Securing AWS Networks - Observability Meets Defense-in-Depth

Learn to build comprehensive network security defenses in AWS by combining multiple security services with advanced observability tools in this 53-minute conference talk from AWS re:Inforce 2025. Explore AWS network security fundamentals including Security Groups, Network Access Control Lists (NACLs), Network Firewall, DNS Firewall, and Gateway Load Balancer to implement effective layered defense strategies across multi-VPC and multi-account environments. Discover how to leverage observability tools such as VPC Flow Logs, Reachability Analyzer, and Network Access Analyzer to gain visibility into threats, detect misconfigurations, identify vulnerabilities, and troubleshoot access issues that can challenge organizations operating complex AWS infrastructures. Master the integration of these security and monitoring tools to proactively enhance network security posture, detect potential vulnerabilities before they become threats, and ensure the deployment of secure, scalable architectures that maintain robust protection across all AWS accounts and environments.