Главная
Study mode:
on
1
Intro
2
Introductions!
3
Agenda
4
Why are we doing this?
5
Media examples
6
Or maybe something like this?
7
How can we fix this?
8
If only there was a credential service!?
9
Now we need a middleman that can talk SAML and LDAP...
10
Shibboleth
11
Knowns, Unknowns, Success Factors
12
AWS STS what?
13
How do we do this? Thought process...
14
Aeris (high level)
15
Wait... 1 hour creds right?
16
Process diagram
17
Issues: Documentation • Session token use was not documented
18
Issues: Bugs • Boo's STS library was hardcoded with AnonFalse 10U'RE WELCOME
19
Potential future problems (cont.)
20
Pre-release Improvements
21
Future Improvements
Description:
Learn about federating AWS CLI access in this 24-minute conference talk from BSides San Francisco 2015. Explore the challenges of secure credential management and discover solutions using credential services, SAML, LDAP, and Shibboleth. Examine the implementation of AWS Security Token Service (STS) and the Aeris system. Discuss known issues, potential problems, and future improvements for federated AWS CLI access. Gain insights into enhancing security and streamlining authentication processes for AWS command-line operations.

Federating AWS CLI

Add to list
0:00 / 0:00