Amazon Web Services
In this AWS re:Invent 2023 session, Quint Van Deman and Kevin Lee explore the powerful synergy between encryption and authorization for enhanced data protection in AWS. They demonstrate how these traditionally siloed concerns work in unison within AWS to create robust, flexible, and granular security controls. The presenters guide viewers through the evolution of a sample application, progressively implementing sophisticated security measures. They cover key concepts including least privilege access, VPC endpoints, AWS KMS integration, and advanced techniques like Nitro Enclaves. The session emphasizes the importance of balancing security with operational needs and provides practical insights for implementing these strategies across different levels of cloud maturity. Viewers will gain a deep understanding of how to leverage AWS services like IAM, KMS, and Nitro System to create layered security architectures that protect data from various threats, including insider risks.