Identity and permissions concerns to watch out for
summary
Cloud accounts often show concrete, fixable risks: Sonrai claims as many as 10% of identities can delete your cloud, and in a sampled customer 25% of identities are unused; removing them eliminates 34% of unused third‑party access and cuts 27% of lateral‑movement paths. Use AWS building blocks (CloudTrail, service last‑access data, Access Analyzer) and focus on permissions like AssumeRole and PassRole that are auditable. Sonrai’s Cloud Identity Diagnostic deploys quickly, produces a 14‑day actionable report and prioritizes remediation.
AI-written summary · about
chapters (5)
- 0:00Introduction to identity risks
- 1:46How permissions escalate in cloud
- 4:19Automating identity validation
- 7:59Simple steps to reduce risks
- 11:08Next steps and resources
related talks
47mBreaking the Cloud to Rebuild It: A Tale of 3 ☁️ Breaches!
56mEmerging threats against cloud application identities and what you should do about it
45mProtecting you from you: Misconfiguration-caused breaches
40mBlind Spots: Two Cloud Threats You Didn’t Even Know You Had
26mCloud Security Lessons
23mAccess is the New Breach: Observability Must Start with Identity
16mUsing AWS SCPs to achieve least privilege while supporting devs
24mChaos to Control: Automating the Identity Life Cycle in the Cloud