Cloud Partnership Portals: A Perfect Storm of Half-Baked IAM Controls

Explore a 25-minute conference talk from fwd:cloudsec where Senior Cloud Security Engineer Laura Haller delves into the security challenges surrounding Cloud Service Provider (CSP) Partner Centers. Gain critical insights into how these essential portals, which facilitate marketplace offerings between cloud vendors and customers, often lack robust Identity and Access Management (IAM) controls. Learn about the technical vulnerabilities in these systems, practical strategies for security teams to work within current limitations, and potential improvements for CSP implementations. Drawing from nearly a decade of cloud security experience at organizations like HashiCorp, Capital One, and Charles Schwab, discover valuable perspectives particularly relevant for companies publishing products to public cloud marketplaces or consuming marketplace offerings. Understand the significant risks to company reputation and customer environments when these crucial but often overlooked components of cloud infrastructure are compromised.