BOSH Day 2016 – CF Summit Santa ClaraLook Ma,No Keys!!!

Sean Keery

Sean Keery

Anybody ever put their keys in source control?

I’ve seen 6 figure bill$ due to this ^

Amazon wants to help

Identity and Access Management

IAM

Instances

RolesProfile

AWS Account

Instance

STS

LongestLived

Shortest🔒

🔒

Security Token Service STS

Least PrivilegesWell-known Expirations

Temporary Security Credentials

Jumpbox/Bastion

Instance Groups

BOSHDeployments

Rotate

Record

RepaveRe

pair

Rotate, Repave http://bit.ly/1TSUsjzBosh Docs http://bit.ly/1syk9Qa

BOSH Day 2016 – CF Summit Santa ClaraLook Ma, No Keys!!!

Sean Keeryskeery@pivotal.io@zgrinch