AWS User Group Wrocław

ATTENTION - if you'd like to submit your own talk, use this form! We really need your talks.

Where and when?
Galaktyka Park (OpsTalent office), Ślężna 132, 53-111 Wrocław, 6 PM CEST 🔴 note the location of the event 🔴

Agenda
➡️ 18:00 - Welcome speech by AWS User Group Wrocław organizers
🧑‍💻 18:15 - AWS Amplify: Build Fast, Deploy Faster! - Pavel Liakhouski
🍻 19:00 - Networking & Pizza
🧑‍💻 19:30 -Exploring the AWS Confused Deputy Problem - Paweł Rzepa
🍻 20:45 and beyond - Networking

➡️ AWS Amplify: Build Fast, Deploy Faster!
In this talk, we will discuss the role of AWS Amplify within the AWS ecosystem and its comparative advantages over other AWS web development solutions. I'll share real-world production use cases and outline the specific scenarios where Amplify excels. Along the way, I'll explore its pros and cons, focusing on the trade-offs in cost, scalability, and customization.

🎤 Pavel Liakhouski
I am a dedicated Software Engineer and AWS Solutions Architect with a Master's degree in Computer Science. My areas of expertise include Python, Java and Angular, while my focus is on the development of complex solutions, APIs, legacy code refactoring and optimization, designing highly scalable solutions on AWS. I hold certifications in both AWS Solutions Architect and AWS Developer. Recognized for the highest number of successful releases in a team of 20 at IBM for 5 consecutive years.

➡️ Exploring the AWS Confused Deputy Problem

The "confused deputy" problem is a critical security flaw where a service unintentionally uses its own permissions to access resources on behalf of another entity, leading to unauthorized access. This issue is particularly relevant in complex cloud environments like AWS.
In this presentation, we will explain the core concept of the confused deputy problem, its security risks, and provide examples of its exploitation in AWS services, such as the Serverless Application Repository, API Gateway, and Lambda. We'll also discuss how AWS IAM can be a target if not properly secured.
Finally, we will explore AWS's native protection mechanisms to mitigate these risks and protect cloud environments using best practices.

🎤 Paweł Rzepa
Paweł works as a security consultant at SoftServe. He has extensive experience in the field of security, gained through roles such as an AWS Instructor, a pentester at EY GSS/Intive/SecuRing, a fuzzer developer for Spirent, a security auditor at Credit Agricole, and a threat analyst at IBM SOC. Paweł also runs his own blog at https://rzepsky.medium.com. Currently, his primary focus is on AWS security.

Sponsor
OpsTalent (https://www.opstalent.com/)