Cloud Security Lessons
summary
Describes specific failures and fixes: misconfigured cloud permissions lead to millions of customers exposed (Capital One 2019 and other breaches), repeated root cause is identity mismanagement and open buckets; demonstrates deployment of a data enclave plus CSPM and AWS GuardDuty to continuously monitor, detect anomalies and auto-remediate; recommends least privilege, MFA, zero trust and automation as ongoing operational controls rather than a one‑time product.
AI-written summary · about
chapters (12)
- 0:00Cloud security importance
- 1:50Cloud security threats
- 3:58Shared responsibility model
- 7:31Compliance and breaches
- 9:17Capital One and Uber breaches
- 12:08Zero trust architecture
- 14:59AI and ML in cloud security
- 17:25Identity and access management
- 19:34Security posture tools
- 21:43Data enclave security
- 23:27Security certifications
- 24:30Cloud security summary
related talks
45mProtecting you from you: Misconfiguration-caused breaches
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
51mCloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency
58mCloud Attack Surface Management
09mCloud Security and how to leverage the shared responsibility model to your advantage
47mBreaking the Cloud to Rebuild It: A Tale of 3 ☁️ Breaches!
31mSeeing Through the Fog - Navigating the Security Landscape of a Cloud-First World
31mCloud Threat Landscape - 2021