Access Undenied on AWS

Presented at DEF CON 30 (2022), Aug. 12, 2022, 10 a.m. (115 minutes).

Access Undenied on AWS analyzes AWS CloudTrail AccessDenied events – it scans the environment to identify and explain the reasons for which access was denied. When the reason is an explicit deny statement, AccessUndenied identifies the exact statement. When the reason is a missing allow statement, AccessUndenied offers a least-privilege policy that facilitates access.

Audience: Cloud Security, Defense.

Presenters:

• Noam Dahan
  Noam Dahan is a Senior Security Researcher at Ermetic with several years of experience in embedded security. He is a graduate of the Talpiot program at the Israel Defense Forces and spent several years in the 8200 Intelligence Corps. While this is his first time presenting at DEF CON, it is not his first time in front of a crowd. Noam was a competitive debater and is a former World Debating Champion.

Similar Presentations:

• Black Hat USA 2016 / Hardening AWS Environments and Automating Incident Response for AWS Compromises
• DeepSec 2019 „Internet of Facts and Fears“ / Mastering AWS Pentesting and Methodology
• CackalackyCon 2 (2023) / AWS Security Reference Architecture: A Well-Structured Foundation