Tales From the Sewer: Building a Data Security Platform for the Cloud

Explore real-world cloud security challenges and solutions in this 16-minute conference talk from fwd:cloudsec, where Open Raven's Head of Operations shares critical insights gained while building a data security platform. Discover costly lessons learned from a $40,000 S3 configuration mistake, examine the intricacies of Lambda log management, and navigate complex IAM scenarios. Gain practical knowledge about encryption, NAT Gateway configurations, permission structures, and policy management across cloud environments. Learn from firsthand experiences dealing with readonly roles, viewer roles, and GCP-specific errors while understanding the unique challenges and edge cases encountered in cloud data security implementation.