Security Monkey: Controla la seguridad de AWS con Netflix (parte 1)
Supongo que todos conocéis Netflix a estas alturas, el servicio VOD con suscripción mensual que aterrizó en España hace unos meses y ya es todo un éxito.
Pero, además de ser una forma estupenda de ver películas y series, puede ofrecernos mucho que aprender gracias a lo que algunos (yo no :D) llaman pornografía tecnológica.
Netflix es una de esas empresas que se rodea de los mejores ingenieros para poder ofrecer un servicio con calidad por encima de lo normal. En ese sentido, leer de forma regular «The Netflix Tech Blog» es altamente recomendable.
Aprendiendo de los mejores
Que profesionales tan altamente cualificados como los que trabajan en Neflix dediquen una parte de su tiempo a contarnos cómo hacen las cosas, es algo de agradecer. Vivimos en un mundo en el que estamos obligados a aprender de forma contínua y este tipo de lecturas nos abren la mente a nuevas formas de hacer las cosas.
Puedes encontrar temas tan interesantes como:
Y sobre todo, en general de elementos de Amazon WS (unos servicios con los que suelo trabajar tal y como os conté en Controla lo que hacen tus usuarios con Amazon WS IAM (parte 1) y Controla lo que hacen tus usuarios con Amazon WS IAM (parte 2)).
Security Monkey
Revisando esto, me he encontrado con una solución desarrollada por el equipo Netflix que tiene por objetivo monitorizar y analizar la seguridad de los servicios de AWS.
Se trata de un desarrollo propio que ofrecen como open source y que nos permite monitorizar la configuración de los servicios EC2, RDS, S3 e IAM. Cualquier cambio que se realice sobre ellos quedará registrado para que tengamos el control de todo lo que sucede.
Está pensada para correr sobre una máquina Linux y almacenar la información en una PostgreSQL. A nivel tecnológico está escrita en Python utilizando el framework Flask, utilizando datos JSON servidos mediante una API REST.
Casos de uso típicos serían:
- Visualización de cambios históricos de un elemento (como los cambios en grupos de seguridad).
- Auditorías de configuraciones incorrectas (como permisos en buckets S3).
Para conseguir esto, Security Monkey cuenta con tres componentes principales:
- Watcher, es el encargado de observar nuestra cuenta para detectar cambios. Cuando eso ocurre, se almacena esa información en la base de datos interna.
- Notifier, es el encargado de avisarnos cuando se produce un evento que podemos personalizar.
- Auditor, es el encargado de realizar pruebas y revisiones sobre los elementos, reglas y políticas. Podemos definir aquello que no queremos que ocurra para que salte una alarma si se encuentra (como grupos de seguridad con puertos abiertos al mundo).
Una vez lo tengamos funcionando podremos acceder mediante su interfaz web, configurar los elementos que queremos monitorizar y ver todo en detalle.
¿Te ha gustado tanto como a mi? Entonces descarga el proyecto desde su repositorio y coméntanos qué tal tu experiencia. Yo lo haré en un post en el que os mostraré el proceso de instalación, configuración y uso. De momento, esto es todo, espero que os esté resultando interesante.
Como siempre digo, si ves algún error, no estás de acuerdo con lo que cuento o quieres hacer alguna aportación, no dudes en pasarte por los comentarios.
Ingeniero en Informática, Máster en Seguridad de la Información, CISA, CPTP, ISO 27.001 LA y AWS Certified.
He sido galardonado con el premio Microsoft Imagine Cup 2.007 en la categoría Software Design y como Microsoft Active Professional en 2.010. También con el diploma honorífico de la Universidad de Granada y el X premio Granada Joven.
Actualmente trabajo como Cloud & Big Data Security Manager en Accenture, donde soy responsable de proyectos relacionados con la definición y securización de entornos cloud, especializado en Amazon Web Services.
Si quieres saber más o contactar, puedes ver mi perfil en LinkedIn.
- GuardDuty: Un viaje a través del tiempo en AWS Security - 21 noviembre, 2023
- Webinar – Seguridad para familias - 11 enero, 2021
- SecurityInside Live: CISO Day 2020 - 17 septiembre, 2020
Great mix of humor and insight! For more, visit: READ MORE. What do others think?
I dugg some of you post as I thought they were very beneficial very beneficial.
I like this site very much, Its a very nice spot
to read and obtain info.?
Hello there! This post could not be written much better! Looking through this article reminds me of my previous roommate! He continually kept talking about this. I will send this post to him. Pretty sure he will have a very good read. Thank you for sharing!
I like it when people get together and share thoughts. Great website, stick with it.
