EP199 Your Cloud IAM Top Pet Peeves (and How to Fix Them)

Guests:

• Michele Chubirka, Staff Cloud Security Advocate, Google Cloud
• Sita Lakshmi Sangameswaran, Senior Developer Relations Engineer, Google Cloud

Topics:

• What is your reaction to "in the cloud you are one IAM mistake away from a breach"? Do you like it or do you hate it? Or do you "it depends" it? :-)
• Everyone's talking about how "identity is the new perimeter" in the cloud. Can you break that down in simple terms?
• A lot of people say "in the cloud, you must do IAM 'right'". What do you think that means? What is the first or the main idea that comes to your mind when you hear it?
• What's this stuff about least-privilege and separation-of-duties being less relevant? Why do they matter in the cloud that changes rapidly?
• What are your IAM Top Pet Peeves?

Resources:

• Video (LinkedIn, YouTube)
• EP127 Is IAM Really Fun and How to Stay Ahead of the Curve in Cloud IAM?
• EP162 IAM in the Cloud: What it Means to Do It 'Right' with Kat Traxler
• IAM: There and back again using resource hierarchies
• IAM so lost: A guide to identity in Google Cloud
• I Hate IAM: but I need it desperately
• EP33 Cloud Migrations: Security Perspectives from The Field
• EP176 Google on Google Cloud: How Google Secures Its Own Cloud Use
• EP177 Cloud Incident Confessions: Top 5 Mistakes Leading to Breaches from Mandiant
• EP188 Beyond the Buzzwords: Identity's True Role in Cloud and SaaS Security
• "Identity Crisis: The Biggest Prize in Security" paper
• "Learn to love IAM: The most important step in securing your cloud infrastructure" Next presentation