14:10 - 14:40 Breakout 4

ACD213

Do you really need platform teams?

Room: Zaal 11 | Time: 14:10 | Duration: 30

Platform engineering is one of the emerging trends in the tech. It promises to increase developer productivity and reduce cognitive load. Platform engineering focuses on abstracting the complexity of managing infrastructure, CI/CD, and observability through Internal Developer Platforms (IDP). However, having worked in both a startup and a large bank, we experience platform engineering as a burden. The promise of empowering engineers sounds good, but the fallacy often lies in the execution.

Bart Monhemius

Solutions Architect / Tech Lead / Green IT Advocate at de Volksbank

Stef van der Wel

Software Engineer | Cloud & Serverless Enthusiast | Passionate about Green IT and FinOps

ACD124

From vulnerable web application to cloud account takeover

Room: Silent Disco | Time: 14:10 | Duration: 30

In this session we will demonstrate how attackers can abuse a misconfigured web application running on EC2 to gain full control of an entire AWS cloud account. You will be able to understand the chain of events that lead to such a disaster, and gain ideas on how it could be prevented.

Milan Krstic

Prisma Cloud Solutions Architect, Palo Alto Networks

ACD319

How to use modern serverless with GraphQL

Room: Zaal 7 | Time: 14:10 | Duration: 30

In the year 2024, serverless is much more than just AWS Lambda Functions. Now, it is a full-blown ecosystem of managed services with the concept of paying for what you use. The API level could be written without computing services like Lambda Functions or containers with Fargate. I will show the audience how to deploy the GraphQL API with JavaScript Resolvers, EventBridge, and CDK. Disclaimer: no Lambda Functions will be called during the talk and a demo.

Igor Soroka

Indie Serverless Consultant

ACD226

Policy Perils: From Misconfigurations to Account Takeovers

Room: Zaal 10 | Time: 14:10 | Duration: 30

AWS IAM becomes complicated when dealing with permissions for resources spread across different policies, roles and accounts. This opens the door for dangerous mistakes that allow for privilege escalation. In this talk, we show you real-life cases on how innocent-looking permissions can lead to full AWS account takeovers, even hop to accounts that should be out of reach. The talk will include 2 case scenarios pertaining to privilege escalation through over-permissive policies and associated roles.

Sudharshan Kumar

Senior Security Specialist

Roy Stultiens

Senior Security Specialist

ACD201

Scaling Landing Zone Customizations using ControlTower Account Factory for Terraform(AFT)

Room: Zaal 8 | Time: 14:10 | Duration: 30

This session will deep-dive into landing zone customizations using Control Tower Landing Zone accelerator & Account Factory for Terraform(AFT). In this session, we’ll dive into leveraging AWS’s ControlTower Best Practices from Customers experiences and how you can scale customizations (IAM, Custom VPC, SSO) using te AFT account-provisioning pipeline (CodePipeline) & landing zone accelerator(LZA) pipelines.

Masoom Tulsiani

Cloud Architect at Rackspace Technology

ACD203

Shimmers: building an indie mobile game in 2024

Room: Zaal 9 | Time: 14:10 | Duration: 30

Publishing a mobile game as a sole developer is harder than ever, with high user expectations, fierce competition, and stringent regulations. However, using modern tools and technologies, one man army indie developers with full time jobs can still be a thing in 2024! This talk focusses on my journey of conceptualising, building, and deploying an iOS & Android mobile game. We’ll go over the serverless AWS architecture, integrating AWS CDK and Amplify CLI, creating Midjourney art and serving it with Cloudfront and S3, and zoom in on the development journey with its many hurdles and curveballs.

Jochem Kleine

Cloud Consultant by day, Indie Developer by night