Simplifying Your AWS IAM Policy Using Federated Identity Attributes

Level: 300

Managing least privilege access control is essential, but can get quite complex over time. In this tech talk, we will demonstrate how to accomplish that with Attribute Based Access Control (ABAC) model in AWS. We will explain how to implement AWS IAM policies that leverage user attributes from your corporate directory or favorite identity provider for fine-grained access control in a simple and scalable way. We will show a demo illustrating how to create and quickly apply ABAC-based granular permissions across multiple teams, departments, and projects without increasing your administrative burden.