Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring AWS CloudFormation
32
talks mention this tool across
24
BSides chapters.
Talks featuring AWS CloudFormation
49:30
Infrastructure as RCE: How to abuse Terraform to elevate access
Mike McCabe
BSides NYC
· 2023
Technical
Cloud IAM
DevSecOps
Vulnerability Research
Red
Talk
Open →
2023-06
32:23
WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics
Lily Chau
Lakshmanan Murthy
BSidesSF
· 2024
Technical
Cloud IAM
Open →
2024-07
32:15
Security Lessons Learnt From The Cloud Frontline - Ben Fletcher
Ben Fletcher
BSides Belfast
· 2024
Technical
Cloud IAM
Detection Engineering
Threat Intel
Case Studies and Incidents Analysis
Talk
Open →
2024-03
32:45
Chris Farris - The Cloud is Dark and Full of Terrors
BSides Augusta
Open →
2021-10
28:31
AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs
Anthony Scheller
Jorge L Gomez
BSidesSF
· 2024
Technical
Cloud IAM
Talk
Open →
2024-07
13:14
Metabadger: Automating IMDS Protection at Scale in AWS
Ashish Patel
BSidesSF
· 2022
Technical
Cloud IAM
Talk
Open →
2022-07
1:57:57
DevSecOps for Security Teams
Hassan Mussana
BSides Pakistan
· 2021
Technical
DevSecOps
Supply Chain Security
Talk
Open →
2021-10
20:57
Introduction to AWS Serverless Exploitation
Sankalp Paranjpe
BSides Mumbai
· 2024
Technical
Intro
Red
Talk
Open →
2025-03
58:04
Continuous Security: Monitoring & Active Defense in the Cloud
Eric Johnson
BSides Iowa
· 2018
Technical
Cloud IAM
Detection Engineering
Threat Intel
Blue
Purple
Case Studies and Incidents Analysis
Talk
Open →
2018-04
28:11
IAC (Infrastructure-As-Code) SAST - What's That?
Chaitra Bhat
BSides Dublin
Technical
DevSecOps
Talk
Open →
2022-05
38:43
Cloud Attack: Dissecting Attack Paths with Graph-Mode
Filipi Pires
BSides Las Vegas
· 2024
Technical
Cloud IAM
Threat Modeling
Vulnerability Research
Red
Talk
Open →
2024-09
31:52
BSidesSLC 2015 -- Pragmatic Cloud Security -- Joshua Danielson
BSides SLC
Open →
2015-04
28:57
The Current State of Infrastructure as Code (IaC) from a Security Standpoint
Albert Heinle
BSides Toronto
· 2023
Technical
Cloud IAM
DevSecOps
Talk
Open →
2023-11
52:52
BSidesAugusta 2017 - Track2: Security Automation in the cloud by Toni de la Fuente
BSides Augusta
Open →
2017-09
30:22
Strangeways, Here We Come
Victor Clark
BSidesSF
· 2019
Technical
Cloud IAM
Network Security
Talk
Open →
2019-03
24:43
Building Real-Time AWS Guardrails: A Serverless, Homegrown Engineering Blueprint
Aleksei Denisov
BSides Seattle 2026
Technical
Cloud IAM
DevSecOps
Intermediary
Blue
Technical Deep-dives
Talk
Open →
2026-04
37:12
BSides Sofia 2022: Common security pitfalls in AWS Public cloud for highly regulated industries
Daniel Rankov
BSides Sofia
· 2022
Technical
Talk
Open →
2022-04
55:29
Trust Chain: How to imagine and realize multi-organization Cloud Environment
Omer Farooq
BSides DC
· 2018
Technical
Cloud IAM
Talk
Open →
2018-11
30:53
Building an Auto-Remediation Platform for the Cloud
Taylor Wilson
BSides SLC
· 2022
Technical
Talk
Open →
2023-01
32:03
Hey, You, Get Out of My Cloud – Real-World Cloud Security
Scott Arveseth
BSides SLC
· 2025
Technical
Cloud IAM
Talk
Open →
2025-06
37:35
When Cloud Infrastructure Provisioned With Someone in Marketing's Credit Card Is Compromised
Aaron Shelmire
BSides Peru
· 2023
Technical
Cloud IAM
DFIR
Blue
Talk
Open →
2023-08
22:40
Building Bulletproof AWS Environments with Secure CDK Constructs
Keegan Justis
BSides PDX
· 2024
Technical
Talk
Open →
2024-11
36:51
I Find Your Lack of Serverless Disturbing! Leveraging the Cloud to Automate the Mun
Michael Butler
Bryce Kunz
BSides SLC
· 2019
Talk
Open →
2019-02
49:02
BSidesIowa 2019 "DevSecOps Key Controls for Modern Security Success"
BSides Iowa
Open →
2019-05
53:35
A Shock to the System: Static Analysis for Real AppSec
Ochaun Marshall
BSides Huntsville
· 2021
Technical
DevSecOps
Supply Chain Security
Web AppSec
Blue
Talk
Open →
2021-02
37:00
A Shock to the System: Static Analysis for Real AppSec
Ochaun Marshall
BSides RDU
· 2021
Technical
Web AppSec
Talk
Open →
2021-10
35:49
Shifting Security Left
Tyler Parrot
BSides St. John's
Technical
Cloud IAM
DevSecOps
Blue
Talk
Open →
2025-05
23:21
The Dev Ops Crusades
Ochaun Marshall
BSides Charlotte
· 2019
Talk
Open →
2019-11
28:16
Deep dive into cloud DevOps through Infrastructure as Code
Jay Chen
BSides SATX
· 2020
Technical
Cloud IAM
DevSecOps
Empirical Research
Talk
Open →
2020-08
20:57
Half-Life: Lambda Security
Artem Tsvetkov
BSides Barcelona
· 2019
Technical
Talk
Open →
2022-01
46:02
DeceptionOps: Automating Deception Tech - Andrew Waite
BSides Newcastle
Open →
2023-12
35:30
Flex Seal Your CI/CD Pipeline
Ochaun Marshall
BSides Columbus
· 2020
Technical
Cloud IAM
DevSecOps
Blue
Talk
Open →
2020-08