Episode 47 - Application Security Special

In this Application Security themed edition of AWS TechChat. Shane chats with Gabe about all things application security, providing a crash course for the builder in all of us They start the show with some level setting to set the scene, introducing you to to the OWASP Top 10 before moving on to CVE's. They then move up the stack to Layer 7 and speak about AWS WAF, which is our web application firewall that helps protect your web applications from common web exploits and how you can use AWS WAF to mitigate against OWASP Top 10 risks as well as how you can leverage managed rule sets for common COTS applications. Before lastly introducing Amazon Inspector which is an automated security assessment service that helps shine a light on the security and compliance of applications deployed on EC2 by detecting CVE's and instance drift again CIS standards.