Completed
Lack of Awareness
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Bringing a Machete to the Amazon: Securing AWS Applications
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Welcome
- 3 Agenda
- 4 Cloud is an Operating System
- 5 Infrastructure is my code
- 6 Typical AWS application
- 7 AppSec perspective
- 8 The challenge
- 9 What does AWS offer
- 10 Problems with AWS
- 11 AWS as an operating system
- 12 AWS attack surface
- 13 Merchant insecurity
- 14 Strict change control
- 15 API
- 16 Vulnerabilities
- 17 Metadata
- 18 AWS Metadata
- 19 Examples
- 20 Controlling API Access
- 21 Private IP Addresses
- 22 Lack of Access Control
- 23 Tags
- 24 IP Address
- 25 Lack of Awareness
- 26 Cloud Atlas
- 27 Cloud Out
- 28 Cloud Trail Data
- 29 Advanced Cap Capabilities
- 30 Other Tools
- 31 Questions
