Accelerate your Migration to Amazon Web Services

This webcast provides guidance on the key issues to consider when choosing cloud-based firewall/threat prevention solutions for integration on the AWS platform and suggests a process for making that important decision.

About Optiv Security:

Optiv is a market-leading provider of end-to-end cyber security solutions. We help clients plan, build and run cyber security programs that achieve business objectives through our extensive capabilities in security strategy, managed security services, incident response, risk & compliance, security consulting, training and support, integration and architecture services, and security technologies.

About AWS Marketplace:

AWS Marketplace is a digital software catalog that makes it easy to find, try, buy, deploy, and manage software that runs on AWS. AWS Marketplace has a broad and deep selection of security solutions offered by hundreds of independent software vendors, spanning infrastructure security, logging and monitoring, identity and access control, data protection, and more. These products can be integrated with AWS Services and other existing technologies, enabling you to deploy a comprehensive security architecture across your AWS and on-premises environments. Visit aws.amazon.com/marketplace to learn more.

When migrating endpoint security controls to protect their cloud workloads, organizations must first consider their own security, operational and business needs. Next, they should assess their requirements against the solutions already in use in-house against the in-cloud security solutions they’re considering. Ultimately, these requirements should help organizations come to a decision on whether to migrate their existing security to the cloud, or use cloud-provided tools to protect their cloud endpoints.

SANS instructor David Hazar, AWS Solutions Architect Manager David Aiken, and Optiv Cloud Security Practice Leader Joe Vadakkan will release guidelines for determining your cloud endpoint security controls and selecting solutions through the AWS Marketplace.

Attendees will learn:

- How cloud design affects endpoint security
- Needs and capabilities associated with endpoint security platforms in the cloud (such as automation, behavioral detection and blocking, and threat hunting capabilities)
- Specific focus on cloud-based endpoint detection and response (EDR)
- Solution guidance and evaluation considerations for endpoint security platforms, including real-world success observations
- Key questions for potential vendors to determine which endpoint security platform(s) are best-suited for integration and implementation in your AWS environment

Join this webinar and gain practical knowledge on how to evaluate and select an effective endpoint security platform for the cloud. Don’t miss this opportunity to improve your endpoint security strategy with industry-leading guidance from SANS, Optiv and AWS Marketplace.

In this new webinar, Amazon Web Services (AWS) and global cloud training experts, A Cloud Guru, have collaborated to help you identify and tackle the important challenges IT practitioners face when migrating business apps to the cloud. This training-based session will show you how to benchmark your performance, identify challenging areas, prioritize use cases, and pair them with relevant AWS native services and software seller solutions in AWS Marketplace.

Attendees will receive:
- Expert guidance and training on principles for designing a high-performance cloud infrastructure
- A guide to AWS Well Architected Framework (WAF), and how it's helping IT professionals understand how to build secure, agile, high-performing cloud infrastructures

- How AWS Marketplace software seller solutions are helping customers today overcome challenges related to improving their IT operations in the cloud

About the Speakers:
Robin Norwood is the creator of A Cloud Guru’s Coding for the Cloud series: a hands-on web series dedicated to building software in a modern day, serverless world. He creates engaging, accessible, and highly technical content for technology professionals at the cutting edge of cloud computing. Robin is an AWS Certified Solutions Architect, AWS Certified SysOps Administrator, and AWS Certified Developer.

Chris Chapman is a Partner Solutions Architect at AWS, covering AWS Marketplace, Service Catalog, and Control Tower. His core mission is helping customers and partners automate AWS infrastructure deployment and provisioning. He is an AWS Certified Solutions Architect, and his skills include cloud computing, data integration and architecture, SaaS computing, and design and software development. Chris has previous experience as a developer, system architect, and big data architect.

As more organizations store sensitive data in the cloud, and as data protection regulations become more stringent, security personnel should consider developing a strategy to protect their assets in the AWS cloud. However, this poses many important questions, such as: How can I securely migrate data from on-premises storage volumes to AWS services, or from existing AWS services to new AWS services? What controls are needed? And what performance requirements must be met?

