Ep. 28 Kinnaird McQuade - Policy Sentry and Cloudsplaining, Stelligent Book Club (Episode 28‪)‬ DevOps on AWS Radio

In this episode, Kinnaird McQuade, Lead Cloud Security Engineer at Salesforce, joins us to talk about his tools Cloudsplaining and Policy Sentry. Policy Sentry provides a framework for writing IAM policies to make it easier to create least privilege policies. Cloudsplaining can help find policies that may allow more access than required.
Keith Monihen joins hosts Scott Alexander and Shaug Evans this episode to talk about the Stelligent book club and how it helps create a culture of learning and shared connection among employees.

For full episode details, visit https://stelligent.com/blog/

Episode Notes

Hosted by Scott Alexander (@salexpdx) and Shaug Evans (@ohshaughnessy)
Interview Guest: Kinnaird McQuade @kmcquade3
Stelligent Guest: Keith Monihen @KeithMonihen


Episode Timeline
00:00 Podcast Introduction and welcome
01:00 Kinnaird McQuade interview
28:15 Discussion of Interview with Scott, Shaug, and Keith
33:00 Recent Blog Post
36:50 Stelligent Book Club
48:00 Closing Contact Information

Relevant Links
CloudSplaining https://cloudsplaining.readthedocs.io/en/latest/
Policy Sentry https://policy-sentry.readthedocs.io/en/latest/
Kinnaird McQuade Website https://kmcquade.com/
Open Source at Salesforce https://opensource.salesforce.com/
Salesforce Careers https://www.salesforce.com/company/careers/
AWS Nuke - https://github.com/rebuy-de/aws-nuke
Cloud Custodian - https://cloudcustodian.io/
Cloud Tracker - https://github.com/duo-labs/cloudtracker


Blog posts:
Trend Micro Smart Scan: https://stelligent.com/2020/05/22/is-my-container-image-secure-ci-cd-container-scanning-using-trend-micro-deep-security-smart-check-and-aws-codepipeline/
Amazon Inspector Introduction: https://stelligent.com/2020/05/08/introduction-to-amazon-inspector/
Implementing Amazon Inspector in Automated AMI Pipelines: https://stelligent.com/2020/05/08/implementing-amazon-inspector-in-automated-ami-pipelines/
CFN Leaprog: https://stelligent.com/2020/05/15/generating-least-privileged-iam-roles-for-cloudformation-and-service-catalog-with-cfn-leaprog/
Paul Duvall’s Forbes Article: https://www.forbes.com/sites/forbestechcouncil/2020/05/01/exponential-cloud-security/

Books:

The Year without Pants - https://www.amazon.com/Year-Without-Pants-WordPress-com-Future-ebook/dp/B00DVJXI4M
People Centric Security - https://www.amazon.com/People-Centric-Security-Transforming-Enterprise-Culture-ebook/dp/B015EZ2PT4
Accelerate - https://www.amazon.com/Accelerate-Software-Performing-Technology-Organizations-ebook/dp/B07B9F83WM
Clean Code - https://www.amazon.com/Clean-Code-Handbook-Software-Craftsmanship-ebook/dp/B001GSTOAM
Clean Architecture - https://www.amazon.com/Clean-Architecture-Craftsmans-Software-Structure-ebook/dp/B075LRM681


Intro/Outtro music - Atmosphere by Mi77er
https://soundcloud.com/mi77ermusic/atmosphere-original-mix-progressive-ambient-house