Where Are Your Secrets? Monitor Keys, Secrets, and Certs Usage on AWS - DAP441

Explore comprehensive monitoring and observability strategies for AWS data protection services in this 55-minute conference talk from AWS re:Inforce 2025. Dive deep into achieving data observability while optimizing cost and security for critical AWS services including AWS KMS, AWS Private CA, and AWS Secrets Manager. Learn to leverage native AWS services for comprehensive monitoring, alerting, and cost optimization to ensure your sensitive data remains secure and available. Discover how to build a robust solution that aggregates AWS CloudTrail logs, Amazon CloudWatch events, and additional data sources to create powerful observability dashboards specifically designed for security teams. Master practical preventative controls that ensure service usage aligns with your organization's security requirements and compliance standards. Gain hands-on insights into proactively detecting unauthorized access attempts, failed secret rotations, and critical misconfigurations before they impact your infrastructure. Understand cost optimization techniques that maintain security posture while reducing operational expenses across your AWS data protection services. Walk away with actionable skills to implement comprehensive monitoring solutions that provide real-time visibility into your secrets, keys, and certificates usage patterns across your AWS environment.