IAM
229 items from kdeldycke/awesome-iam ★2,303
-
Become an AWS IAM Policy Ninja youtube.com
“In my nearly 5 years at Amazon, I carve out a little time each day, each week to look through the forums, customer tickets to try to find out where people are having trouble.”
-
Still Logged In: What AR and VR Can Learn from MMOs youtube.com
“If you host an online community, where people can harm another person: you are on the hook. And if you can't afford to be on the hook, don't host an online community”.
-
Scaling backend authentication at Facebook youtube.com
How-to in a nutshell: 1. Small root of trust; 2. TLS isn't enough; 3. Certificate-based tokens; 4. Crypto Auth Tokens (CATs). See the slides for more details.
-
Secret at Scale at Netflix youtube.com
Solution based on blind signatures. See the slides.
-
Breaking Password Dependencies: Challenges in the Final Mile at Microsoft youtube.com
The primary source of account hacks is password spraying (on legacy auth like SMTP, IMAP, POP, etc.), second is replay attack. Takeaway: password are insecure, use and enforce MFA.
-
OAuth 2.0 and OpenID Connect (in plain English) youtube.com
Starts with an historical context on how these standards came to be, clears up the inaccuracies in the vocabulary, then details the protocols and its pitfalls to make it less intimidating.
-
High Availability in Google's Internal KMS youtube.com
Not GCP's KMS, but the one at the core of their infrastructure. See the slides.
