An Amazon service called Amazon Web Services (AWS) announced Amazon Detective, a service that automatically collects data from customers’ AWS resources. The Amazon Detective is a security service that will make the process of detecting security issues into the AWS workloads easier for the customers. This service uses machine learning, statistical analysis, and graph theory to create a data set for cybersecurity investigations, and is currently available to try and start a free trial.
Amazon Detective will help you find security issues
Amazon Detective will help customers to identify the root cause of potential security issues quickly. Moreover, the customers will be able to analyze and investigate these issues with the help of machine learning, statistical analysis, and graph theory that this service has. To use Amazon Detective, you don’t have additional charges, but you’ll pay only for the data collected from AWD CloudTrail, Amazon Virtual Private Cloud Flow Logs, and Amazon Guard Duty. Amazon Detective is currently available in some US, European, and Asian countries, with more regions to follow soon.
According to Amazon, when customers face a security issue such as unauthorized access or compromised user credentials, the security team must start an investigation to understand the reason for the issue and determine the next steps. Before the investigation starts, customers have to collect relevant data that will help the security team to identify the issue. To successfully explore this data, analysts work with data scientists and engineers. Amazon Detective will help this overall process to become faster and simpler.
Amazon Detective will help all security teams, analysts, scientists, and engineers to conduct more effective investigations. It can be activated with a couple of clicks in the AWS Management Console. Once activated, the Amazon Detective will automatically start organizing data and putting it into a graph. Furthermore, Amazon Detective can create tailored visualizations that will help customers to answer the most common security questions. These visualizations give all necessary details and guidance that will help analysts quickly determine the nature of the issue.
Faster and simpler data collection
Dan Plastina, Vice President for Security Services at AWS, said that Amazon Detective takes the extra work off the customer’s plate and allows customers to focus on finding the cause of an issue and making sure it won’t happen again.
Our Tech Talk "Introducing Amazon Detective" explains how to use this new service to investigate, analyze, and quickly identify the root cause of potential security issues: https://t.co/4AGQBanP7p pic.twitter.com/bIGFmGOMsV
— Amazon Web Services (@awscloud) April 6, 2020
As he explained, when a customer faces an issue, they always say that their security teams have the necessary tools to detect and solve that issue. However, they often say that they need help in understanding the root cause of the issue. Therefore, as Mr. Plastina said, Amazon Detective will help them by gathering the necessary data for conducting effective security investigations.
About Amazon Web Services
Amazon Web Services (AWS) is a subsidiary of Amazon that provides on-demand cloud computing platforms to its customers. It was launched in March 2006, and since then it has become one of the world’s most used cloud platforms. AWS offers hundreds of services for computing, storage, databases, networking, analytics, robotics, machine learning and artificial intelligence (AI), Internet of Things (IoT), mobile, security, hybrid, virtual and augmented reality (VR and AR), media, and application development, deployment, and management. As a proven and accepted cloud platform all over the world, AWS believes that its new product Amazon Detective will help customers to spot and solve security issues more quickly.
YouTube: AWS re:Invent 2019 – Introducing Amazon Detective