Patterns in S3 Data Access: Protecting and Enhancing Access to Cloud Data Stores

Learn advanced techniques for managing access to large-scale heterogeneous data sets in cloud storage through this 44-minute conference talk from fwd:cloudsec. Explore dynamic control plane implementation for flexible and auditable data access, focusing on AWS S3 and Google Cloud Storage. Discover just-in-time access provisioning methods, request signing mechanisms, and solutions for scenarios where traditional AWS IAM tools prove insufficient. Delve into topics including signed URLs, capability-based security, AWS request signing for non-AWS users, photo sharing applications, data lakes, permission boundaries, STS assume role configurations, proxy implementations, and object Lambda functions. Master practical approaches to reshaping data access patterns while maintaining least privilege principles and addressing common challenges like network latency and multipart requests.