A review of as build and deploy at web applications in AWS with Owasp tools Who Am I? • Software Engineer based in Chile • OWASP Viña del mar Chapter Leader • Recurrent Speaker on Application Security conferences • Head of Software Development https://www.appsec.cl anc Cloud Security Alliance Fellow

1. 1

2. AWS re:INVENT
February 2018
2
By Gustavo Nieves Arreaza

3. Presentation
• Systems Engineer
• Certified in Cisco CCNA and CCSI
• 7 years of experience as Project Leader
Trainer and web developer at Public
Sector, Bank, Army and Security
Organizations in Chile and Venezuela
• Led security projects at Owasp, Banks and
Government
• Teach CCNA and web development
3

4. Agenda
• The Problem to solve
• Why choose AWS?
• Common Use Cases
• AWS Total Cost Ownership
• Elastic BeanStalk
• AWS Services for deploy a Web Site
• Time for New Approaches
4

5. The problem to solve
5

6. Aiming for More
6

7. Why choose AWS?
7

8. AWS
Cloud computing is an on-demand service that provides virtual ITsevices.
8

9. Categories of cloud computing
Infrastructure as a Service (IaaS):
Platform as a Service (PaaS):
Software as a Service (SaaS):
9

10. Models of Services
10
Cloud Hybrid On-premise

11. AWS Pricing Philosophy
11

12. AWS migration tools
Show the data about
configuration
Transfer petabyte-
scale data
Make a direct connection
between your network and an
ability zone
12

13. AWS Trusted Advisor
13

14. The Cloud Leader
• The most mature provider, ready for
business
• Its disciplined approach to negotiation
of contracts and discounts.
14

15. Common Use Cases
15

16. Thousands of enterprises are migrating
16

17. Main Fears: Data Security
17

18. Main Fears: Complexity
10 MM for 4500 usd
18
37 MM in 90 Minutes

19. AWS Total Cost Of Ownership
AWS provided a tool for potential clients to estimate the Total Cost of Ownership
19

20. Elastic Beanstalk
20

21. Elastic Beanstalk
21
Your web application will grow in a better field. A field that is constantly updating and
it is always ready to grow new applications. It gives you the best performance and
visibility.
You only need to plant the bean!!

22. Deployment Steps
22

23. IIS Microsoft vs. Elastic Beanstalk
23

24. Roles, Users, Groups vs Identity and access manage

25. DNS Manager vs Route 53

26. IIS Certificate vs Certificate Manager

27. Flexibility

28. Time for new approaches
28

29. Cloud Security
29
AWS security model is based on a shared contract –responsibility:
• AWS is responsible for the security of the hardware and operating
system
• The user is responsible for the security of the apps that are deployed in
the cloud.

30. 30
Implementing Secure Coding
Training Design
Develop-
ment
Validation Maintenance

31. Contact me!
Email Address:Ing.Arreaza@gmail.com
WebSite:www.seguridadaplicativos.com
31

32. T H A N K Y O U !
32