TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale,...

13
Biztonságos? Avagy van valami a levegőben… Cseh Péter, Cloud Architect @ TC2

Transcript of TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale,...

Page 1: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Biztonságos?Avagy van valami a levegőben…

Cseh Péter, Cloud Architect @ TC2

Page 2: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Napirend

▪ Megfeleltethetőség

▪ Felelősségi körök

▪ Hozzáférés felügyelet

▪ Biztonsági megoldások

Page 3: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Megfeleltethetőség

• Rendszeresen auditált környezet

• HIPAA

• PCI-DSS

• FedRAMP

• ISO-9001/27001

• A lista tovább folytatódik:

• https://aws.amazon.com/artifact/getting-started/

Page 4: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Osztott felelősség

Page 5: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Hozzáférés felügyelet – AWS IAM

Page 6: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

IAM Federation - ADFS

Page 7: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Single Sign-on

Page 8: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Titkosítás és kulcskezelés

Page 9: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Központosított naplózás

Page 10: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Felhasználói audit

Page 11: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

MI támogatott biztonság

Page 12: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

Tanácsadás

Page 13: TC2 AWSomeDay ITSec · Amazon EC2 AWS AW S Lambda Amazon Ecs A log service for arbitrary scale, availability, durability, and security AMAZON CLOUDWATCH LOGS Centralize Monitor Secure

ÖSSZEFOGLALÁS

▪ Rengeteg szolgáltatás

▪ Egyszerű integrálhatóság

▪ Átjárás különböző rendszerek között

▪ Új technológiák

▪ Költséghatékony megoldások