Learn about fully managed runtime threat detection for Amazon ECS and serverless container workloads on AWS Fargate in this AWS re:Invent 2023 conference session. Gain insights from AWS security and container experts on implementing GuardDuty ECS Runtime Monitoring for comprehensive organization-wide threat detection. Explore how to obtain visibility into on-host operating system-level activities with container-level context, enabling effective threat detection and response for Amazon ECS workloads on both AWS Fargate and Amazon EC2. Master the implementation of container-aware security coverage for serverless container workloads through detailed demonstrations and practical examples. Understand the evolution of GuardDuty, its key tenants, runtime detection capabilities, agent management, and real-world applications through hands-on demonstrations that showcase the seamless integration of modern application security practices.

Syllabus

Introduction
Welcome
What is ECS
GuardDuty overview
GuardDuty history
Key tenants
What was missing
Before and after
Runtime Detection
Agent Management
How it works
Demo
Summary
Outro