Marcus Delacroix
Security Engineering Director
Marcus runs red team exercises against cloud control planes for a living. He teaches identity as the real network perimeter, because in practice it is.
- DRM-free PDF and EPUB, yours to keep
- Instant download the moment you check out
- Free updates for the life of the edition
Identity Is the Perimeter
Cloud Security When the Network No Longer Protects You
Multi-cloudAdvancedSecurity
Cloud breaches rarely start with a kernel exploit. They start with an over-scoped role, a forgotten trust policy, or a service account key in a repository. The network perimeter you were trained to defend has been replaced by an identity graph most teams have never drawn.
Marcus Delacroix walks through real attack paths across AWS and GCP — privilege escalation via PassRole, cross-account trust abuse, service account impersonation chains, metadata service pivots — and then shows the policy design that closes each one.
This is a defensive book written from the attacker's side of the table, intended for teams who own their own cloud security posture.
What you'll learn
- Draw and audit the identity graph of an existing cloud environment
- Recognize privilege escalation paths through role assumption and impersonation
- Write least-privilege policies that survive real developer workflows
- Instrument the control plane so misuse is visible within minutes
Table of contents
- 01The Identity Graph32 pp
- 02Escalation via PassRole38 pp
- 03Cross-Account Trust36 pp
- 04Service Account Impersonation Chains40 pp
- 05Metadata Services and Pivots30 pp
- 06Least Privilege That People Will Accept48 pp
- 07Detecting Control Plane Abuse42 pp
- 08Incident Response in the Cloud38 pp
8 chapters · 428 pages total
Details
- ISBN
- 978-1-959321-03-8
- Edition
- 1st
- Pages
- 428
- Published
- Formats
- PDF, EPUB
- Platform
- Multi-cloud