Boosting security for devs & their apps with identity security
summary
Claims that credential theft can be prevented by removing standing cloud privileges and by centrally managing native secrets stores with CyberArk are demonstrated with a live demo: discovery across multiple AWS Secrets Manager stores, synchronization into CyberArk Secrets Hub, and automated rotation while leaving developer workflows intact. The session shows zero standing privilege applied to console, Lambda, RDS and Kubernetes access, quotes a 45:1 machine-to-human identity ratio, and cites surveys: 77% worry about overprivileged developers and 93% expect negative AI impact.
AI-written summary · about
chapters (5)
- 0:00Introduction to identity security
- 3:49Developer security challenges
- 10:53Zero standing privilege demo
- 13:01Machine identity secrets management
- 16:00Q&A and closing
related talks
05mLightning Talk from Geri Jennings
24mDeveloper-First Application Security and DevSecOps
39mSecurity in a DevOps World
46mThe Nightmare for Attackers: An Infrastructure without Secrets
55mHandling secrets in cloud-based applications
54mFrom App Security to Dev Security – Shift left with GitHub Advanced Security
52mManaging Spring Boot Application Secrets
19mEnhancing Security in Azure Cosmos DB: Best Practices