wrhn

MiguelHzBz

Joined 5 years ago

Karma
142
Submissions
45
Member since
Oct 13
security researcher that learns and internalizes new concepts and skills continuously. He spent the last 6 years at big tech companies working with small teams in research area with great versatility in addition to seeking own projects. Speaker at several cyber-security conferences
View on Hacker News

Recent submissions

Comment · 3 years ago
IMO, there is no simple answer, since many access control elements are involved and implementations vary between organizations.

From my experience I would say that there may be different factors:

- Every developer is an exception

- IAM is challenging to scale

- Lazy IT Teams?

- Visibility of access controls are poor

Some useful references:

- https://sysdig.com/blog/identity-access-management-difficult...

- https://www.effectiveiam.com/why-aws-iam-is-so-hard-to-use

- https://aws.amazon.com/blogs/security/iam-access-analyzer-ma...

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton