Ad Hoc Mutable Infrastructure for Security Management
summary
Claim: a fully mutable Active Directory identity stack lives mostly in AWS and can be spun up or destroy and redeploy daily to remove persistence. Implementation uses CloudFormation, HashiCorp Packer built AMIs, Chef and bootstrapping, GPOs, Duo MFA and restricted egress with Splunk forwarders. Eighty percent of IDM runs in AWS snapshots support offline forensics and automated rollbacks enforce a known good state the stack runs and supports rapid tear down and rebuild and will be open sourced.
AI-written summary · about
chapters (9)
- 0:00Start
- 1:48Problem Statement
- 4:16Traditional Setup
- 10:39Automation Stack
- 12:03Downside to Cloud Formation
- 13:57Duo Security
- 32:40Security Code Review
- 43:49Future Plans
- 47:26Defined Downtime Requirements
related talks
40mInfrastructure as Code in the Wild
12mIAM and Privileged Access Foundations for Secure ML Platforms
31mIAM and why it is important in Cloud environments
38mChanging Perspectives: A Deep Dive into the Security Posture of 600+ Real-World AWS Environments
01h 02mWhy IAM is the new perimeter, and how to govern it
55mBalance least privilege & agile development
31mYour Infrastructure Needs to D.I.E.
23mGetting started with identity on AWS