This document discusses security of workloads in AWS. It outlines that security in the cloud is a shared responsibility between the cloud provider and customer. It recommends following the least privilege principle for IAM, deleting root access keys, using roles instead of users, implementing VPC security features like WAF and Shield, encrypting data using services like AWS Certificate Manager, CloudHSM, and KMS, and implementing continuous security through services like security scanning. It also lists free security resources available from AWS like the security center, GDPR compliance center, and security videos.

1. Security of Workloads in AWS
Albert Anthony – Founder, LovesCloud
15-April-2018
www.loves.cloud

2.  Founder-LovesCloud
 15 Years in IT
 Author – Mastering AWS Security
 Cloud Solutions Architect
 Trainer
www.loves.cloud
About:
albert@loves.cloud
Twitter : @awsagile

3. • Founded in 2017
• Based in Noida, India
• Your Go-To Partner for Cloud
• Cloud Solutions & Cloud Training
• Security & Compliance
• Saved millions of $$ for customers across globe on cloud
www.loves.cloud
www.loves.cloud

4. Cloud Solutions
• AWS, Azure, GCPCloud Migration
• CI/CD Automation, Config. MgmtDevOps
• Processing, Analytics, VisualizationBig Data
• Web App, Hybrid Mobile AppCloud Native Development
• Lambda, Azure Functions, GCP FunctionsServerless
• Docker, KubernetesContainers
www.loves.cloud

5. Cloud Training
• AWS
• Azure
• Google Cloud Platform
• DevOps
• Docker & Kubernetes
• Ansible
• Customized Training
• Project Specific Training
• Classroom & Online
www.loves.cloud

6. www.loves.cloud
Security & Compliance
GDPR
PCI-DSS
HIPPA
Security Audit
Penetration Testing
Vulnerability Scanning

7. www.loves.cloud
All Roads Lead
to Cloud!

8. www.loves.cloud
# 1 Concern
for Cloud
Adoption?

9. Security in Cloud is a Shared Responsibility
www.loves.cloud

10. Security of Software as a Service in Cloud
www.loves.cloud

11. Security Responsibilities
www.loves.cloud

12. IAM Security Fundamentals
www.loves.cloud
 Follow Least Privilege Principle
 Delete Root Access Keys
 Use Roles Instead of Users

13. Secure Infrastructure in AWS
www.loves.cloud
VPC WAFShield

14. Data Security in AWS
www.loves.cloud
 AWS Certificate Manager
 Manage TLS Certificates
 Use With AWS Services (ELB, CloudFront)
 Amazon CloudHSM
 Dedicated Hardware Security Module
 AWS KMS
 Managed Encryption Service

15. Continuous Security for AWS Workloads
www.loves.cloud

16. FREE Security Resources in AWS
www.loves.cloud
 AWS Security Centre
 https://aws.amazon.com/security/
 Penetration Testing
 Security Whitepapers
 AWS GDPR Compliance
 https://aws.amazon.com/compliance/gdpr-center/
 AWS Security Videos (40 YouTube Videos)
 https://www.youtube.com/playlist?list=PLhr1KZpdzukcGVzIVFTy-
j358ZoK9cvrF

17. THANK YOU
albert@loves.cloud
Twitter : @awsagile
www.loves.cloud