Skip to content

I Know Who Has Access to My Cloud, Do You? Continuous IAM Governance

Igal Flegmann

Igal Flegmann explores Cloud Infrastructure Entitlement Management (CIEM), demonstrating how to continuously monitor effective permissions across multi-cloud.

Summary

The Inevitability of Cloud Breaches

While robust security practices (passwordless identity, conditional access) stop the majority of attacks, complex multi-cloud environments inevitably suffer identity compromise.

The Permissions Explosion Across Cloud Providers

Igal Flegmann analyzes the challenge of calculating 'effective permissions' across interconnected roles, groups, assume-role policies, and service principals.

Continuous Monitoring and Anomaly Detection

Flegmann demonstrates how Cloud Infrastructure Entitlement Management (CIEM) platforms analyze real-time API call telemetry against assigned permissions to detect privilege misuse.

Achieving True Least-Privilege IAM

The presentation provides cloud teams with automated workflows to continuously right-size unused IAM permissions and eliminate dangerous privilege escalation paths.

Related talks