Catalog

Two years ago, Netflix introduced the idea of decoupling AWS Identity and Access Management roles from applications’ underlying compute infrastructure in order to house those identities in workload-specific AWS accounts. This session will describe our approach for transparently replacing workloads’ AWS IAM identities without involvement from application owners, as well as the data and tools needed. Based on Netflix’s learnings from the past two years of implementation and migration work to make this vision a reality, this session discusses the capabilities other AWS customers should prioritize to find success in their multi-account efforts and the quantified risk reduction.