HANDS-ON WORKSHOP: Centralizing Cross-Cloud Security Events: Aviata Chapter 5

Join Eric Johnson in redesigning your Kubernetes logging architecture for centralized monitoring, detection, and alerts in Microsoft Sentinel. Elevate your cloud skills and ensure your Kubernetes environment is secure and scalable in this engaging and informative session...
Learning Objectives:
- Create a Microsoft Sentinel workspace
- Understand how workload identity can allow an Azure service to assume an AWS IAM Role
- Connect Microsoft Sentinel to Amazon Web Services to ingest Kubernetes log data
- Write KQL queries to detect malicious Kubneretes events
About the Speaker:
Eric Johnson is a Co-founder and Principal Security Engineer at Puma Security and a Senior Instructor with the SANS Institute. His experience includes cloud security assessments, cloud infrastructure automation, static source code analysis, web and mobile application penetration testing, secure development lifecycle consulting, and secure code review assessments. Eric is the lead author and an instructor for SEC540: Cloud Security and DevSecOps Automation and a co-author and instructor for both SEC549: Cloud Security Architecture, and SEC510: Cloud Security Controls and Mitigations. Additionally, Eric is a SANS Security Awareness Developer Training Advisory Board Member and SANS Analyst for Application Security and DevSecOps Surveys. Learn more about Eric here, www.sans.org/p...
This workshop supports content and knowledge from SEC549: Cloud Security Architecture. Learn more about the course at www.sans.org/c...
SANS Cloud Security focuses the deep resources of SANS on the growing threats to The Cloud by providing training, GIAC certification, research, and community initiatives to help security professionals build, deploy and manage secure cloud infrastructure, platforms, and applications.
SANS Cloud Security Curriculum: www.sans.org/cloud-security
GIAC Cloud Security Certifications: www.giac.org/f...
LinkedIn: / sanscloudsec
Discord: www.sansurl.com/cloud-discord
Twitter: @SANSCloudSec