Get 20% off all career paths from fullstack to AI
2,000+ Free Courses with Certificates: Coding, AI, SQL, and More
Overview
Google, IBM & Meta Certificates – 40% Off
One plan covers every Professional Certificate on Coursera.
Unlock All Certificates
Explore cloud security auditing and monitoring for AWS deployments using Netflix's open-source tool security_monkey in this AppSecUSA 2015 conference talk. Learn how security_monkey tracks changes across multiple AWS accounts and technologies, audits configurations for security implications, and helps understand interconnectivity between accounts. Discover best practices for cloud security, including eliminating IAM users, managing access keys, auditing security groups and S3 buckets, avoiding RFC-1918 IP ingress permissions, and expanding wildcard policies. Gain insights into how security_monkey enables Netflix's hands-off approach to security while maintaining robust auditing and monitoring capabilities for their AWS environment.
Syllabus
Patrick Kelley - Going Bananas for Cloud Security: AWS deployment with security_monkey - AppSecUSA15
Taught by
OWASP Foundation