Secure cloud migration environments built with Control Tower &
summary
Financial services customer migrates from ~10 initial AWS accounts to a multi-account Control Tower landing zone while onboarding ~150 applications and supporting ~50 developers and 140 engineers; CyberArk tools integrate with AWS Control Tower and AWS SSO, using Cloud Entitlements Manager to scan CloudTrail 90 days, compute a 0–100 risk score (example exposure 39%), and emit JSON least‑privilege policies deployable via API/Terraform, while Priv Cloud vaults and rotates standing credentials and brokers recorded privileged sessions — the integration is deployed and reduces entitlement sprawl.
AI-written summary · about
chapters (8)
- 0:00Start
- 3:33Landing zone provisioned by AWS Control Tower
- 5:41Extend AWS Control Tower to align to multi-account framework
- 10:57Case Study
- 12:24Start with the basics
- 12:57Cloud migration pain points
- 16:04Cloud Entitlements Manager workflow
- 18:31Comprehensive and secure infrastructure access
related talks
57mScaling compliance with AWS Control Tower
47mManage AWS Cloud Environments Easily and Securely
01h 03mContinuous Security in the Cloud
21mSecuring hundreds of AWS accounts for streamlined governance
44mAchieve your identity, security, and compliance goals on
32mCreate a cloud-ready environment
47mMigrando hacia AWS: Cómo garantizar el cumplimiento y la seguridad
17mAdvance securely: Safely migrating to