I Know Who Has Access to My Cloud, Do You? Continuous IAM Governance
Igal Flegmann explores Cloud Infrastructure Entitlement Management (CIEM), demonstrating how to continuously monitor effective permissions across multi-cloud.
Summary
The Inevitability of Cloud Breaches
While robust security practices (passwordless identity, conditional access) stop the majority of attacks, complex multi-cloud environments inevitably suffer identity compromise.
The Permissions Explosion Across Cloud Providers
Igal Flegmann analyzes the challenge of calculating 'effective permissions' across interconnected roles, groups, assume-role policies, and service principals.
Continuous Monitoring and Anomaly Detection
Flegmann demonstrates how Cloud Infrastructure Entitlement Management (CIEM) platforms analyze real-time API call telemetry against assigned permissions to detect privilege misuse.
Achieving True Least-Privilege IAM
The presentation provides cloud teams with automated workflows to continuously right-size unused IAM permissions and eliminate dangerous privilege escalation paths.
Related talks
Cloud Village·41 min
Marios Gyftos · Nikos Vourdas
Implementing and enforcing least-privilege IAM policies across cloud environments.
Cloud Village·27 min
Leo Tsaousis
Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.
Cloud Village·19 min
Golan Myers
KIEMPossible: exploiting KIEM (Key Identity and Execution Manager) weaknesses in Azure environments.


