IAM The One Who Knocks

Explore the hidden risks of managing identities and access in multi-cloud environments through this 41-minute Black Hat conference talk. Uncover access flaws and misconfigurations that attackers can exploit to gain unauthorized access to sensitive information. Delve into the inner workings of various cloud providers' Identity and Access Management (IAM) layers, highlighting key differences between services. Learn how inconsistent entitlements across cloud resources can lead to unintended access and how shared responsibility model confusion enables privilege escalation. Gain insights into AWS managed policies, Azure managed policies, GCP basic roles, cloud platform access scope, and logging limitations. Discover practical strategies to limit mistakes, build proper permissions, and enhance security in multi-cloud setups. Witness a demonstration and walk away with actionable knowledge to improve your organization's cloud security posture.