President / CEO

R. Harrison

CompanyName

Light Logo
Dark Logo
Secrets Management
Dec
 
31
, 
2023
11:00am 
PST
December
 
31
, 
2023
 | 
11:00AM
 - 
4:00PM 
PST
Sponsor Image
Speaker Image

Mackenzie Kosut

Global Startup Evangelist, Amazon Web Services

Mackenzie is the Global Startup Evangelist at AWS. His days are spent traveling the globe to meet startups, share their stories, and connect engineering teams together. Every day there are a large number of startups launching on AWS across every imaginable industry. It’s Mackenzie’s mission to find stories of startups that are helping to improve the world and share these stories with a wide audience.

 

Prior to joining AWS, Mackenzie was the Head of Technical Operations at Betterment, the world’s largest independent robo-advisor based in NYC which manages over $8B in assets. Mackenzie was a founding engineer and Head of Technical Operations at Oscar Health, an insurance startup also based in NYC, helping to grow the company to over 400+ employees.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

Icon

Feature topic

Light Logo
Dark Logo
About
Agenda
Register
Text goes here
X
Register
Text goes here
X

Activation Day

Secrets Management

2020 Global series

Sunday
, 
December
 
31 
2023
 | 
11:00AM
 - 
4:00PM 
PST
Register now
Text goes here
X

Instructions

This template is intended for the Activation Day program. Use the panel to the right to unhide the correct About Event Block that corresponds to the Activation Day topic. Then, delete or HIDE this "Instructions" element before publishing. Make sure an event QA is conducted using this template.


RSVP
Text goes here
X

Centralized Security

Join AWS subject-matter experts for a deep dive into centralized security posture management on AWS using AWS Security Hub. Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. You will get practical experience using Security Hub, Amazon GuardDuty, and other security services in AWS-provided sandbox accounts and will leave knowing when, how, and why to set up the services, and the best practices when doing so.


During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.


Who should attend

This event is designed for technical roles and builders interested in learning how to centralize and manage security and compliance on AWS. We also welcome anyone interested in Security Hub, GuardDuty, or other AWS detection and response services. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda


Total agenda time: 5 hrs


>

Overview

Introduction to centralized security on AWS and an overview of the AWS services covered in the event. Subject matter experts will dive deep into the functionality, how the services work together, and considerations you should make when setting up and leveraging the services.

>

Break


>

Threat Detection and Response Workshop

Get practical experience using AWS security services to identify, investigate, and remediate threats and vulnerabilities in your environment. We will demonstrate how to set up notifications, automations, and add additional protections to improve the security posture of your environment. The workshop includes many optional modules and you may choose to explore introductory content, solve complex problems such as security posture management or vulnerability management, or dive into advanced incident response scenarios.

>

Multi-account architecture deployment

AWS subject-matter experts will take you through the steps to deploy AWS Config, Security Hub, and GuardDuty across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the services for your organization.

>

Q&A

We'll take time to wrap up, answer questions, and discuss next steps.

Feature topics

Before the event


Compute

Database migration

Storage

Networking

Container Security

Join AWS subject-matter experts for a deep dive into container security for Amazon Elastic Kubernetes Service (Amazon EKS). You will learn how to use AWS Config for configuration management, AWS Security Hub for cloud security posture management, AWS Secrets Manager for secure secrets management, Amazon GuardDuty for threat detection, Amazon Detective for simplifying the investigative process for security issues, and Amazon Inspector for scanning container images for software vulnerabilities. Along the way, we'll dive into Kubernetes security best practices. You will get hands-on experience using all of these services in AWS-provided sandbox accounts and will walk away knowing when, why, and how to set up and use the services.


During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Amazon Detective, Amazon GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, consult the Amazon Detective Prerequisites.


Who should attend

This event was designed for technical roles and builders interested in learning how to approach container security at scale on AWS. We also welcome anyone interested in AWS Config, GuardDuty, Detective, Amazon Inspector, Security Hub, Secrets Manager, or general Kubernetes security. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda


Total agenda time: 6 hrs


>

Overview

Introduction to container security on AWS for Amazon EKS and an overview of the AWS security services covered in the event.

