addressalign-toparrow-leftarrow-rightbackbellblockcalendarcameraccwchatcheckchevron-downchevron-leftchevron-rightchevron-small-downchevron-small-leftchevron-small-rightchevron-small-upchevron-upcircle-with-crosscrosseditemptyheartfacebookfolderfullheartglobegmailgoogleimagesinstagramlinklocation-pinmagnifying-glassmailminusmoremuplabelShape 3 + Rectangle 1outlookpersonplusprice-ribbonImported LayersImported LayersImported Layersshieldstartrashtriangle-downtriangle-uptwitteruseryahoo

Boston Amazon Web Services Meetup Group

This Meetup will be security focused, with a presentation on advanced IAM usage, security/public cloud attack, and how to extend your internal IAM to the cloud. Very engaging topics. And being hosted at Vistaprint's Lexington office - thank you Vistaprint!  (directions are below)

Food for this meeting will be sponsored by Eucalyptus Systems - thank you Colby Dyess, Sr. Product Marketing Manager!

Don't miss this event!

- Mark 


Presentations/Presenters:

Presentation Abstract: An in-depth discussion of AWS usage and security challenges. The usage portion will focus upon common pitfalls. These include a discussion configuration, provisioning, and architecture issues. The security portion will examine the shared responsibility model, identify and discuss strategies for avoiding common security issues, and offer a guide for mitigation. If time permits, the discussion will also include the characteristics of a typical public EDoS attack.

Presenters: Aaron Newman (CEO) is one of the world’s foremost database security experts and brings a breadth of experience to CloudCheckr Inc. He is a serial entrepreneur having previously founded three other successful startups: Techrigy, DbSecure, and Application Security, Inc.
Aaron Klein (COO) brings a deep knowledge of cloud architecture and over 20 years of managerial experience and vision to his role at CloudCheckr Inc. He has held leading roles in diverse organizations ranging from small entrepreneurial start-ups to multi-billion dollar enterprises.

===========

Presentation Abstract: IAM is an important part of the AWS ecosystem and at its most basic level allows you to have different accounts rather than sharing credentials across a team.  But there's a lot more that you can do with IAM and more than one way to do it.  This talk will start with the basics of just using IAM to create additional users but also look at how to take advantage of roles to give very granular access to machines and even other AWS accounts entirely.

Presenter: Jeremy Katz is an engineer at Stackdriver where he spends his days working around quirks in the AWS APIs both to gather data for product as well as to deploy and provision the infrastructure Stackdriver uses in AWS.

===========

Presentation Abstract: Migrating an Application to AWS: How to Extend Your Internal IAM to the cloud. 
Most applications are not built with identity management in mind. And your existing IAM systems, like Active Directory were certainly not built to integrate with applications outside your firewall. This presentation will cover how to extend Active Directory to cloud-based applications running in AWS without exposing your internal systems, passwords or VPNs.

Presenter: Brett Waldman, CEO, Tremolo Security

=========== 


Driving Directions to Vistaprint

95 Hayden Avenue

Lexington, MA 02421

[masked]

  From Cambridge

Take either Storrow Drive West or Memorial Drive West to Route 2 West. • Follow signs for Route 2 West along Fresh Pond Parkway past Alewife. • Take Exit 54A off of Route 2, toward Waltham Street/Waltham. Make immediate left onto Hayden Avenue. • Entrance for Ledgemont Center 95 Hayden is about 7/10 mile on the right.

• ''Enter the driveway and bear left to follow the purple signs for Vistaprint.When the road splits, bear to the right. • Follow the road around the building and turn right into the 2nd level, “Main Entrance/Visitor Parking.” •Visitor parking is reserved on the right side as you enter. If you need visitor parking assistance, please ask our valet service attendants.Access our building via the connecting bridge. The receptionist and lobby will be to your left.'

  From Logan Airport

Exit the airport via the Ted Williams Tunnel to the Massachusetts Turnpike. • Take Mass Pike (I-

90) West to I-95 North (Route 128 North). • From I-95/128 North, take Route 2 East (Exit 29A).