SANS analyst Dave Shackleford explores the controls that are critical to data security and how to scale on-premises data protection strategies to the cloud.

Attendees will learn:

- How to use data loss prevention, encryption, access controls, user behavior analytics, and data life cycle controls as integral parts of a data protection strategy
- Key steps in scaling data protection to the AWS cloud, and which AWS storage and database services can be used to establish data encryption capabilities
- Ways to minimize common risks from human error with a combination of AWS and third-party services, and how organizations are using both to secure data in AWS

About the Speakers:
Dave Shackleford is a SANS analyst, senior instructor, course author, GIAC technical director, and member of the board of directors for the SANS Technology Institute. He is the founder and principal consultant with Voodoo Security, and has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering.

David Aiken is a Solutions Architect Manager at AWS covering AWS Marketplace, Service Catalog, Migration Services, and Control Tower. He leads a team of specialist AWS SAs that help customers implement security and governance best practices using native AWS Services and Partner products. He is an AWS Certified Solutions Architect and his skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

Many organisations face an exploding application portfolio that becomes increasingly important to the business. Attend this webinar to learn from AWS and F5 Networks experts how you can use advanced application services to migrate to and deploy your apps on AWS and how to:

- Improve manageability, strengthen security, and ensure faster application deployments
- Secure AWS workloads against even the most sophisticated threats
- Explore, trial, and consume app services and security solutions in AWS Marketplace
- Deploy cloud solution templates directly from AWS Marketplace

Companies spend significant time developing, searching, and evaluating algorithms and models to solve business problems using machine learning. AWS Marketplace recently launched a machine learning category which has hundreds of algorithms and model packages, that can be deployed quickly onto Amazon SageMaker, a fully-managed service that provides the ability to build, train, and deploy machine learning models.

In this tech talk, we will give an introduction to AWS Marketplace for Machine Learning, and how you can get solve your business problems using 3rd party algorithms and model packages faster with less effort and lower cost. We will walk through samples Jupyter Notebooks that you can use to experiment with model packages and algorithms from AWS Marketplace.

Learning Objectives:

- Learn about AWS Marketplace for Machine Learning, a new launch from re:Invent
- Learn how to solve business problems using third party algorithms and model packages
- Learn how to experiment with machine learning model packages and algorithms from AWS Marketplace

It's important for enterprises to find a simple way to ensure their engineering teams comply with procurement, legal, and security controls without reducing agility. In this tech talk, we provide an introduction to Private Marketplace and demonstrate how to create a custom catalog of approved third-party solutions. You'll learn about the thousands of solutions that can be added into your Private Marketplace and the various pricing and deployment methods that can be pre-configured into your approved solutions.

Enable self-service procurement and help reduce the procurement cycle time for new solutions or vendors from months to hours. Learning Objectives:

- Learn how to create a Private Marketplace and what configuration and deployment looks like
- Learn how to select from thousands of third-party solutions in AWS Marketplace and add them to your Private Marketplace
- Understand how to manage Private Marketplace and customize it with company branding

SANS analyst and instructor Shaun McCullough provides an introduction to exploring the vulnerabilities associated with modern web applications, the web application firewalls and DevSec operations that oversee security for continually updating of code. This process, known as threat modeling, is vital to the ability to prioritize vulnerabilities and security operations to meet those challenges. Shaun offers practical recommendations for addressing threats, with a focus on web apps, while running in an IaaS/PaaS cloud service using a DevOps process.

Attendees will learn:

- The meaning and process of threat modeling and DevOps
- Threat modeling for a web app front end
- Risks associated with the DevOps process
- How to seamlessly integrate security

Speakers:
Shaun McCullough is a community instructor for the SEC545 Cloud Security Architecture class and gives back to his profession by mentoring and supporting the next generation of cyber professionals. With 25 years of experience as a software engineer, he has been focusing on information security for the past 15 years. Shaun is a consultant with H&A Security Solutions, focusing on secure cloud operations, building DevSecOps pipelines, and automating security controls in the cloud.

