Demystifying Access Control in the Modern Data Warehouse
summary
Cruise builds an internal tool xray that fetches IAM policies for a BigQuery resource and all parents, identifies roles that include read permission, unrolls groups into individual principals, and traces lineage to the exact role+resource granting access. Integrated with the Indiana data map and a daily cron feeding the least access dashboard, this workflow reveals overprovisioning (including org‑wide service account read grants) and cuts remediation time from months to minutes while enabling targeted revocations.
AI-written summary · about
related talks
55mUsers and their data: Modern access and audit patterns on AWS
18mData Mapping at a Billion Dollar Self-Driving Vehicle Startup
55mDemocratize data: The intersection of governance and analytics
16mAccess Granted with AuthZed
36mMigrating Our Data Warehouse to the Cloud
46mProtecting sensitive data in huge datasets: Cloud tools you can use
52mBuilding the World's Largest Enterprise Data Warehouse with BigQuery
49mSecure Modern Data Lakes - A Primer