Accelerate your Migration to Amazon Web Services

Security teams often handle a large stream of alerts, creating noise and impairing their ability to determine which incidents to prioritize. By aggregating security information from various sources and automating incident response, organizations can increase visibility into their environment and focus on the most important potential threats. In this webinar, SANS and AWS Marketplace explore how organizations can leverage solutions to create more signal and less noise for actionable responses, enhancing and accelerating security operations.

Attendees will learn to:

- Use continuous monitoring to gain insight into events and behaviors that move into and through your cloud environment
- Integrate security incident and event management (SIEM) solutions to enhance detection and investigation of potential threats
- Leverage security orchestration automation and response (SOAR) technologies to auto-remediate events and reduce noise in your environment

Who should attend:
Security practitioners (Security Analysts, Security Architects, Senior Security Engineers, etc.), Cloud Security Architects, and the office of the CISO.

Frequently, the hardest part of any machine learning (ML)/AI project is getting your data into the right format and the right place because your processes were designed around traditional application development. In this training-based webinar, Amazon Web Services (AWS) and global market intelligence provider, IDC, will deliver practical guidance to help you prepare a data pipeline that can automate machine learning workflows.

Attendees will learn how to:

- Manage your data pipeline, providing your organization access to reliable and well-structured datasets for analytics
- Make meaningful decisions, faster, with improved data flows
- Incorporate best practices for building dashboards to query specific data and identify trends when using connected AWS services
- Leverage partner solutions such as Matillion ETL for Amazon Redshift for loading and transforming your data

Who should attend?
IT Operations Professionals in roles overseeing data science and architecture, BI and analytics and data preparation for machine learning

Do you know how to build an effective threat hunting program in your AWS environment? In this webinar, you will learn how threat hunting differs from alerts and SOC monitoring, and what threats to look for. You will also discover real-life examples that demonstrate how threat hunters can apply cloud infrastructure best practices to reduce the noise in often chaotic environments, making it easier to detect potential events. Leveraging detailed use cases, this webinar can help you develop an effective threat hunting program.

Attendees will learn to:

- Use the threat hunting loop to identify what to look for, which tools you need to analyze available data, and ways to tease out patterns that indicate potential events
- Strike the right balance of how much data to capture, identify gaps in information, and determine how best to collect that information
- Analyze logs efficiently and effectively using Amazon CloudWatch, AWS CloudTrail, and Amazon GuardDuty
- Automate the process of evaluating and enriching complex data sets by utilizing SIEM and SOAR solutions to detect possible threats

Speaker Bios

Shaun McCullough is a community instructor for the SEC545 Cloud Security Architecture and Operations class and gives back to his profession by mentoring and supporting the next generation of cyber professionals. With 25 years of experience as a software engineer, he has been focusing on information security for the past 15 years. Shaun is a consultant with H&A Security Solutions, focusing on secure cloud operations, building DevSecOps pipelines and automating security controls in the cloud.

David Aiken is a Solutions Architect Manager at AWS Marketplace and is an AWS Certified Solutions Architect. He leads a team of specialist SA’s that help customers implement security and governance best practices. His skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

Do you have a plan in place describing how to conduct an effective investigation in AWS? What security controls, techniques, and data sources can you leverage when investigating and containing an incident in the cloud? Learn how to leverage different technologies to determine the source and timeline of the event, and the systems targeted to define a reliable starting point from which to begin your investigations.

In this recorded webcast, SANS instructor and cloud security expert Kyle Dickinson explains how to conduct an investigation in AWS from preparation through completion.

Attendees at this webcast will learn about:
- Prerequisites for performing an effective investigation
- Services that enable an investigation
- How to plan an investigation
- Steps to completing an investigation in AWS

Register for this webcast to be among the first to receive the associated whitepaper written by incident response and forensics expert Kyle Dickinson.

Speaker Bios

Kyle Dickinson teaches SANS SEC545: Cloud Security Architecture and Operations and has contributed to the creation of other SANS courses. He is a cloud security architect for one of the largest privately held companies in the United States. As a strategic consultant in his organization, Kyle partners with businesses in various industries to better understand security and risks associated with cloud services. He has held many roles in IT, ranging from systems administration to network engineering and from endpoint architecture to incident response and forensic analysis.

