Roy Stultiens

Senior Security Specialist

Bio

Roy Stultiens is a Senior Security Specialist at Secura. With a focus on Cloud Security, he is one of Secura’s Cloud experts and involved in many cloud penetration tests. He has seen numerous environments and successfully exploited many of them, ranging from data leaks to privilege escalations and account takeovers. Apart from his technical work, Roy is involved in cloud and containerization security trainings by developing lab environments and organizing workshop.

Sessions

ACD226

Policy Perils: From Misconfigurations to Account Takeovers

Room: Zaal 10 | Time: 14:10 | Duration: 30

AWS IAM becomes complicated when dealing with permissions for resources spread across different policies, roles and accounts. This opens the door for dangerous mistakes that allow for privilege escalation. In this talk, we show you real-life cases on how innocent-looking permissions can lead to full AWS account takeovers, even hop to accounts that should be out of reach. The talk will include 2 case scenarios pertaining to privilege escalation through over-permissive policies and associated roles.

Sudharshan Kumar

Senior Security Specialist

Roy Stultiens

Senior Security Specialist