Access management in 4D
summary
Covers how to manage access decisions—who can access what and under which conditions—using AWS services to build real-time, context-aware authorization. Compares role-based access control (RBAC) and attribute-based access control (ABAC), shows patterns for combining environmental variables and contextual information, and includes sample code for implementing these advanced controls on AWS.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 0:29The Fourth Dimension in Physics
- 0:46The Fourth Dimension of the PARC Model
- 1:44Mastering Identity at Every Layer of the Stack
- 3:01Today We Focus on Conditions
- 7:13We Add Call Origin Verification
- 8:03Resource-Based Policy
- 8:43Narrow Network Perimeter
- 9:17VPC Endpoint Policy
- 10:06Enhanced Identity-Based Policy
- 10:32AWS KMS Key Policy
- 12:22Role-Based Access Control (RBAC)
- 13:09Attribute-Based Access Control (ABAC)
- 15:09Try It Yourself: ABAC
- 19:16Additional Use Cases
- 20:03Session Tags
- 20:56Security Invariants with AWS Organizations
- 22:39Region Restriction Policy
- 24:54Access Management Is a Journey
- 25:30AWS Security Training
related talks
31mScale Permissions Management With Attribute-based Access Control
25mGetting started with AWS Identity Services
39mAttribute Based Access Control Framework for IoT
57mA first-principles approach: AWS Identity and Access Management (IAM)
59mProvably secure authorization
28mIdentity Services on AWS
55mUsers and their data: Modern access and audit patterns on AWS
26mThe Power of AWS Tags (Advanced IAM Session)