>

Container security (Amazon EKS) workshop

You will get hands-on experience using AWS services for configuration management, cloud security posture management, secrets management, detective controls, and incident response for container workloads running on Amazon EKS.

>

Break


>

Container security (Amazon EKS) workshop, continued


>

Multi-account architecture deployment

AWS subject-matter experts will walk through the steps to deploy AWS Config, GuardDuty, Security Hub,
Amazon Inspector, Secrets Manager, and Detective across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the services for your organization.

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Before the event


Compute

Database migration

Storage

Networking

Continuous Compliance

Join AWS subject-matter experts to learn how to establish the foundation for continuous compliance in your AWS accounts using AWS Audit Manager, AWS Security Hub, and AWS Config. You can use Audit Manager to map your compliance requirements to AWS usage data with prebuilt and custom frameworks and automated evidence collection. Security Hub is a cloud security posture management service that performs security best practice checks, aggregates alerts, and supports automated remediation. AWS Config continually assesses, audits, and evaluates the configurations and relationships of your resources. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services.


During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.


Who should attend

This event was designed for technical roles and builders interested in learning how to approach compliance on AWS. We also welcome anyone interested in Audit Manager, Security Hub, and AWS Config. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 4:30 hrs


>

Overview

Introduction to continuous compliance on AWS and an overview of the AWS services covered in the event.

>

Cloud compliance and assurance workshop

Get hands-on experience while learning how to assess and manage compliance and security drift in the cloud, how to map the three lines of defense to automated compliance management, and how to automate evidence gathering and reporting.

>

Break


>

Cloud compliance and assurance workshop (continued)


>

Multi-account architecture deployment

AWS subject-matter experts will walk through the steps to deploy AWS Config, Security Hub, and Audit Manager across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the services for your organization. Then we will create an assessment in Audit Manager.

>

Demo: AWS Artifact

AWS subject-matter experts will dive deep into AWS Artifact and demo how to use the service in real-world scenarios, including how to look up the password policy from a SOC2 report and describe the difference between organization and account agreements.

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Data Discovery

Join AWS subject-matter experts for a deep dive into data discovery AWS using Amazon Macie to find sensitive data. The Data Discovery Activation Day provides organizations with a thorough understanding of data discovery principles, how to implement a data discovery program, as well as hands-on scenarios with Macie and deployment in your AWS accounts. Macie is a data security service that uses machine learning (ML) and pattern matching to discover and help protect your sensitive data. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

 

During the event, we will demonstrate how to set up the service across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. This is not required for attendance.

Who should attend

This event was designed for technical roles and builders interested in learning how to approach data discovery on AWS. We also welcome anyone interested in Macie. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 4 hrs


>

Overview

Introduction to data discovery on AWS, and an overview of the AWS services covered in the event.

>

Amazon Macie workshop

Get hands-on experience using Macie to discover your sensitive data at scale in Amazon S3 buckets.

>

Break


>

Amazon Macie workshop, continued


>

Multi-account architecture deployment

AWS subject-matter experts will walk through the steps to deploy Macie across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the service for your organization.

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Data Encryption

AWS is committed to providing the ability to encrypt everything everywhere; we give customers features and controls to encrypt data, whether in transit, at rest, or in memory.


Join AWS subject-matter experts for a deep dive into securing your sensitive data on AWS, using AWS Private Certificate Authority (AWS Private CA), AWS Key Management Service (AWS KMS), and AWS CloudHSM. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the services, and the best practices when doing so across multiple accounts and regions.


During the event, we will demonstrate how to set up the services across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.


Who should attend

This event is designed for technical roles and builders interested in data encryption and key management on AWS. We welcome anyone interested in AWS Private CA, AWS KMS or CloudHSM. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 5:45 hrs


>

Overview and deep dive into data encryption services on AWS

Introduction to data encryption on AWS and an overview of the AWS services covered in the event, including AWS KMS to encrypt data and an overview of CloudHSM and how it differs from AWS KMS. Additionally, we will discuss certificate management on AWS and will help you understand when to use these services for different use cases.

