William Antonio G. - AWS Community Builder Highlight
Work highlighted by William Antonio G., AWS Community Builder and Principal AWS Engineer, sharing key takeaways from the blog post on restricting AWS Management Console access with …
Maksim Aniskov - Community Share
Work shared by Maksim Aniskov, highlighting the blog post on restricting AWS Management Console access to expected networks with sign-in resource-based policies and RCPs.
Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs
Restrict AWS Management Console sign-in to corporate networks using sign-in resource-based policies and RCPs - with CloudTrail verification and data perimeter integration.
Reference your own AWS Secrets Manager secrets in Amazon Bedrock AgentCore Identity
Amazon Bedrock AgentCore Identity now supports referencing your own AWS Secrets Manager secrets, giving organizations full control over encryption, rotation, and access policies …
Mergers and divestitures patterns for organizations on AWS
Patterns and best practices for managing AWS Organizations through mergers, acquisitions, and divestitures at enterprise scale.
Unlock new possibilities: AWS Organizations service control policy now supports full IAM language
AWS Organizations SCPs now support the full IAM policy language — new capabilities, patterns, and what this means for enterprise governance.
Tines Webinar: Bridging the identity gap - Orchestrating IAM across teams and systems
Invited as a guest expert by Tines, a third-party automation platform, to present on orchestrating IAM policies across teams and systems.
Scaling IAM: Advanced administration and delegation patterns
Advanced IAM administration patterns for delegating access management at scale across large, complex AWS environments.
Streamlining AWS Organizations cleanup strategies
Strategies and automation patterns for cleaning up and rationalizing AWS Organizations structures, SCPs, and account hierarchies at scale.
Best practices for performing cloud governance at scale using AWS Organizations integrations
Best practices for performing cloud governance at scale using AWS Organizations integrations.
Validate IAM policies with Access Analyzer using AWS Config rules
How to use AWS Config custom rules alongside IAM Access Analyzer to continuously validate IAM policies for compliance and security posture.
Create enterprise-wide preventive guardrails, featuring Inter & Co.
Building enterprise-scale preventive security controls with AWS Organizations SCPs, featuring a real-world case study with Inter & Co.
How to prioritize IAM Access Analyzer findings
Strategies and workflows for triaging and prioritizing IAM Access Analyzer findings to focus remediation efforts on the highest-risk issues.
Building a data perimeter to allow access to authorized users
How to build a data perimeter on AWS to ensure only authorized identities, from expected networks, can access company data.
Get more out of service control policies in a multi account environment
Best practices for maximizing the effectiveness of service control policies across a multi-account AWS Organizations environment.
How and when to use different IAM policy types
Two workshop sessions with six hands-on labs teaching when to use each IAM policy type, who should own and manage them, and how to balance security posture with developer agility.
Getting more out of your service control policies, featuring Morgan Stanley
Advanced SCP patterns and governance strategies at enterprise scale, featuring Morgan Stanley's approach to multi-account identity governance.
Building a data perimeter to allow access to authorized users
Workshop on building data perimeter controls to ensure only authorized users can access company data on AWS.
How to be frugal with service control policies and get most out of them
Chalk talk on how to be frugal with service control policies and get the most out of them in a multi-account AWS environment.
Data perimeters workshop
Workshop reviewing the different AWS policies required to build data perimeter controls, with five hands-on labs each illustrating a different IAM or network control based on …
Deploy AWS Organizations resources by using CloudFormation
How to manage and deploy AWS Organizations resources including SCPs and RCPs using CloudFormation as infrastructure-as-code.
How do I troubleshoot the 'You don't have permissions to edit bucket policy' error in Amazon S3?
Troubleshooting guide for resolving Access Denied errors when modifying S3 bucket policies - covering IAM permissions, bucket policy conflicts, S3 Block Public Access, and …