AWS re:Invent 2021 - A least privilege journey: AWS IAM policies and Access Analyzer

Are you looking for tips and tools for applying least privilege permissions for your users and workloads? Love demonstrations and useful examples? In this session, explore advanced skills to use on your journey to apply least privilege permissions in AWS Identity and Access Management (IAM) by granting the right access to the right identities under the right conditions. For each stage of the permissions lifecycle, learn how to look at IAM policy specifics and use IAM Access Analyzer to set, verify, and refine fine-grained permissions. Get a review of the foundations of permissions in AWS and dive into conditions, tags, and cross-account access.
Learn more about re:Invent 2021 at bit.ly/3IvOLtK
Subscribe:
More AWS videos bit.ly/2O3zS75
More AWS events videos bit.ly/316g9t4
ABOUT AWS
Amazon Web Services (AWS) hosts events, both online and in-person, bringing the cloud computing community together to connect, collaborate, and learn from AWS experts.
AWS is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers-including the fastest-growing startups, largest enterprises, and leading government agencies-are using AWS to lower costs, become more agile, and innovate faster.
#AWS #AmazonWebServices #CloudComputing

[@ishmaelkrakers]

Excellent presentation, well structured (it's easy to organize information into hierarchy based on agenda), putting a life cycle in the center which is a perfect way to cover the topic from the conception until decommission, make sure no related topics "fall through the cracks", practical examples and use cases, highlighting tools... It's a great tutorial on a very complex topic. I really liked it

[@pravesho]

I like way you presented it. So much energy in presenting. It make whole lot of difference. Thank you!

[@aireddy]

This session is very informative, Thank you Brijid Johnson!

[@farshkl234]

Such an amazing content! Wow 🎉 Your pro tips are amazing

[@sachinnate5294]

Good one Brigid .. you should be doing all the presentations in AWS .. you just breeze through. For some reason, most AWS video seems to be done by bots.

[@javiermendoza5173]

The good old Bandicam to record haha. Nice talk, did not know that Access Analyzer existed. Feedback, make it easier to run access analyzer based on cloudformation stacks. I would love to use it, but is a hassle do it one by one, guess I can do it using an script invoking to the CLI but is another layer that will make devs to desist in use it. Thanks and have a nice day.

[@kellymoses8566]

Access Analyzer is the kind of thing only AWS can create

[@paradisetravel347]

39:33 cross-account access deep dive. i am adopting pickles the horse.

[@jianwei2009]

If using AWS sso, how to prevent privilege escalation for admin users?

[@kellymoses8566]

Permission boundary

[@jianwei2009]

@@kellymoses8566 As of now, permission boundary is not available in AWS SSO

[@kellymoses8566]

@@jianwei2009 Lame

[@ser1ification]

Service Control Policies in AWS Organizations.

[@jaygoodwin5502]

@@jianwei2009 Not true. in every case I can think of they would work.