>

Break


>

Workshop: Scaling your encryption-at-rest capabilities with AWS KMS

Get hands-on experience protecting your data with different encryption-at-rest options on AWS, including using AWS KMS for services such as Amazon Simple Storage Service (Amazon S3), Amazon Elastic Block Store (Amazon EBS), and Amazon Relational Database Service (Amazon RDS). You will learn best practices for using AWS KMS across multiple accounts and regions, and how to scale while optimizing for performance.

>

Break


>

Multi-account, multi-Region deployment for data encryption

AWS subject-matter experts will walk through the steps to begin securing your data using AWS KMS, AWS Private CA, and CloudHSM for customers who operate in multiple accounts and multiple regions.

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Firewall Security

The AWS Firewall Security Activation Day provides you with hands-on scenarios and deployment of AWS Network Firewall, Amazon Route 53 Resolver DNS Firewall, and AWS Firewall Manager into your AWS accounts to establish the foundation for effective network egress controls in Amazon Virtual Private Cloud (Amazon VPC), and to learn how Firewall Manager can be used to implement these services at scale. You will get hands-on experience in AWS-provided sandbox accounts and will come away knowing when, how, and why to set up the services to improve the security posture of your AWS network infrastructure, and the best practices when doing so.

 

During the event, we will demonstrate how to set up the services in the sandbox environment. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access.


If you choose to follow along in your own account, you will have an operational Route 53 Resolver DNS Firewall deployment to continue testing, and will be equipped with the knowledge to use Network Firewall, Route 53 Resolver DNS Firewall, and Firewall Manager to help protect your AWS network infrastructure. Attendees from the same company may work together to set up the architecture in a single account or across multiple accounts. Multi-account setup requires that AWS Organizations be set up in advance.

Who should attend

This event is for any organization that is looking to learn to use Network Firewall, Route 53 Resolver DNS Firewall, and Firewall Manager to improve the posture of their AWS environment. The event is open to anyone responsible for security and compliance in an AWS environment, with a focus on network egress-filtering controls. This event is multi-customer; therefore, we recommend reserving sensitive questions and conversations for 1:1 meetings with your AWS account team.

Agenda

Total agenda time: 6:00 hrs


>

Overview 

Introduction to AWS firewall security on AWS and an overview of the AWS services covered in the event.

>

Egress controls workshop

Learn how to implement best practice egress network controls in Amazon VPC using native security services, including Network Firewall and Route 53 Resolver DNS Firewall, and how to use Firewall Manager to scale and centrally manage these protections across the accounts and VPCs in your organization.

>

Break


>

Deep Dive: AWS Network Firewall

AWS experts will dive deep into the functionality of Network Firewall and discuss standard architectural deployment models for the service and considerations relevant to each. We’ll also share best practices for getting started with the service.

>

Deep Dive: Amazon Route 53 Resolver DNS Firewall

AWS experts will dive deep into Route 53 Resolver DNS Firewall and provide insights into using Firewall Manager to scale your deployments.

>

Break


>

Architecture deployment

AWS experts will walk you through the steps to deploy Route 53 Resolver DNS Firewall in your environment and scale your policy across accounts and VPCs using Firewall Manager. You may choose to follow along and activate the service in your accounts.

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Secrets Management

Join AWS subject-matter experts for a deep dive into secrets management on AWS using AWS Secrets Manager to securely store, retrieve, and rotate database credentials and other types of application secrets. You will get hands-on experience using AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up and use the service.

 

During the event, we will demonstrate how to set up the service across multiple accounts. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the service in, and ensure that you have the appropriate access.

Who should attend

This event was designed for technical roles and builders interested in learning how to approach secrets management at scale on AWS. We also welcome anyone interested in learning more about Secrets Manager. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 5:45 hrs


>

Welcome

Introduction to secrets management and an overview of AWS Secrets Manager

>

Workshop: Store, retrieve, and manage sensitive credentials in Secrets Manager

Discover how to integrate Secrets Manager in your development platform backed by Serverless applications. You will work through a sample application and use Secrets Manager to retrieve the credentials from your application. You will store and control access to the secrets in Secrets Manager. You will also learn how to use Secrets Manager integrated with services like AWS Key Management Service (AWS KMS), AWS Config, Amazon EventBridge and AWS CloudTrail. At the end of the workshop you will implement incident response workflows for managing secrets in Secrets Manager.

