The document discusses the importance of securing Amazon S3 buckets against cloud misconfiguration, which poses significant security risks. It highlights concerns about vulnerabilities in cloud environments and how hackers adapt their strategies to exploit these weaknesses. The presentation includes a deep dive into Amazon S3 security and concludes with a Q&A session.

1. Building a Highly Secure S3
Bucket
Josh Stella, Co-Founder and CTO, Fugue| Nov. 13,
2020
Building a Highly Secure S3 Bucket

2. Agenda
1. Why Cloud Security is Different (A Brief Overview)
2. A deep Dive into the Security of Amazon S3
3. Q&A
Building a Highly Secure S3 Bucket

3. Cloud Misconfiguration is the #1 Risk
CONCERNED
THEY’VE BEEN
HACKED AND
DON’T KNOW IT
84%
CONCERNED
THEY’RE
VULNERABLE TO
A CLOUD BREACH
92%
MISCONFIGURATI
ON RISK WILL
INCREASE OR
STAY THE SAME
THIS YEAR
76%
”I’m seeing a lot of cloud configuration errors in the real world-
and it’s scaring the hell out of me” -- David Linthicum, InfoWorld
Building a Highly Secure S3 Bucket

4. PRE-CLOUD HACKER
STRATEGY
1. Pick Your Target
2. Find Your Vulnerabilities
How Hacker Strategy Changed with
Cloud CLOUD EXPLOIT STRATEGY
1. Find vulnerabilities
2. Pick your target
“Skilled or well-funded hacker groups are employing automation to discover
and exploit misconfigured cloud assets within hours of their deployment”
--John Breeden II, CSO Online
Building a Highly Secure S3 Bucket

5. DEEP DIVE:
THE SECURITY OF AMAZON S3
Building a Highly Secure S3 Bucket

6. Q&A
Building a Highly Secure S3 Bucket