ly/2016-recap-34)
SAC322
AWSShield—AManagedDDoSProtectionService (http://bit.ly/2016-recap-35)
SAC323
Manage Multiple AWS Accounts with AWS
Organizations (http://bit.ly/2016-recap-36)
DEV209
Another Day in the Life of a Netflix Engineer (http://bit.ly/2016-recap-37)

74. © Trend Micro, 201673
SAC318
Life Without SSH: Immutable Infrastructure in Production
(http://bit.ly/2016-recap-38)
ARC402
Serverless Architectural Patterns and Best Practices
(http://bit.ly/2016-recap-39)
SVR401
Using AWS Lambda to Build Control Systems for Your
AWS Infrastructure (http://bit.ly/2016-recap-40)
SAC306
Encryption: It Was the Best of Controls, It Was the Worst of
Controls (http://bit.ly/2016-recap-41)

75. © Trend Micro, 201674
CMP305
Serverless to 32XLarge, A Unified Security Approach To
AWS Compute (http://bit.ly/2016-recap-42)
SAC201
Lessons from a Chief Security Officer: Achieving
Continuous Compliance (http://bit.ly/2016-recap-43)

76. © Trend Micro, 201675
Trend Micro http://trendmicro.com/aws

77. © Trend Micro, 201676

78. © Trend Micro, 201677
Thank you!
mark_nunnikhoven@trendmicro.com | @marknca