AWS re:Inforce 2019: How Pokémon’s SecOps Team Enables Its Business (SDD328)

Pokémon’s SecOps team built an automated PII datalake pipeline allowing them to categorize data into profiles and manage permissions. We discuss how, using AWS Lambda, Amazon DynamoDB, and Amazon Simple Queue Service (Amazon SQS), they can validate any person in Active Directory, build the approval to the appropriate manager, write to DDB with a TTL, and push the appropriate access controls. This has two benefits: First, Pokémon can reuse this architecture for other permissions-based business processes, meaning a security layer can be added at the beginning. Second, it frees up security engineers to tackle larger, more important challenges.

Presenter(s):
- Jacob Bornemann, The Pokémon Company International

AWS,Amazon Web Services,Cloud,cloud computing,AWS Cloud,AWS re:Inforce,AWS re:Inforce 2019,security,identity,compliance,cloud security,AWS security,cloud security community,learning conference,Detective Controls,Infrastructure Security,Data Protection,Incident Response,Governance,Risk,Compliance,security best practices,Security Deep Dive,AWS re:Inforce 2019 Sessions,Session,SDD328,300 - Advanced,