Welcome to our first in-person since 2020!!! A grand collaboration with 3 other meetup groups! See [AWS Cloud Security group](https://www.meetup.com/AWS-Security/events/285521776/) for the official RSVP!

Safety controls and vaccination checks will be in place at the door.

There will be 2 great speakers!

**First presentation:**

* Cloud Security: Why Context Matters

In 2021 alone, there were dozens of publicly disclosed data breaches involving misconfigured storage buckets, compromised credentials, and ransomware. In 2022 and beyond, this is expected to climb as companies continue modernizing their applications and infrastructure in the cloud. Unfortunately, as the identity becomes the new security perimeter security vendors and security skills have struggled to keep up effectively. In most breaches, identities with permission combinations that enable ransomware attacks and data leaks are overlooked because security professionals don’t have the context to distinguish between noise and alerts that represent legitimate risk or imminent compromise. During this talk, Zac Wilson from Orca Security will be discussing current cloud security threats, reasons why cloud security is so challenging, and why context is a key ingredient for delivering effective cloud security. Zac will also be sharing best practices, lessons learned and recommendations drawn from his experience as a Sr. Field Engineer at Orca Security.
* Zac Wilson, MBA, CISSP, Sr. Security Engineer @ Orca Security

Zac Wilson is a Sr. Field Engineer with Orca Security and has over 23 years of experience working on both the customer and vendor sides. Prior to joining Orca Security, Zac held various information security engineering, operations, and management roles working for companies large and small in the high-tech manufacturing, healthcare, DoD, finance, and energy industries. Zac brings with him a passion for building trust-based relationships by helping customers identify and solve their most critical security challenges. Zac has achieved CISSP, CISSP-ISSAP, CISM, and CISA certifications and holds a Bachelor of Science in Management Information Systems from the University of Central Oklahoma and an MBA from Southern Nazarene University.

**Second presentation:**

* Improved management of IAM resources via CDK

Deploying a solution with secure roles and policies can be tricky even for an experienced cloud architect. CDK makes it much easier to create the correct, least-privilege for a solution, eliminating any excuse for using roles with too much access. Pat will demonstrate an EventBridge solution that uses the best practice for roles and policies.
* Patrick Ryan, Cloud Practice Lead at Evans & Chambers Technology

Pat Ryan has over 30 years of IT experience, mainly around government and telecommunications enterprises. He has spent the last five years focused on cloud technology. He has a master's degree in computer science and has earned AWS Solutions Architect and Advanced Networking Specialty certifications.

**Thank you to our sponsors:**
Rapid7 and Orca Security

**Housekeeping**

* Food & beverage will be provided by the sponsors. We'll try to have a range of stuff to accommodate various dietary requirements but we apologize in advance if that runs out or if we don't get your specific need covered. Please let the organizers know if that happens so we can do better for future meetups.
* Please see the information about COVID regulations for this event.
* Also see the notes about transportation.
* This is a joint meetup with 3 other local groups so RSVP quickly to save your spot. Check them out!
* Official RSVP with AWS Cloud Security group: [https://www.meetup.com/AWS-Security/events/285521776/](https://www.meetup.com/AWS-Security/events/285521776/)
* Arlington & DC Cloud meetup: [https://www.meetup.com/DC-Arlington-Cloud-Meetup/events/285521774/](https://www.meetup.com/DC-Arlington-Cloud-Meetup/events/285521774/)
* Washington DC Cloud Computing meetup: [https://www.meetup.com/Washington-Cloud-Computing-Meetup/events/285521779/](https://www.meetup.com/Washington-Cloud-Computing-Meetup/events/285521779/)

Checkout the links or our [GitHub](https://github.com/devopsdc/devopsdc) repository for additional details!

We value the participation of each member of the community and want all attendees to have an enjoyable and fulfilling experience. To make clear what is expected, all delegates/attendees, speakers, exhibitors, organizers, and volunteers at any DevOpsDC event are required to conform to our [Code of Conduct ](http://www.meetup.com/DevOpsDC/pages/Code_of_Conduct/).

Newsletter
  • Get the latest DevOps jobs, events and curated articles straight to your inbox, once a week

  • Community Partners