Managing Trust Between Multiple Clouds and Non-human Identities Without Passwords
summary
Claims that matter: nonhuman identities outnumber humans 10:1 service-to-human ratio with only 1% of permissions used and >50% flagged high risk. Concrete mitigations include HashiCorp Vault and cloud secret managers, CSPM scanners, routing runtime requests through gateways that inject short‑lived credentials, and clients issuing ephemeral certs or tokens. Examples of built patterns: API clients that self‑provision tokens, secret injection at runtime, container image signatures and just‑in‑time access; workforce shortage and legacy systems drive operational constraints.
AI-written summary · about
chapters (18)
- 0:00Non-human identities in cloud security
- 1:23Applications as security weak point
- 3:09Hybrid/multi-cloud identity challenges
- 6:44Security vs developer productivity
- 8:30Service account risks statistics
- 10:17Shadow IT and third-party access
- 12:04Centralized vs distributed trust
- 14:37Passwordless for machine identities
- 17:49Zero-trust secrets across clouds
- 20:40Data sharing risks and costs
- 23:51Passwordless and AI trends
- 26:49Unifying multi-cloud access policies
- 29:39Developer-friendly security tooling
- 32:51Q&A: Permission misconfigurations
- 34:18Q&A: Automated security testing
- 35:41Q&A: Human error risks
- 36:44Q&A: Open source security role
- 38:09Key takeaway: Audit service accounts
related talks
34mThrow Away Your Passwords: Trusting Workload Identity
25mSecurity, Identity - Back to the Drawing Board?
40mThe Zero Trust Challenge for Hybrid Cloud: Truths vs Myths
42mZero Trust security with HashiCorp Vault and AWS (PRT239)
34mThrow Away Your Passwords: Trusting Workload Identity
11mThe Hardest Part of Building Your Own Cloud: Identity
23mKeynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
28mSecuring Multi-Cloud and Hybrid Environments