Your journey to temporary credentials in the cloud
summary
Shows a concrete workflow and tools: a provided AWS Samples GitHub tool discovers active IAM access keys, enriches them with account tags, outputs a CSV for Amazon Athena/QuickSight and flags high‑risk permissions (example: 600 unrotated keys). Recommends replacing keys with IAM Roles Anywhere or IAM Identity Center or Systems Manager, automating rotation with Lambda + EventBridge and Secrets Manager, and detecting drift with AWS Config and Security Hub. Lists five steps: prioritise, reduce, assess, replace, govern and gives CLI/automation examples and expected benefits.
AI-written summary · about
chapters (9)
- 0:00Introduction and goals
- 1:15IAM access keys overview
- 2:17Understanding risks and scope
- 5:00Prioritizing access keys
- 9:32Reducing unused access keys
- 12:21Assessing alternative solutions
- 17:03Machine access strategies
- 19:08Governing and automating keys
- 26:11Recap and key takeaways
related talks
38mChanging Perspectives: A Deep Dive into the Security Posture of 600+ Real-World AWS Environments
13mMaking cloud security more human
45mManaging hybrid workloads with IAM Roles Anywhere, featuring
23mGetting started with identity on AWS
37mLocking Down the Security of IAM
01h 00mAWS Identity Workshop
39mPerils of the cloud
41mRefine unused access confidently with IAM Access Analyzer