Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account...
Transcript of Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account...
![Page 1: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/1.jpg)
© 2015, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Ronny Fauth, Daniel WoitheDB Systel GmbH
18.05.2017, Berlin
Large Scale Enterprise Account Management
![Page 2: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/2.jpg)
Agenda
Introduction
Cloud adoption at Deutsche Bahn
Paradigm shifts in IT security
Basic security principles
Access security architecture
![Page 3: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/3.jpg)
Why we are here
iX 5/2017
![Page 4: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/4.jpg)
More than just a technical migration
Vertical Operating Model
Distribution SharedResponsiblity
vDC vDC
vDC vDC
vDC vDC
vDC vDC
vDC
vDC
vDC
vDC
Security concepts need to adopt these changes.
![Page 5: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/5.jpg)
Paradigm shifts in IT security
![Page 6: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/6.jpg)
Decentralization changes security models
![Page 7: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/7.jpg)
Physical security controls are obsolete
![Page 8: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/8.jpg)
Basic security principles
![Page 9: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/9.jpg)
Security by Default – Four security principles
Access Control & Isolation
Identity Federation
Multi Factor Authentication
Short Living Credentials
![Page 10: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/10.jpg)
Access security architecture
![Page 11: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/11.jpg)
Access Security Architecture
![Page 12: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/12.jpg)
Identity Federation
AWS Console
SAML 2.0Roles from AD Group
Group Name: Account-Nr. + IAM Role
MFA
IAM
![Page 13: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/13.jpg)
Short Living Credentials
MFA
CLI / SDK
STS
IAM
SAML 2.0Roles from AD Group
Group Name: Account + Role
scripts forcredential retrieval
![Page 14: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/14.jpg)
Access Control & Isolation
AWS Console
MFA
CLI / SDK
Instances
AdminAccess
MFA
![Page 15: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/15.jpg)
Demo
![Page 16: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/16.jpg)
![Page 17: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/17.jpg)
![Page 18: Large Scale Enterprise Account Management · 2017-07-13 · Large Scale Enterprise Account Management. Agenda Introduction Cloud adoption at Deutsche Bahn ... Demo. Thank you! ooooooooooooc](https://reader033.fdocuments.in/reader033/viewer/2022050311/5f73a4ae1e6cf177cb77aa67/html5/thumbnails/18.jpg)
Thank you!