Understanding AWS IAM Roles and Instance Profiles - Security Implications and Best Practices

Explore the intricate relationship between AWS IAM roles and instance profiles in this 24-minute conference talk from fwd:cloudsec. Dive deep into lesser-known quirks and unexpected behaviors that could impact cloud security and resource management. Learn about critical findings including credential persistence after role removal, inconsistent refresh timings, and instance profile survival post-role deletion. Understand the security implications of these behaviors within AWS ecosystems while gaining practical insights for proper IAM role and instance profile management. Through detailed examples and real-world scenarios, master the complexities of AWS identity management to better protect cloud infrastructure against hidden vulnerabilities and ensure robust security practices.