https://www.meetup.com/omaha-amazon-web-services-meetup/events/308639231

Trust Issues: What Do All these JSON files actually mean? 

As cloud security practitioners, we spend our days wrangling IAM policies — but for all the JSON we manage, it’s still surprisingly hard to answer basic questions like: “Who can access this S3 bucket?” or “What can this role actually do?” Understanding AWS permissions in practice means piecing together policies across services, accounts, organizations, and trust layers. And because those policies are often managed by different teams or scattered across pipelines, it’s difficult to reason about what’s truly possible in a deployed environment.

This talk explores a pragmatic approach to verifying effective IAM permissions: simulating what AWS IAM actually allows across all policy layers, and exposing the results in a way that clearly shows who can do what, and why. Rather than replacing pre-deploy linters or policy review processes, this system complements them by analyzing deployed IAM configuration and evaluating real-world access across identities, resources, and trust relationships. Want to know which principals have s3:GetObject access to your prod bucket? Or which external accounts can assume a sensitive role? We’ll show how to answer those questions—quickly, clearly, and without hand-parsing several JSON files.

You’ll leave with a new set of tools for understanding how IAM really works in your environment. This session includes a demo and an open-source project built to support these workflows.

If you have an interest in increasing your understanding of IAM configurations within AWS, please join us on Monday, July 14th. We look forward to seeing you there! 

= Speaker(s) =

David Kerber

Dave is an engineer and longtime AWS practitioner with a focus on IAM and AWS security tooling. He’s led product and engineering teams at startups and billion-dollar companies, raised millions from VCs, built two CSPMs, and now consults on AWS security for Fortune 500 companies. He maintains open-source projects in the AWS IAM space and is currently obsessed with perfecting his focaccia.

https://www.eventbrite.com/e/aim-demystifying-tech-careers-workshop-tickets-1412559666989

Join us for this FREE Career Discovery Workshop!

This workshop provides participants with basic knowledge and definitions of technology terms and concepts. The goal of this workshop is to "demystify" tech by providing clear definitions of the five areas of tech as defined by the AIM Institute.

Participants will learn the technical foundation needed to gain access to the area's fastest-growing H3 (high demand, high skill, high wage) technology careers.

This event will be offered in-person by an AIM experienced Tech Leader