Schedule a demo
Open mobile menu

Veza for AWS

If AWS is a cornerstone of your cloud infrastructure, excessive or misconfigured access permissions in AWS IAM can be your single biggest vulnerability. Veza is the identity security platform enabling you to answer the question: Who can take what action on what services and data in AWS?

Take a self-guided tour of Veza for AWS
Schedule a demo
Play Video

Identity security challenges in AWS

Complexity

Identity access is highly configurable. The AWS IAM manual runs to over 1200 pages, with over 100 distinct permissions for S3 alone. Add in the challenge of resolving policy interactions, and access outcomes become almost impossible to predict.

Scale

Security and governance teams are managing many more resources and identities in AWS than in the on-prem world, especially when you account for machine identities. Traditional security and governance tools and processes are still catching up.

Siloed access data

AWS knows the permissions assigned to local roles and users. Your IdP knows which users and groups can assume a role. Neither can connect a federated identity to its specific permissions in AWS.

How Veza can help

Veza is powered by its Authorization Graph, which gives organizations the ability to visualize authorization relationships between all identities and systems by connecting users, groups, roles, and permissions.

Key Benefits
  • Reduced Risk: Surface and prioritize identities with the highest privilege, risk, or policy issues across all enterprise systems, without having to master the complex access model of AWS IAM.
  • Least Privilege: Reduce risks and simplify audits by continuously identifying and remediating identity misconfigurations, dormant permissions, and over-permissioned identities.
  • Team Efficiency: Reduce manual, repetitive tasks by leveraging automation to detect and remove dormant access. Use Veza to delegate access decisions to business managers who best understand specific systems.
AWS specific alerts
Veza Graph showing What access Okta user Alex Wilber has to storage buckets in AWS S3
What access does Okta user Alex Wilber have to storage buckets in AWS S3?
Key Features
  • Effective permissions: translate AWS IAM permissions into simple, human-readable language—”create, read, update, delete”—and resolve complex policy interactions to give actionable intelligence on who can do what in AWS.
  • Automated monitoring: watch continuously for policy violations and new privileged accounts, so you can comply with internal controls and external regulations without burdening security and governance teams.
  • Agentless read-only connections to both AWS and your identity providers, give a complete picture of the access granted to federated identities, revealing governance blindspots, like local users.

Full coverage of AWS services

Veza connects to the full range of AWS services for intelligent access across your cloud infrastructure, including AWS IAM itself, data systems like S3 and Redshift, Compute resources like EC2 and Lambda, and more.

Full services covered by Veza
CASE STUDIES

14 hotel brands in a multi-cloud environment

Choice hotels uses Veza to secure access to data across 14 separate hotel brands using multiple cloud providers including AWS. Check out the case study to learn how Choice developed fine-grained access controls in AWS, and the ability to monitor for policy-violating permissions.

Veza brought something unique to the table that we had never seen before: the permission graph that lets us deeply understand the link between Okta and all of our different AWS accounts, to our databases, and Active Directory. We hadn’t seen anything like that and to be able to visualize that in basically 30 seconds is truly amazing.

Jason Simpson | Vice President of Engineering

View case study

Learn More

Ready to learn more?

Schedule a demo to see how Veza can bring the power of Identity Security to AWS
Take a tour
Schedule a Demo