>

Break


>

Secrets lifecycle management at scale

Learn how to use Secrets Manager to manage, monitor, and securely retrieve application secrets in an enterprise environment. AWS subject-matter experts will demonstrate how to programmatically retrieve database credentials, and use services like AWS Config to monitor the compliance status of application secrets.

>

Secret rotation deep dive

AWS subject-matter experts will provide an in-depth explanation of how automatic rotation of secrets is performed using AWS Secrets Manager. Learn how Secrets Manager enables the rotation of secrets with no application downtime, and how to utilize and/or customize pre-built AWS Lambda functions for rotation of secrets.

>

Break


>

Controlling access to secrets

Learn how to appropriately protect application secrets using access controls and encryption. AWS subject-matter experts will provide recommended practices for writing least-privilege resource policies to control access to secrets stored in Secrets Manager, and explain how Secrets Manager uses AWS KMS to encrypt secrets.

>

Multi-account architecture patterns

AWS subject-matter experts will walk through recommended architecture patterns to effectively utilize Secrets Manager in multiple AWS accounts. You will also learn the tradeoffs and considerations when deciding to store secrets in a single, centralized account, versus storing secrets in a decentralized manner (i.e., in the same account as the workload utilizing the secret).

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Threat Detection & Response

Join AWS subject-matter experts for a deep dive into threat detection and response on AWS using Amazon GuardDuty, Amazon Detective, Amazon Security Lake, and AWS Security Hub to analyze, investigate, and respond to potential security issues or suspicious activities in your environment. GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity. Detective simplifies the investigative process and helps security teams conduct faster and more effective investigations. Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization. You will get practical experience using AWS-provided sandbox accounts and will leave knowing when, how, and why to set up and use the services.


During the event, we will demonstrate how to set up the services across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance. Before you enable Detective, GuardDuty must be enabled for 48 hours. This is not required for attendance. For more information, visit Amazon Detective prerequisites.

Who should attend

This event was designed for technical roles and builders interested in learning how to approach threat detection and response at scale on AWS. We also welcome anyone interested in GuardDuty, Detective, or Security Hub. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 6:00 hrs


>

Overview

Introduction to threat detection and response on AWS and an overview of the AWS services covered in the event. Subject matter experts will dive deep into the functionality, how the services work together, and considerations you should make when setting up and leveraging the services.

 >

Threat detection and response workshop

Get practical experience using AWS security services to identify, investigate, and remediate threats in your environment. We will demonstrate how to set up notifications, automations, and add additional protections to help improve the security posture of your environment. The workshop includes many optional modules, and you may choose to explore introductory content, solve complex problems such as security posture management or vulnerability management, or dive into advanced incident response scenarios.

>

Break


>

Threat detection and response workshop (continued)



>

Amazon Security Lake demo and deep dive

Learn how to use Amazon Security Lake, key use cases, and best practices.

>

Break


>

Multi-account architecture deployment

AWS subject-matter experts will take you through the steps to deploy GuardDuty, Security Hub, and Detective across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the services for your organization.

>

Q&A

We'll take time to wrap up, answer questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Vulnerability Management 

Join AWS subject-matter experts for a deep dive into vulnerability management on AWS using Amazon Inspector and AWS Systems Manager Patch Manager. Amazon Inspector is an automated vulnerability management service that continually scans for software vulnerabilities and unintended network exposure in AWS workloads such as Amazon EC2, AWS Lambda functions, and container images in Amazon ECR and within continuous integration and continuous delivery (CI/CD) tools, in near-real time. AWS Systems Manager Patch Manager is used to automate the process of patching managed EC2 instances with both security-related and other types of updates. You will get hands-on experience using Amazon Inspector and AWS Systems Manager in AWS-provided sandbox accounts and will leave knowing when, how, and why to set up the services, and the best practices when doing so.


During the event, we will demonstrate how to set up Amazon Inspector across multiple accounts using AWS Organizations. If you optionally choose to set up the service in your own account(s) during the event, determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access. The multi-account setup requires that AWS Organizations be set up in advance.

