Top Banner
EVENTDRIVEN SECURITY FOR NEXTGEN APPS PARIJAT MISHRA SOLUTIONS ARCHITECT AMAZON WEB SERVICES #CLOUDSEC
48

EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Mar 06, 2018

Download

Documents

buihanh
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

EVENT-­‐DRIVEN  SECURITY  FOR    NEXT-­‐GEN  APPS  

PARIJAT MISHRA SOLUTIONS ARCHITECT AMAZON WEB SERVICES

#CLOUDSEC

Page 2: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 3: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Depth

Page 4: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 5: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 6: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 7: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Granularity

Page 8: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 9: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 10: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 11: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 12: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 13: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Compute

Object Store

Load Balancer

Database

Identity & Access

Data Warehouse

Application Lifecycle

CDN

Recommendation Engine

Social Login SSO

BI Analytics

Web Server

Reverse Proxy

App Feature App Feature

Page 14: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 15: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Amazon Web Services

Page 16: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Administration & Security

Access Control

Identity Management

Key Management & Storage

Monitoring & Logs

Resource & Usage Auditing

Platform Services

Analytics App Services Developer Tools & Operations Mobile Services

Data Pipelines

Data Warehouse

Hadoop

Real-time Streaming Data

Application Lifecycle Management

Containers

Deployment

DevOps

Event-driven Computing

Resource Templates

Identity

Mobile Analytics

Push Notifications

Sync

App Streaming

Email

Queuing & Notifications

Search

Transcoding

Workflow

Core Services

CDN Compute (VMs, Auto-scaling & Load Balancing)

Databases (Relational, NoSQL, Caching)

Networking (VPC, DX, DNS)

Storage (Object, Block and Archival)

Infrastructure Availability Zones

Points of Presence Regions

Enterprise Applications

Business Email

Sharing & Collaboration

Virtual Desktop

Technical & Business Support

Account Management

Partner Ecosystem

Professional Services

Security & Pricing Reports

Solutions Architects Support Training &

Certification

Page 17: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 18: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

API

Page 19: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Broad Services Drive Sophisticated Applications

Secure Adaptive Resilient Global

Page 20: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Time

Page 21: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 22: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 23: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 24: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Event driven, fully managed compute All you need is code™  

Page 25: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 26: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 27: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Environment Lifetime

Page 28: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Event-driven

Page 29: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 30: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Cloud Functions  

Page 31: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Photo bucket S3

Metadata DynamoDB

Page 32: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Photo bucket S3

Metadata DynamoDB

Extract metadata

Cloud Function

Page 33: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Photo bucket S3

Metadata DynamoDB

Trending DynamoDB

Extract metadata

Cloud Function

Trending Cloud

Function

Page 34: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Photo bucket S3

Metadata DynamoDB

Trending DynamoDB

Extract metadata

Cloud Function

Trending Cloud

Function

Notify Cloud

Function

Page 35: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Photo bucket S3

Metadata DynamoDB

Trending DynamoDB

Extract metadata

Cloud Function

Trending Cloud

Function

NotifyCloud Function

SNS Push notification

Page 36: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Managing Complex Dynamic Infrastructure

Page 37: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Rules-based Self-managing Infrastructure

Page 38: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

AWS Lambda

Rules-based Self-managing Infrastructure

Page 39: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Today With Lambda

Page 40: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 41: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 42: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata
Page 43: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

AWS Lambda

Replacing procedural control systems and APIs with event-driven rules-based management

Page 44: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Demo  

Page 45: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

AWS  Javascript  SDK  for  the  browser  

Amazon  DynamoDB  Unlimited  size  and    

throughput  Database  

Amazon  S3  Unlimited  Storage  &  

Web  Service  

AWS  Lambda  Unlimited  Cloud  Func>ons  

 Func&on:  Create  Thumbnail  

for  new  files  in  S3  

Demo  –  Serverless  SoluMon  with  Fine-­‐grained  Security  

Facebook  Authen>ca>on  

Page 46: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Demo

Page 47: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

Servers are

Page 48: EVENT%DRIVEN)SECURITY) FOR)NEXT%GEN)APPS) · PDF fileMobile Analytics Push Notifications Sync App Streaming Email Queuing & Notifications ... DynamoDB Trending DynamoDB Extract metadata

#CLOUDSEC