Admin Least Privilege on Shared Cloud Accounts

•Download as PPTX, PDF•

0 likes•193 views

How to approach protecting cloud infrastructure in shared environments across teams and departments with a growing number of admins.

Software

Self Service Cloud
Permissioning Approaches on AWS

Admin
Power
Indirect
Scope of Classifications
Limited

Amazon SNS Amazon SQS Amazon SESIAM Elastic Beanstalk
AWS
CloudFormation
AWS CloudTrailAWS
Config
Amazon
RDS
DynamoDB bucket with
objects
App group 1
Amazon
Lambda
App group 2
App group 3 App group 4
Admin

IAM AWS CloudTrailAWS
Config
Power
Amazon SNS Amazon SQS Amazon SES Amazon
RDS
DynamoDB
Amazon
Lambda
Elastic Beanstalk
AWS
CloudFormation
bucket with
objects
App group 1 App group 2
App group 3 App group 4

Amazon SNS Amazon SQS Amazon SESIAM
AWS
CloudFormation
AWS CloudTrailAWS
Config
Amazon
RDS
DynamoDB
Amazon
Lambda
App group 2
App group 3 App group 4
Limited
App group 1
Elastic Beanstalkbucket with
objects

Amazon
RDS
Amazon SNS Amazon SQS Amazon SESIAM Elastic Beanstalk
AWS CloudTrailAWS
ConfigDynamoDB bucket with
objects
App group 1
Amazon
Lambda
App group 2
App group 3 App group 4
Indirect
AWS
CloudFormation

Conditions
• cloudformation:TemplateURL
• cloudformation:ResourceTypes
• cloudformation:StackPolicyURL

Admin Least Privilege on Shared Cloud Accounts

What's hot

What is AWS lambda?Whizlabs

AWS LambdaAmazon Web Services

Amazon LightsailAmazon Web Services

AWS Cloud FormationAmit Thakkar

Ford's AWS Service Update - April 2020 (Richmond AWS User Group)Ford Prior

AWS Lambda 與 Amazon API Gateway 新功能介紹Amazon Web Services

ACUG 12 Clouds - Cloud Formationjoehack3r

Artem Zhurbila 5 aws - cloud formation and beanstalkArtem Zhurbila

Gaining Operational Insights out of Your LogsAmazon Web Services

Reinvent recapJason Poley

Using Amazon Cloudwatch Events, AWS Lambda and Spark Streaming to Process EC2...Amazon Web Services

Amazon aws 20110611Toshiyuki Terashita

Gaming in the cloudAmazon Web Services

Building a serverless media platform on AWSAmazon Web Services

AWS chez AttestisOlivier Destrebecq

Container Stories from the TrenchesAmazon Web Services

雲端媒體串流Amazon Web Services

Hands-on with AWS IoTAmazon Web Services

CI&CD on AWS - Meetup Roma Oct 2016Paolo latella

AWS September Webinar Series - Running Microservices with Amazon EC2 Contain...Amazon Web Services

What's hot (20)

What is AWS lambda?

AWS Lambda

Amazon Lightsail

AWS Cloud Formation

Ford's AWS Service Update - April 2020 (Richmond AWS User Group)

AWS Lambda 與 Amazon API Gateway 新功能介紹

ACUG 12 Clouds - Cloud Formation

Artem Zhurbila 5 aws - cloud formation and beanstalk

Gaining Operational Insights out of Your Logs

Reinvent recap

Using Amazon Cloudwatch Events, AWS Lambda and Spark Streaming to Process EC2...

Amazon aws 20110611

Gaming in the cloud

Building a serverless media platform on AWS

AWS chez Attestis

Container Stories from the Trenches

雲端媒體串流

Hands-on with AWS IoT

CI&CD on AWS - Meetup Roma Oct 2016

AWS September Webinar Series - Running Microservices with Amazon EC2 Contain...

