AWS Sydney Meetup Presentation. Organised and sponsored in conjunction with PolarSeven - http://polarseven.com Session 1: Michael Watts ­ CEO C​loud Conformity “How our AWS account got hacked and what we did to ensure it never happened again.” To find out more about Cloud Conformity please visit them at their website - https://www.cloudconformity.com/

1. Continuous Assurance

2. A Typical AWS journey

3. Best practice is new and complex

4. With great power comes great responsibility

5. Shared Responsibility!

6. Typical monthly AWS bill
Spiraling Cost
Monthly AWS bill after compromise

7. NAT not designed for failure
Figure 1a: Internet-bound traffic
through a NAT instance
Figure 1b: Internet-bound traffic
interrupted during NAT failure

8. NAT designed for failure
Virtual Private Cloud

9. SSL certificate
The site’s security certificate has expired!

10. What we built to solve this! – Cloud Conformity Demo

11. Register your interest at
cloudconformity.com
Beta finishes
September 1st
WIN an
Amazon Echo
Continuous Assurance