NOPASSWD: Building a Passwordless Cloud Infrastructure
summary
Demonstrates a full passwordless cloud stack that replaces AWS IAM keys, VPN passwords, DB credentials and CICD secrets using FIDO2/WebAuthn for login, Azure AD as single source of truth, AWS Identity Center or SAML/OIDC federation, RDS IAM auth for short‑lived DB tokens, and GitHub OIDC to mint ephemeral STS creds for workflows. Notes a low enterprise 2FA adoption (about 22% in Azure AD), provides a Terraform module, and reports the system works while warning about sync edge cases.
AI-written summary · about
chapters (15)
- 0:00Intro
- 2:11What Is a Password?
- 5:08Password Managers
- 6:21Locally stored, never rotated
- 7:28Simple Passwords + Brute Force
- 12:14Authentication Factors
- 13:53Passwordless Auth Technologies
- 16:53FIDO Adoption
- 18:38Adoption for End-Users
- 22:11Code Repositories, CI/CD Configuration
- 26:22Core Principles
- 26:45Identity Manager
- 36:49Passwordless Architecture
- 37:52Selecting Vendors
- 40:30When there's no other option...
related talks
40mNOPASSWD: Building a Passwordless Cloud Infrastructure
40mNOPASSWD: Building a Passwordless Cloud Infrastructure
43mPasswordless: a story of risk, protection and excellent UX
38mJourney to passwordless
34mPasswordless: a story of risk, protection & excellent UX
47mPasswordless Web
34mThrow Away Your Passwords: Trusting Workload Identity
41mUsing FIDO authentication to defend against account takeover