The document discusses configuration security as a game of pursuit-evasion and intercept. It was presented by Wes Widner, Principal Engineer at Automox. The document includes a JSON policy snippet with an ID, statement, actions, effects, resources, and principal allowing the GetObject action on all objects in an S3 bucket for all principals. It has page numbers at the bottom indicating it is from a larger presentation.

1. Configuration
security as a game
of pursuit-evasion
and intercept
Wes Widner
Principal Engineer
Automox

4. {
"Id": "Policy123",
"Statement": [
{
"Sid": "Stmt123",
"Action": [ "s3:GetObject" ],
"Effect": "Allow",
"Resource":
"arn:aws:s3:::bucketname/*",
"Principal": {
"AWS": [ "*" ]
}
}
}

6. 6

17. 17

18. 18

28. Thank you for coming!
Contact card Notes / references