• From Route 2, take the Exit 53 - Spring Street – Lexington/Waltham. • Turn right onto Spring Street, then first right turn onto Hayden Avenue. • Entrance for Ledgemont Center 95 Hayden Avenue is immediately on your left. • Follow directions in italics above.

  From the North

From I-95 South (Route 128 South) to Route 2 East (Exit 29A), toward Arlington/Cambridge. • Take Exit 53, Spring Street - Lexington/Waltham. • Turn right onto Spring Street, then first right turn onto Hayden Avenue. • Entrance for Ledgemont Center 95 Hayden Avenue is immediately on your left. • Follow directions in italics above.

  From the South

From I-95 North (Route 128 North) to Route 2 East (Exit 29A), towards Arlington/Cambridge. • Take Exit 53, Spring Street - Lexington/Waltham. • Turn right onto Spring Street, then first right turn onto Hayden Avenue. • Entrance Ledgemont Center 95 Hayden Avenue is immediately on your left. • Follow directions in italics above.

  From The West

From Mass Pike East (I-90) to I-95 North (Route 128 North). • Exit at Route 2 East (Exit 29A). Take Exit 53, Spring Street - Lexington/Waltham. • Turn right onto Spring Street, then first right turn onto Hayden Avenue. • Entrance Ledgemont Center 95 Hayden Avenue is immediately on your left. • Follow directions in italics above.

  From Downtown Boston

Take Mass Pike (I-90) West to I-95 North (Route 128 North). • Exit at Route 2 East (Exit 29A), towards Arlington/Cambridge. • Take Exit 53 Spring Street – Lexington/Waltham. • Turn right onto Spring Street, then first right turn onto Hayden Avenue. • Entrance Ledgemont Center 95

Hayden Avenue is immediately on your left. • Follow directions in italics above.

Join or login to comment.

  • Brett

    I apologize for rushing through my presentation, but here is a link to my presentation. I added some comments in the notes to add a little more clarity. Happy to answer any follow up questions.

    https://drive.google.com/a/tremolosecurity.com/file/d/0BzPYjHxfi4SNaWM4T3Y0aFYyaEU/edit?usp=sharing

    October 23, 2013

    • Ari D.

      I can't seem to reach that via any of my existing Google accounts. Can you make the file public?

      October 30, 2013

    • Brett

      Try it again. It should work now. Though if you want to see the notes you will have download the file, rather than just view it online. Please let me know if you have any issues accessing it.

      October 30, 2013

  • Brett

    Here is the link to the demo that I mentioned that integrates JBoss on AWS with an internal Active Directory in 30 minutes http://ow.ly/q9A8T

    October 24, 2013

  • Aaron K.

    Thanks for coming out to the meet-up. Below is a copy of Aaron Newman's presentation (with links to the tools he referenced). Please stop by and say hello if you are at ReInvent (we are booth #812) and we look forward to coming back to Boston soon. http://slidesha.re/1d28dto

    October 24, 2013

  • Brett

    To answer the question about claims. Claims from a logical standpoint are a way to "declare" to an application information about you (ie profile data, entitlements, etc) with the idea being that you can externalize authentication and authorization without the application having to reach out to a policy decision point (PDP) like a web access manager or database or directory or...

    The issue with this model is that unless the app is custom written, few apps can handle claims. In fact even Sharepoint, which is the only COTS claims aware application I know of, requires you to setup an additional database just to manage the claims data.

    That being said, the answer to the question is "Tremolo Security makes legacy applications claims aware." The combination of data from an assertion, just-in-time provisioning and SSO creates the same effect as claims by updating the application's user store at each login.

    Please let me know if there is any follow up questions.

    October 23, 2013

  • Matthew G.

    Excellent presenters and great people. The knowledge gained from this meetup will prove to be invaluable in the future. Thank you to Mark for organizing this event and VistaPrint for using their facility.

    October 22, 2013

  • Ryan H.