Oh my goodness! Incredible article dude! Thank you, However I am having problems with your RSS. I don’t understand the reason why I am unable to join it. Is there anyone else getting identical RSS issues? Anybody who knows the solution can you kindly respond? Thanx.
Nice post. I learn something new and challenging on websites I stumbleupon every day. It will always be interesting to read articles from other writers and practice something from other websites.
Great post. I’m experiencing a few of these issues as well..
This is a topic which is near to my heart… Many thanks! Exactly where can I find the contact details for questions?
It’s nearly impossible to find experienced people about this subject, but you sound like you know what you’re talking about! Thanks
Hi, I do believe this is a great website. I stumbledupon it 😉 I will come back yet again since i have bookmarked it. Money and freedom is the greatest way to change, may you be rich and continue to guide other people.
Great article! We are linking to this particularly great article on our site. Keep up the great writing.
This website was… how do I say it? Relevant!! Finally I have found something that helped me. Cheers!
Oh my goodness! Incredible article dude! Thank you so much, However I am going through problems with your RSS. I don’t understand why I am unable to join it. Is there anybody having the same RSS problems? Anyone who knows the solution can you kindly respond? Thanx.
Greetings! Very helpful advice in this particular article! It is the little changes that make the greatest changes. Many thanks for sharing!
That is a great tip particularly to those fresh to the blogosphere. Short but very accurate info… Thanks for sharing this one. A must read article!
I truly love your site.. Great colors & theme. Did you make this web site yourself? Please reply back as I’m hoping to create my own site and would like to know where you got this from or what the theme is named. Thank you!
Hi, I do think this is an excellent blog. I stumbledupon it 😉 I am going to come back once again since I book-marked it. Money and freedom is the best way to change, may you be rich and continue to guide other people.
Howdy! I simply would like to give you a big thumbs up for the great info you’ve got here on this post. I will be coming back to your website for more soon.
I want to to thank you for this good read!! I absolutely loved every little bit of it. I’ve got you book marked to look at new stuff you post…
Your style is so unique in comparison to other people I’ve read stuff from. I appreciate you for posting when you have the opportunity, Guess I’ll just book mark this blog.
Way cool! Some extremely valid points! I appreciate you writing this article and the rest of the website is also very good.
I could not resist commenting. Perfectly written.
There is certainly a great deal to learn about this issue. I like all the points you made.
bookmarked!!, I love your site!
Good day! I just want to give you a big thumbs up for your excellent info you have got right here on this post. I will be returning to your website for more soon.
I’m impressed, I have to admit. Seldom do I come across a blog that’s both equally educative and amusing, and let me tell you, you have hit the nail on the head. The issue is something not enough people are speaking intelligently about. Now i’m very happy that I found this in my search for something relating to this.
Aw, this was a really good post. Taking the time and actual effort to generate a really good article… but what can I say… I hesitate a lot and never seem to get nearly anything done.
I needed to thank you for this good read!! I certainly loved every bit of it. I have got you saved as a favorite to look at new things you post…
Very good article! We will be linking to this particularly great content on our website. Keep up the great writing.
I was able to find good information from your blog articles.
After looking over a handful of the blog posts on your web page, I honestly appreciate your way of writing a blog. I book-marked it to my bookmark site list and will be checking back soon. Take a look at my web site as well and let me know your opinion.
I would like to thank you for the efforts you have put in writing this site. I am hoping to check out the same high-grade blog posts from you later on as well. In fact, your creative writing abilities has motivated me to get my own, personal site now 😉
Great info. Lucky me I ran across your website by chance (stumbleupon). I’ve saved it for later.
An outstanding share! I’ve just forwarded this onto a friend who had been conducting a little homework on this. And he actually ordered me breakfast simply because I stumbled upon it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanks for spending time to talk about this subject here on your internet site.
Greetings! Very useful advice within this article! It is the little changes that will make the most significant changes. Thanks a lot for sharing!
You made some really good points there. I checked on the internet to learn more about the issue and found most individuals will go along with your views on this website.
I was able to find good information from your blog articles.
I love it when individuals get together and share thoughts. Great blog, keep it up.
After I initially left a comment I seem to have clicked on the -Notify me when new comments are added- checkbox and now whenever a comment is added I receive 4 emails with the exact same comment. There has to be an easy method you can remove me from that service? Kudos.
Your style is very unique in comparison to other folks I have read stuff from. Thanks for posting when you’ve got the opportunity, Guess I will just book mark this web site.
