As organisations move applications and data to commercial cloud environments and developers leverage PaaS resources and CI/CD pipelines to rapidly build and deploy new apps, speed and agility have become the new norm. Learn how to shorten Authority to Operate (ATO) timelines by enabling DevOps teams to build compliance into every release cycle without adding friction. Ace audits by continuously assessing your compliance posture and correcting any issues early in the dev cycle. Presenter: Steven Bridle, Solutions Architect, AWS

1. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Simplify Compliance Through
Automation
Steven Bridle
Cloud Architect, Professional Services, AWS

2. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Six steps to streamline compliance
Start with a known configuration
Compliance is shared
Managed continuously
Automatic fixes
Reporting is easy
Auditors are happy

3. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Start with a known configuration
Compliant cloud: AWS
Infrastructure as code: CloudFormation
AWS Quick Starts and reference
architectures:
• iRAP
• NIST
• NIST High-Impact
• PCI DSS
Security by design:

4. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Inherit global security and compliance controls

5. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Who owns security and compliance?

6. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
Share the work of compliance

7. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
How often do you review and report?
today

8. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
The classic way to manage compliance?

9. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
The better way to manage compliance?

10. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
But what is Security Hub?
• Comprehensive view of your security and compliance state within
AWS
• Aggregates security findings generated by other AWS security
services and partners
• Analyze security trends and identify the highest-priority security
issues
Amazon
Inspector
Amazon
GuardDuty
Amazon
Macie
AWS Security Hub
Security
findings
providers
Findings
Insights
and
standards
Other
AWS
Config
Partner
solutions

11. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T

12. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
The even better way to manage compliance:
Automate
• AERO

13. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
What does AERO look like?
Amazon SNS
Amazon SQS
Amazon Kinesis
Configuration/
State Tracking
Amazon EC2
Amazon S3
AWS Identity and Access Management (IAM)
Amazon Inspector

14. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T
How does AERO work?
Incident
response
engineer
Signatures
with
business
logic
Event
analysis
Responsive
action
Action
notification

15. © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved.P U B L I C S E C T O R
S U M M I T