    Lots of great information last night! I thoroughly enjoyed CloudCheckr's presentation and definitely gave me some ways to better think about security. With that said, I have also started a new Meetup Group related specifically to Network Security if anyone is interested. The name of the Meetup group is "Boston Network Security Meetup Group" and it can be found here: http://www.meetup.com/Boston-Network-Security-Meetup-Group/

    We are having our first (kick off) meeting on November 6th at 7:00pm EST. I am still working on securing a meetup location, but should have it shortly.

    Thanks,
    Ryan

    October 22, 2013

  • David M.

    lots of information related to cloud security

    October 22, 2013

  • Ari D.

    Excellent presentations, although the last was a bit rushed and surface.

    October 22, 2013

  • Tom C.

    Looking forward to attending and learning.

    October 21, 2013

  • David G.

    Great topic, I'm looking forward to attending.

    October 20, 2013

  • Arvind

    Keen to know AWS offering

    October 19, 2013

  • Paul O.

    Same here.

    October 11, 2013

  • Tony D.

    I will be there.

    October 11, 2013

  • Brian T.

    Is anyone else going to reInvent next month? Perhaps the Boston contingent could meetup for a drink one night out there.

    October 11, 2013

Our Sponsors

  • G2 Technology Group

    Meetup location/food/presentations - 3/15, 5/10

  • Extreme Reach

    Organizer Dues 4/2014, 4/2016 Food & drink 6/10/2013, 4/12/2016

  • Gadget Review

    Door prize for 4/12/2016 meetup. Thank you!

  • Amazon Robotics

    Hosting location/food/presentation/& More - 4/30/16

  • ExtraHop

    Food sponsorship, and presentation(s), 7/12/2016

  • WeWork

    Hosting our location for the 2/9/16 and 5/24/16 Meetups

  • Cloud 66

    Sponsoring food/presentation 5/24/2016

  • stackArmor

    Food sponsorship and presentation, 2/9/16 meetup

  • logz.io

    Food/presentation 1/2016 meetup.

  • Unitrends

    9/8/15 food and presentation

  • BlueMetal

    Location and Food/drinks for 3/10/2014 and 8/11/2015 Meetups.

  • Rapid7

    Hosting, food, and presentation - Jun 9, 2015 - Thank you!

  • Alert Logic

    Food for the 5/12/15, and 5/12/2014 Meetups - Thank you!

  • HubSpot, Inc.

    Location for May 12, and Nov 3, 2014 (with food!) Meetups. Thank you!

  • ScaleBase

    Food, Drinks, and Raffle for 8/11/2014 event.

  • JumpCloud, Inc.

    6/9/2014 Food and drink. Thank you!

  • Threat Stack, Inc.

    meeting place provided for 6/9/2014

  • Cloud Technology Partners

    4/7/2014, location, food/drink sponsorship. Thank you!

  • Sophos

    Future food and drink sponsorship.

  • Nokia

    2/10/2014 facilities, and for the May 13 &July 8th, 2013 Meetups.

  • CoreSite

    Food for 11/18 Meetup. 9/9 Meetup host, with food and presentation.

  • Vistaprint

    Location sponsorship for the 10/21/2013 Meetup

  • Eucalyptus Systems

    Food and drink for our 4/8/2013 and 10/21/2013 events. Thank you!

  • Clearpath Solutions Group

    Food and Drink for the 5/13/2013 Meetup. Thank you!

  • Monster Worldwide, Inc.

    Hosting, Presenting, Providing Food/Drink for the Sept 30 Meetup

  • Tremolo Security

    Dinner for the 7/8/2013 Meetup.

  • Carbonite, Inc.

    Event meeting facility for 6/10/2013 Meetup.

  • Stackdriver

    Room rental for 10/15/2012, food and hosting on other occasions.

  • Greystone Solutions

    Pizza supplied for our 10/15/2012 meeting - Thank you Adrian duCille!

  • Xceedium, Inc.

    Refreshments supplied 10/15/2012 meeting - Thank you Michael Kurzrock!

People in this
Meetup are also in:

Sign up

Meetup members, Log in

By clicking "Sign up" or "Sign up using Facebook", you confirm that you accept our Terms of Service & Privacy Policy