David Aiken is a Solutions Architect Manager at AWS Marketplace and is an AWS Certified Solutions Architect. He leads a team of specialist SA’s that help customers implement security and governance best practices. His skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

Applications have evolved into containers and microservices deployed in fully automated and distributed environments across data centers and in AWS. This webinar focuses on the security of the continuous integration and continuous deployment (CI/CD) pipeline and security automation. In this prerecorded webcast, SANS senior instructor Dave Shackleford and AWS Solutions Architect David Aiken discuss how to improve and automate security across the entire CI/CD pipeline and runtime environment.

Specifically, attendees will learn:
- App security concepts specific to cloud environments, including management of secrets, security of APIs, serverless applications and security, and privilege management
- The stages of a cloud-oriented development pipeline and how security can tie into the CI/CD pipeline
- How to mitigate disruptions caused by perimeter-based and legacy security tools that don't fit into CI/CD practices
- Solutions for securing your app pipeline in your AWS environment

*********************

Speaker Bios
Dave Shackleford, a SANS analyst, instructor, course author, GIAC technical director and member of the board of directors for the SANS Technology Institute, is the founder and principal consultant with Voodoo Security. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. A VMware vExpert, Dave has extensive experience designing and configuring secure virtualized infrastructures. He previously worked as chief security officer for Configuresoft and CTO for the Center for Internet Security.

David Aiken is a Solutions Architect Manager at AWS Marketplace and is an AWS Certified Solutions Architect. He leads a team of specialist SA’s that help customers implement security and governance best practices. His skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

Enterprises are faced with several strategy options when building their cloud migration. Building the optimal path for existing and future application needs can be challenging. AWS and AWS Marketplace provide the tools and software for pre and post-migration, sustaining business value with a cloud operating model and modernizing your infrastructure.

Whether you are just exploring or in the midst of a cloud migration, this session can provide some tips on the correct strategy and tools.

As enterprises become increasingly complex, cloud migration is no longer an option but a necessity. Choosing and planning the right path for your organizations data, applications and storage can be daunting!

Join industry experts to discuss how to succeed in accelerating your migrating to the cloud. Topics include:

- Planning your cloud migration strategy - Tips and tricks
- Tools and software for pre and post-migration
- How to sustain business value with a cloud operating model
- How to modernize your infrastructure

Moderated by:
Alex Hilton, CEO, Cloud Industry Forum

Interviewees:
Martin Beeby, Principal Technology Evangelist, AWS
James Ball, VP Global Alliances, clckwrk
Nick Cronin, Director, Global Stretegic Alliances, Splunk

In this webinar you will learn how to leverage a digital marketplace to grow your software business and improve your customer’s experience. We will talk through the full lifecycle of AWS Marketplace and how it is changing the software experience for customers and software vendors (ISVs).

Todd Osborne, Global VP of Alliances and Channels at New Relic, will share their experience with AWS Marketplace and how they initiated their journey. Todd will also outline how New Relic are utilizing this digital marketplace to connect with the customer buyer, decision makers and procurement to unlock budget and enable faster and larger transactions.

John Jahnke, CEO of Tackle.io, will discuss how New Relic partnered with them to make selling on the AWS Marketplace seamless by leveraging the Tackle.io platform. John will provide insight into how to get started with AWS Marketplace technically and operationally.

Lastly hear from AWS Marketplace on selling with AWS and how AWS Marketplace gives you access to more than 240,000 active customers. Additionally, we'll examine how AWS Marketplace and the APN Programme enables ISVs to collaborate with AWS and APN Consulting Partners to resell through AWS Marketplace.

This webcast provides guidance on the key issues to consider when choosing cloud-based firewall/threat prevention solutions for integration on the AWS platform and suggests a process for making that important decision.

About Optiv Security:

Optiv is a market-leading provider of end-to-end cyber security solutions. We help clients plan, build and run cyber security programs that achieve business objectives through our extensive capabilities in security strategy, managed security services, incident response, risk & compliance, security consulting, training and support, integration and architecture services, and security technologies.

