Scaling Identity & Access in Multi-Account Enterprises: Complexities & Strategies for Effective IAM

Scaling IAM in Enterprises: Multi-Account Strategies and Challenges. Scaling Identity and Access Management in an Enterprise is hard. Enabling application teams and business to build and take advantage of cloud benefits while building secure IAM at scale is complex. Add in the additional complexity of multiple accounts, and this becomes quite the challenge. While we're given new IAM paradigms, new IAM tools with the possibility of many different strategies, we're now seeing new security risks and challenges in cloud IAM. In this talk, we'll look at strategies for Scaling IAM in enterprises and complexities (with real world examples) including:

- Multi-Account Strategies and AWS Organizations and how they impact IAM.
- Different Types of IAM Access.
- AWS-Native IAM Tools (Identity Center/SSO, Roles, Users)
- How to scale IAM with Policies and Frameworks

SANS CloudSecNext Summit 2023
Scaling Identity and Access in Multi-Account Enterprises: Complexities and Strategies for Effective IAM
Speaker: Jason Kao, Head of Security Research, CloudQuery