Automating Compliance in the Cloud for AWS CIS | Ep.1 What is AWS CIS?

Поделиться
HTML-код
  • Опубликовано: 1 авг 2021
  • Episode 1 of automating compliance in the cloud. In this series, I'll explain how to automate various compliance frameworks in the AWS cloud. Starting with AWS CIS. All resources are listed below!
    📸 Instagram - / andrewroee
    🐦 Twitter - / aroesec
    🌐 GitHub - github.com/aroesec​​
    🎮 Discord - / discord
    🎙 My weekly podcast -open.spotify.com/show/13OHGg4...
    Resources:
    AWS CIS Framework Controls List - docs.aws.amazon.com/securityh...
    AWS Config - aws.amazon.com/config/
    🚀My PC Build
    RTX 3070 Ti Graphics Card - amzn.to/3NVvbZ7
    Intel i7 10700k cpu - amzn.to/3IpRIMU
    LG 36 inch ultra wide monitor - amzn.to/3NRnbZ6
    BenQ Zowie 24.5in 240hz - amzn.to/3Rtf7kC
    LIAN OI O11 Computer case - amzn.to/3uAw8PR
    AORUS Pro-WIFI MOBO - amzn.to/3AA0FkO
    HyperX RAM (32gbs) - amzn.to/3RfMCGN
    Corsair RMX Series 750 Watt PSU - amzn.to/3PeLQYH
    Ducky One 2 SF - amzn.to/3ylQUE8
    🚀My Macbook/Content Setup
    Macbook Pro M1 (16 inch) - amzn.to/3usIPw4
    Lumix Panasonic Camera - amzn.to/3ylsxq5
    Stellar X2 Microphone - amzn.to/3ar53ba
    Scarlett 2i2 USB Interface - amzn.to/3yLAwy2
    Logitech MX Mechanical Mini Keyboard - amzn.to/3c0GLoR
    Logitech MX Master 3 Mouse - amzn.to/3IqgRHg
  • НаукаНаука

Комментарии • 31

  • @zackaryharrell7273
    @zackaryharrell7273 3 года назад +3

    These videos are the highlight of my week.

  • @kNOCommentGaming
    @kNOCommentGaming 2 года назад +3

    You are awesome! I am a Cloud Security Engineer also, just started at my company a month ago. Your videos are really helping me out! Thanks

  • @MadeByGPS
    @MadeByGPS 3 года назад +3

    Great series idea! Looking forward to more :)

  • @bwogi
    @bwogi 3 года назад +2

    Awesome!

  • @ishtyleretienne36
    @ishtyleretienne36 2 года назад +2

    This is great! Looking forward to the next video in the series

    • @AndrewRoe
      @AndrewRoe  2 года назад

      Thank you! Stay tuned.

  • @SAnderson54
    @SAnderson54 2 года назад +2

    I am sooo excited for this series. Thank you for making it!

    • @AndrewRoe
      @AndrewRoe  2 года назад

      Thank you, hope you enjoy!

  • @JradandYman
    @JradandYman 2 года назад +1

    Very excited to watch these. Thanks for continuing to put out great content!

    • @AndrewRoe
      @AndrewRoe  2 года назад +1

      thank you! Glad you're enjoying it.

  • @kazami6317
    @kazami6317 3 года назад +2

    Great! Cool to see the services match up with real-world compliance. The CCP is really high level so the reasons or methods how an engineer would config them are not really stated. Looking forward to the next one!

    • @AndrewRoe
      @AndrewRoe  3 года назад +1

      Thank you! Glad you got some value out of it

  • @jackieoh6417
    @jackieoh6417 2 года назад +1

    I really enjoyed this!!

    • @AndrewRoe
      @AndrewRoe  2 года назад

      Thank you! Episode 2 just came out

  • @SMARTE528
    @SMARTE528 2 года назад +1

    I foresee privacy laws such as CPRA and VCDPA coming into the fold soon too. Looking forward to seeing how CSPs interpret and implement these requirements

    • @AndrewRoe
      @AndrewRoe  2 года назад +1

      As am I! It’ll be very involved and interesting

  • @pushyamithra2350
    @pushyamithra2350 3 года назад +1

    Tell us about HIPAA and GDPR.

  • @rononoazorokun
    @rononoazorokun 2 года назад +2

    This is great talk! Question: By enabling Security Hub, you can have CIS AWS benchmark check enabled for every control listed in this documentation. What would be the difference between you create your own automation vs enabling it through Security Hub?

    • @AndrewRoe
      @AndrewRoe  2 года назад

      So through security hub it’s going to tell you what resources are out of compliance with cis. With this automation we’re going to automate putting those resources into compliance

    • @rononoazorokun
      @rononoazorokun 2 года назад +1

      @@AndrewRoe so it's more like a remediation action on non-compliant resources?

    • @AndrewRoe
      @AndrewRoe  2 года назад

      But we’ll be turning on security hub using IaC as well!

    • @AndrewRoe
      @AndrewRoe  2 года назад +2

      @@rononoazorokun exactly, but there are also things that need to be configured to run checks for cis that security hub doesn’t do and I’ll show those as well.

    • @rononoazorokun
      @rononoazorokun 2 года назад +1

      @@AndrewRoe that sounds cool! Can't wait for your upcoming videos!

  • @owenzmortgage8273
    @owenzmortgage8273 Год назад

    Make is 5 mins. Wasting time

    • @AndrewRoe
      @AndrewRoe  Год назад

      I think I can definitely shorten some of my fillers in my speech. However, I don't think I could fit all of the content into 5 minutes. Feel free to watch it on 2x speed.