AWS Multi-Account Security: What Netflix Learned
🚀 How do you secure thousands of AWS accounts without slowing down developers? Netflix’s cloud security experts Patrick Sanders & Joseph Kjar join us to break down their identity-first security model and share lessons from scaling security across a massive AWS multi-account environment.In this episode, we cover:Why identity, not network, is the best security boundaryThe challenges of least privilege and right-sized accessHow Netflix migrates IAM roles while minimizing disruptionsThe impact of multi-account AWS security strategiesGuest Socials: Patrick's Linkedin +Joseph's LinkedinPodcast Twitter - @CloudSecPod If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-Cloud Security Podcast- Youtube- Cloud Security Newsletter - Cloud Security BootCampIf you are interested in AI Cybersecurity, you can check out our sister podcast - AI Cybersecurity PodcastQuestions asked:(00:00) Introduction(02:05) A bit about Joseph(02:32) A bit about Patrick(02:38) Scaling security across multiple accounts(03:29) Least Privilege is hard(06:44) Why go down the identity path?(08:49) Identity based approach for least privilege(15:43) Security at scale for Multi Account in AWS(23:54) Lessons from the project(27:02) What would be classified as an easy migration?(30:55) How the project has progressed?(35:01) Automation Pieces that enabled the project(37:54) Where to start with scaling security across Multi Accounts?(39:21) Resource Access Manager and how it fits into migrationResources discussed in this interview:Accelerate insights using AWS SDK instrumentation TalkPatrick and Joseph’s Talk - Netflix's massive multi-account journey: Year twoJoseph and Patrick's previous interview on Cloud Security Podcast