For those who’ve been maintaining with tech information, you’ve got in all probability seen a flurry of updates from AWS re:Invent 2024, Amazon Net Providers (AWS)’s annual convention for the worldwide cloud computing neighborhood.
Among the many many bulletins, AWS launched new options and instruments centered on enhancing cloud safety. These updates are supposed to assist organizations higher defend their knowledge and handle dangers in more and more advanced environments.
AWS launched the AWS Safety Incident Response service at re:Invent 2024 to assist organizations put together for and rapidly reply to safety incidents of their AWS environments. Key capabilities embody integration with Amazon GuardDuty and AWS Safety Hub for automated monitoring and classification of safety findings and a centralized dashboard for a extra coordinated response to threats.
Customers get 24/7 entry to the AWS Buyer Incident Response Crew (CIRT) and post-incident experiences with advisable corrective actions. AWS Safety Incident Response is now out there in 12 AWS Areas all over the world.
“Safety occasions have gotten extra pervasive and sophisticated for purchasers,” AWS shared in a information weblog. “Safety groups usually face an amazing variety of day by day alerts, leading to potential misplaced useful resource prioritization and diminished effectiveness. Manually investigating findings is resource-intensive and might trigger clients to overlook important safety alerts.
“Moreover, coordinating responses throughout a number of stakeholders, managing permissions in various environments, and documenting actions complicates the method. “There is a chance to raised help clients and get rid of a number of undifferentiated heavy lifting factors that clients face throughout safety occasions.”
With the launch of AWS GuardDuty Prolonged Risk Detection, the corporate goals to additional strengthen safety by leveraging synthetic intelligence and machine studying (ML) to offer deeper insights into threats akin to credentials and knowledge exfiltration. Options assault sequence findings, important severity alerts, and pure language summaries mapped to the MITER ATT&CK framework.
AWS has additionally up to date its Community Firewall capabilities. Now you can filter networks primarily based on geographic location of IP addresses. This functionality simplifies compliance with regional rules and helps mitigate dangers from threats originating particularly places.
As organizations look to simplify their safety processes, using trusted options is important for higher safety and diminished complexity. the brand new Amazon Safety Lake Prepared Specialization highlights AWS companions who’ve demonstrated that their software program works with Amazon Safety Lake and have efficiently deployed it to clients.
Because of this these options have been reviewed by AWS Companion Options Architects for his or her strong structure and confirmed success for purchasers. They contribute to or use Safety Lake knowledge, offering a unified method to safety.
AWS additionally introduced the final availability of Amazon Open Search Service ETL-free integration with Amazon Safety Lake. Key options embody querying Safety Lake knowledge straight with OpenSearch, utilizing the Open Cybersecurity Schema Framework (OCSF) for simpler evaluation, and enhancing safety monitoring with OpenSearch Dashboards.
“For pressing investigations and monitoring, you may optionally improve question efficiency by enabling extra accelerations, akin to listed views and dashboards in Amazon OpenSearch Service, once you want quick and frequent entry to a subset of your knowledge,” AWS acknowledged by way of a weblog about this announcement.
“These capabilities present full visibility into all of your knowledge saved in Safety Lake, no matter log quantity, to help safety investigations, higher perceive your safety posture, and achieve security-relevant insights.”
Launched in 2022, the AWS Clear Rooms is a completely managed service that permits safe knowledge collaboration and evaluation with out exposing delicate data. Final yr, AWS improved the service by including ML and differential privateness options.
At re:Invent 2024, AWS expanded Clear Rooms capabilities to help collaboration with knowledge units throughout a number of clouds and knowledge sources, together with Snowflake and Amazon Athena. This replace permits organizations to collaborate on knowledge in actual time with out transferring or sharing underlying knowledge units, simplifying the method and lowering prices.
Constructing on its deal with safe and progressive options, AWS has launched an AI safety class inside its Security competitorswhich goals to assist clients establish companions with expertise in securing AI environments.
In response to AWS, these companions are validated for capabilities akin to stopping knowledge leaks, mitigating assaults, and implementing accountable AI practices. The class is designed to deal with the rising safety challenges posed by AI adoption.
Associated articles
BigID expands capabilities with new options to enhance safety and compliance
New AWS service permits corporations to add knowledge to the cloud from safe endpoints
Cloud Safety Alliance Unveils Complete AI Mannequin Threat Administration Framework