S3 Buckets and IAM Audits

50 percent of all corporate data is stored in the cloud, according to Statista. That's a lot of data in the cloud, given how much data is collected and produced daily. Most of this data is stored in Amazon S3 buckets, Google Cloud Storage, Azure Blob, and a host of different storage options available on cloud platforms.  The question then, is how do we secure the data stored in these storage options, and in particular, how do we secure the data stored in Amazon S3 buckets? Vinoo, who oversees critical data pipelines as Head of Business Engineering at Citadel Investment Group,  shares some advice on securing your S3 buckets and also talks about how IAM audits and the culture surrounding IAM audits should change. Tune in to this episode of Ask A CISO to hear: - What S3 Buckets are - What are the various ways to provide permissions to S3 Buckets and the vulnerabilities associated with each - What could have happened in a real-life case study of data leaked from S3 Buckets - What IAM audits are how they should be conducted - What needs to be changed about how IAM audits are conducted and the culture surrounding IAM audits The Ask A CISO podcast is a production of Horangi Cyber Security, Asia's leading cloud security provider. The show is hosted weekly by cofounder and CEO, Paul Hadjy. -- Show Notes and Transcript -- https://www.horangi.com/blog/s3-buckets-permissions-and-iam-audits -- About Horangi Cybersecurity -- More information about the Ask A CISO podcast: https://www.horangi.com/resources/ask-a-ciso-podcast About Horangi Cyber Security: https://www.horangi.com --- About the Guest -- Vinoo's LinkedIn: https://www.linkedin.com/in/vinoo-ganesh/ -- Attributions -- Ending Music: I Dunno by Grapes http://ccmixter.org/files/grapes/16626 Creative Commons — Attribution 3.0 Unported— CC BY 3.0 Free Download / Stream: https://bit.ly/i-dunno-grapes Music promoted by Audio Library https://youtu.be/sNAE8-mB5lQWe