Patterns in S3 Data Access: Protecting and enhancing access to data banks, lakes,... - Josh Snyder

Abstract: Large scale heterogeneous data sets cannot always be locked down using readily available tools, like AWS IAM. With some understanding of how access is provisioned and requests are signed, however, we can build a dynamic control plane that provides access to data in a flexible and highly auditable manner that is compatible with least privilege. This talk will cover techniques for providing just-in-time access to data in any cloud datastore, with primary focus on Amazon’s S3 and Google’s GCS …

access aws banks build control data data access data sets down dynamic iam josh large locked patterns protecting requests scale tools understanding