Dev Day Australia 2018 Dev Bytes Presentation by Syed Jaffry, AWS Solutions Architect

1. Your Application State is Precious.
Protect it with Defence in Depth
SYED JAFFRY, 7th Aug 2018
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

2. Why Security of Application State Important?
Application state is important
The integrity of the application state is important

3. Why Security of Application State Important?
App
Amazon RDS
App
State

4. HOW TO THINK ABOUT SECURING YOUR
APPLICATION STATE

5. Modeling Data Security
Data Classification
Highly Protected Publicly Accessible
Security Controls
Preventative
• Upfront security controls
• Principle of “Defence in depth”
Detective
• After the fact compliance and audit checks
• Principle of ”Freedom within guardrails”

6. DEFENCE IN DEPTH

7. Layering of Security Controls

8. Encryption
Encryption at Rest Encryption in Transit Key Management

9. Authentication & Authorisation
Principle of
Least Privilege
PRO TIP: Separate ”Management flow” operations like CreateDatabase from ”Application flow” operations
like database queries to reduce “blast radius” in the event of application compromise
Use of IAM Secure credentials
management

10. Network Flow Control
Network ACL Security Group
security group

11. Network Flow Control
Amazon
RDS
App 1
EC2 instance EC2 instance
App 2
App2
DB
Amazon
RDS
App1
DB
security group
X
App Tier
Database Tier

12. Network Isolation
AWS VPC AWS VPC Endpoint

13. Application Level Threats & DDOS Protection
AWS Shield Amazon CloudFrontAWS WAF

14. Scan QR Code for More Information

15. Thank you