Who should attend

This event was designed for technical roles and builders interested in learning how to approach vulnerability management at scale on AWS. We also welcome anyone interested in Amazon Inspector or Patch Manager. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 6:00 hrs


>

Overview

Introduction to vulnerability management on AWS and an overview of the AWS services covered in the event. Subject-matter experts will dive deep into the functionality, how the services work together, and considerations you should make when setting up and leveraging the services.

 >

Threat detection and response workshop

Get practical experience using AWS security services to identify, investigate, and remediate threats in your environment. We will demonstrate how to set up notifications, automations, and add additional protections to help improve the security posture of your environment. The workshop includes many optional modules, and you may choose to explore introductory content, solve complex problems such as security posture management or vulnerability management, or dive into advanced incident response scenarios.

>

Break


>

Multi-account architecture deployment

AWS subject-matter experts will take you through the steps to deploy Amazon Inspector across multiple accounts. If you have AWS Organizations set up and access to your AWS Organizations management account, you may choose to follow along and activate the services for your organization.

>

Q&A

We'll take time to wrap up, answer questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

Web Application Protection

Join AWS subject-matter experts for a deep dive into protecting web applications on AWS using AWS WAF and AWS Shield. AWS WAF helps you protect against common web exploits and bots that can affect availability, compromise security, or consume excessive resources. AWS Shield is a managed DDoS protection service that safeguards applications running on AWS. You will get hands-on experience in AWS-provided sandbox accounts and will walk away knowing when, how, and why to set up the services, and the best practices when doing so.


During the event, we will demonstrate how to set up AWS WAF. You may optionally choose to follow along in one of your own accounts during the event. Determine in advance which of your accounts you want to enable the services in, and ensure that you have the appropriate access.

Who should attend

This event is designed for technical roles and builders interested in learning how to protect web applications on AWS. We welcome anyone interested in AWS WAF, AWS Shield Advanced, and AWS Bot Control. This is a multi-customer event; therefore, we recommend reserving sensitive questions and conversations for a 1:1 meeting with your AWS account team. Please bring any other questions and discuss during the event to get the most out of it.

Agenda

Total agenda time: 6 hrs


>

Overview

Introduction to web application protection on AWS and an overview of the AWS services covered in the event.

>

Workshop: Strengthen your web application defenses with AWS WAF

Get hands-on experience using AWS WAF to build an effective set of controls around your web application, and to perform monitoring. The workshop will cover how to mitigate common attack vectors against web applications, advanced protections, and how to use WAF logging, query logs with Amazon Athena, and build near real-time dashboards to analyze requests inspected by AWS WAF.

>

Break


>

Deep Dive: AWS Bot Control & AWS Shield Advanced

Subject-matter experts will dive deep into the functionality of AWS Bot Control with AWS WAF and Shield, including how the services work, considerations you should make when setting up and leveraging the services, and the additional benefits of Shield Advanced over Shield.

>

Break


>

AWS WAF deployment

AWS subject-matter experts will walk through the steps to deploy AWS WAF in your environment. You may choose to follow along and activate the service in your account(s).

>

Best practices, next steps, and Q&A

We'll take some time to review everything, answer your questions, and discuss next steps.

Feature topics

Database migration

Networking

Storage

Compute

Before the event


Icon

Feature topic

The Final Countdown!
Time left for the event days hours minutes seconds
The countdown doesn't work if the event start date is set to TBD

Agenda

9:00AM - 10:00AM

Breakfast

Breakfast. Registration will take place five minutes before breakfast.

10:00AM - 11:00AM

The Horizon of AI

The Emerging World of Artifical Intelligence and Machine Learning by Matthew Hartman and Partner, Betaworks.

