I was invited by AWS Norway to contribute to their AWS Immersion Day on Zero Trust which took place on Tuesday November 25th 2025.
Elshan Hasanov from AWS started with an introduction to the concept of Zero Trust and how Amazon Verified Access and Amazon VPC Lattice can be used for the purpose. Next up I presented approaches for application and infrastructure security with AWS Web Application Firewall and AWS Shield Advanced.
You can find the slides below.
About the event
In today’s dynamic and distributed cloud environments, traditional perimeter security alone is no longer sufficient to protect against advanced threats. This session explores the paradigm shift towards Zero Trust architecture and its implementation within AWS ecosystems, covering the use of AWS services and features to adopt Zero Trust principles alongside traditional security approaches for fine-grained access control, network segmentation, secure data access, and logging. Join us to learn how to transition to a more secure, resilient, and comprehensive security approach tailored for your AWS environment.
What to Expect from the Event
This session and hands-on workshop provides an in-depth exploration of Zero Trust security principles and their practical application within AWS environments using AWS Verified Access and VPC Lattice, complemented by modern perimeter security strategies including WAF and firewall inspection.
Core Focus Areas
- Identity-aware, least-privilege access for both human users and microservices
- Integration of Zero Trust with strategic perimeter controls including WAF
- Practical implementation using AWS Verified Access and Amazon VPC Lattice
Hands-on Components
- Configure AWS Verified Access for secure remote user access
- Implement Amazon VPC Lattice for service-to-service communication
Original AWS Experience North event page: