Hacking clouds using the power of the sun
2024-06-17 , Breakout 2

The security of the cloud is based on a foundation of security controls that ensure the integrity of traffic destined to endpoints of the cloud service provider, but what would happen if you could somehow intercept this traffic? In this talk, I walk through a year-long research project that utilises a new take on a decade-old vulnerability against AWS, Azure and Google Cloud and talk through the theoretical and practical impacts.

As an AWS Community Hero and Ambassador, Ian tends to speak his mind when it comes to cloud security. When he's not busy making open-source tools, he's squatting S3 buckets, popping data lakes, and breaking every rule in the AWS Terms of Service. He also has a day job as the Cloud Principal at Kablamo, a cloud consultancy from Sydney, Australia.