David Aiken is a Solutions Architect Manager at AWS covering AWS Marketplace, Service Catalog, Migration Services, and Control Tower. He leads a team of specialist AWS SAs that help customers implement security and governance best practices using native AWS Services and Partner products.

*The views and opinions of the SANS Institute and their presenter, Shaun McCullough, are their own, and do not necessarily reflect the positions of AWS.

True accountability for the security of cloud-based assets requires visibility into the events and behaviors that move into and through your cloud environment. Security today relies on visibility in several areas: networks, systems, storage and applications.

In this recorded webcast, SANS Analyst and cloud security expert Dave Shackleford explains how visibility in the cloud differs from more traditional security visibility and suggests how organizations can move toward establishing a cloud visibility strategy, using practical examples to illustrate the process.

Attendees will learn about:
- Types of visibility needed today
- Event data and information available in the cloud
- Cloud-native controls offered by services providers
- Third-party options to enhance monitoring and visibility strategies
- How to tie event monitoring, vulnerability scanning and control planes together to enhance visibility

Register for this webcast to be among the first to receive the associated whitepaper written by Dave Shackleford.

Speaker Bios

Dave Shackleford, a SANS analyst, instructor, course author, GIAC technical director and member of the board of directors for the SANS Technology Institute, is the founder and principal consultant with Voodoo Security. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. A VMware vExpert, Dave has extensive experience designing and configuring secure virtualized infrastructures. He previously worked as chief security officer for Configuresoft and CTO for the Center for Internet Security.

David Aiken is a Solutions Architect Manager at AWS Marketplace and is an AWS Certified Solutions Architect. He leads a team of specialist SA's that help customers implement security and governance best practices. His skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

SANS instructor Matt Bromiley explains and defines the various levels of compliance, outlines how risk management and compliance work together, and looks at existing gaps in implementation. The session then addresses how to automate compliance and risk management, including with cloud security controls, to help you answer questions such as: What is the provider’s role and what is the cloud user’s role? Why do you need risk management, and how do you use vulnerability monitoring?

Attendees will learn:
- When and how to implement compliance and risk management
- Effective strategies for compliance and risk management deployment
- Tips for what NOT to do when implementing cloud services with compliance and risk considerations


About the SANS presenter:
Matt Bromiley is a SANS Certified Digital Forensics and Incident Response instructor, teaching Advanced Digital Forensics, Incident Response, and Threat Hunting (FOR508) and Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response (FOR572), and a GIAC Advisory Board member. His skills include disk, database, memory, and network forensics, as well as network security monitoring.

About the AWS presenter:
David Aiken is a Solutions Architect Manager at AWS covering AWS Marketplace, Service Catalog, Migration Services and Control Tower. He leads a team of specialist AWS SA’s that help customers implement security and governance best practices using native AWS Services and Partner products. He is an AWS Certified Solutions Architect and his skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

*The views and opinions of the SANS Institute and their presenter, Matt Bromiley, are their own, and do not necessarily reflect the positions of AWS.

Enterprises are faced with several strategy options when building their cloud migration. Building the optimal path for existing and future application needs can be challenging.
AWS and AWS Marketplace provide the tools and software for each step of the migration process and post-migration, to sustain business value with a cloud operating model, increase your competitive edge, and modernize your infrastructure.

Whether you are exploring moving or modernizing workloads, join us to learn :
•How to build a successful migration strategy for the cloud
•How to accelerate your migration to AWS with software solutions in AWS Marketplace
•How to save on costs, with the flexible payment options in AWS Marketplace

You will also be able to ask questions and request a custom consultation for your business.
Sign-up to attend the webinar or to get a copy of the recording.

Customers migrating to AWS can use AWS Migration Hub to obtain a single view of all migrations into AWS. In this session, we provide an in-depth walkthrough of migration execution best practices and automated migration tracking.

Learn how to use the Migration Hub migration dashboard to quickly understand the current state and velocity of your application migrations and effortlessly provide your CEO, CIO, and other key stakeholders an up-to-date status of migrating your portfolio.

