Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring Amazon EC2
75
talks mention this tool across
35
BSides chapters.
Talks featuring Amazon EC2
41:39
Go Hack Yourself: 10 Pentest Tactics for Blue Teamers
BSides Peru
Open →
2015-06
30:33
Six Degrees of Infiltration: Using Graph to Understand your Infrastructure and Optimize Security Decision Making
Sacha Faust
BSidesSF
· 2018
Technical
Talk
Open →
2018-04
51:26
BG - Pacu: Attack and Post-Exploitation in AWS - Spencer Gietzen
BSides Las Vegas
Open →
2018-09
20:01
Fantastic AWS Attacks and Where to Find Them
Georgios Kapoglis
BSidesSF
· 2020
Technical
Cloud IAM
Talk
Open →
2020-03
35:14
Introducing Pi-Key: Hacking just like the Movies
Jon Aubrey
Trevor Shingles
BSides London
· 2017
Technical
Red
Demo
Talk
Open →
2017-06
28:47
Learning from AWS Customer Security Breaches
Rami McCarthy
Bsides CT
· 2020
Technical
Cloud IAM
DFIR
Intermediary
Case Studies and Incidents Analysis
Talk
Open →
2020-11
27:32
Access Control with Concierge: One Tool to Rule Them All
Karthik Rangarajan
BSidesSF
· 2017
Technical
Active Directory
Cloud IAM
Talk
Open →
2017-03
43:27
Threat Hunting AWS CloudTrail Logs with Microsoft Sentinel: Real-Time Attack Demo
Arijit Paul
BSides Sydney
· 2025
Technical
Cloud IAM
Detection Engineering
Threat Intel
Intermediary
Demo
Open →
2025-02
49:30
Infrastructure as RCE: How to abuse Terraform to elevate access
Mike McCabe
BSides NYC
· 2023
Technical
Cloud IAM
DevSecOps
Vulnerability Research
Red
Talk
Open →
2023-06
40:32
AMAZON FORENSIC PLATFORM: SCALING YOUR DIGITAL FORENSICS - Pratik Mehta
BSides Sydney
Open →
2019-09
32:23
WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics
Lily Chau
Lakshmanan Murthy
BSidesSF
· 2024
Technical
Cloud IAM
Open →
2024-07
49:39
To Normalized Logs, and Beyond - Building a Threat Detection Platform from Scratch
David Levitsky
Brian Maloney
BSidesSF
· 2023
Technical
DevSecOps
Blue
Talk
Open →
2023-05
32:40
For Crying Out Cloud - Stu Hirst and Tash Norris
Stu Hirst
Tash Norris
BSides Munich
· 2019
Technical
Cloud IAM
DevSecOps
Threat Modeling
Blue
Talk
Open →
2019-03
22:12
Launch Control — Automating a Security Baseline in the Cloud at Scale
David Levitsky
Olivia Hillman
BSidesSF
· 2023
Technical
Cloud IAM
Demo
Talk
Open →
2023-05
16:23
Big Data Lake, Big Data Leak by Ben Caller
Ben Caller
BSides London
· 2022
Technical
Talk
Open →
2022-01
37:28
An Overview in Cloud Penetration Testing
Bleon Proko
BSides Prishtina
· 2022
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2022-05
23:52
Cyber Cat & Mouse: Law Enforcement vs The Dark Web
Jordan Powell
BSides Newcastle
· 2025
Technical
War Stories
Case Studies and Incidents Analysis
Talk
Open →
2025-12
32:15
Security Lessons Learnt From The Cloud Frontline - Ben Fletcher
Ben Fletcher
BSides Belfast
· 2024
Technical
Cloud IAM
Detection Engineering
Threat Intel
Case Studies and Incidents Analysis
Talk
Open →
2024-03
30:56
BSidesMCR 2019: Exposing AWS With FlAWS - Mike Lehan
BSides Manchester
Open →
2019-09
25:14
The Power of Guardrails: How to slash your risk of XSS in half
Colleen Dai
Grayson Hardaway
BSidesSF
· 2022
Technical
Vulnerability Research
Web AppSec
Case Studies and Incidents Analysis
Empirical Research
Talk
Open →
2022-07
36:45
BG - Lateral Movement and other Creative Steps Attackers Take in AWS
BSides Las Vegas
Open →
2022-09
6:08:16
BSidesDFW2025 Track 1
BSides Dallas/Fort Worth
· 2025
Technical
Open →
2025-11
