A lightning talk on securing AWS services that live outside your VPC by layering network controls (DNS Firewall, Network Firewall) with IAM controls (VPC endpoint policies, …
AgentCore Identity now offers a managed Consent portal that handles end-user OAuth authentication and session binding for AI agents, storing per-user tokens in the token vault so …
Building data perimeters using SCPs, VPC endpoints, and resource policies.
Partner deployment model using temporary scoped access on behalf of customers.
Amazon Bedrock AgentCore Identity now supports Private Key JWT client authentication, letting agents sign JWT client assertions with a private key that never leaves AWS KMS instead …
Amazon Bedrock AgentCore Identity now supports referencing your own AWS Secrets Manager secrets, giving organizations full control over encryption, rotation, and access policies …
Best practices for performing cloud governance at scale using AWS Organizations integrations.
Building enterprise-scale preventive security controls with AWS Organizations SCPs, featuring a real-world case study with Inter & Co.
Strategies and workflows for triaging and prioritizing IAM Access Analyzer findings to focus remediation efforts on the highest-risk issues.
Two workshop sessions with six hands-on labs teaching when to use each IAM policy type, who should own and manage them, and how to balance security posture with developer agility.
A five-module hands-on workshop on creating a data perimeter by building controls that allow access to data only from expected network locations and by trusted identities.
Workshop on building data perimeter controls to ensure only authorized users can access company data on AWS.
Chalk talk on how to be frugal with service control policies and get the most out of them in a multi-account AWS environment.
Workshop reviewing the different AWS policies required to build data perimeter controls, with five hands-on labs each illustrating a different IAM or network control based on …