Amazon Opensearch Deep Dive

Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) is a managed service that makes it easy to deploy, operate, and scale OpenSearch clusters in the AWS Cloud. Amazon OpenSearch Service supports OpenSearch and legacy Elasticsearch OSS. When you create a cluster, you have the option of which search engine to use. OpenSearch Service offers broad compatibility with Elasticsearch OSS 7.10, the final open source version of the software.

AWS EKS: A Comprehensive Overview of Managed Kubernetes on the Cloud

AWS EKS (Elastic Kubernetes Service) is a fully managed Kubernetes platform provided by Amazon Web Services (AWS). It allows users to run containerized applications on the cloud using the popular open-source container orchestration system, Kubernetes. With AWS EKS, organizations can leverage the benefits of Kubernetes without the operational overhead of managing the underlying infrastructure. EKS handles the deployment, scaling, and management of the Kubernetes control plane, while users can focus on deploying and managing their applications. AWS EKS provides a reliable, scalable, and highly available environment for running containerized workloads, making it easier for organizations to adopt and manage Kubernetes on the cloud.

Streamlining Continuous Delivery with Spinnaker: Best Practices and Real-World Use Cases

Streamlining Continuous Delivery with Spinnaker involves using a modern, cloud-native platform to automate and optimize software delivery pipelines. This includes creating and managing pipelines, deploying infrastructure and applications, and integrating with other tools to streamline collaboration. By implementing best practices and real-world use cases, teams can achieve faster and more reliable deployments at scale, manage complex multi-cloud environments, and optimize their delivery pipelines.

OWASP MCP Top 10: A Practical Security Guide for MCP Builders

MCP adoption has outpaced security. An audit of 17 popular MCP servers found an average security score of 34 out of 100. Tool poisoning attacks succeed at 84.2% with auto-approval enabled. Over 30 CVEs have been filed against MCP implementations in the past 60 days. The first confirmed malicious MCP server, postmark-mcp, silently BCC'd every outgoing email to an attacker-controlled address for weeks before detection.

OWASP responded with the MCP Top 10, a structured threat taxonomy purpose-built for the protocol. This talk is a practitioner's walkthrough of all ten risks, not a slide-read, but a builder's guide to what each risk looks like in a real MCP deployment, how it gets exploited, and what a concrete fix looks like in code.

We cover token mismanagement and secret exposure, prompt injection via tool responses, tool poisoning through malicious descriptions, excessive permissions, insecure output handling, context over-sharing, missing authentication, rug-pull attacks, shadow MCP servers, and the audit trail gap.

Leave with a pre-deployment security checklist you can run against any MCP server before connecting it to production.

MCP Dev Summit Bengaluru