This event is in-person only.
Register Here: https://aws-experience.com/amer/smb/e/61af8/threat-detection--response-activation-day
Parking - Use the guest parking garage at the building. The parking garage entrance is on the south side, southwest corner Parking can be validated at Amazon reception
Lunch will be provided.
AWS Activation Days are complimentary workshops that provide customers with prescriptive guidance while activating and using AWS services for their organization.
Join AWS subject-matter experts for a deep dive into AWS detection and response services. AWS detection and response services work together to help you enhance your security posture and streamline security operations across your entire AWS environment by continuously identifying and prioritizing security risks, while integrating security practices earlier in the development lifecycle:
- Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity.
- Amazon Detective simplifies the investigative process and helps security teams conduct faster and more effective investigations.
- AWS Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. It also provides a unified view of all your security posture elements in a single interface.
- Amazon Inspector is an automated vulnerability management service that continually scans Amazon Elastic Compute Cloud (Amazon EC2), AWS Lambda functions, and container workloads for software vulnerabilities and unintended network exposure.
- Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization.
Get practical hands-on experience using AWS-provided sandbox accounts. Dive into introductory labs, or explore more advanced modules focused on various use cases. During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. Leave knowing when, how, and why to set up and use the security services.
If you are interested in setting up any of the services in your own AWS accounts during the event, make sure you have AWS Organizations set up in advance and have the necessary permissions. It’s highly recommended that you consult and work with your organization’s team that is responsible for your AWS environment.
IMPORTANT: Due to the limited time available during the event, participants will not be able to complete all of hands-on labs and will need to prioritize what they focus on. However, attendees will have access to the labs the following day. If you are interested in completing all of the hands-on labs, be sure to block the following day after the event so you have time.
WHO SHOULD ATTEND
This is an advanced hands-on event intended for those with experience using AWS. The content is designed for technical roles and builders interested in learning how to approach threat detection and response at scale on AWS. We also welcome anyone interested in or prospecting the use of GuardDuty, Detective, Security Hub, Inspector, or Security Lake. Individuals that have hands-on experience with AWS, are looking to get the most out of a solution they already deployed, or plan to enable a solution in their account(s) will find the most value in attending. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team.
