大规模解决云特权问题：Fiserv案例研究（由Sonrai Security赞助）.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Sponsored by Sonrai SecuritySolving the Cloud Privilege Problem at Scale:A Fiserv Case StudyBrent StainsVP Enterprise Architecture,FiservC O P 2 1 3-S 2025,Amazon We

2、b Services,Inc.or its affiliates.All rights reserved.Agenda1.Fiservs ChallengeSCP constraints,1K+accounts,governance gaps,and audit pressure2.Tool Fatigue is RealWhen fixing a problem leads to a mission3.The Turning Point Bias for ActionBeyond amazing visibility,immediate results4.Results&The Missio

3、nSafety for AI services,1,000+hours saved,onto a more secure future 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Growing Cloud,Growing ComplexityNeeded a way to safely optimize the management of account-level,auditable controls.Hundreds of new accounts per yearLong planning and

4、 testing cycles SCP size limitations Compliance mandates arent an optionSCP changes high risk 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Tool Fatigue is Realmeanwhile,“Rome burns!”“We have too many tools”“We have a similar tool”“We need this tool”“Tools cost money we dont hav

5、e”“We could do this ourselves”“Who will operate it?”2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Turning Point Cloud Permissions Firewall 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Turning Point Cloud Permissions FirewallBig numbers raised questions“WHAT

6、?”Visibility+action real controlThis was more than just SCP automation90-Day Sprint:Protect AI servicesDevelop repeatable processesProve value to the businessWe took action!2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Momentum and VisionW