Josh Stella

Conf42 Speaker profile

...

Conf42: Cloud Native 2022

Understanding Cloud Control Plane Compromise Attacks

When the headline reads “Cloud Breach Due to Misconfiguration”, this is only a small part of the story, causing teams to focus solely on eliminating cloud resource misconfigurations and getting a false sense of security. What’s missing in these stories is the series of moves attackers make to discover knowledge about the cloud environment, move laterally, and ultimately extract data without...

Josh Stella

Snyk

...

Conf42: DevSecOps 2021

Minimizing the Blast Radius of a Cloud Breach

Today’s cloud attacks don’t exploit a single misconfiguration, but rather a series of them. Josh will walk through a process for understanding the blast radius of potential security events in your environment, and steps you can take to prevent minor ones from becoming catastrophic breaches. The recent Twitch breach may have begun with a lone server misconfiguration, but it's blast radius...

Josh Stella

Fugue

...

Conf42: Cloud Native 2021

Locking Down the Security of IAM

If you use Amazon Web Services (AWS), you’re probably making extensive use of AWS Identity and Access Management (IAM). It’s a powerful service for managing access to your AWS services and resources that is almost like a new kind of network in the cloud. But for enterprise cloud environments, AWS IAM security can become quite complex. Recent high-profile cloud-based data breaches have involved...

Josh Stella

Fugue

...

Conf42: Open Source Showcase 2020

Chaos Engineering For Cloud Security: Think like a hacker

Cloud security is a software engineering problem⁠ - not a traditional security problem. This talk will demonstrate an advanced cloud misconfiguration exploit to understand how to protect against such attacks using architecture best practices. The cloud changed the way hackers operate: Rather than targeting an organization and then searching for vulnerabilities to exploit, they now use...

Josh Stella

Fugue

...

Conf42: Open Source Showcase 2020

Addressing Cloud Security with Open Policy Agent (OPA)

OPA is an open source policy as code framework and toolset which can be used to validate policy compliance of cloud infrastructure environments. Learn how OPA works, how cloud engineering and dev teams can leverage it and other open source tools to prevent deployment of resource misconfigurations. The challenges of building and modifying at-scale cloud infrastructure environments led to the...

Josh Stella

Fugue

Join the community!

Learn for free, join the best tech learning community for a price of a pumpkin latte.

Annual
Monthly
Newsletter
$ 0 /mo

Event notifications, weekly newsletter

Delayed access to all content

Immediate access to Keynotes & Panels

Terms and Conditions & Code of Conduct
Community
$ 8.34 /mo

Access to Circle community platform

Immediate access to all content

Live events!

Regular office hours, Q&As, CV reviews

Courses, quizes & certificates

Community chats

Join the community (7 day free trial)