I Collected all the Crown Jewels in the AWS Cloud

How Twilio Improved Control of AWS Root Credentials at Scale

I recently wrote an article (link above) about a project I worked on and also spoke about it at the BSides San Diego 2022.

Here is a summary — some of the slides — that I spoke about which are worth mentioning…

Managing Thousands of root credentials for AWS Accounts

Do Credentials Management and Ownership right from the Start

Who else knows that this information is required to reset the MFA?

AWS Organization Service Control Policy Saves the Day

Security Wins — Decreased Time To Respond and Attack Surface

Everyone Loves Takeaways

Thank you all who attended and gave me feedback!