AWS Identity Workshop
summary
Workshop demos how AWS fixes identity at cloud scale by replacing per-account IAM users with a single federated hub. It compares three models, shows Identity Center provisioning permission sets into multiple accounts, and explains that Amazon Cognito provides customizable sign-up, passwordless and adaptive auth. Live tooling notes: STS assume-role, CLI v2 device-auth flow, and the Cognito credential broker issue temporary AWS credentials for programmatic access. Recommendation: centralize with Identity Center, enforce MFA and iterate toward least privilege.
AI-written summary · about
chapters (10)
- 0:00Introduction and welcome
- 2:11Importance of identity in AWS
- 9:15Traditional vs cloud identity models
- 12:04AWS IAM fundamentals
- 18:07AWS IAM Identity Center overview
- 25:57Workforce identity deep dive
- 37:14Access models for AWS Workforce
- 41:09IAM users vs federation vs Identity Center
- 51:44Identity Center features and benefits
- 59:56Q&A
related talks
13mManaging customer identities with Amazon Cognito
23mGetting started with identity on AWS
25mGetting started with AWS Identity Services
28mYour journey to temporary credentials in the cloud
28mIdentity Services on AWS
43mDemystifying the Identity Capabilities of AWS for Enterprise Practitioners
57mA first-principles approach: AWS Identity and Access Management (IAM)
34mScaling access with AWS IAM Identity Center, feat.