before I dive in here, did you know that @awscloud Audit Manager exists?
probably not. tl:dr > it helps map your usage to various regulations & standards to give you a better idea of your risk & compliance posture
some thoughts & a blog post analysis 👇
🧵 #cloud #security
probably not. tl:dr > it helps map your usage to various regulations & standards to give you a better idea of your risk & compliance posture
some thoughts & a blog post analysis 👇
🧵 #cloud #security
@awscloud this 👇 is the workflow for @awscloud Audit Manager. it's not bad for the basics
🧵 #cloud #security
🧵 #cloud #security
@awscloud what started me down this path was this post on the @awssecurityinfo blog, "Streamlining evidence collection with AWS Audit Manager"
aws.amazon.com/blogs/security…
anything that helps smooth out the evidence gathering process is usually a big win, let's dig in
🧵 #cloud #security
aws.amazon.com/blogs/security…
anything that helps smooth out the evidence gathering process is usually a big win, let's dig in
🧵 #cloud #security
@awscloud @AWSSecurityInfo right out of the gate, AWS Audit Manager pulls from @awscloud Security Hub, AWS Config, and AWS CloudTrail. so those data sources are already covered
this post shows how an approach to streamlining your custom metrics/data points
🧵 #cloud #security
this post shows how an approach to streamlining your custom metrics/data points
🧵 #cloud #security
@awscloud @AWSSecurityInfo the idea is pretty simple
you setup an HTTPS endpoint via @awscloud API Gateway. that endpoint triggers a Lambda which then stores the evidence in S3 while also triggering a Step Function to process the evidence
it's simple, #serverless, and low cost
🧵 #cloud #security
you setup an HTTPS endpoint via @awscloud API Gateway. that endpoint triggers a Lambda which then stores the evidence in S3 while also triggering a Step Function to process the evidence
it's simple, #serverless, and low cost
🧵 #cloud #security
@awscloud @AWSSecurityInfo the trick now is using this evidence storage method
@awscloud Audit Manager associated evidence to a Control within an Assessments
you need to know where this evidence belongs, in order to use this solution
🧵 #cloud #security
@awscloud Audit Manager associated evidence to a Control within an Assessments
you need to know where this evidence belongs, in order to use this solution
🧵 #cloud #security
@awscloud @AWSSecurityInfo more from the docs at docs.aws.amazon.com/audit-manager/…
and
docs.aws.amazon.com/audit-manager/…
🧵 #cloud #security
and
docs.aws.amazon.com/audit-manager/…
🧵 #cloud #security
@awscloud @AWSSecurityInfo it's not too complicated to figure this out but it's going to be the top hurdle in getting buy-in from other teams
streamlining the evidence/control/assessment alignment process would be a huge win & make this solution a lot more useful
/🧵 #cloud #security
streamlining the evidence/control/assessment alignment process would be a huge win & make this solution a lot more useful
/🧵 #cloud #security
@awscloud @AWSSecurityInfo 🤣 turns out @QuinnyPig also provides his 2 cents on this post in the @LastWeekinAWS newsletter this morning
you've subscribed to his newsletter, right?
you've subscribed to his newsletter, right?
• • •
Missing some Tweet in this thread? You can try to
force a refresh
