Father of two boys, guitar and uke player. Identity, GenAI, and security architect. My opinions are my own.
Chicago, IL
Joined March 2014
- Tweets905
- Following309
- Followers1.1K
- Likes1.4K
Michael Chan retweeted
ICYMI!
In mid-2024, we're enhancing your sign-in experience. 🌟 Expect a new UI for root & IAM users and an updated switch role page. Improved navigation for a seamless sign in experience.
💡 Discover more in our latest blog: go.aws/3v2jHj7
Michael Chan retweeted
Awesome to see this in the docs now! Also check out this great session from @colmmacc where he covers FAS: youtube.com/watch?v=4J8REvs7…
👉For those who want more on AWS security internals, we finally have a great page describing Forward Access Sessions, the vehicle by which many AWS services does things on behalf of you. docs.aws.amazon.com/IAM/late… @AWSIdentity
Michael Chan retweeted
As of next year, #google will require premium subscriptions for things like IAM Recommender, Role Insights, etc.
This is the OPPOSITE of their mantra calling for shared fate instead of the shared responsibility model.
A massive loss in credibility.
Policy Intelligence update on September 28, 2023 cloud.google.com/policy-inte… #googlecloud After January 15, 2024, some Policy Intelligence features will only be available for customers with organization-level activations of Security 1/2
Michael Chan retweeted
Big pricing change to a valuable GCP security feature for least-privilege IAM. Requiring the org-level SCC Premium bundle instead of a pay-as-you-go per-service price will be prohibitively expensive and detrimental to security for many customers in the long run. @philvenables
Policy Intelligence update on September 28, 2023 cloud.google.com/policy-inte… #googlecloud After January 15, 2024, some Policy Intelligence features will only be available for customers with organization-level activations of Security 1/2
Michael Chan retweeted
If you're interested in permissions management and authorization, check out my new blog post on the new Cedar language - currently integrated into Amazon Verified Permissions and #AWS Verified Access, and more in the future. 🌲🔐
onecloudplease.com/blog/ceda…
Michael Chan retweeted
Clearly the best pre:Invent announcement. Also a candidate for best of the year, period. 🎉
Configuring MFA is an important step in strengthening your security posture. Starting today, you can add multiple MFA devices to AWS root account and IAM users 🔑 #EnableMFA go.aws/3hPLf4v
Michael Chan retweeted
Learn how to use AWS for intended data access & protection of sensitive data. #AWSIdentity #CloudSecurity
go.aws/3UDCJ6Z
ALT Data perimeter architectural design
Michael Chan retweeted
#IAMAccessAnalyzer has extended its findings beyond resource policies to now support access control lists for Amazon EBS, Amazon RDS DB snapshots, and Amazon RDS DB cluster snapshots.
go.aws/3UhlUPi
ALT RDS/EBC for IAM Access Analyser title slide
Michael Chan retweeted
if you're heading to @awscloud re:Invent, I wrote a guide to help you get a strong start on your #security journey
reserved seating is now open, make sure to get a seat in these great sessions 👇
xitter.cf/awscloud/status/158096…
What's the framework for a modern approach to cloud security?☁️🔒⛓️
@marknca has an #AWS #reInvent Attendee Guide to help guide you to the answer.
View the guide here. 👉 go.aws/3COKqAN
Michael Chan retweeted
Refine permissions on your IAM roles with a fine-grained policy generated by IAM Access Analyzer, which now supports actions from more than 140 services. go.aws/3fJ5KPd
ALT Title slide for IAM Access Analyzer policy generation
Michael Chan retweeted
A good example of how AWS continues to raise the security bar for our customers📈 You probably do not depend on self assume role functionality, but now you need to make it explicit in the role trust policy. This makes controlling access to who can assume a role more clear.👀 A 🧵
Michael Chan retweeted
Did you know that #AWSRAM is now FedRAMP authorized? If you have workloads that are regulated by the US federal government, you can use it to share resources securely across AWS accounts. go.aws/3wEbbVl
ALT Icon for resource manager
Michael Chan retweeted
#AWSOrganizations customers rejoice 🙌🏾! Now you can centrally manage the primary contact information for all of your accounts without having to log in to each individual account, saving you time & effort. go.aws/3PDxcek
Michael Chan retweeted
Want to learn more about IAM best practices? Don't miss this session today at 3:30pm with @bjohnso5y and @mattluttrell15 #aws @AWSreInvent
Out with the old and in with the new! We’ve refreshed the IAM best practices. We now have 1⃣4⃣ best practices to guide your identity and access management journey on #AWS 🧵 (1/10) go.aws/3APQW9T
Michael Chan retweeted
we're heading into day 2 of #aws #reinforce. if you missed it yesterday, the keynote was posted on YouTube last night
check it out at youtu.be/PPunA7tPMyk
☁️ #security
Michael Chan retweeted
session recommendation for #aws #reinforce:
“Managing B2B identity at scale: Lessons from AWS and Trend Micro” (IAM306)
this morning at 8:45 am in 205A
why? @geoff_baskwill is one of the speakers. he always has such a considered approach to solving big scale problems
Michael Chan retweeted
Laura Reith from the AWS Identity Solutions team delivering the Data Perimeter workshop @AWSreInforce #awsidentity
Michael Chan retweeted
if you’re just getting started with @awscloud IAM, this talk from Brigid Johnson is a great place to start: youtu.be/8vsD_aTtuTo
#aws #reinforce 🧵
Michael Chan retweeted
also, this is a great opportunity to shout out fellow @awscloud Hero, @ben11kehoe. he’s published a ton of great articles and code about @awscloud IAM, SSO, and Orgs at ben11kehoe.medium.com
some are really deep dives, but you’re always going to learn lots
#aws #reInforce 🧵
Michael Chan retweeted
key question area: least privilege
I strongly recommend the IAM Access Analyzer: aws.amazon.com/iam/features/…
learn about it, use it, automate actions based on it’s findings
#aws #reInforce 🧵
