Cloud SecurIty Masterclass: Building a Highly Secure S3 Bucket

You're invited to a special live Cloud Security Masterclass with Fugue co-founder and CTO, Josh Stella, that will dig deep into the security of Amazon S3. Amazon S3 Security is far more complex than making sure your access policy is set to private. 

In this session, Josh will dive into the layers of S3 and how malicious actors are circumventing common security steps to extract data without detection. You'll walk away from this session with a deeper understanding of S3 and how to think critically about cloud security for your specific use cases.

Cloud Security Masterclass: A Conversation with Greg McCord of CalAmp

The cloud is radically different from the data center, and keeping it secure requires thinking differently about the problem. Throw in Internet-of-Things (IoT), cloud-native architecture, and edge computing and IT security can start to look downright alien to many. 

Greg will join Fugue co-founder and CTO Josh Stella to discuss the security of cloud, IoT, and edge computing and what the future holds for cloud computing and security. They’ll provide fresh perspectives on thinking more critically about securing your unique cloud use cases.

AWS Cloud Security Meetup DC

Fugue Co-Founder and CTO will present- Addressing Cloud Security with Open Policy Agent (OPA)

Developer Week Global: Addressing Cloud Security with OPA

In this talk, Josh Stella (cofounder and CTO at Fugue) will walk through how OPA works and how cloud engineering teams can leverage it and other open source tools for cloud security and compliance. 

By the end of the talk, attendees will learn:

-How to use OPA and the Rego policy language to build custom rules for cloud infrastructure

-How to check Terraform against policy with Regula, a tool that uses OPA for validating infrastructure as code

-How to use OPA with CI/CD tools to integrate cloud infrastructure security into automated delivery pipelines

InfoSec World-Cloud Security Summit

Join Josh Stella Co-Founder and CTO  as he discusses how traditional security approaches and solutions can’t prevent misconfiguration or detect associated data breaches; because cloud misconfiguration is a software engineering problem, not a security analysis problem. That’s good news, because with the right cloud security architecture, we can address cloud misconfiguration before hackers can find and exploit them.

The demonstration will utilize a running AWS cloud environment, but the concepts and misconfiguration risks are applicable to any cloud provider, including Microsoft Azure and Google Cloud Platform.

OWASP -Devslop Project via YouTube

Josh Stella, Fugue's cofounder and CTO, will show how cloud engineers can leverage OPA to move fast and ensure cloud infrastructure compliance.
He'll cover:
* Understanding OPA and getting started with policy-as-code for cloud infrastructure
* Checking Terraform for policy violations using Regula, an OPA-based open-source tool
* Integrating cloud security into CI/CD to prevent deployment misconfiguration

BsidesCharm

Josh Stella, Fugue Co-Founder and CTO will be presenting: Hacking the Cloud: Simulating Advanced Cloud Misconfiguration Exploits.  

Preventing cloud-native exploits requires us to re-think cloud architecture and how we use services such as IAM. Josh will simulate advanced cloud attacks live, to demonstrate how common cloud misconfigurations are exploited to understand how we can prevent them, up front with secure architecture.

Interop

We are excited to have Josh Stella, CTO and Co-Founder, speaking at Interop 2020 this year in Austin. Josh will be presenting: Simulating Real Time Cloud Misconfiguration Attacks to Improve Cloud Security

Developer Week Cloud Edition-Seattle

Josh Stella Fugue Co-Founder and CTO will present: A Live Simulation of Cloud Misconfiguration Attacks

Josh will run a live simulation of an advanced cloud misconfiguration exploits to show a number of ways common cloud architectural anti-patterns create opportunities for hackers to gain entry to cloud environments, move laterally using tools like IAM services, and ultimately discover and breach data. Many of the misconfigurations exploited won’t be flagged by compliance scans and often aren’t considered risky by security teams.

AWS re: Invent

Fugue is proud to be a sponsor of AWS re:Invent 2020. See you there!