AiIAM: Transforming the Democratized AWS IAM...
summary
VaporLock (formerly AiIM) is an open‑source service that generates least‑privilege AWS IAM policies from natural‑language forms or by analyzing 90 days of CloudTrail via IAM Access Analyzer; it runs as a Next.js UI + FastAPI backend with Celery workers and Redis and deploys via Helm/Docker Compose. Policy outputs include JSON, HCL/ Terraform and CloudFormation. The LLM pipeline uses OpenAI gpt-3.5 and then validates and strips invalid actions with IAM Access Analyzer; async resize jobs take ~30s–few minutes and RLHF is planned.
AI-written summary · about
chapters (11)
- 0:00Introduction and speakers
- 1:04Talk overview and agenda
- 3:28Challenges in IAM policies
- 7:22Centralized vs democratized IAM
- 11:12Why Vapor Lock exists
- 11:55What is Vapor Lock
- 13:43User interface and API
- 18:15Vapor Lock architecture
- 21:23Live demo
- 23:51Future improvements
- 25:38Q&A session
related talks
19mMove toward least privilege with IAM Access Analyzer
37mLocking Down the Security of IAM
19mAutomatically Reducing Privilege for Access Control Policies
41mRefine unused access confidently with IAM Access Analyzer
42mBlowing Up Serverless Security with IAM (And How to Avoid It)
34mScaling access with AWS IAM Identity Center, feat.
31mIAM and why it is important in Cloud environments
28mYour journey to temporary credentials in the cloud