Subscribe below to never miss an episode.
TLDR Thanks Bonnie for the lovely conversation. Here are a few points that stood out: * Some of the signals to look for while looking for Security Champions is to see the interest in security, knowledge of tech stack and the understanding of how they integrate. * Enablement and empowerment are two
April 23, 2025
TLDR; * Visibility of IAM principals, permissions, and activities is key to defining the right IAM policies for the organization. CloudTrail and AWS Access Analyzer help tremendously for this need. * Permissions management is a continuous process. Assign permissions based on need, monitoring them, analyze the usage, and optimize based on the
April 09, 2025
TLDR; * The key to application and product security is understanding the risk appetite of the organization. And in order to understand this, organization needs to have an unified approach to risk quantification utilizing context. * A key trick to incorporate security practices into SDLC is to work with secure-by-default libraries / frameworks.
March 26, 2025