AWS INCIDENT RESPONSE - Automate Containment

AWS INCIDENT RESPONSE - Automate Containment

Cloud Security Podcast - NIST Incident response framework has 4 steps including one for Containment. AWS Incident Response being API enabled allows for automating a lot of incident response activity especially containment. In this episode with Damien Burks (⁠Damien - Linkedin⁠) spoke about his @fwdcloudsec talk where he shared how he automated Incident Response in AWS environments of Citi. There were lot more gems dropped so def check out the episode.


Episode YouTube Video - https://youtu.be/IrLuHMLQs_w


Host Twitter: Ashish Rajan (⁠⁠⁠@hashishrajan⁠⁠⁠)

Guest Socials: Damien Burks (Damien - Linkedin)

Podcast Twitter - ⁠⁠⁠@CloudSecPod⁠⁠⁠ ⁠⁠⁠@CloudSecureNews⁠⁠⁠

If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:

- ⁠⁠⁠Cloud Security News ⁠⁠⁠

- ⁠⁠⁠Cloud Security BootCamp⁠⁠⁠


Spotify TimeStamp for Interview Questions

A word from our sponsors - you can visit them on ⁠⁠⁠snyk.io/csp⁠⁠⁠

(00:00) Introduction (00:13) A word from our sponsors - Snyk.io/csp (01:16) A bit about Damien Burks (02:24) Incident Response in the cloud context (03:50) Is incident response different in the cloud? (05:22) Average time for an incident response (07:33) AWS services for incident response automation (08:55) AWS Eventbridge (11:56) The phases of incident response (13:42) Containment Phase: Starting point and challenges (17:54) Organisation with Multiple Accounts (20:09) How to structure the process (21:04) Containment for EC2 instance (23:54) Enjoying this cloud security topic so far?

(25:17) Containment for S3 Bucket (27:57) Where to start with incident response (30:18) Preparing for Incidents (32:08) Fun Questions

See you at the next episode!

Jaksot(345)

Study Hall - What is Kubernetes & Why do you NEED TO know about it?

Study Hall - What is Kubernetes & Why do you NEED TO know about it?

In this Study Hall - Ashish goes through WHAT IS Kubernetes? What Kubernetes is NOT? & Should you start refactoring or building infrastructure in Kubernetes today? For Similar Topics covered in ot...

5 Touko 202110min

Kubernetes (Goat) Vulnerable by Design - Madhu Akula

Kubernetes (Goat) Vulnerable by Design - Madhu Akula

In this episode of the Virtual Coffee with Ashish edition, we spoke with Madhu Akula (@madhuakula) is an international Kubernetes Security Public Speaker, Black Hat Trainer, Creator of open source rep...

2 Touko 202149min

CISO PERSPECTIVE SERIES: LINKEDIN CISO - Geoff Belknap

CISO PERSPECTIVE SERIES: LINKEDIN CISO - Geoff Belknap

In this episode of the Virtual Coffee with Ashish edition, we spoke with Geoff Belknap (@geoffbelknap) is the Chief Security Officer of Linkedin (@LinkedIn). In this episode, Geoff & Ashish spoke abou...

27 Huhti 202153min

Study Hall: Honest truth behind learning Kubernetes

Study Hall: Honest truth behind learning Kubernetes

In this Study Hall - Kelsey Hightower explains is it really complex to learn Kubernetes and whether it's really complex. Nothing but the Honest Trust from Kelsey on this episode. Full Episode on Clo...

27 Huhti 20215min

Building Threat Detection for your Cloud Environment

Building Threat Detection for your Cloud Environment

In this episode of the Virtual Coffee with Ashish edition, we spoke with Ashwin Patil (@ashwinpatil) who is a returning guest from Season 1 of the Cloud Security Podcast. Ashwin is a Senior Program Ma...

18 Huhti 202150min

Cloud Governance using Infrastructure as Code (IaC)

Cloud Governance using Infrastructure as Code (IaC)

In this episode of the Virtual Coffee with Ashish edition, we spoke with Ohad Maishlish is the CEO & Co-Founder of env0. Host: Ashish Rajan - Twitter @hashishrajan Guest: Ohad Maislish - Linkedin ...

11 Huhti 202140min

Kubernetes Security Explained for those starting today! - Kelsey Hightower

Kubernetes Security Explained for those starting today! - Kelsey Hightower

In this episode of the Virtual Coffee with Ashish edition, we spoke with Kelsey Hightower (@kelseyhightower) is the Staff Advocate at Google Cloud (@GoogleCloud) and co-author of “Kubernetes: Up and R...

4 Huhti 202154min

Getting Infrastructure as Code (IaC) Security Culture right! - Yoni Leitersdorf

Getting Infrastructure as Code (IaC) Security Culture right! - Yoni Leitersdorf

In this episode of the Virtual Coffee with Ashish edition, we spoke with Yoni Leitersdorf (@yonadavl) who is the CEO & Co-Founder of Indeni Host: Ashish Rajan - Twitter @hashishrajan Guest: Yoni Le...

28 Maalis 202143min