Rethinking Least Privilege: How to Slash Your Cloud Risk Overnight (SANs Spring Cyberfest 2024)
In practice, achieving true least privilege at scale is not just daunting; it’s practically impossible. There are over 40,000 possible permissions across the major clouds; trying to build policies around them all is not sustainable.
It’s time to redefine least privilege, by focusing on protecting only the most sensitive and impactful permissions. By concentrating on what truly matters—the permissions that, if misused, could cause the most significant damage— makes the principle of least privilege achievable for teams to implement.
This approach avoids overly restrictive least privilege policies that strip developers of low-impact access they need to keep your applications moving.
Join us as we dive into:
- Which permissions pose the greatest risk to your own cloud
- Practical strategies for focusing on the permissions that truly matter
- Easing friction between Development and Cloud Operations
