Ochaun Marshall — Securing Web applications in AWS

Ochaun Marshall is a developer and security consultant. In his roles at Secure Ideas, he works on ongoing development projects utilizing Amazon Web Services and breaks other people's web applications. Ochaun joins us to talk about the changing tide of serverless and frustrations with AWS security. Before we got to the actual topic, we talked about how he currently works as a developer some times, and a pen tester/security person the rest of the time, and the conflict that arises from this split role. Please enjoy this conversation with... O'Shawn Marshall is a developer and security consultant. O'Shawn joins us to talk about the changing tide of serverless and frustrations with AWS security.The Application Security Podcast is brought to you by Security Journey.About Security JourneyO'Shawn Marshall is a developer and security consultant.→ Learn more about Security JourneyConnect with Ochaun Marshall:→ Secure Ideas→ OWASP Proactive ControlsMentioned in this episode:→ Secure Ideas→ OWASP Proactive ControlsFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Ochaun Marshall: Ochaun Marshall — Securing Web applications in AWS03:29 Very cool. You survived that 60-year-old librarian coming after you. She06:26 Yeah, that's, that's definitely good advice, something that we share as11:13 Yeah, I'll tag on to something you said here about kind14:19 Yeah, I guess there's some of that basic stuff. Like, when18:59 Yeah, or you end up opening it, making it wide open21:07 Yeah, that's good advice just for in general, for anything. Yeah25:05 Yeah, that's definitely going to be a challenge as we move29:35 Authorization. How are we ensuring that the right request, that the34:26 It's not simple. It's so complicated. Like, I've been playing around