Thread by @marknca

next up is IAM with Karen Haberkorn

@awscloud #reinforce

…and the challenge of virtual events rears it ugly head. other more pressing matters popped up and I’ve missed what seems like a great talk and discussion on IAM 😔

@awscloud #reinforce

…but the upside of the virtual event is that I should be able to watch this on replay soon enough!

@awscloud #reinforce

Brigit dropping some very practical IAM tips for using Access Analyzer. reminder, analyzer is up at docs.aws.amazon.com/IAM/latest/Use…

@awscloud #reinforce

sorry, Brigid …with a “d”

btw, here’s another excellent talk from Brigid on IAM using attributes, “Scale Permissions Management in AWS w/ Attribute-Based Access Control”, << this one is from @awscloud #reinforce 2019

more on @awscloud SSO at docs.aws.amazon.com/singlesignon/l…

#reinforce

I like this discussion on IAM and the idea of improving over time. too many teams set their permissions and then forget about them until there’s a major problem

IAM is not a Ronco™️ product

@awscloud #reinforce

key point from Brigid, don’t wait until the end to tune those IAM policies. start early and make it a continuous activity

@awscloud #reinforce

closing points, “What advice would you give customers on IAM?"

@awscloud #reinforce

“continuous education on policy types”

here are the different policy types: docs.aws.amazon.com/IAM/latest/Use…

@awscloud #reinforce

“try to make doing the fine grained thing as easy as possible”, Brigid

@awscloud #reinforce

the policy types suggestion was from Jesse

@awscloud #reinforce

“Look for opportunities to automate”, Karen

@awscloud #reinforce

what are Jess, Brigid, and Karen most looking forward to at the next, in-person event?

Brigid, “The moment after a talk and getting a flood of questions from the audience”

Jesse, “The people...those hallway conversations”

@awscloud #reinforce

great work @AWSIdentity!

Ryan and Bill up in a bit with “Threat Detection & Incident Response"

covering that one on this thread 👇

@awscloud #reinforce

https://twitter.com/marknca/status/1430252087162593283

…and remember, one of the best ways to get started with @AWSIdentity is to read the docs…seriously!

check ‘em out at docs.aws.amazon.com/IAM/latest/Use…

@awscloud #reinforce