Locking Them out of Their Own House: Access Control to Cloud at Startups

No ratings

Presented at CloudSecuritySummit&Training 2019 by

As a security engineer, when you join a startup or smaller company, it’s likely there isn’t going to be gold-standard access control to services, especially cloud services. When you don’t even know who works on what, or what works on which, how do you navigate determining who gets access? On top of that, how they get access? We’ll run through some of my experiences setting up cloud access control as well as pitfalls and tips I’ve learned along the way.