Ochaun Marshall — Securing Web applications in AWS

Ochaun Marshall is a developer and security consultant. In his roles at Secure Ideas, he works on ongoing development projects utilizing Amazon Web Services and breaks other people's web applications. Ochaun joins us to talk about the changing tide of serverless and frustrations with AWS security. Before we got to the actual topic, we talked about how he currently works as a developer some times, and a pen tester/security person the rest of the time, and the conflict that arises from this split role. Please enjoy this conversation with... O'Shawn Marshall is a developer and security consultant. O'Shawn joins us to talk about the changing tide of serverless and frustrations with AWS security.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
O'Shawn Marshall is a developer and security consultant.
→ Learn more about Security Journey

Connect with Ochaun Marshall:
→ Secure Ideas
→ OWASP Proactive Controls

Mentioned in this episode:
→ Secure Ideas
→ OWASP Proactive Controls

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Ochaun Marshall: Ochaun Marshall — Securing Web applications in AWS
03:29 Very cool. You survived that 60-year-old librarian coming after you. She
06:26 Yeah, that's, that's definitely good advice, something that we share as
11:13 Yeah, I'll tag on to something you said here about kind
14:19 Yeah, I guess there's some of that basic stuff. Like, when
18:59 Yeah, or you end up opening it, making it wide open
21:07 Yeah, that's good advice just for in general, for anything. Yeah
25:05 Yeah, that's definitely going to be a challenge as we move
29:35 Authorization. How are we ensuring that the right request, that the
34:26 It's not simple. It's so complicated. Like, I've been playing around