Jeff Moncrief discusses Sonrai Security's Cloud Permissions Firewall, and the best practices for using AI-powered summaries and orchestration to ensure security at all points.Topics Include:Jeff Moncrief introduces Sonrai Security and Cloud Permissions FirewallFocus on achieving least privilege access in AWS quicklyLightweight orchestration layer secures IAM from inside outEliminates need to write hundreds of individual policiesCustomers struggle with identity risk in CNAP/CSPM toolsGenerative AI adoption driving top security use casesBedrock and AI agents mentioned daily by customersProduct managers should consider underlying platform security risksAI models have control over infrastructure they run onIdentity is fundamental infrastructure enabling AWS AI modelsSonrai uses Bedrock capability inside Cloud Permissions FirewallJust-in-time access provides temporary, time-boxed AWS accessBedrock generates session summaries from audit logs automaticallyPlain English insights show what happened during sessionsSession summaries improve audit compliance and incident responseCustomer with 1000 accounts manually deployed service controlsFriday afternoon deployment caused very bad weekend disasterPolicy inheritance issues broke child accounts and OUsPlanning and orchestration essential for scaling AI securitySonrai platform built 100% cloud-native on AWSCoordinates service control policies and resource control policiesJust-in-time access relies on IAM Identity CenterParticipates in ISV Accelerate and AWS MarketplaceSecurity best practices start with identity as foundation"Hackers don't hack, they just log in" philosophyEliminate standing privileges with just-in-time access patternsRestrict AI services by user, location, and accountReview over-permissioned or inactive third-party vendor accessActionable insights through useful logging and AI summarizationFuture focus on protecting new services and permissionsParticipants:Jeff Moncrief – Field CTO & Director of Sales Engineering, Sonrai SecurityLinks:Website – Sonraisecurity.comAWS Marketplace – Sonrai SecuritySee how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related