基于 GenAI 的情境安全分析与修复.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.I S V 3 1 5GenAI-Powered Contextual Security Analysis&RemediationAswin Vasudevan(he/him)Sr Solutions ArchitectAWSSahil Thapar(he/him)Principal Solutions ArchitectAWS

2、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.AgendaSecurity and Cost monitoring requirements with multi-tenant SaaS Solution architecture overviewSolution DemoCode walk throughQ&A 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Key Multi-tenant Security Requ

3、irementsSecurity monitoring data ingestion at scaleTenant context awarenessTenant resource dependency mappingIdentify threats in multi-tenant systemsSecurity incident impact assessment 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.High-Level ArchitectureAWS SaaS Control Plane ac

4、countAmazon Security LakeAmazon OpenSearchTenant Account 1Tenant Account 2Tenant Account 3OSI pipelineAWS SaaS Data Plane accountAmazon NeptuneDBTelemetry dataTenant Resource MappingchatbotvisualizeUIStrands agent1.Search backend tool()2.Filter Tenant tool()3.Remediation tool()4.CUR tool()runtime125

5、Access AgentCore endpointLLM43InvokeResponseAgentCore MemorySave user interaction to memoryAgentCore ObservabilityAgent ObservabilitySecurity HubGuardDutyInspectorSecurity HubGuardDutyInspectorSecurity HubGuardDutyInspectorSOC Analysts 2025,Amazon Web Services,Inc.or its affiliates.All rights reserv

6、ed.High-Level ArchitectureAWS SaaS Control Plane accountAmazon Security LakeAmazon OpenSearchTenant Account 1Tenant Account 2Tenant Account 3OSI pipelineAWS SaaS Data Plane accountAmazon NeptuneDBTelemetry dataTenant Resource MappingchatbotvisualizeUIStrands agent1.Search backend tool()2.Filter Tena