AWS re:Inforce 2019: Using AWS Control Tower to Govern Multi-Account AWS Environments (GRC313-R)

AWS Control Tower is a new AWS service that cloud administrators can use to set up and govern their secure, compliant, multi-account environments on AWS. In this session, we show you how Control Tower automates the creation of a secure and compliant landing zone with best-practice blueprints for a multi-account structure, identity and federated access management, a central log archive, cross-account security audits, and workflows for provisioning accounts with pre-approved configurations. We also discuss guardrails—pre-packaged governance rules created for security, operations, and compliance that you can apply enterprise-wide or to groups of accounts to enforce policies or detect violations. Finally, we show you how to easily manage and monitor all this through the Control Tower dashboard.

Complete Title: AWS re:Inforce 2019: Using AWS Control Tower to Govern Multi-Account AWS Environments at Scale (GRC313-R)

AWS,Amazon Web Services,Cloud,cloud computing,AWS Cloud,AWS re:Inforce,AWS re:Inforce 2019,security,identity,compliance,cloud security,AWS security,cloud security community,learning conference,Detective Controls,Infrastructure Security,Data Protection,Incident Response,Governance,Risk,Compliance,security best practices,& Compliance,AWS re:Inforce 2019 Sessions,Session,GRC313-R,Chandar Venkataraman,300 - Advanced,