Viewers also liked

Moebel portMeringeo

Taif - Resume Taif Jorani

Estilo cssOso Rocha

Anzalone2015_Standard_2x3.5_frontChuck Anzalone

GR Internet AddictionApostolos Syropoulos

How Rodan + Fields Is Poised For Growth At Home And AbroadLydia Harp

Saranya resumesaranya hariharan

Control load via web page Dimitrios Nikolaidis

Actualizado 2015ilusion Milles

The Power of CollaborationHealth Informatics New Zealand

Bank of America ExpAnkit Chohan

Uk luxury property market ebrima jahUK Properties Broker by Ebrimah Jah

Visualizing Healthcare: You have the data, but can you see the story?Health Informatics New Zealand

Safe IT Practices: making it easy to do the right thingHealth Informatics New Zealand

Viewers also liked (14)

Moebel port

Taif - Resume

Estilo css

Anzalone2015_Standard_2x3.5_front

GR Internet Addiction

How Rodan + Fields Is Poised For Growth At Home And Abroad

Saranya resume

Control load via web page

Actualizado 2015

The Power of Collaboration

Bank of America Exp

Uk luxury property market ebrima jah

Visualizing Healthcare: You have the data, but can you see the story?

Safe IT Practices: making it easy to do the right thing

Similar to Admin Least Privilege on Shared Cloud Accounts

Aws & gcpNirmal Tomar

(BDT308) Using Amazon Elastic MapReduce as Your Scalable Data Warehouse | AWS...Amazon Web Services

AWS re:Invent 2016: Using AWS Lambda to Build Control Systems for Your AWS In...Amazon Web Services

Escalando para sus primeros 10 millones de usuariosAmazon Web Services LATAM

A Practitioners Guide to Securing Your CloudAmazon Web Services

Overview of Amazon Web ServicesAmazon Web Services

Gestire la sicurezza nel Cloud: come iniziare ad implementare un processo Dev...Amazon Web Services

Building Automated Control Systems for Your AWS InfrastructureAmazon Web Services

Managing your identities in the cloud with AWS and Microsoft Active Directory...Amazon Web Services

Big data and serverless - AWS UG The NetherlandsMarek Kuczynski

AWS Cloud Kata 2014 | Jakarta - 2-1 AWS Intro and Scale 2014Amazon Web Services

Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...AWSCOMSUM

Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...AWSCOMSUM

Aplicaciones a gran escala: Cómo servir a millones de usuariosAmazon Web Services

Network Security and Access Control in AWSAmazon Web Services

Getting Started on AWSAmazon Web Services

Technical TrackAmazon Web Services

Getting Started with AWSAmazon Web Services

AWS Elastic Beanstalk under the Hood (DMG301) | AWS re:Invent 2013Amazon Web Services

Similar to Admin Least Privilege on Shared Cloud Accounts (20)

Aws & gcp

(BDT308) Using Amazon Elastic MapReduce as Your Scalable Data Warehouse | AWS...

AWS re:Invent 2016: Using AWS Lambda to Build Control Systems for Your AWS In...

Escalando para sus primeros 10 millones de usuarios

A Practitioners Guide to Securing Your Cloud

Overview of Amazon Web Services

Gestire la sicurezza nel Cloud: come iniziare ad implementare un processo Dev...

Building Automated Control Systems for Your AWS Infrastructure

Managing your identities in the cloud with AWS and Microsoft Active Directory...

Big data and serverless - AWS UG The Netherlands

AWS Cloud Kata 2014 | Jakarta - 2-1 AWS Intro and Scale 2014

Onur Salk & Onur Gurdamar - Everything as Code: Creating an application stack...

Nils Mohr & Jake Pearce - 100 years of flight data at British Airways. Past, ...

Aplicaciones a gran escala: Cómo servir a millones de usuarios

Network Security and Access Control in AWS

Getting Started on AWS

Technical Track

Getting Started with AWS

AWS Elastic Beanstalk under the Hood (DMG301) | AWS re:Invent 2013

Recently uploaded

Automate your Kamailio Test Calls - Kamailio World 2024Andreas Granig

Adobe Marketo Engage Deep Dives: Using Webhooks to Transfer DataBradBedford3

(Genuine) Escort Service Lucknow | Starting ₹,5K To @25k with A/C 🧑🏽‍❤️‍🧑🏻 89...gurkirankumar98700

BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASEOrtus Solutions, Corp

Short Story: Unveiling the Reasoning Abilities of Large Language Models by Ke...kellynguyen01

