Chris Betz’s Post

Who's trying to learn all about the latest tech advancements in the era of generative AI as well as actionable steps to improve your organizations’ security posture? AWS re:Inforce is a great way to do so!

AWS Security learning is the focus. Being at re:Inforce is the key. I hope to see you there to talk about how the GSCA Partner Program and AWS can help with your security and compliance. Lets learn and grow together.

The speed in which you respond on the track and your SOC makes all the difference between a great day and a bad one. Having a co-pilot with Precision AI calms the nerves as well.

⭐ Day 56 of the AWS Journey: SSE-C (Server-Side Encryption with Customer-Provided Keys) and Encryption in Transit Today, we're diving into SSE-C and the importance of encryption in transit for Amazon S3! 🚀🔐 SSE-C (Server-Side Encryption with Customer-Provided Keys) 🔑 **Customer-Managed Keys**: You manage encryption keys outside of AWS, giving you full control.   🔒 **Enhanced Security**: S3 does not store the encryption key you provide.   🌐 **HTTPS Required**: All communication with S3 must be over HTTPS when using SSE-C.   📜 **HTTP Headers**: Encryption keys must be included in HTTP headers for every request.   👩💼 **Client Responsibility**: Clients must encrypt/decrypt data before sending/receiving it to/from S3.   🔄 **Key Lifecycle Management**: You fully manage the keys and their lifecycle. Encryption in Transit (SSL/TLS) 🔐 **Encryption in Flight**: Also known as SSL/TLS, it ensures data is encrypted during transmission.   🌍 **Amazon S3 Endpoints**: - **HTTP Endpoint**: Non-encrypted (not recommended) - **HTTPS Endpoint**: Encrypted in flight (recommended and mandatory for SSE-C) 🛡️ **Policy Enforcement**: You can enforce encryption in transit using bucket policies.   🗄️ **SSE-S3**: Automatically applied to new objects in S3, but you can enforce specific encryption methods (SSE-C or SSE-KMS) via bucket policies. Summary By leveraging SSE-C for client-managed encryption and enforcing encryption in transit, you ensure that your data in Amazon S3 remains secure and compliant with your security policies. 🔐💡 #AWS #CloudSecurity #S3 #Encryption #SSEC #HybridCloud #DataProtection #CloudJourney #AWSLearning #TechTips #SecureData

Curious about what Amazon Inspector evaluates? Here's a breakdown: - **Automated Security Assessments:** - For EC2 instances: - Leveraging the AWS System Manager (SSM) agent. - Analyze against unintended network accessibility. - Analyze the running OS against known vulnerabilities. - **For Container Images push to Amazon ECR:** - Assessment of Container Images as they are pushed. - **For Lambda Functions:** - Identifies software vulnerabilities in function code and package dependencies. - Assessment of functions as they are deployed. - Reporting & integration with AWS Security Hub. - Send findings to Amazon EventBridge. #AmazonInspector #AWS #SecurityAssessments #CloudSecurity

Next week is AWS re:Inforce and I am excited to be presenting with Zachary Miller. We will discuss encryption on AWS and how different services like Amazon S3 or Amazon Bedrock protect data. Join us for the session, or feel free to reach out if you would like to connect in person. DAP331-R: Encrypt everything: How different AWS services help you protect data (Tuesday @ 11:00am) DAP331-R1: Encrypt everything: How different AWS services help you protect data (Wednesday @ 4:00pm) (Times in E.T.)

Hello again Innovators! This session would be a great compliment on your journey to modernize securely. Be sure to check it out! #awsreinforce #reinforce2024 #awssecurity #awsbedrock #storage #s3

At Fluid Attacks, we’re transforming the way businesses address cybersecurity challenges. With the power of cost-efficient and highly scalable #AWS infrastructure, we’re driving innovation in our research lab, investing in exceptional talent, and expanding our capabilities to stay ahead of evolving threats. Learn how we’re building a strong foundation for sustainable growth and on-demand innovation with AWS Graviton and Amazon EC2 instances. Watch the full story here: 🎥 https://lnkd.in/gsB38ssp #WeHackYourSoftware Amazon Web Services (AWS) AWS Graviton Weekly #Innovation #AppSec #Cybersecurity

Join us in Stockholm on Oct 8th for an in-depth recap of the latest AWS re:Inforce announcements! The keynote will focus on 'the culture of security' with our Director of Global Security Operations. Explore three specialized security tracks and gain insights from our AWS security experts. Walk away equipped with knowledge and actionable strategies to navigate the latest tech advancements, from generative AI to cryptography, and enhance your organization's security posture. #AWS #security #technology #Stockholm #reInforce

#AWS re:Inforce session recordings are now available to the public. If you are getting ready for yet another AWS #certification or just polishing up your AWS and #security skills - these are for you. https://lnkd.in/gySgBz4R #keeplearning