Protecting you from you: Misconfiguration-caused breaches
summary
Gartner predicts 95% of cloud breaches are customer fault and the talk cites ~11,000 CVEs in 2019 with ~3,000 high/critical ones and a breach that exposed ~100 million records. Attack path shows SSRF hitting the EC2 metadata service to steal role tokens and read S3 data. Practical mitigations use CloudTrail and VPC Flow Logs, GuardDuty, Inspector and AWS Config rules, multi‑account + SCPs/Control Tower, Macie and Security Hub, plus shift‑left checks like CFN_nag and npm audit; automation works but must be staged to avoid runaway remediations.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker intro
- 1:28Shared responsibility model
- 5:31Recent cloud breaches overview
- 11:17AWS security services deep dive
- 19:11Multi-account AWS security
- 27:30Third-party security ecosystem
- 35:01Security automation trends
- 42:15Recommendations and conclusion
related talks
26mCloud Security Lessons
31mCloud Threat Landscape - 2021
48mNine Cloud Security Reasons for Resting Breach Face
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
40mWork Smarter Not Harder: Tips to Approach Cloud Security the Easier Way
47mBreaking the Cloud to Rebuild It: A Tale of 3 ☁️ Breaches!
39mPerils of the cloud
36mIAM Confused: Decoding 8 Real World Cloud Identity Breaches