Lots of companies are moving to AWS, many with the reluctance of their security teams. Beyond the loss of physical control and deep network inspection, public cloud presents a ton of new challenges for defenders and the cloud providers move so quickly it’s hard to keep up. This session will catalog some high-profile attacks seen in AWS, describe how they were done and what you can do to defend against them. Attendees will come away a little scared, but with a good grasp on how to find issues in their environment and work with their developers and operations folks to clean them up.