How Do You ALL THE CLOUDS: Multi-Cloud Security Strategy
Henry delivers an energetic, practical guide to securing multi-cloud environments, eliminating dangling DNS, exposed storage buckets, and IAM privilege sprawl.
Summary
The Chaos of Multi-Cloud Enterprise Sprawl
Managing enterprise security across AWS, Azure, and GCP requires balancing disparate security models, inconsistent logging schemas, and fragmented asset inventories.
Eliminating Critical Cloud Blind Spots
Henry reviews pervasive multi-cloud vulnerabilities—including dangling DNS records, publicly accessible object storage buckets, and unmanaged compute instances.
Establishing Unified IAM and Network Guardrails
The author explains how to implement centralized IAM auditing, enforce least-privilege role boundaries, and automate security group compliance across cloud providers.
A Pragmatic Blueprint for Cloud Defense
The presentation provides enterprise defenders with a structured roadmap for asset discovery, continuous compliance monitoring, and posture management.
Related talks
Sessions·18 min
Michael Ratemo
Michael Ratemo, Principal Security Consultant, Cyber Security Simplified RSA Conference 2025 Guide.
fwd:cloudsec North America 2025·21 min
Industry experts analyze emerging threats surrounding Beyond the Big Three: Mastering Oracle Cloud Security in a Multi-Cloud World.
DCGVR Village·30 min
Deconstructing AWS Instance Metadata Service (IMDS) exploitation, abusing SSRF to harvest temporary IAM credentials and escalate cloud permissions.