Presented at
Disobey 2023,
Feb. 17, 2023, 8:45 p.m.
(30 minutes).
When setting a permission policy on a resource in Amazon Web Services, it may be necessary to allow a service to perform actions on your behalf. We look into the dangers of allowing this with no additional restrictions in place, we demonstrate two styles of attack, and finally discuss defensive measures to avoid these pitfalls.
Presenters:
-
Matthew Keogh
Matt is a Security Consultant at WithSecure with a keen focus on all things cloud. He has several years' experience building and securing enterprise applications at scale. Prior to joining the security industry Matt worked in systems operation assisting organisations to move large applications from on premise into the cloud.
Outside of work Matt likes to travel and go on long walks with his dog Max.LinkedIn: matthew-keogh-723116113
-
Tom Taylor-MacLean
After studying maths at university, Tom worked for several years in an unrelated industry before reverting to his initial interests in computing and security. He is currently completing a part-time Masters course in Computer Science with Cyber Security where he is now focusing on AWS Cloud Security, an area WithSecure introduced him to.
When not protecting client systems, Tom can be found running, studying or bothering his cat.Twitter: @TIJMacLean
Links:
Similar Presentations: