134. Eliminate the IAM User

In this episode, we discuss why IAM users and long-lived credentials are dangerous and should be avoided. We share war stories of compromised credentials and overprivileged access. We then explore solutions like centralizing IAM users, using tools like AWS Vault for temporary credentials, integrating with AWS SSO, and fully eliminating IAM users when possible. 💰 SPONSORS 💰 AWS Bites is brought to you by fourTheorem. If you are looking for a partner to architect, develop and modernise on AWS, give fourTheorem a call. Check out ⁠⁠ ⁠⁠. In this episode, we mentioned the following resources: Episode 118 "The landing zone: Managing multiple AWS accounts": Episode 96: "AWS Governance and Landing Zone with Control Tower, Org Formation, and Terraform" Datadog Security Report (IAM stats): Credentials provider chain in the JavaScript SDK: Credentials provider chain in the AWS CLI: Episode 45 "What’s the magic of OIDC identity providers?": Episode 112 "What is a Service Control Policy (SCP)?": Episode 115 "What can you do with Permissions Boundaries?": Do you have any AWS questions you would like us to address? Leave a comment here or connect with us on X, formerly Twitter: - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

You can listen to 134. Eliminate the IAM User online on Radio and Podcast. Open the player on this page to stream the available audio.

134. Eliminate the IAM User is an episode from AWS Bites by AWS Bites.

This episode is 00:28:15 long.

This episode was published on Nov 1, 2024.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from AWS Bites when more episodes are available from the podcast feed.