How can you build a robust cloud security program in AWS, particularly as a startup and small to medium-sized businesses navigating AWS in 2024? We spoke to Chris Farris, who is the event chair for fwd:cloudsec, a known cloud security expert and one of the first AWS Heroes for security.
Chris shared his insights on how to build a security strategy that is both practical and effective in today's dynamic cloud environment. From discussing the importance of AWS organizations and Identity Centre to breaking down the complexities of cloud security posture management. You will hear actionable advice and best practices.
Guest Socials: Chris's Linkedin (@chrisfarris)
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
- Cloud Security Podcast- Youtube
- Cloud Security Newsletter
- Cloud Security BootCamp
Questions Asked:
(00:00) Introduction
(02:59) A bit about Chris Farris
(03:30) fwd:cloudsec Conference
(04:19) AWS Hero program for Cloud Security
(05:23) Building Effective Cloud Security Programs
(11:39) Top Recommendations for AWS Cloud Security
(13:34) What is AWS IAM Identity Center?
(18:02) How to Set Up AWS IAM Identity Center?
(20:13) Cloud Security in different industries
(29:31) The role of a Cloud Security Engineer
(34:30) Cloud Security Breaches
(38:02) Educational Resources in Cloud Security
(42:41) The Fun Section
Resources spoken about in this episode: fwd:cloudsec AWS IAM Identity Center Leveraging AWS SSO (aka Identity Center) with Google Workspaces breaches.cloud
Challenges with Building Serverless Applications at Scale
Microsoft releases CSPM for AWS & More Linux Security Support on Azure
Security Governance and Compliance in Serverless Applications
AWS Earns over 16billion this quarter + SEGA on Microsoft Azure - Cloud Security News
How to Build Applications with Zero Trust Principles
What is SaaS Security Posture Management (SSPM)?
AWS Lands UK Spy Services Contact + Google Cloud + Azure release Q3 results - Cloud Security News
Threat Detection and Incident Response in Cloud - Nathan Case
HashiConf Global 2021 - Our Cloud Security Picks - Cloud Security News
Talks not to be missed at Kubecon North America 2021 - Cloud Security News
All the Security Updates - Google Cloud Next 21 - Cloud Security News
What is Cloud Native Application Protection Platform - CNAPP Explained!
Google Cloud Next 21, Kubecon and VMworld - Cloud Security News
Implementing Cloud Security Tools the Right way - Stay Alert Not Fatigue!
AWS Launches Cloud Control API - Cloud Security News
Data Security in Cloud with David McCaw, Dasera
Cloud Security ranks in 2021 OWASP Top 10 - Cloud Security News
Cloud Security Careers: Application Security Engineer Skills with Tanya Janca
Cloud Security Careers: Threat Analyst Skills
Vulnerabilities in AWS, GCP and Azure - Cloud Security News
Create your
podcast in
minutes
It is Free
Insight Story: Tech Trends Unpacked
Zero-Shot
Fast Forward by Tomorrow Unlocked: Tech past, tech future
The Unbelivable Truth - Series 1 - 26 including specials and pilot
Lex Fridman Podcast