Amazon Aurora Security Deep Dive - Revealing the Northern Lights

Explore the comprehensive security architecture of Amazon Aurora in this 44-minute conference talk from AWS re:Invent 2025. Discover how Amazon RDS successfully defended against a novel attack presented at DEF CON 33, even when the underlying open source database engine hadn't released patches at the time. Examine the layered security approach that enables customers to focus on applications rather than database management. Dive deep into Aurora's engineering and security architecture, learning how multiple complementary layers work together including encryption, network controls, granular permissions, AWS IAM, active defense, and Amazon GuardDuty to protect customer data from infrastructure through application interface. Understand the years of consistent security investment that makes this robust protection possible and gain insights into how these security measures operate in practice to safeguard database environments.