Home
Talks
CFP Guide
What is BSides?
About
Contact
Light
← All talks
Tool
BSides talks featuring AWS IAM
67
talks mention this tool across
34
BSides chapters.
Talks featuring AWS IAM
28:23
AWS vs Azure Security
Paul Schwarzenberger
BSides London
· 2019
Technical
Cloud IAM
Talk
Open →
2019-06
20:01
Fantastic AWS Attacks and Where to Find Them
Georgios Kapoglis
BSidesSF
· 2020
Technical
Cloud IAM
Talk
Open →
2020-03
43:58
Attacking & Defending Supply Chains: How we got Admin in your Cloud, Again
Mike Ruth
BSidesSF
· 2024
Technical
Cloud IAM
Supply Chain Security
Talk
Open →
2024-07
28:47
Learning from AWS Customer Security Breaches
Rami McCarthy
Bsides CT
· 2020
Technical
Cloud IAM
DFIR
Intermediary
Case Studies and Incidents Analysis
Talk
Open →
2020-11
43:27
Threat Hunting AWS CloudTrail Logs with Microsoft Sentinel: Real-Time Attack Demo
Arijit Paul
BSides Sydney
· 2025
Technical
Cloud IAM
Detection Engineering
Threat Intel
Intermediary
Demo
Open →
2025-02
28:59
BSidesSF 2018 - Managing Secrets in Your Cloud Environment (Evan Johnson • Maya Kaczorowski)
Evan Johnson
Maya Kaczorowski
BSidesSF
· 2018
Technical
Cloud IAM
Container Security
Cryptography
Talk
Open →
2018-04
41:37
Getting Things Fixed: Security Wins and Fails
Scott Piper
BSides SLC
· 2025
War Stories
Cloud IAM
Vulnerability Research
Keynote
Open →
2025-06
1:04:06
Inside Cloud Security Essentials with Shashank Dubey
Shashank Dubey
Karthik VMA
BSides Noida
· 2024
Career
Technical
Intro
Talk
Open →
2024-11
1:24:57
BSIDESLV 2018 - Breaking Ground - Day One
BSides Las Vegas
Open →
2018-08
48:35
CI/CD Security: A New Eldorado
Remi Escourrou
Xavier Gerondeau
Gauthier Sebaux
BSides Las Vegas
· 2022
Technical
Cloud IAM
DevSecOps
Supply Chain Security
Red
Talk
Open →
2022-09
32:23
WhizBangLambdaFix: where AWS Misconfigurations meet Auto-Fix-It Antics
Lily Chau
Lakshmanan Murthy
BSidesSF
· 2024
Technical
Cloud IAM
Open →
2024-07
22:12
Launch Control — Automating a Security Baseline in the Cloud at Scale
David Levitsky
Olivia Hillman
BSidesSF
· 2023
Technical
Cloud IAM
Demo
Talk
Open →
2023-05
47:23
Andrew Krug - Hacking Serverless Runtimes
Andrew Krug
BSides PDX
· 2018
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2018-04
5:42:35
BSides Prishtina 2025 - Day 2 Live
BSides Prishtina
· 2025
Technical
Talk
Open →
2025-04
39:13
Minimizing AWS S3 bucket attack vectors at scale
Damien Burks
BSides Dallas/Fort Worth
· 2022
Technical
Cloud IAM
DevSecOps
Blue
Talk
Open →
2022-11
37:28
An Overview in Cloud Penetration Testing
Bleon Proko
BSides Prishtina
· 2022
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2022-05
30:56
BSidesMCR 2019: Exposing AWS With FlAWS - Mike Lehan
BSides Manchester
Open →
2019-09
36:45
BG - Lateral Movement and other Creative Steps Attackers Take in AWS
BSides Las Vegas
Open →
2022-09
44:04
Pwned Cloud Society
Bryce Kunz
BSides SLC
· 2017
Technical
Cloud IAM
Red
Talk
Open →
2017-06
23:29
The Dark Side of Cloud-Based Database Engines
Ofir Balassiano
Ofir Shaty
BSides TLV
· 2023
Technical
Cloud IAM
Red
Talk
Open →
2023-07
28:51
JIT Happens: How Instacart Uses AI to Keep Doors Open and Risks Closed
Dominic Zanardi
Matthew Sullivan
BSides Las Vegas
Technical
AI Security
Cloud IAM
Blue
Demo
Open →
2024-09
28:31
AiIAM: Transforming the Democratized AWS IAM Architecture with LLMs
Anthony Scheller
Jorge L Gomez
BSidesSF
· 2024
