EPISODE · Jan 30, 2025 · 31 MIN
Ep 10: Locking Down the Bots - Securing NHIs in the Cloud
from Access Granted · host Britive
In this episode of Access Granted, John Morton, Field CTO at Britive, dives into the world of Non-Human Identities (NHIs) and their pivotal role in modern cloud security. From understanding what NHIs are to exploring their impact on automation, workflows, and security strategies, John shares insights into why they’ve become a critical focus for organizations today. He also discusses best practices for securing NHIs, integrating them into a zero-trust model, and why static access for NHIs is a risk that organizations can no longer afford. Key Takeaways: Understanding NHIs, the role they play in automation and cloud operations, and why securing them is different from human identities. Why NHIs have come under increased scrutiny with increased cloud adoption, automation, and the growing number of API keys, tokens, and service principles. How static credentials and unmanaged NHIs can lead to breaches, and why securing them with JIT access is essential. Practical steps for securing NHIs, from implementing guidelines to modernizing access management. 🎧 Listen to Access Granted on Spotify: https://open.spotify.com/show/7ukJOqUhDmTRj2pm3ykibS 🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136 📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA
What this episode covers
In this episode of Access Granted, John Morton, Field CTO at Britive, dives into the world of Non-Human Identities (NHIs) and their pivotal role in modern cloud security. From understanding what NHIs are to exploring their impact on automation, workflows, and security strategies, John shares insights into why they’ve become a critical focus for organizations today. He also discusses best practices for securing NHIs, integrating them into a zero-trust model, and why static access for NHIs is a risk that organizations can no longer afford. Key Takeaways: Understanding NHIs, the role they play in automation and cloud operations, and why securing them is different from human identities. Why NHIs have come under increased scrutiny with increased cloud adoption, automation, and the growing number of API keys, tokens, and service principles. How static credentials and unmanaged NHIs can lead to breaches, and why securing them with JIT access is essential. Practical steps for securing NHIs, from implementing guidelines to modernizing access management. 🎧 Listen to Access Granted on Spotify: https://open.spotify.com/show/7ukJOqUhDmTRj2pm3ykibS 🍏 Listen on Apple: https://podcasts.apple.com/us/podcast/access-granted/id1770083136 📺 Watch this episode on YouTube: https://www.youtube.com/playlist?list=PLotHzn4KKa4K7qanA_Oi2-LZagw_mINyA
NOW PLAYING
Ep 10: Locking Down the Bots - Securing NHIs in the Cloud
No transcript for this episode yet
Similar Episodes
No similar episodes found.