Thread by @marknca

the biggest disappointment I have with @awscloud IAM is that people don't use it like a dynamic system

permissions are still granted on/off, very few teams add a time component in there but they are starting to with roles

...I think there's more there

🧵☁️ #cloud #security

of course, that tweet probably gave @ben11kehoe a heart attack (sorry Ben!)

...on that note, Ben just published ANOTHER fantastic post on @awscloud IAM, he's on a roll lately

🧵☁️ #cloud #security

"Never put AWS temporary credentials in the credentials file (or env vars)—there’s a better way", by @ben11kehoe

the title says it all, but in the post he dives into the why and what might be better ways for you

ben11kehoe.medium.com/never-put-aws-…

🧵☁️ #cloud #security

"AWS IAM Permission Boundaries Has A Caveat That May Surprise You", by @ben11kehoe

the only surprise here was the limitation of "A" caveat. I guarantee there are more hidden edges in there

ben11kehoe.medium.com/aws-iam-permis…

🧵☁️ #cloud #security

"I Trust AWS IAM to Secure My Applications. I Don’t Trust the IAM Docs to Tell Me How.", by @ben11kehoe

amazing title. having just read the docs for an edge case, I took it to ❤️ & "hopefully" provided the correct answer...

ben11kehoe.medium.com/i-trust-aws-ia…

🧵☁️ #cloud #security

"AWS Authentication: Principals in AWS IAM", by @ben11kehoe

an excellent overview of all things "principals". @awscloud should just merge this one into the docs

ben11kehoe.medium.com/principals-in-…

🧵☁️ #cloud #security

all of those 👆 since the start of September

I'd say, "Slow down Ben, you're going to give yourself a heart attack" but I'm 💯 sure my opening tweet did that for you 🤣

seriously though, this type of insight is desperately needed. well done!

🧵☁️ #cloud #security