35:06
Hacking the Airwaves: Beyond Relay Attacks
Robin Roodt
BSides Cape Town
· 2025
Technical
Hardware Hacking
Wireless Security
Red
Demo
Talk
Open →
2025-04
47:15
Chris Myers and Barrett Adams Building a Cloud Pentest Lab (and how we blew some up)
Chris Myers
Barrett Adams
BSides Delaware
· 2018
Technical
Talk
Open →
2018-11
13:51
OWASP Honeypot Threat Intelligence Project
Kartik Adak
BSides London
· 2025
Research
OWASP
Web AppSec
Technical Deep-dives
Talk
Open →
2025-02
56:03
Cassandra Young - The Complete Noobs Guide to Cloud Security
BSides Philly
Open →
2020-12
50:01
Grapl — A Graph Platform for Detection and Response
Colin O'Brien
BSides Las Vegas
· 2019
Technical
DFIR
Detection Engineering
Threat Intel
Blue
Talk
Open →
2019-10
26:11
Mixtape to Master Key Scenarios: How to block the Dark Army from mayhem using API-driven access control
Aren Sandersen
BSidesSF
· 2017
Technical
Cloud IAM
Talk
Open →
2017-03
44:04
Pwned Cloud Society
Bryce Kunz
BSides SLC
· 2017
Technical
Cloud IAM
Red
Talk
Open →
2017-06
13:47
Cloudy With A Chance Of Security
Sascha Bharath
BSides London
Talk
Open →
2024-02
41:35
BSides Rochester 2016: Jared Stroud & Bryan Harmat: RedOps: Scaling & Automating Your Pwnage
BSidesROC
Open →
2016-05
28:31
AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs
Anthony Scheller
Jorge L Gomez
BSidesSF
· 2024
Technical
Cloud IAM
Talk
Open →
2024-07
44:46
Paul Melson - Automating Malware Analysis for Threat Intelligence
Paul Melson
BSides Augusta
· 2016
Technical
Talk
Open →
2016-09
27:24
So You Think You Can Detect? Detection Testing in Production
Lisa Li
BSides SLC
· 2025
Technical
DevSecOps
Purple
Demo
Talk
Open →
2025-06
38:28
EC2 or Bust – How to Build Your Own Pen Testing Lab in Amazon EC2
Grecs
BSides Las Vegas
· 2013
Technical
Talk
Open →
2017-01
26:06
DarkEngine: Conducting Research into a Highly Orchestrated Phishing Campaign
Liam Wilkinson
BSides Canberra
· 2025
Research
DFIR
Malware Analysis
Social Engineering
Threat Intel
Case Studies and Incidents Analysis
Technical Deep-dives
Talk
Open →
2025-12
18:08
Practical Perimeter-less Authentication Solutions for Startups Using AWS Native Solutions
Rohit Bansal
BSides Las Vegas
· 2024
Technical
Cloud IAM
Demo
Talk
Open →
2024-09
27:05
I Own your Cluster - Taking over AWS clusters using Chain Attack
Chen Shiri
BSides TLV
· 2024
Research
Technical
Cloud IAM
Container Security
Vulnerability Research
Advanced
Red
Case Studies and Incidents Analysis
+2
Open →
2024-08
30:03
Scott Taylor: Exploring Common Hacking Techniques
Scott Taylor
BSides Calgary
Open →
2020-12
31:52
BSidesSLC 2015 -- Pragmatic Cloud Security -- Joshua Danielson
BSides SLC
Open →
2015-04
41:13
Automating disk and memory evidence collection in AWS
Ryan Tick
Vaishnav Murthy
BSides SATX
· 2020
Technical
Purple
Talk
Open →
2020-08
55:43
Automated Triage Collection at Scale in the AWS Cloud
Ryan Tick
BSides Dallas/Fort Worth
· 2021
Technical
Cloud IAM
DFIR
Talk
Open →
2021-11
49:49
Cloud Breach Incident Response & Forensics
Michael T. Raggo
Bsides CT
· 2020
Technical
Cloud IAM
Case Studies and Incidents Analysis
Talk
Open →
2020-11
37:30
Chasing a red team from the dressing room into the cloud
Tyler Fornes
BSides Dallas/Fort Worth
· 2020
Technical
Cloud IAM
DFIR
Detection Engineering
Blue
Purple
Case Studies and Incidents Analysis
Talk
Open →
2020-11
24:16
BsidesWLG 2017 - Glenn 'devalias' Grant - Gophers, whales and.. clouds? Oh my!
