Securing Production | AWS IAM Security | Best Practices | Ft. Rowan Udell | Ep.87

https://is1-ssl.mzstatic.com/image/thumb/Podcasts116/v4/84/8d/3e/848d3ef9-f9a8-b1f9-d119-cb21dbb8e09d/mza_7400137652685620051.jpg/600x600bb.jpg

Scale to Zero - No Security Questions Left Unanswered

Scale To Zero

99 episodes

4 days ago

We know security is challenging, but a timely understanding of security is far more challenging! Scale to Zero is built for all the security professionals for helping them to be more privacy and security-sensitive. With this show, we hope to address all the security-related issues that are challenging to understand and resolve without the help of experts. We believed that a community space like Scale to Zero would make things a little bit simpler for everyone after we discovered the discomfort of constantly switching back and forth.

Technology

RSS

All content for Scale to Zero - No Security Questions Left Unanswered is the property of Scale To Zero and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/staging/podcast_uploaded_episode/27963379/27963379-1744183901995-c473a2cfe6b0f.jpg

Scale to Zero - No Security Questions Left Unanswered

59 minutes 13 seconds

7 months ago

In this episode of the ScaleToZero podcast, we had an insightful conversation with Rowan Udell, an AWS IAM leader and security consultant, about the future of cloud security. We delved into critical topics like prohibiting human access to production accounts, maximizing ROI in IAM and policy management, and the role of Just-In-Time access. We also explored the impact of LLMs on IAM engineering and discussed practical strategies for minimizing attack surfaces in the healthcare industry. This episode is a must-listen for anyone responsible for AWS security and identity management.

Watch on YouTube: https://youtu.be/r0eupMDCqB8

#cybersecurity AWS #IAM #CloudSecurity #DevSecOps #JustInTimeAccess #LLM #SecurityBestPractices

00:00 Teaser and Introduction

05:45 Prohibiting human access to production cloud accounts

12:00 Recommendations to prohibit human access to production accounts

15:30 Strategy to maximize ROI in IAM and Policy Management

19:00 Thoughts on the ability to create users and roles at will in the cloud

23:19 What is Just-In-Time and its role in the cloud?

30:14 Providing secure access to teams in the healthcare industry via IAM

38:05 How organizations can keep the attack surface minimum

41:51 Common misconfigurations seen with minimal fix

44:22 Less-known features of AWS IAM with great impact

48:30 Are LLMs a blessing or curse to IAM engineers?

51:20 Shift of LLMs that IAM engineers should expect in 2025

55:35 Summary

56:38 Learning recommendations