Understanding Cloud Control Plane Compromise Attacks
summary
Describes how attackers move from a brittle misconfigured host to stealing data by compromising the cloud control plane — stealing API keys, doing discovery, lateral movement, and API-based exfiltration that network filters miss. Recommends policy as code enforced in the IaC pipeline with CI/CD integration to prevent errors, empower developers, and measure progress. Claims a platform now manages millions of resources for customers and cites a customer with 2,000 app developers and a three-person security team as the mismatch driving insecure design.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:11Cloud control plane compromise
- 6:48Data center vs cloud security
- 12:07Hacker tactics and breaches
- 17:25Attack vectors for compromise
- 20:35Five cloud security fundamentals
- 27:40Policy as code for developers
- 30:51Resources and closing
related talks
58mCloud Attack Surface Management
31mCloud Threat Landscape - 2021
45mProtecting you from you: Misconfiguration-caused breaches
57mCloud’s Dirty Little Secret: It Was Misconfigs All Along
25mTrust in the edge, trouble in the cloud
53mFlying Above the Clouds: Securing Kubernetes
40mWork Smarter Not Harder: Tips to Approach Cloud Security the Easier Way
26mCloud Security Lessons