CrowdStrike at
AWS re:Invent 2026
Booth 712 | November 30 - December 3, 2026 | Las Vegas, NV
AWS re:Invent 2026 Sessions
15 Minutes Is Too Late: Stop AWS Intrusions with CrowdStrike Real-Time CDR
Adversaries can move from stolen credentials to the AWS control plane, workloads, and Kubernetes before the SOC can begin triage. In this session, see how CrowdStrike Falcon® Cloud Security turns a complex AWS attack into one high-confidence incident. Follow an intrusion from start to finish. See how adversary-informed detections correlate identity, control-plane and workload activity, how AI-based anomaly detection catches behavior static rules miss, and how real-time CDR analyzes AWS activity as it streams in. Discover how this unified context reveals the full attack path, speeds investigation, and helps your team contain threats before adversaries expand their foothold.
Speaker:
Vinayak Shastri, Principal Product Manager, CrowdStrike
Scaling AI Defenses with AWS and CrowdStrike
AI is accelerating innovation and attackers along with it. From prompt injection and data exfiltration to cloud privilege escalation, adversaries are increasingly exploiting AI-powered architectures to move faster than traditional defenses. In this session, AWS and CrowdStrike experts show how to build and defend AI workloads on AWS. Explore real-world architectures using Amazon Bedrock and AgentCore, and see how attackers move across identity, cloud, and AI services to exploit security gaps. Through live demos and architectural guidance, learn how to surface shadow AI, visualize attack paths across code, runtime, and AI services, stop AI-specific attacks, automate protection workflows, and deliver real-time CDR across modern AI environments.
Speakers:
Rob Solomon, Staff Solution Architect, CrowdStrike
Drew Curd, Security Engineering Manager, Simply Business
Can You Stop ALTERED SPIDER? A Live AWS Cloud Breach Challenge (Chalk Talk)
The breach is underway. Watch CrowdStrike experts put cloud detection and response into action during a live, audience-driven investigation of a simulated AWS intrusion. Uncover evidence, determine the next move, and capture flags hidden across identities, workloads, and cloud activity. After a briefing on the cloud-focused adversary ALTERED SPIDER, connect the clues, contain the threat, and stop the attack.
Speakers:
Allie Barnes, Senior Technical Marketing Manager, CrowdStrike
Jay Flora, Senior Technical Marketing Manager, CrowdStrike
Scalable LLM inference, easy on the ops: CrowdStrike on SageMaker AI
When adversaries move in seconds, security has to move faster. CrowdStrike shares how it built scalable, real-time LLM inference on Amazon SageMaker to power threat detection at massive scale, where sub-second latency is a hard requirement. Learn how dedicated, configurable endpoints gave the team full control over performance while SageMaker AI's managed infrastructure removed the operational overhead. Walk away with a blueprint for running latency-critical workloads on SageMaker Managed Inference, without managing the stack yourself.
Speaker:
Ruxandra-Maria Cabra, Director, Data Science, CrowdStrike
Scaling Multi-Cluster EKS Without Burning Your Infrastructure Budget
At scale, managing hundreds of Amazon EKS clusters breaks standard multi-tenant architectures under the weight of shared control planes, noisy neighbors, and runaway cross-AZ data transfer costs. This interactive chalk talk skips the slides to whiteboard the painful realities of multi-cluster fleet topology at scale. We will dissect the trade-offs between monolithic clusters and localized micro-clusters, mapping out exact blast-radius constraints. Bring your worst infrastructure bottlenecks; we will openly debate cluster life-cycle automation, shared VPC patterns, and cost-allocation frameworks, leaving you with a battle-tested blueprint to optimize fleet operations on Monday morning.
