Changing Perspectives: A Deep Dive into the Security Posture of 600+ Real-World AWS Environments
summary
Datadog study of 600+ AWS environments finds concrete, actionable gaps: about 40% of IAM users are unused, 75% of IAM users hold access keys older than three months (one key is 13 years old), and roughly 90% of EC2 instances do not enforce IMDSv2, leaving them vulnerable to SSRF-based credential theft. Recommendations: replace long‑lived keys with Identity Center SSO, apply least‑privilege roles for workloads, enable IMDSv2 on AMIs, and run continuous CSPM scans.
AI-written summary · about
chapters (8)
- 0:00Introduction and report overview
- 1:51Cloud security fundamentals
- 8:09Securing workloads vs users
- 14:30Key findings from AWS security report
- 18:00Public S3 bucket risks
- 20:44Server-side request forgery risks
- 24:15Actionable security recommendations
- 27:26Q&A session
related talks
19mSecuring your AWS environment with automated DSPM
44mCloud Metadata Abuse
19mHow organizations are actually applying AWS security best practices
28mYour journey to temporary credentials in the cloud
01h 02mWhy IAM is the new perimeter, and how to govern it
37mLocking Down the Security of IAM
40mWeak Links in Cloud IAM - Never Trust. Always Verify!
50mTraffic safety: Auditing and enforcing IAM best practices