BSides Wellington
Open →
2018-02
37:36
Breaking The Cloud: A Tale Of 3 Breaches
Ashish Rajan
BSides London
Technical
Talk
Open →
2024-02
30:22
Strangeways, Here We Come
Victor Clark
BSidesSF
· 2019
Technical
Cloud IAM
Network Security
Talk
Open →
2019-03
44:57
Josh Stella - A Live Simulation of Advanced Cloud Misconfiguration Attacks
BSides Knoxville
Open →
2021-05
55:15
Welcome to the Jungle: Pen Testing AWS
Mike Felch
BSides Tampa
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2023-09
4:56:08
Cinema
BSides RDU
· 2019
Open →
2019-10
52:10
Cloud Security
Scott Arveseth
BSides SLC
· 2015
Technical
Talk
Open →
2015-04
36:47
Tim Crothers - Living off the (land)cloud: Scattered Spider and the cloud control plane
Tim Crothers
BSides Augusta
· 2025
Technical
Cloud IAM
Blue
Red
Demo
Talk
Open →
2025-10
55:29
Trust Chain: How to imagine and realize multi-organization Cloud Environment
Omer Farooq
BSides DC
· 2018
Technical
Cloud IAM
Talk
Open →
2018-11
45:11
Attacking Modern SaaS Companies
Sean Cassidy
BSidesROC
· 2017
Technical
Talk
Open →
2018-01
37:07
Niall McGrath - Digital Forensic Science and How it Fits in to the Field of Forensic Science
BSides Belfast
Open →
2017-10
25:49
Cloud Protection: The Fight of Machine Learning Against DDoS and MitC Attacks
Rrezearta Thaqi
BSides Prishtina
· 2026
Technical
Talk
Open →
2024-09
59:32
Extensible DevSecOps pipelines with Jenkins, Docker, Terraform, and a kitchen sink full of scanners
Richard Bullington-McGuire
Bsides CT
· 2019
Technical
DevSecOps
Talk
Open →
2019-11
32:20
Secure(r) Cloud Development
Christo Goosen
Toufeeq Ockards
BSides Cape Town
· 2017
Technical
Cloud IAM
Detection Engineering
DevSecOps
Talk
Open →
2017-12
14:20
From Pipelines To Problems: My Early DevOps Lessons In Security Culture
Prevail Uzodinma
BSides London
· 2025
Technical
Cloud IAM
DevSecOps
Intro
Talk
Open →
2026-03
54:21
Instance Metadata Service: Exploiting IMDSv1 and SSRF in AWS
Sam Ezebunandu
BSides Calgary
Technical
Cloud IAM
Vulnerability Research
Web AppSec
Red
Case Studies and Incidents Analysis
Talk
Open →
2024-03
36:51
BSides Toronto 2019 Jamie Baxter
BSides Toronto
Open →
2019-10
24:44
Cloud IR: A Rapid Guide For AWS, Azure & GCP
Erblind Morina
BSides Munich
· 2025
Technical
Cloud IAM
DFIR
Detection Engineering
Blue
Talk
Open →
2026-02
27:46
Attacking Secrets in Cloud-based Applications
Artëm Tsvetkov
BSides Barcelona
· 2021
Technical
Cloud IAM
Talk
Open →
2022-01
46:56
Building Castles in the Cloud: AWS Security and Self-Assessment
Rami McCarthy
Bsides CT
· 2019
Technical
Cloud IAM
Talk
Open →
2019-11
47:00
Securing a Cloud Native Open Source Microservice Based Core Banking System
Ntando Mngomezulu
BSides Cape Town
· 2022
Technical
Cloud IAM
Container Security
Blue
Talk
Open →
2023-09
41:30
DoH Deception: Evading ML-Based Tunnel Detection with Black-Box Attack Techniques
Emanuel Valente
BSides Las Vegas
· 2024
Research
Technical
Adversarial Machine Learning
Network Security
Vulnerability Research
Advanced
Red
Technical Deep-dives
+1
Open →
2024-09
33:59
I Own Your Cluster — Taking Over AWS EKS with Chain Attack
Chen Shiri
BSides Budabest 2025
Technical
Cloud IAM
Container Security
Vulnerability Research
Advanced
Red
Technical Deep-dives
Talk
Open →
2026-04
22:49
IAM Very Confused: A Friendly Guide To Cloud And Modern AuthZ - Tom Cope
Tom Cope
BSides Basingstoke
· 2025
Technical
Cloud IAM
Talk
Open →
2025-09
27:52
The Perks And Perils Of Persistence: AWS Attacker Techniques
Oisin Brennan
BSides Munich
· 2025
Technical
Cloud IAM
Red
Technical Deep-dives
Talk
Open →
2026-02
43:52
JOINing Across the Stack: Structured Security Analytics for the Modern Attack Surface
Eric Kaiser
BSides Las Vegas
· 2021
Technical
Cloud IAM
Container Security
Detection Engineering
Blue
Talk
Open →
2021-08
41:28
How Small Businesses can Prepare for Big Attacks
Wyatt Schirmer
BSides SLC
· 2022
Talk
Open →
2023-01
48:23
Blowing up Serverless Security with IAM (And How to Avoid It)
Josh Stella
BSides NoVa
· 2021
Technical
Cloud IAM
Vulnerability Research
Intermediary
Talk
Open →
2021-06
50:50
Dynamic Web Scanning at Massive Scale
Erik Peterson
BSidesSF
· 2012
Technical
DevSecOps
Web AppSec
Talk
Open →
2017-11
23:21
The Dev Ops Crusades
Ochaun Marshall
BSides Charlotte
· 2019
Talk
Open →
2019-11
41:38
IAM in the AWS Cloud
Ochaun Marshall
BSides Greenville
· 2021
Technical
Cloud IAM
Talk
Open →
2021-09