借助 AWS Security 实现大规模基础设施保护ft. Block, Inc..pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.S E C 2 2 4Infrastructure protection at scale leveraging AWS native services,featuring Block,Inc.Dustin EllisSenior Solutions ArchitectAWS(he/him)Amish ShahSenior Pr

2、oduct ManagerAWS(he/him)Ramesh RamaniStaff Security EngineerBlock,Inc.(he/him)2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.AgendaWelcome&introductionsFoundations of platform engineeringInfrastructure protection on AWSBlocks journey building an infrastructure security platform C

3、losing&takeaways 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Foundations of platform engineering 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.80%Organizations with platform engineering tea

4、ms by 2026Platform engineering as a strategic enablerBy 2026,80%of large software engineering organizations will have established platform engineering teams,up from 45%in 2022 Gartner Inc.(2024).Top Five Strategic Technology Trends in Software Engineering for 2024.2025,Amazon Web Services,Inc.or its

5、 affiliates.All rights reserved.Single AWS accountSimple,centralized managementOne security boundaryLimited complexityWorks well for early-stage workloadsAWS CloudAWS accountRoleUsersAmazon EC2Amazon DynamoDBVirtual private cloud(VPC)Role 2025,Amazon Web Services,Inc.or its affiliates.All rights res

6、erved.Multiple AWSaccountsWorkload isolationDistributed ownership models100s or 1000s of accountsCross-account access patternsShared infrastructure platformsAWS CloudAWS accountUsersAmazon EC2Amazon DynamoDBVirtual private cloud(VPC)RoleAWS IAM Identity Center RoleAWS accountAmazon EC2Virtual privat