AWS re:Invent 2020: Untangling multi-account management with ConsoleMe

At Netflix, the Cloud Infrastructure Security Team manages IAM permissions across hundreds of accounts, coordinating with users’ varied AWS experience. In this session, explore a Netflix tool, ConsoleMe, developed to address this issue securely, reduce inconsistencies and delays experienced by end users, and lower the multi-account management burden. ConsoleMe simplifies IAM permissions management by showing Netflix cloud resources in a single interface. It provides a multistep, dynamic, self-service wizard, which determines permissions, generates resource policies automatically, and uses Zelkova to intelligently apply low-risk permission requests. ConsoleMe also brokers application AWS credentials to provide users with short-lived IAM credentials for testing and development.

Subscribe:

#AWS #AWSEvents

[PrafullKotecha]

Cool. Not just the tool, but also the presentation. Is the tool extensible to be adapted for other cloud providers?

[FrancoisDesfosses]

hi, i am new to AWS, working for a company that has 80 landing zones, we are using azure sso for every users. we have no IAM user account. is this tool can still manage permission for Azure SSO ?