Two More Days to Get an iPad Air w/ Smart Keyboard with any 5 or 6 Day SANS Training - Register Today!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Cloud Security Monitoring

  • Thursday, July 20, 2017 at 1:00 PM EDT (2017-07-20 17:00:00 UTC)
  • Balaji Balakrishnan

You can now attend the webcast using your mobile device!



This talk discusses how to apply security log monitoring capabilities for Amazon Web Services (AWS) Infrastructure as a Service(IaaS) cloud environments. It will provide an overview of AWS CloudTrail and CloudWatch Logs, which can be stored and mined for suspicious events. Security teams implementing AWS solutions will benefit from applying security monitoring techniques to prevent unauthorized access and data loss. Splunk will be used to ingest all AWS CloudTrail and CloudWatch Logs. Machine learning models are used to identify the suspicious activities in the AWS cloud infrastructure. The audience for this paper is the security teams trying to implement AWS security monitoring.

Speaker Bio

Balaji Balakrishnan

Balaji Balakrishnan has more than 17 years’ experience in IT and Information security domain specializing in security operations management and incident response. He has worked in major financial services organizations and has managed 24/7 SOCs/incident response teams. Balaji is a candidate for the Master of Science degree in Information Security Management from the SANS Technology Institute. 


The SANS Technology Institute is the only graduate program that combines SANS technical training, recognized as the industry’s best, with leadership and management curriculum specifically developed for the unique needs of aspiring leaders. Learn more at

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.