IAM Pulse

Inactive

[IAM Pulse @checkiampulse]

Cheers to the @fwdcloudsec organizers for another successful conference (especially for us virtual participants!): @hhopk @patricksanders @0xdabbad00 @JerinSaji0 @aaronzollman @jcfarris Joel Thompson & Shinesa Cambric

We're proud to sponsor this event 🎉
See you next year!

[IAM Pulse @checkiampulse]

For more great info check out @elrowan's article which he generously cross-posted for our community!
https://t.co/x6js9NaNeR

[IAM Pulse @checkiampulse]

This will be a great @fwdcloudsec talk by @NoamDahan on iam:PassRole. Shoutout to @elrowan for a great blog post on this topic as well!

#fwdcloudsec

[IAM Pulse @checkiampulse]

We're fans of @NightmareJS talk on exfiltrating data w/AWS S3 replication service.

As Kat reminds us:
Everything changes all the time & in different places.
The "on behalf of" problem in systems is hard
Defenders need reliable ways to monitor data copying

#fwdcloudsec

[IAM Pulse @checkiampulse]

Beware ninja moves

[IAM Pulse @checkiampulse]

"google supports service account impersonation just like aws iam assume role with trust policies" @ctennis has never seen a 3rd policy integration within GCP do this because "it is very difficult to set up, but we should now be pressuring vendors to do this"

[IAM Pulse @checkiampulse]

Great talk by @ctennis at @fwdcloudsec - Achieving AWS IAM zen in a Google Cloud world. We love this reminder of all of "all the surprising things that happen in GCP even if you're an AWS shop" #fwdcloudsec

[IAM Pulse @checkiampulse]

@ctennis reminded us of the happy dance of using temporary iam credentials and the sad panda of using static iam credentials - here's some actionable tips mentioned to lock down the utilities of your iam creds #fwdcloudsec @fwdcloudsec

[IAM Pulse @checkiampulse]

Plenty to think about the implementation side of Control Tags and how they can be tested/validated.

A downside to not attending @fwdcloudsec in person is the engaging post-sessions hallway chatter, but there's always the Cloud Security Forum Slack for Q&A!

[IAM Pulse @checkiampulse]

Enter: ABAC! @mritamar_ and @YYanilov are showing us a proposed view of tags in AWS via Control Tags.

But first, a refresher on condition keys.

@fwdcloudsec #fwdcloudsec

[IAM Pulse @checkiampulse]

Ah yes, the mixed sodas

[IAM Pulse @checkiampulse]

Amazing things being open sourced soon - keep an eye out #fwdcloudsec

[IAM Pulse @checkiampulse]

Great talk at @fwdcloudsec by @nojonesuk & Mohit Gupta on why IAM is hard but it has to be #fwdcloudsec

[IAM Pulse @checkiampulse]

"The entire value of this is condensing down the iam problem to the simple: can this identity do this action on this resource" - we loved this quote by @nojonesuk & Mohit Gupta in #fwdcloudsec

[IAM Pulse @checkiampulse]

As Kaushik states, "We need to find a way to blend formal methods from networks and identity to get the full picture....Verifying is really easy, but specifying what's correct is really hard"

@fwdcloudsec
#fwdcloudsec

[IAM Pulse @checkiampulse]

Lots to learn from Kaushik Devireddy's session on Demystifying AWS Zelkova. Sadly there's no silver bullet for provable security, but Kaushik's showing us how to sort through the missing context.