Technical
Cloud IAM
Talk
Open →
2024-07
18:08
Practical Perimeter-less Authentication Solutions for Startups Using AWS Native Solutions
Rohit Bansal
BSides Las Vegas
· 2024
Technical
Cloud IAM
Demo
Talk
Open →
2024-09
27:05
I Own your Cluster - Taking over AWS clusters using Chain Attack
Chen Shiri
BSides TLV
· 2024
Research
Technical
Cloud IAM
Container Security
Vulnerability Research
Advanced
Red
Case Studies and Incidents Analysis
+2
Open →
2024-08
49:11
Rami McCarthy - AWS Security: Easy Wins and Enterprise Scale
Rami McCarthy
BSides Boston
· 2020
Technical
Cloud IAM
Supply Chain Security
Talk
Open →
2020-11
38:43
Cloud Attack: Dissecting Attack Paths with Graph-Mode
Filipi Pires
BSides Las Vegas
· 2024
Technical
Cloud IAM
Threat Modeling
Vulnerability Research
Red
Talk
Open →
2024-09
55:43
Automated Triage Collection at Scale in the AWS Cloud
Ryan Tick
BSides Dallas/Fort Worth
· 2021
Technical
Cloud IAM
DFIR
Talk
Open →
2021-11
49:49
Cloud Breach Incident Response & Forensics
Michael T. Raggo
Bsides CT
· 2020
Technical
Cloud IAM
Case Studies and Incidents Analysis
Talk
Open →
2020-11
25:23
How Attackers Can Use KMS to Ransomware S3 Buckets - Bleon Proko
Bleon Proko
BSides Prishtina
Technical
Cloud IAM
Talk
Open →
2024-09
37:36
Breaking The Cloud: A Tale Of 3 Breaches
Ashish Rajan
BSides London
Technical
Talk
Open →
2024-02
40:26
Practical Kubernetes Security at Scale
Stian Kristoffersen
Birgir Stefansson
BSides Oslo
· 2022
Technical
Cloud IAM
Container Security
Blue
Talk
Open →
2023-01
30:22
Strangeways, Here We Come
Victor Clark
BSidesSF
· 2019
Technical
Cloud IAM
Network Security
Talk
Open →
2019-03
25:57
How Attackers Can Use KMS To Ransomware S3 Buckets
Bleon Proko
BSides Tirana
· 2023
Technical
Cloud IAM
Talk
Open →
2023-11
55:15
Welcome to the Jungle: Pen Testing AWS
Mike Felch
BSides Tampa
Technical
Cloud IAM
Vulnerability Research
Red
Talk
Open →
2023-09
4:56:08
Cinema
BSides RDU
· 2019
Open →
2019-10
37:12
BSides Sofia 2022: Common security pitfalls in AWS Public cloud for highly regulated industries
Daniel Rankov
BSides Sofia
· 2022
Technical
Talk
Open →
2022-04
52:10
Cloud Security
Scott Arveseth
BSides SLC
· 2015
Technical
Talk
Open →
2015-04
42:37
Modern Identity Providers Under Attack: Tactics, Techniques, Detections and Mitigations
Anurag Khanna
BSides Canberra
· 2025
Technical
Authentication & Authorization
Cloud IAM
Threat Intel
Intermediary
Blue
Red
Case Studies and Incidents Analysis
+2
Open →
2025-12
36:47
Tim Crothers - Living off the (land)cloud: Scattered Spider and the cloud control plane
Tim Crothers
BSides Augusta
· 2025
Technical
Cloud IAM
Blue
Red
Demo
Talk
Open →
2025-10
55:29
Trust Chain: How to imagine and realize multi-organization Cloud Environment
Omer Farooq
BSides DC
· 2018
Technical
Cloud IAM
Talk
Open →
2018-11
17:10
From Keyless to Careless: Abusing Misconfigured OIDC Authentication in Cloud Environments
Christophe Tafani-Dereeper
BSides Las Vegas
· 2024
Technical
CI/CD Security
Cloud IAM
Vulnerability Research
Intermediary
Red
Case Studies and Incidents Analysis
Technical Deep-dives
+1
Open →
2024-09
30:53
Building an Auto-Remediation Platform for the Cloud
Taylor Wilson
BSides SLC
· 2022
Technical
Talk
Open →
2023-01
32:03
Hey, You, Get Out of My Cloud – Real-World Cloud Security
Scott Arveseth
BSides SLC
· 2025
Technical
Cloud IAM
Talk
Open →
2025-06
32:20
