Speeding Up AWS IAM Least Privileges with Cloudsplaining, Elastic Stack, & AWS Access Analyzer

There are two main problems at Cloud Security World: IAM Permissions & Control Plane Misconfigurations.

In the current Cloud Security World, access keys are the new perimeter, and permissions associated with those keys are the limits for this perimeter. So most of the time, initial vectors to get into some company cloud environments are leaked keys. There are a couple of ways to have access to a key as:

Portal / API (creation time)

Application

Metadata (http://169.254.169.254)

Code Leak

Endpoint …

access aws elastic elastic stack iam privileges