Cloud Security Podcast
Fixing Cloud Security with AWS Lambda
Jul 23, 2024
Security expert Lily Chau discusses AWS Lambda for cloud security, auto-remediation, IAM roles, and challenges with CSPM. They cover cultural shifts, high-impact playbooks, and monitoring CloudTrail logs for security. Also, they talk about preventing subdomain takeovers, using Terraform for security, and a favorite restaurant in San Francisco.
21:25
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Utilize IAM roles for read-only security auditing and tagging non-compliant instances for effective tracking without relying on databases.
- Implement custom auto remediation Lambda functions to proactively address security risks beyond CSPM and CNAB tools in AWS cloud environments.
Deep dives
IAM Roles for Read-Only Security Auditor and Security Tagger
Two key IAM roles are deployed in each AWS account: the read-only security auditor role for read-only configurations and the security tagger role for tagging instances that are non-compliant. Tagging instances is crucial for tracking non-compliance economically without database use. The approach emphasizes tagging instances as non-compliant or remediated.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