I wanted to thank you for this excellent read!! I absolutely enjoyed every bit of it. I’ve got you book marked to look at new stuff you post…
Howdy! This blog post could not be written much better! Going through this post reminds me of my previous roommate! He always kept talking about this. I will send this post to him. Fairly certain he will have a very good read. Thanks for sharing!
I couldn’t resist commenting. Perfectly written!
Howdy! This post couldn’t be written any better! Looking at this post reminds me of my previous roommate! He constantly kept preaching about this. I will send this information to him. Fairly certain he will have a very good read. I appreciate you for sharing!
I like it when people come together and share ideas. Great blog, keep it up.
I’d like to thank you for the efforts you’ve put in writing this website. I really hope to check out the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has encouraged me to get my own site now 😉
You have made some good points there. I checked on the web for additional information about the issue and found most people will go along with your views on this site.
bookmarked!!, I really like your web site!
I absolutely love your blog.. Pleasant colors & theme. Did you build this amazing site yourself? Please reply back as I’m looking to create my very own website and want to find out where you got this from or exactly what the theme is called. Appreciate it!
Excellent article. I’m dealing with a few of these issues as well..
It’s difficult to find knowledgeable people about this topic, however, you seem like you know what you’re talking about! Thanks
It’s nearly impossible to find educated people about this subject, but you sound like you know what you’re talking about! Thanks
Right here is the perfect blog for anybody who really wants to understand this topic. You know so much its almost tough to argue with you (not that I personally would want to…HaHa). You certainly put a brand new spin on a subject that has been discussed for a long time. Excellent stuff, just great.
I really like it whenever people come together and share ideas. Great website, continue the good work!
You’ve made some really good points there. I looked on the net to find out more about the issue and found most people will go along with your views on this web site.
This blog was… how do I say it? Relevant!! Finally I’ve found something that helped me. Kudos!
I could not refrain from commenting. Very well written.
Very nice article. I absolutely appreciate this site. Stick with it!
That is a very good tip especially to those new to the blogosphere. Short but very precise info… Thanks for sharing this one. A must read article!
Complete resolution occurred after surgical treatment combined with prednisolone priligy walgreens
This is a topic that’s near to my heart… Cheers! Exactly where are your contact details though?
You made some decent points there. I checked on the web for additional information about the issue and found most people will go along with your views on this site.
Everything is very open with a clear description of the issues. It was definitely informative. Your website is extremely helpful. Many thanks for sharing!
Right here is the right website for anyone who wishes to understand this topic. You understand a whole lot its almost tough to argue with you (not that I really will need to…HaHa). You certainly put a fresh spin on a topic that’s been written about for ages. Excellent stuff, just wonderful.
I was more than happy to uncover this page. I need to to thank you for ones time due to this fantastic read!! I definitely really liked every little bit of it and i also have you book marked to see new things on your web site.
I used to be able to find good advice from your blog posts.
I was pretty pleased to discover this website. I wanted to thank you for your time for this particularly fantastic read!! I definitely liked every bit of it and I have you saved as a favorite to look at new things in your web site.
I’m very pleased to discover this web site. I wanted to thank you for ones time for this particularly fantastic read!! I definitely loved every bit of it and i also have you saved as a favorite to look at new stuff in your site.
Your style is unique in comparison to other people I’ve read stuff from. Thanks for posting when you have the opportunity, Guess I’ll just bookmark this page.
The next time I read a blog, Hopefully it does not disappoint me as much as this particular one. After all, I know it was my choice to read through, however I actually believed you’d have something helpful to talk about. All I hear is a bunch of whining about something that you could fix if you were not too busy searching for attention.
I blog frequently and I seriously appreciate your content. Your article has truly peaked my interest. I will bookmark your site and keep checking for new details about once per week. I subscribed to your RSS feed too.
Pretty! This was an extremely wonderful article. Thank you for supplying this info.
Aw, this was an extremely good post. Taking a few minutes and actual effort to create a great article… but what can I say… I put things off a lot and don’t manage to get anything done.
This is a topic which is near to my heart… Many thanks! Exactly where are your contact details though?
Way cool! Some extremely valid points! I appreciate you penning this write-up and the rest of the site is extremely good.
I’d like to thank you for the efforts you have put in penning this blog. I’m hoping to see the same high-grade blog posts by you later on as well. In fact, your creative writing abilities has encouraged me to get my own, personal website now 😉
Way cool! Some extremely valid points! I appreciate you writing this write-up and also the rest of the site is really good.
This is a topic which is close to my heart… Take care! Exactly where are your contact details though?