About AWS Marketplace:

AWS Marketplace is a digital software catalog that makes it easy to find, try, buy, deploy, and manage software that runs on AWS. AWS Marketplace has a broad and deep selection of security solutions offered by hundreds of independent software vendors, spanning infrastructure security, logging and monitoring, identity and access control, data protection, and more. These products can be integrated with AWS Services and other existing technologies, enabling you to deploy a comprehensive security architecture across your AWS and on-premises environments. Visit aws.amazon.com/marketplace to learn more.

When migrating endpoint security controls to protect their cloud workloads, organizations must first consider their own security, operational and business needs. Next, they should assess their requirements against the solutions already in use in-house against the in-cloud security solutions they’re considering. Ultimately, these requirements should help organizations come to a decision on whether to migrate their existing security to the cloud, or use cloud-provided tools to protect their cloud endpoints.

SANS instructor David Hazar, AWS Solutions Architect Manager David Aiken, and Optiv Cloud Security Practice Leader Joe Vadakkan will release guidelines for determining your cloud endpoint security controls and selecting solutions through the AWS Marketplace.

Attendees will learn:

- How cloud design affects endpoint security
- Needs and capabilities associated with endpoint security platforms in the cloud (such as automation, behavioral detection and blocking, and threat hunting capabilities)
- Specific focus on cloud-based endpoint detection and response (EDR)
- Solution guidance and evaluation considerations for endpoint security platforms, including real-world success observations
- Key questions for potential vendors to determine which endpoint security platform(s) are best-suited for integration and implementation in your AWS environment

Join this webinar and gain practical knowledge on how to evaluate and select an effective endpoint security platform for the cloud. Don’t miss this opportunity to improve your endpoint security strategy with industry-leading guidance from SANS, Optiv and AWS Marketplace.

In this new webinar, Amazon Web Services (AWS) and global cloud training experts, A Cloud Guru, have collaborated to help you identify and tackle the important challenges IT practitioners face when migrating business apps to the cloud. This training-based session will show you how to benchmark your performance, identify challenging areas, prioritize use cases, and pair them with relevant AWS native services and software seller solutions in AWS Marketplace.

Attendees will receive:
- Expert guidance and training on principles for designing a high-performance cloud infrastructure
- A guide to AWS Well Architected Framework (WAF), and how it's helping IT professionals understand how to build secure, agile, high-performing cloud infrastructures

- How AWS Marketplace software seller solutions are helping customers today overcome challenges related to improving their IT operations in the cloud

About the Speakers:
Robin Norwood is the creator of A Cloud Guru’s Coding for the Cloud series: a hands-on web series dedicated to building software in a modern day, serverless world. He creates engaging, accessible, and highly technical content for technology professionals at the cutting edge of cloud computing. Robin is an AWS Certified Solutions Architect, AWS Certified SysOps Administrator, and AWS Certified Developer.

Chris Chapman is a Partner Solutions Architect at AWS, covering AWS Marketplace, Service Catalog, and Control Tower. His core mission is helping customers and partners automate AWS infrastructure deployment and provisioning. He is an AWS Certified Solutions Architect, and his skills include cloud computing, data integration and architecture, SaaS computing, and design and software development. Chris has previous experience as a developer, system architect, and big data architect.

As more organizations store sensitive data in the cloud, and as data protection regulations become more stringent, security personnel should consider developing a strategy to protect their assets in the AWS cloud. However, this poses many important questions, such as: How can I securely migrate data from on-premises storage volumes to AWS services, or from existing AWS services to new AWS services? What controls are needed? And what performance requirements must be met?

SANS analyst Dave Shackleford explores the controls that are critical to data security and how to scale on-premises data protection strategies to the cloud.

