NOPASSWD: Building a Passwordless Cloud Infrastructure
summary
Shows a working passwordless stack that replaces long-lived credentials end-to-end: FIDO2 for user auth, Azure AD as identity source, AWS IAM federated roles and IAM federated roles for AWS access, Amazon RDS using IAM authentication with short‑lived tokens, GitHub Enterprise plus GitHub OIDC JWT for CI/CD without stored secrets, and an AWS client VPN tied to groups. Demonstrates breaches (Codecov ~29,000 clients, T‑Mobile settlement ~$500M) motivating removal of passwords and explains tooling, rotation, and where integration costs appear.
AI-written summary · about
chapters (26)
- 0:00Introduction
- 1:25The password problem
- 2:00Defining passwords
- 3:03How passwords leak
- 4:08Risks of password managers
- 6:05Impact of leaks
- 7:18Real-world breaches
- 8:22Reducing risk
- 9:41Authentication factors
- 11:24FIDO standards
- 13:16FIDO2 architecture
- 15:05FIDO adoption
- 17:16Traditional architecture
- 18:53CI/CD risks
- 22:54Passwordless identity
- 23:34AWS federation
- 24:30Identity Center
- 25:46Passwordless VPN
- 26:38Database authentication
- 28:11Repository security
- 28:41CI/CD OIDC
- 30:27Architecture summary
- 31:03Selecting vendors
- 32:20Pricing issues
- 33:30Mitigation strategies
- 35:14Q&A and conclusion
related talks
50mNOPASSWD: Building a Passwordless Cloud Infrastructure
40mNOPASSWD: Building a Passwordless Cloud Infrastructure
43mPasswordless: a story of risk, protection and excellent UX
38mJourney to passwordless
34mPasswordless: a story of risk, protection & excellent UX
47mPasswordless Web
34mThrow Away Your Passwords: Trusting Workload Identity
30mGoing Beyond Passwords: The Future of User Authentication