Talks
Events

How to Kill an AWS Access Key

Benjamin Hering at BSidesSF 2020

AWS Access Keys are great for attackers; powerful and sitting in plaintext. The Security Token Service enables short-lived credentials, but the path to getting that to work for humans isn't simple. Assuming zero level of expertise, we'll cover how our company killed off our static access keys.