Overall, the slide provides an overview of the background, objectives, and the importance of Cloud IAM in securing cloud environments.

1. Cloud Security:
Securing The Invisible Thing
Mohammad Febri R, OSCP, CEH – Sr. Security Engineer
mohammad.ramadlan@tiket.com

2. Agenda
1. Introduction
2. Background
3. Objective
4. Cloud IAM
5. Result

3. Introduction
1.

4. About Me
• Mohammad Febri Ramadlan (Ebi)
• Information Security Consultant
• Open-source Enthusiasts (OWASP Project Leader and Mozilla Keyholder)
• Par-Time Blogger, Swimmer, and Musician
Contact:
• +6281809809636

5. Background
2.

6. Background
• PCI DSS: 18. Data Control & Access Control Policies
• ISO 27001: Annex A.9: Access Control

7. Objective
3.

8. Objective
• Fulfill the KPI
• Improve the current process
• User access monitoring
• Access control review

9. Cloud IAM
4.

10. Cloud

11. Cloud IAM
“ _who (identity) has _what access (role) for _which resource.”

12. IAM Entity
• User and Group
• Service Account
• Role
• Policy
• Version
• Environment

13. Tools Option
• Forseti
• Security monkey
• Dollhouse
• ScoutSuite
• CloudSploit

14. Sample:
ScoutSuite

15. Sample (2):
ScoutSuite
Services

16. Sample (3):
ScoutSuite
Cloudsql

17. Result
5.

18. JSON File

19. JSON View

21. Slack Notification: Services
[+] Service : cloudsql
[+] Data : findings
*** Dashboard : Instances
*** Description : Instance with automatic backups disabled
*** Rationale : <b>Description:</b><br><br>Automatic backups should be
configured for Cloud SQL instances in order to ensure backups are created
regularly.
*** Dashboard : Instances
*** Description : Instance allows root login from any host
*** Rationale : <b>Description:</b><br><br>Root access to MySQL Database
Instances should be allowed only through trusted
IPs.<br><br><b>References:</b><ul><li>CIS Google Cloud Platform Foundations
v1.0.0 6.4</li></ul>

22. Slack Notification: User and IAM Role
[+] User Count : 5
-----[+] Email : abu.halid@company.com
-----[+] Roles : [u'owner']
-----[+] Email : indah.sherly@company.com
-----[+] Roles : [u'owner']
-----[+] Email : test@company.com
-----[+] Roles : [u'owner', u'viewer']
-----[+] Email : jim.brian@company.com
-----[+] Roles : [u'owner']
-----[+] Email : mohammad.febri@company.com
-----[+] Roles : [u'iam.securityReviewer', u'viewer']

23. Question
?

24. Summarize
1. Fulfill the regulation (PCI DSS & ISO 27001)
2. Cloud Audit is developed to ensure the proper user access
3. User access matrix review in daily activity

25. Thank you!