Security Graph: Open Source Security Research to Secure your Enterprise IAM

Who has access to the most sensitive data in your cloud infrastructure? This seems like a simple question, right? Isn't it just the users who have been granted explicit access combined with the users that have Administrator level access? Unfortunately, it's not that simple.

The truth is, your identity threat model needs to account for transitive trust relationships and privilege escalation. Not only that, it also needs to extend beyond your production AWS account to include anything your production account trusts: your CI/CD tooling, other AWS accounts, and even third-party SaaS platforms might offer exploitable paths that lead to your most sensitive production data.

In this talk, Seth Art, Security Advocate at Datadog, will introduce you to pathfinding.cloud, Datadog’s open source research project that documents all of the ways one AWS IAM identity can escalate their privileges and gain access to other AWS identities. He will share an open source tool created so that you can learn how privilege escalation paths are exploited, and will walk through how you can use Datadog Identity Risks and Security Graph to find and fix the most critical privilege escalation vectors in your own environment.