I’d like to thank you for the efforts you’ve put in writing this website. I really hope to check out the same high-grade blog posts from you in the future as well. In truth, your creative writing abilities has inspired me to get my own, personal site now 😉
An interesting discussion is definitely worth comment. I think that you ought to write more about this subject, it may not be a taboo subject but usually people don’t discuss such issues. To the next! Kind regards.
Excellent post! We are linking to this great content on our site. Keep up the good writing.
An outstanding share! I’ve just forwarded this onto a colleague who was doing a little research on this. And he actually ordered me breakfast because I stumbled upon it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanks for spending some time to discuss this issue here on your web site.
Next time I read a blog, Hopefully it doesn’t disappoint me just as much as this particular one. After all, I know it was my choice to read, but I really believed you’d have something helpful to say. All I hear is a bunch of complaining about something that you could fix if you weren’t too busy seeking attention.
Excellent post. I’m going through many of these issues as well..
An outstanding share! I have just forwarded this onto a colleague who had been conducting a little research on this. And he actually bought me breakfast simply because I found it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanx for spending the time to talk about this matter here on your web page.
You are so cool! I don’t think I’ve truly read something like this before. So wonderful to find someone with original thoughts on this topic. Seriously.. many thanks for starting this up. This website is one thing that is needed on the internet, someone with some originality.
This is a really good tip particularly to those new to the blogosphere. Brief but very precise info… Thank you for sharing this one. A must read article!
Greetings! Very helpful advice in this particular article! It’s the little changes that will make the most important changes. Thanks a lot for sharing!
The next time I read a blog, Hopefully it does not disappoint me just as much as this one. After all, Yes, it was my choice to read, nonetheless I genuinely believed you would have something helpful to say. All I hear is a bunch of complaining about something that you could possibly fix if you were not too busy seeking attention.
Can I simply just say what a relief to uncover somebody that actually knows what they’re discussing online. You actually realize how to bring a problem to light and make it important. More people ought to look at this and understand this side of your story. I can’t believe you aren’t more popular since you surely have the gift.
I absolutely love your blog.. Very nice colors & theme. Did you make this site yourself? Please reply back as I’m planning to create my own personal blog and want to find out where you got this from or exactly what the theme is named. Appreciate it!
Every weekend i used to visit this web page, for the reason that i wish
for enjoyment, since this this web site conations really good funny material
too.
Can I just say what a comfort to uncover someone who genuinely knows what they’re talking about on the net. You actually realize how to bring a problem to light and make it important. More people must read this and understand this side of the story. I can’t believe you aren’t more popular because you certainly have the gift.
You need to be a part of a contest for one of the best websites on the web. I am going to recommend this website!
An interesting discussion is definitely worth comment. There’s no doubt that that you need to publish more on this subject matter, it may not be a taboo matter but typically people do not discuss these topics. To the next! Cheers.
Oh my goodness! Incredible article dude! Thank you, However I am experiencing issues with your RSS. I don’t understand why I cannot join it. Is there anyone else getting the same RSS issues? Anybody who knows the answer can you kindly respond? Thanx.
That is a good tip especially to those new to the blogosphere. Brief but very precise information… Thanks for sharing this one. A must read post.
After I originally left a comment I seem to have clicked the -Notify me when new comments are added- checkbox and now each time a comment is added I recieve 4 emails with the same comment. Perhaps there is an easy method you can remove me from that service? Kudos.
There’s definately a lot to learn about this topic. I love all the points you made.
This is the right web site for everyone who wants to understand this topic. You understand so much its almost hard to argue with you (not that I really would want to…HaHa). You certainly put a fresh spin on a topic which has been discussed for many years. Great stuff, just great.
Having read this I thought it was rather informative. I appreciate you finding the time and energy to put this informative article together. I once again find myself spending way too much time both reading and commenting. But so what, it was still worth it!
I was extremely pleased to find this site. I want to to thank you for your time for this particularly fantastic read!! I definitely really liked every part of it and i also have you saved to fav to see new information in your blog.
Spot on with this write-up, I absolutely feel this amazing site needs far more attention. I’ll probably be returning to read through more, thanks for the info!
Very good write-up. I absolutely love this website. Keep it up!
After I originally commented I appear to have clicked the -Notify me when new comments are added- checkbox and from now on every time a comment is added I get four emails with the same comment. Is there a means you are able to remove me from that service? Cheers.
Greetings! Very helpful advice within this post! It’s the little changes which will make the most important changes. Thanks a lot for sharing!
Good post. I definitely appreciate this website. Keep writing!
I needed to thank you for this great read!! I definitely enjoyed every little bit of it. I’ve got you book-marked to check out new things you post…
Way cool! Some extremely valid points! I appreciate you penning this post and the rest of the site is extremely good.