Ilya Epshteyn

Learn how AWS approaches identity as the foundation of cloud security, both for protecting AWS and enabling customer security. This session explores how AWS strengthens identity across the stack through secure-by-default design, core security mechanisms, API testing and formal verification.

In this chalk talk, review key considerations for operationalizing data perimeter controls within a multi-account environment. The AWS Identity Solutions team shares lessons learned based on their experiences in operating these controls within a large customer-like environment.

In this workshop, learn how to use AWS services to automatically detect unused and business-critical IAM permissions and ways you can update them safely to move toward a least-privilege environment.

In this workshop, learn how to create a data perimeter by building controls that allow access to data only from expected network locations and by trusted identities. The workshop consists of five modules, each designed to illustrate a different AWS Identity and Access Management (IAM) or network control.

Organizations are storing an unprecedented and increasing amount of data on AWS for a range of use cases, including data lakes, analytics, machine learning, and enterprise applications. They want to make sure that sensitive non-public data is only accessible to authorized users from known locations.

A permissions boundary is an AWS IAM feature that makes it easier to delegate permissions management to trusted employees. These employees can now configure IAM permissions to help scale permissions management and move workloads to AWS faster.

This workshop dives deep into the security best practices for running Amazon SageMaker in a regulated environment, including identity and access management, network configuration, infrastructure protection, data protection, and logging and audit. In this workshop, use AWS Service Catalog to deploy an Amazon SageMaker notebook in a private subnet with no internet connectivity, encrypt all data...