Making cloud security more human
summary
Block replaces thousands of static IAM and GCP service-account keys by deploying one-click Terraform modules, issuing short-lived credentials with IAM Roles Anywhere, and running a guarded key deletion service, cutting keys dramatically in under a year while scaling to over 5,000 AWS accounts. Data-driven triage finds that fewer than five teams account for ~80% of keys, enabling targeted migrations and automation (PRs, dashboards, migration guides) that remove manual friction and make secure paths the default.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 0:25The challenge of static keys
- 2:26Alternatives to static keys
- 3:11Modern authentication methods
- 3:51Automation and tooling
- 4:47Project results
- 5:05Core security principles
- 7:39Guidelines for execution
- 12:22Conclusion
related talks
22mHow to Secure Cloud Machine Identities
28mYour journey to temporary credentials in the cloud
39mAutomated Cloud Security
17mAdvance securely: Safely migrating to
44mGuardrails in the Cloud
34mZero trust CI/CD pipeline
21mSolving AWS IAM Challenges at Scale With Terraform
28mSecure cloud migration environments built with Control Tower &