Attendees will learn:

- How to use data loss prevention, encryption, access controls, user behavior analytics, and data life cycle controls as integral parts of a data protection strategy
- Key steps in scaling data protection to the AWS cloud, and which AWS storage and database services can be used to establish data encryption capabilities
- Ways to minimize common risks from human error with a combination of AWS and third-party services, and how organizations are using both to secure data in AWS

About the Speakers:
Dave Shackleford is a SANS analyst, senior instructor, course author, GIAC technical director, and member of the board of directors for the SANS Technology Institute. He is the founder and principal consultant with Voodoo Security, and has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering.

David Aiken is a Solutions Architect Manager at AWS covering AWS Marketplace, Service Catalog, Migration Services, and Control Tower. He leads a team of specialist AWS SAs that help customers implement security and governance best practices using native AWS Services and Partner products. He is an AWS Certified Solutions Architect and his skills include cloud computing, enterprise architecture, agile methodologies, web services, and software design and development.

Many organisations face an exploding application portfolio that becomes increasingly important to the business. Attend this webinar to learn from AWS and F5 Networks experts how you can use advanced application services to migrate to and deploy your apps on AWS and how to:

- Improve manageability, strengthen security, and ensure faster application deployments
- Secure AWS workloads against even the most sophisticated threats
- Explore, trial, and consume app services and security solutions in AWS Marketplace
- Deploy cloud solution templates directly from AWS Marketplace

Companies spend significant time developing, searching, and evaluating algorithms and models to solve business problems using machine learning. AWS Marketplace recently launched a machine learning category which has hundreds of algorithms and model packages, that can be deployed quickly onto Amazon SageMaker, a fully-managed service that provides the ability to build, train, and deploy machine learning models.

In this tech talk, we will give an introduction to AWS Marketplace for Machine Learning, and how you can get solve your business problems using 3rd party algorithms and model packages faster with less effort and lower cost. We will walk through samples Jupyter Notebooks that you can use to experiment with model packages and algorithms from AWS Marketplace.

Learning Objectives:

- Learn about AWS Marketplace for Machine Learning, a new launch from re:Invent
- Learn how to solve business problems using third party algorithms and model packages
- Learn how to experiment with machine learning model packages and algorithms from AWS Marketplace

It's important for enterprises to find a simple way to ensure their engineering teams comply with procurement, legal, and security controls without reducing agility. In this tech talk, we provide an introduction to Private Marketplace and demonstrate how to create a custom catalog of approved third-party solutions. You'll learn about the thousands of solutions that can be added into your Private Marketplace and the various pricing and deployment methods that can be pre-configured into your approved solutions.

Enable self-service procurement and help reduce the procurement cycle time for new solutions or vendors from months to hours. Learning Objectives:

- Learn how to create a Private Marketplace and what configuration and deployment looks like
- Learn how to select from thousands of third-party solutions in AWS Marketplace and add them to your Private Marketplace
- Understand how to manage Private Marketplace and customize it with company branding

SANS analyst and instructor Shaun McCullough provides an introduction to exploring the vulnerabilities associated with modern web applications, the web application firewalls and DevSec operations that oversee security for continually updating of code. This process, known as threat modeling, is vital to the ability to prioritize vulnerabilities and security operations to meet those challenges. Shaun offers practical recommendations for addressing threats, with a focus on web apps, while running in an IaaS/PaaS cloud service using a DevOps process.

Attendees will learn:

- The meaning and process of threat modeling and DevOps
- Threat modeling for a web app front end
- Risks associated with the DevOps process
- How to seamlessly integrate security

Speakers:
Shaun McCullough is a community instructor for the SEC545 Cloud Security Architecture class and gives back to his profession by mentoring and supporting the next generation of cyber professionals. With 25 years of experience as a software engineer, he has been focusing on information security for the past 15 years. Shaun is a consultant with H&A Security Solutions, focusing on secure cloud operations, building DevSecOps pipelines, and automating security controls in the cloud.

David Aiken is a Solutions Architect Manager at AWS covering AWS Marketplace, Service Catalog, Migration Services, and Control Tower. He leads a team of specialist AWS SAs that help customers implement security and governance best practices using native AWS Services and Partner products.

*The views and opinions of the SANS Institute and their presenter, Shaun McCullough, are their own, and do not necessarily reflect the positions of AWS.