Secure(r) Cloud Development
Christo Goosen
Toufeeq Ockards
BSides Cape Town
· 2017
Technical
Cloud IAM
Detection Engineering
DevSecOps
Talk
Open →
2017-12
37:35
When Cloud Infrastructure Provisioned With Someone in Marketing's Credit Card Is Compromised
Aaron Shelmire
BSides Peru
· 2023
Technical
Cloud IAM
DFIR
Blue
Talk
Open →
2023-08
46:10
Let's Chat About SOC 2s, Baby
Wendy Knox Everette
BSides Las Vegas
· 2021
Policy
GRC
Intro
Talk
Open →
2021-08
54:21
Instance Metadata Service: Exploiting IMDSv1 and SSRF in AWS
Sam Ezebunandu
BSides Calgary
Technical
Cloud IAM
Vulnerability Research
Web AppSec
Red
Case Studies and Incidents Analysis
Talk
Open →
2024-03
36:51
BSides Toronto 2019 Jamie Baxter
BSides Toronto
Open →
2019-10
44:22
Guardrails in the Cloud
Rohini Sulatycki
BSides Tampa
· 2021
Technical
Cloud IAM
Talk
Open →
2021-04
22:34
The Phantom of the Infrastructure: Investigating Hidden IAM Risks in Bedrock API Keys
Sergio Garcia
BSides Seattle
· 2026
Technical
AI Security
Cloud IAM
Technical Deep-dives
Talk
Open →
2026-03
46:56
Building Castles in the Cloud: AWS Security and Self-Assessment
Rami McCarthy
Bsides CT
· 2019
Technical
Cloud IAM
Talk
Open →
2019-11
16:42
Building Secure Machine Learning Environments in Amazon SageMaker
Uendi Hoxha
BSides Tirana
· 2024
Technical
AI Security
Cloud IAM
Talk
Open →
2024-10
18:32
Cutting through the Static: Dynamic Credentials for AWS & Terraform Cloud - Adam Mikolajczyk
BSides Peru
Open →
2023-08
53:55
Misconfiguration Driven Cloud Attacks
Filipi Pires
BSides 312
· 2025
Technical
Cloud IAM
Talk
Open →
2025-07
46:38
Getting started with Security in AWS
Zack Glick
BSides Buffalo
· 2022
Technical
Cloud IAM
Intro
Talk
Open →
2022-06
23:12
Breaking free from the chains of fate: Bypassing AWSCompromisedKeyQuarantineV2 Policy
Andrew Kraut
BSides Albuquerque
Technical
Cloud IAM
Talk
Open →
2024-08
43:52
JOINing Across the Stack: Structured Security Analytics for the Modern Attack Surface
Eric Kaiser
BSides Las Vegas
· 2021
Technical
Cloud IAM
Container Security
Detection Engineering
Blue
Talk
Open →
2021-08
30:49
IAM and why it is important in Cloud environments
Dan Thormodsgaard
BSides Tampa
· 2021
Technical
Cloud IAM
Talk
Open →
2021-04
36:46
Cryptocoin Miners vs ML - John Callahan
BSides Peru
Open →
2019-07
16:15
Leaving Doors Unlocked With Cognito
BSides CDMX
· 2025
Technical
Cloud IAM
Web AppSec
Red
Talk
Open →
2024-10
48:23
Blowing up Serverless Security with IAM (And How to Avoid It)
Josh Stella
BSides NoVa
· 2021
Technical
Cloud IAM
Vulnerability Research
Intermediary
Talk
Open →
2021-06
50:50
Dynamic Web Scanning at Massive Scale
Erik Peterson
BSidesSF
· 2012
Technical
DevSecOps
Web AppSec
Talk
Open →
2017-11
23:21
The Dev Ops Crusades
Ochaun Marshall
BSides Charlotte
· 2019
Talk
Open →
2019-11
41:38
IAM in the AWS Cloud
Ochaun Marshall
BSides Greenville
· 2021
Technical
Cloud IAM
Talk
Open →
2021-09
54:52
Machine Identity & Attack Path: The Danger of Misconfigurations
Filipe Pires
BSides Las Vegas
Technical
Cloud IAM
Threat Modeling
Vulnerability Research
Red
Technical Deep-dives
Talk
Open →
2025-12
40:40
Data Lake Security in the Public Cloud
Shamir Charania
BSides Calgary
Technical
Cloud IAM
Network Security
Talk
Open →
2022-12
35:30
Flex Seal Your CI/CD Pipeline
Ochaun Marshall
BSides Columbus
· 2020
Technical
Cloud IAM
DevSecOps
Blue
Talk
Open →
2020-08
