Catalog

Building services on AWS necessitates using identity and access management (IAM) to define the privileges between cloud identities and resources. The policy language for IAM is as complex as it is expressive, often requiring extensive tooling to avoid pitfalls in large cloud environments. At Netflix, the Cloud Infrastructure Security team continuously works to reduce the complexity of IAM for its engineers, balancing ease of use with right-sized permissions. This chalk talk explores some techniques and non-traditional IAM patterns that Netflix uses to meet engineers where they are—boosting their productivity and increasing the security of their services.