11:00AM - 12:00PM

Startup Evangelist of the Month

Welcome Mackenzie Kosut, AWS Startup Evangelist

1:00PM - 2:00PM

Breakout Session 1

In this project, you will learn how to deploy and host Jenkins, an open-source automation software predominantly used for CI/CD

3:00PM - 4:00PM

Breakout Session 2

In this project, you will learn how to deploy and host WordPress, an open-source blogging tool and content management system

Speakers

Mackenzie Kosut

Global Startup Evangelist, Amazon Web Services

Mackenzie is the Global Startup Evangelist at AWS. His days are spent traveling the globe to meet startups, share their stories, and connect engineering teams together. Every day there are a large number of startups launching on AWS across every imaginable industry. It’s Mackenzie’s mission to find stories of startups that are helping to improve the world and share these stories with a wide audience.


Katherine Barna

Vice President Communications, Awesomeness

Katherine Barna is Vice President, Communications for Awesomeness, a leading multi-platform media company defining the future of entertainment. At Awesomeness, Barna oversees communication and PR strategy for the company and its four key divisions: the Gen Z-focused AwesomenessTV network, Awesomeness Films, DreamWorksTV, and Awestruck. In addition, she heads up the company’s social responsibility initiatives. Previously, she was Head of Communications and Public Policy for Tumblr. She joined the company in 2011 as the 25th employee overall and one of the first non-technical members of the team

Adam Rothenburg

Co-Founder & Partner, BoxGroup

Adam Rothenberg is a Co-founder and Partner of BoxGroup, a New York City based early stage venture capital fund. BoxGroup invests in pre-seed and seed rounds with the goal of backing talented entrepreneurs building disruptive technology companies and with visions to create the next generation of category defining businesses. Investments include Blue Apron, Trello, PillPack, Spring, Sunrise, Warby Parker, Harry’s, Oscar, Behance, and more. Adam was previously the Director of TechStars in New York City. TechStars is a mentorship-driven seed stage accelerator program. Prior to joining TechStars, Adam spent 4 years investing in the public markets at a hedge fund in New York City. Adam attended The Wharton School at the University of Pennsylvania where he concentrated in Finance and minored in Fine Arts. Adam is a native New Yorker.

Mackenzie Kosut

Global Startup Evangelist, Amazon Web Services

Mackenzie is the Global Startup Evangelist at AWS. His days are spent traveling the globe to meet startups, share their stories, and connect engineering teams together. Every day there are a large number of startups launching on AWS across every imaginable industry. It’s Mackenzie’s mission to find stories of startups that are helping to improve the world and share these stories with a wide audience.

Agenda Navigation Anchor. 

Sponsors

Location

October
 
28
, 
2023
 | 
7:00PM
 - 
10:00PM
Register
Text goes here
X

Location

October
 
28
, 
2023
 | 
7:00PM
 - 
10:00PM
Register
Text goes here
X
Sign Into the Console
Text goes here
X

Learn About AWS

What is AWS?
What is Cloud Computing?
What is DevOps?
What is a Container?
What is a Data Lake?
AWS Cloud Security
What's New
Blogs
Press Releases

Resources for AWS

Getting Started
Training and Certification
AWS Solutions Portfolio
Architecture Center
Product and Technical FAQs
Analyst Reports
AWS Partner Network

Developers on AWS

Developer Center
SDKs & Tools
.NET on AWS
Python on AWS
Java on AWS
PHP on AWS
Javascript on AWS

Help

Contact Us
AWS Careers
File a Support Ticket
Knowledge Center
AWS Support Overview
Legal
Sign In to the Console
Text goes here
X

Amazon is an Equal Opportunity Employer: Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age.

Privacy | Site Terms | 


 | © 2026, Amazon Web Services, Inc. or its affiliates. All rights reserved.

Light Logo
Dark Logo
[confirmation_headline]
[confirmation_messaging]
Add to Calendar
Text goes here
X

Internal Instructions & Quick Tips

***** Hide this block before launching*****

- Splash Wiki -- Start here for common questions

- Submit a support ticket to AWS Splash Admin Team

- For time sensitive or urgent issues, please Chime @rahulvsd and @monicalm

- Brand Guidelines: For design questions and asset downloads

- Download additional Feature Topic icons

Share with Friends
Facebook
Twitter
LinkedIn
Link
CONTACT THE ORGANIZER
Google   Outlook   iCal   Yahoo

RSVP

Google Icon
Google
Outlook Icon
Outlook
Apple Icon
Apple
Yahoo Icon
Yahoo