Julia F Morgado Breaking Bad...Habits AWS Communtity Day Midwest 2023

1. eaking
lia Furst Morgado
Br
32
Ju
22
d…
Ba
58
habits on
A
72
W
89
S
25
Global Technologist
Veeam Software
@juliafmorgado
linkedin.com/in/juliafmorgado

2. Start off on the right foot
Three critical steps:
1. Enable MFA for Root account
2. Use AWS IAM or AWS IAM Identity
Center & enable MFA
3. Invest in the skills of your workforce
1
56
https://aws.amazon.com/training/

3. Lack of Multi-Account Governance
• Limit incident blast radius
• Discount sharing
• Consolidated billing
• Organizational Units
• Distinct security controls by
environment - Service Control
Policies (SCP)
2
78

4. Poor IAM Implementation
• Avoid AWS managed policies
(“one-size-fits-all” policies)
• Principle of least privilege
• Have processes in place
• IAM vs AWS IAM Identity Center
• Leverage AWS IAM Access
Analyzer
3
56
IAM
IAM Identity Center

5. Managing Infrastructure Manually
IaaC:
• Re-deployable
• Scalable
• Documented
• Maintainable
• Less human error
4
51

6. Insufficient measures to protect data
• Encryption in transit & at rest
• Secrets Management
• 3-2-1-1-0 Backup rule
• DR plan/design for failure
5
56

7. Not Prioritizing Cost Management
• Enable AWS Budgets & Billing
Alarms
• Leverage AWS Cost Explorer
• Develop a culture of cost awareness
• Provide dev team with cost visibility
6
15

8. Overlooking Interesting Data
Out-of-the-box data:
• AWS Cloudtrail
• AWS VPC Flow Logs
• AWS ELB Access Logs
Use cases:
• Troubleshooting
• Auditing & Compliance
• Analytics
• SIEM
7
83

9. Are you Well-Architected?
?
99
https://aws.amazon.com/well-architected-
tool/

10. Julia Furst Morgado
K
32
O
22
T
32
A
3
2
H
32
N
3
2 Y
32
U
22
@juliafmorgado
linkedin.com/in/juliafmorgado