AWS global regions automatically inherit newly launched compliance controls
Teresa Carlson · a16z Podcast | The Cloud and The Public Sector · Jan 2, 2019 · at 17:53
Teresa Carlson, VP of Worldwide Public Sector at AWS, explains how AWS manages security architecture across its global cloud fleet.
0:00 / 0:07exact quote · 7.7s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“When we create a security and compliance control, if we launch it in one region, the others inherit it.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Teresa Carlson
Excessive government compliance standards lock startups out of innovation
“Because we do worry sometimes that if you put too many standards in place, it stagnates both innovation and you're not allowing startup companies to get into that innovative cycle because it sheds them out because their costs get so high on trying to meet a”
AWS built the U.S. Intelligence Community cloud using standard commercial architecture
“The intelligence community is a cloud that we built. It's exactly like any cloud that we built around the world. It's just on their own network. So by sense, it's their own private cloud, but it is just like any other AWS region. It's just on a different netwo…”
The hybrid cloud model will remain prevalent for a long time
“Well, in terms of the hybrid cloud model, we believe that's around for a long time, because customers, you know, they're not going to transition overnight, and they need to be able to take advantage of what they built over the years.”
U.S. government FISMA compliance was an outdated paper-based standard
“They had sort of an outdated security and compliance model called FISMA, which was a paper-based model, which was a law, a mandate for how they looked at security and compliance, and then they moved to this model for cloud called FedRAMP, and FedRAMP is really…”
Paper-based security compliance is outdated immediately upon printing
“The minute you print it out, it's outdated. You want to look at security and compliance in a continuous manner, right? You want, that's automation, the mechanisms of doing that, and that's what cloud is.”
UK government mandated a 'why not cloud' requirement for tech procurements
“Liam Maxwell, who's the CTO of the UK government, sort of started the same kind of trend in the UK where he said, we are spending way too much money on tech and not getting the benefits. They've created their own digital service, and they're starting to put al…”