Every week another startup wakes up to a $40k bitcoin-mining bill in CloudTrail. This workshop walks through the exact controls we put on every AWS account at Drexus: SCPs, IAM Identity Center, root account hygiene, key rotation automation, GuardDuty + Detective wiring, and the Slack-paged runbook for when something does go wrong.
Every week another startup wakes up to a $40k bitcoin-mining bill in CloudTrail. This workshop walks through the exact controls we put on every AWS account at Drexus: SCPs, IAM Identity Center, root account hygiene, key rotation automation, GuardDuty + Detective wiring, and the Slack-paged runbook for when something does go wrong.
For: Founders · engineering · security · platform-lead
Senior AI Engineer, Drexus
Senior AI Engineer at Drexus. Has written more incident postmortems than is healthy. Hardens AWS accounts for series-B/C clients.
CEO, Drexus
CEO at Drexus. Has written enough incident postmortems to know what hurts revenue when AWS gets popped.
How AWS accounts actually get popped (real postmortems)
30 min · Sammy S.
Identity layer: Identity Center, SCPs, MFA enforcement
40 min · Murat Umutlu
Detection layer: GuardDuty, Detective, alert routing
30 min · Murat Umutlu
Response runbook: the first 15 minutes after an alert
30 min · Sammy S.
Q&A
20 min · Both
A no-fluff Thursday workshop on standing up production-grade cloud infrastructure on AWS. Walk out with our open-source Drexus Cloud Boilerplate (Terraform + GitHub Actions + a hardened VPC) wired to your account and the Friday Receipt template you'll use to track it.
A half-day workshop for founders and security leads who need a SOC 2 Type II report without grinding their roadmap to a halt. We cover scoping, evidence automation, vendor selection (Vanta/Drata/Secureframe), and the audit gauntlet itself, with the exact playbook we use across 14 Drexus client engagements.
A practical workshop for founders and growth leads on standing up an outbound-marketing automation that actually performs. We wire Apollo.io's lead enrichment to Claude's reasoning to a real-time scoring + sequencing layer. You leave with a deployed bot tied to your CRM, plus the Friday Receipt template that tracks pipeline impact.