Andrew Gacek

Journey from theoretical computer science to production AWS services through a deep technical analysis of IAM Access Analyzer's foundations. We'll dissect the seminal paper on stratified predicate abstraction that underlies IAM Access Analyzer, then we'll go deeper into the prior research papers it builds upon.

What if you could analyze every possible execution path of your code without running millions of test cases? Symbolic execution, a powerful technique from the 1970s, has found new life in modern cloud governance at AWS.

AWS Identity and Access Management Access Analyzer is a new capability for security teams and administrators to validate that resource policies only provide the intended public and cross-account access. IAM Access Analyzer uses automated reasoning, which applies logic and mathematical inference to inspect resource policies.