From humans to machines: Mitigate risk for all identities in the cloud
summary
Tenable Cloud Security connects to cloud accounts and IaC repos, scans workloads and IAM, cross-references code to the exact line that provisioned a resource, and creates least-privilege policies from observed usage. It can generate a GitHub pull request to propose policy changes, enforce hourly JIT just-in-time access via Slack with approver workflows, revoke sessions on demand, and produce per-session activity logs so teams can audit who did what.
AI-written summary · about
chapters (14)
- 0:00Introduction to cloud identity risks
- 1:03Challenges in cloud security
- 2:51Log4Shell attack example
- 4:21CNAPP and unified security approach
- 5:27Implementation principles for solutions
- 6:29Demo of Tenable Cloud Security
- 9:42Least privileged policy automation
- 11:34Workload permission right-sizing
- 12:37Human identity access challenges
- 13:22Zero standing trust for humans
- 15:04Eligibility and access requests demo
- 16:54Revocable access and Slack integration
- 18:18Session auditing and activity logs
- 19:00Summary and conclusion
related talks
14mThe power of preventative cloud security with Tenable and
12mCloud security: A critical part of your exposure management program
18mManaging your cloud security universe as one
14mIT Security Conference 2025 | José Pérez Diz | Tenable, com o apoio Redshift
47m3 steps to help mitigate cloud risks
31mA Comprehensive Approach to Cloud Security Posture Management
11mReducing exposure in the cloud
22mHow to Secure Cloud Machine Identities