Explore key concepts for secure cloud architecture design in this 52-minute RSA Conference workshop. Learn about seven critical principles for building secure cloud infrastructure, including designing for failure and elasticity, implementing security at every layer, and managing the cloud "blast radius." Gain practical insights into centralization, standardization, and automation strategies for cloud security. Understand how to apply these concepts to both Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS) deployments, with specific examples from AWS and Microsoft Azure. Discover techniques for creating a security feedback loop, exploring storage options, and addressing multi-cloud challenges. By the end of this workshop, develop a practical, repeatable approach to cloud security architecture that can be applied to your organization's unique needs.
Overview
Syllabus
Intro
CSA's Enterprise Architecture
EA Guiding Principles (1)
EA Reference Architecture ... Ouch.
A Basic Approach to Sound Cloud Design
SANS Cloud Architecture Principles
Build in Security at Every Layer (1)
Build in Security at Every Layer (2)
Think "Components": The Multi-Cloud Problem
Design for Failure
Design for Elasticity
Storage: Explore Your Options (1)
Security: Design in a "Feedback Loop"
Security "Feedback Loops"= Logging
Security "Feedback Loops": Other Services
Centralization, Standardization, Automation: Centralization
Centralization, Standardization, Automation: Standardization
Centralization, Standardization, Automation: Automation
Managing the Cloud "Blast Radius"
Multiple Accounts for Limiting Blast Radius
Applying This To Your Organization
Taught by
RSA Conference
