look ma, no keys!!!
TRANSCRIPT
![Page 1: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/1.jpg)
BOSH Day 2016 – CF Summit Santa ClaraLook Ma,No Keys!!!
Sean Keery
![Page 2: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/2.jpg)
Sean Keery
![Page 3: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/3.jpg)
Anybody ever put their keys in source control?
I’ve seen 6 figure bill$ due to this ^
![Page 4: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/4.jpg)
Amazon wants to help
Identity and Access Management
IAM
![Page 5: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/5.jpg)
Instances
RolesProfile
AWS Account
Instance
STS
LongestLived
Shortest🔒
🔒
![Page 6: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/6.jpg)
Security Token Service STS
Least PrivilegesWell-known Expirations
Temporary Security Credentials
![Page 7: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/7.jpg)
Jumpbox/Bastion
Instance Groups
BOSHDeployments
![Page 8: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/8.jpg)
Rotate
Record
RepaveRe
pair
![Page 9: Look Ma, No Keys!!!](https://reader035.vdocuments.net/reader035/viewer/2022062503/58754e561a28abb8208b7e1f/html5/thumbnails/9.jpg)
Rotate, Repave http://bit.ly/1TSUsjzBosh Docs http://bit.ly/1syk9Qa