This session is intended for: Technical Audiences

In this session, we describes the steps for listing your product on AWS Marketplace. Learn how leading ISVs are reaching new customers and decreasing the time it takes to close transactions using AWS Marketplace.

This session is intended for: Non-technical Audiences.

Enterprises are faced with several strategy options when building their cloud migration. Building the optimal path for existing and future application needs can be challenging.
AWS and AWS Marketplace provide the tools and software for each step of the migration process and post-migration, to sustain business value with a cloud operating model, increase your competitive edge, and modernize your infrastructure.

Whether you are exploring moving or modernizing workloads, join us to learn :
•How to build a successful migration strategy for the cloud
•How to accelerate your migration to AWS with software solutions in AWS Marketplace
•How to save on costs, with the flexible payment options in AWS Marketplace
You will also be able to ask questions and request a custom consultation for your business.
Sign-up to attend the webinar or to get a copy of the recording.

Amazon Web Services (AWS) and the SANS Institute* help security practitioners understand their options across key cybersecurity domains using a familiar operational language: The NIST Cybersecurity Framework (CSF).

SANS Director of Emerging Technologies John Pescatore will show how to use the NIST CSF to make the leap to securing infrastructure-as-a-service (IAAS) and hybrid cloud implementations by selecting and integrating the most effective and efficient security services, including both native cloud security services and third-party controls.

Attendees will learn:
- What is different about security for cloud workloads
- Why using a framework to organize efforts is effective
- How to implement controls at the perimeter, host and data boundaries
- What best practices organizations should implement
- How to deploy secure IAAS and hybrid cloud implementations

About the presenter:
John Pescatore joined SANS as director of emerging technologies in January 2013 after more than 13 years as lead security analyst for Gartner, running consulting groups at Trusted Information Systems and Entrust, 11 years with GTE, and service with both the National Security Agency, where he designed secure voice systems, and the U.S. Secret Service, where he developed secure communications and voice systems “and the occasional ballistic armor installation.” John has testified before Congress about cybersecurity, was named one of the 15 most-influential people in security in 2008 and is an NSA-certified cryptologic engineer.

About the SANS Institute:
The SANS Institute was established in 1989 as a cooperative research and education organization. Its programs now reach more than 165,000 security professionals around the world.

*The views and opinions of the SANS Institute and their presenter, John Pescatore, are their own, and do not necessarily reflect the positions of AWS.

Learn how GoDaddy achieved self-service, standardisation, and governance through AWS Service Catalog in the first 100 days of their cloud migration journey. We walk through GoDaddy’s use case of how they migrated to AWS with AWS Landing Zone, AWS Service Catalog, and the initial 100 days to establish their Cloud Center of Excellence to increase their speed of delivery and improve performance and reliability, while not sacrificing on security and financial controls.

In this session, learn about the new, seller-specific features in AWS Marketplace that make it easy for sellers to close transactions with over 190K active customers. Learn how to publish and update products as part of your feature release process with Self Service Listings.

We review how you can target specific customers with special or customized pricing using Seller Private Offers and how you can accelerate your contract negotiations with the Enterprise Contract for AWS Marketplace. Lastly, we discuss how to combine these and other AWS Marketplace features to grow your business by reaching new buyers and converting perpetual licensed customers to a subscription model.

This session is intended for: Non-technical Audiences

Software architecture, development, and operations patterns are changing with the increasing popularity of containers and related toolchains.

In this session you’ll learn how to package and deploy applications faster by finding third-party container products directly through the Amazon ECS Console and running them on AWS Container Services such as Amazon ECS, Amazon EKS, and AWS Fargate.

This session is intended for: Technical Audiences

Until now, many customers spent time creating or searching for the right algorithm and model when using Amazon SageMaker. In this session you’ll learn how to build machine learning applications even faster by finding curated algorithms and model packages in AWS Marketplace and deploying them directly on Amazon SageMaker.

This session is intended for: Technical Audiences