What is Binary Language? Computer Number SystemsJheuzeDellosa

Unit 1.1 Excite Part 1, class 9, cbse...aditisharan08

What are the features of Vehicle Tracking System?Watsoo Telematics

XpertSolvers: Your Partner in Building Innovative Software SolutionsMehedi Hasan Shohan

why an Opensea Clone Script might be your perfect match.pdfjoe51371421

Call Girls in Naraina Delhi 💯Call Us 🔝8264348440🔝soniya singh

The Evolution of Karaoke From Analog to App.pdfPower Karaoke

Intelligent Home Wi-Fi Solutions | ThinkPalmSujith Sukumaran

Advancing Engineering with AI through the Next Generation of Strategic Projec...OnePlan Solutions

Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...soniya singh

ODSC - Batch to Stream workshop - integration of Apache Spark, Cassandra, Pos...Christina Lin

Asset Management Software - InfographicHr365.us smith

cybersecurity notes for mca students for learningVitsRangannavar

EY_Graph Database Powered SustainabilityNeo4j

Professional Resume Template for Software DevelopersVinodh Ram

Recently uploaded (20)

Automate your Kamailio Test Calls - Kamailio World 2024

Adobe Marketo Engage Deep Dives: Using Webhooks to Transfer Data

(Genuine) Escort Service Lucknow | Starting ₹,5K To @25k with A/C 🧑🏽‍❤️‍🧑🏻 89...

BATTLEFIELD ORM: TIPS, TACTICS AND STRATEGIES FOR CONQUERING YOUR DATABASE

Short Story: Unveiling the Reasoning Abilities of Large Language Models by Ke...

What is Binary Language? Computer Number Systems

Unit 1.1 Excite Part 1, class 9, cbse...

What are the features of Vehicle Tracking System?

XpertSolvers: Your Partner in Building Innovative Software Solutions

why an Opensea Clone Script might be your perfect match.pdf

Call Girls in Naraina Delhi 💯Call Us 🔝8264348440🔝

The Evolution of Karaoke From Analog to App.pdf

Intelligent Home Wi-Fi Solutions | ThinkPalm

Advancing Engineering with AI through the Next Generation of Strategic Projec...

Russian Call Girls in Karol Bagh Aasnvi ➡️ 8264348440 💋📞 Independent Escort S...

ODSC - Batch to Stream workshop - integration of Apache Spark, Cassandra, Pos...

Asset Management Software - Infographic

cybersecurity notes for mca students for learning

EY_Graph Database Powered Sustainability

Professional Resume Template for Software Developers

Admin Least Privilege on Shared Cloud Accounts

1. Self Service Cloud Permissioning Approaches on AWS

2. Assumptions

4. Admin Power Indirect Scope of Classifications Limited

5. Amazon SNS Amazon SQS Amazon SESIAM Elastic Beanstalk AWS CloudFormation AWS CloudTrailAWS Config Amazon RDS DynamoDB bucket with objects App group 1 Amazon Lambda App group 2 App group 3 App group 4 Admin

6. IAM AWS CloudTrailAWS Config Power Amazon SNS Amazon SQS Amazon SES Amazon RDS DynamoDB Amazon Lambda Elastic Beanstalk AWS CloudFormation bucket with objects App group 1 App group 2 App group 3 App group 4

8. Amazon SNS Amazon SQS Amazon SESIAM AWS CloudFormation AWS CloudTrailAWS Config Amazon RDS DynamoDB Amazon Lambda App group 2 App group 3 App group 4 Limited App group 1 Elastic Beanstalkbucket with objects

9. Amazon RDS Amazon SNS Amazon SQS Amazon SESIAM Elastic Beanstalk AWS CloudTrailAWS ConfigDynamoDB bucket with objects App group 1 Amazon Lambda App group 2 App group 3 App group 4 Indirect AWS CloudFormation

10. Execution Model

11. Conditions • cloudformation:TemplateURL • cloudformation:ResourceTypes • cloudformation:StackPolicyURL

Admin Least Privilege on Shared Cloud Accounts

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (14)

Similar to Admin Least Privilege on Shared Cloud Accounts

Similar to Admin Least Privilege on Shared Cloud Accounts (20)

Recently uploaded

Recently uploaded (20)

Admin Least Privilege on Shared Cloud Accounts