Yoav Yanilov

Conf42: DevSecOps 2022

The Power of AWS Tags (Advanced IAM Session)

While AWS IAM is packed with ABAC features, enforcing who-can-tag-what at scale can be frustrating. We'll introduce the concept of "Control Tags" - a tag-based control plane for tagging operations and its applications in Similarweb, most notably enforcing the two-person rule for sensitive actions.