I'm not cut out for SNS

I was just about to call you.

I'm in the mood for meat today.

I ended up buying a new car.

I should have told you i love you.

I'm into ChatGPT these days.

I'm willing to try it.

I suppose he's lying to me.

How did you find the test today?

Johnny's gonna dive into a customer story of how they had a problem and they solved it with the Security Reference Architecture.

we'll dive into some of the modules for the code repository that you could deploy in your AWS environment.

And lastly, Johnny and I created some actionable next steps. So, after attending this session,you can take away for one week, three months, or six months after the session.

So, what are some common challenges that we've seen with our customers?

As we know, whether you're just starting your cloud journey or you're enhancing your security architecture, a lot of different customers have asked,How do you define your security architecture?

90% of what we build at AWS is built on customer feedback, and that is no different than the AWS SRA.

Another aspect we get a lot, and I'm sure you can relate, is how do we keep up with the latest and greatest new technologies with AWS security services?

I will even admit myself working at AWS,I have a hard time keeping up with some of the launches.

how can we implement in a fast and reliable way our own security architecture?

We'll talk about infrastructure as code and how you can use some templates such as AWS CloudFormation.

And as we know, at AWS security is our top priority. And security is no longer just the job of security architects and security engineers. Security is everyone's job and responsibility.

how do we drive these discussions and make sure that security is approachable and everyone understands governance and the responsibility?

Next maybe we have a watcher on the wall and they're looking to see if there's any threats.

how do you make security approachable and fun?

as you can see in our picture here, we have a tall stone wall.

it's gonna have that perimeter security.

this is really going to be what's going to stick with people at your organization.

And it goes back to that concept of defense in depth and having more robust security.

Many of our customers feel overwhelmed with the amount of options they have　when it comes from not even just AWS services, but all of the external options.

the purpose of the AWS SRA is to provide a holistic guidance that will allow you to see the full picture of your security reference architecture, and see the purpose of improving your security posture.

one of the things that I wanted to do before we really began was take some time to really explain the purpose of the SRA.

we're gonna do that by discussing the feedback that we've heard from customers.

Which one do I need to start with? Where do I begin?"

We give you the option to revise the controls so that you can hopefully meet those requirements.

This is where we look at execution. So, pretty straightforward, right? Define where you want to be,review what you already have in place, then execute. That's usually where most people stop.

But what we want to do next is we want to learn about new AWS security controls that we have and the different tools that we have.

after you've had a chance to learn, you gain an understanding, you look for how it can help your business to accelerate faster.

We need to get to a different security maturity model.

Should we go with a moat? Should we go with a fence? Should we have a draw bridge?

They said with all the people that had access to the accounts, how do they keep track in a centralized format so they know what's occurring in these accounts?

As they started to mature, they were able to add additional elements, such as GuardDuty

Have they overly permission the roles that were provided?

they were able to scope those down so they follow a least privileged model.

Can you explain your idea in a high-level way?

at a high level, AWS SRA is built upon the AWS Shared Responsibility Model.

So, I'm not gonna go too far in depth here, this is just a overview.

But basically when we talk about the Shared Responsibility Model,there are two things to know for this.

we're responsible for securing the data centers, the underlying network infrastructure,as well as the hardware.

So, quickly I wanted to provide a comparison of the two just to help you understand the foundation.

We try to provide you with the knowledge so you can understand why we chose the different options we did for the SRA.

In fact, we encourage you to take out what doesn't work for you and plug in what does.

it should still work the same, or better than what we could have provided otherwise.

we're gonna dive into looking at the AWS security services and how their controls and interactions are built best in a multi-account strategy using the AWS Organizations.

If you're not familiar with AWS Organizations, it's a service that's built mainly looking at management and governance.

I know it is a lot on this slide. I will talk you through it, so bear with me.

With the security at layers, essentially, again, we've talked about with the castle, looking at defense in depth.

I think this is personally a more digestible view for everyone to see here.

the best way to start off is to just get a little bit of lens about your backgrounds.

I genuinely believe that our experiences shape our decisions and how we drive change in our organizations.

I am an engineer by trade.

I really enjoyed it and found that I could use it outside of NASA and ended up doing some consulting and really liked to tie together business outcomes with technology and see what you could do.

And that premise has played its way through my career.

And most recently, relocated to Nashville where Asurion's headquartered, and I'm so excited to have joined them about a year and a half ago as the CIO.

We are going there on foot. Don't be silly,It's too far.

Let's wait and see.

Is it OK? at 6 PM in the lobby?　Perfect, Then see you later.

Only time will tell.

Did you get what he said? Nope,It's all greek to me.

Do it now or never.

Did you lose some weight? Yeah,actually I'm on a diet.

Where can we meet? How about the front ot the station.

I'm so upset about this plan getting canceled. what's the big deal.

Do you think that it is the book he was talking about.It could be.

Are you with me so far? Sure could you give me time to think?

Why don't we go out for dinner tonight? I'd rather eat at home.

Working from home has its benefits,but it also has its problems.

I went to the grocery store this morning,and picked up some fresh fruits and vegitables.

I have to go pick up my kids from school in about an hour.

I'm sorry,but I won't be able to make it to the meeting tomorrow.

You can reason over your streaming data in near real time.

When it comes to "doing more with less," AI is the ultimate amplifier.

It's going to change what an application looks like,what the design language of an application is, and how it gets built, and how it gets delivered.

Azure provides almost 2X higher compute throughput per GPU and near-linear scaling to thousands of GPUs, thanks to the world class networking and systems software optimization.

The other massive thing we have been doing is our work with OpenAI.

Would you come with me? I can't do that because I have an appointment coming up.

What a shame ,don't kick yourself.

I had to break the news to her that the trip was canceled

I need to take a break and clear my mind before continuing with the project.

The teams performace exceeded our high expectations.

If you could share some of the commercial scenarios that you've seen and are excited by?

We're really excited about the wide range of uses that customers are finding for these AI systems.

And recently, we've seen more sophisticated applications that combine multiple AI capabilities for some really interesting use cases.

For example, a number of Fortune 500 companies are now using a combination of our embeddings and completions endpoint together to drive powerful search features that significantly improve current processes.

Compliance teams can use these capabilities to search complicated external standards documentation and then compare them to their own internal policies.

And if they find any gaps,they can even use these capabilities to suggest new language.

This is the type of application that cuts time spent from manually comparing documents from many weeks down to hours.

And today, obviously, we are very thrilled to put even more of these breakthroughs in the hands of customers.

It's an exciting time. We take our role as responsible stewards of this technology very seriously, and I know you do, too.

We recently opened-sourced our automatic speech recognition system, Whisper, which can transcribe complex speech more accurately than ever before, like complicated technical terms and accents.

I've been studying English for a few years now,but I still struggle with speaking.