The Diana Initiative 2022

While service-level controls in AWS such as configuring security groups and scoping permission policies are important parts of securing your services and applications within an AWS account, it's easy to forget security beyond the account level. This talk will cover "the essentials" of securing your AWS Organization, including securing root account(s), logically organizing AWS accounts, and designing and applying Service Control Policies (SCPs) to restrict actions within multiple accounts. We'll walk through the implementation and testing of selected SCPs, discuss logging within Organizations, and wrap up with actionable takeaways.