Ending superpowered identities and processes for data scanning and deployments
Control Plane, management plane, security, and compliance processes create their own risks because they have access to everything.
End Superpowered Processes in Our Time!
Globally reaching processes are security risks as designed
Examples
• Sensitive Data Scanners
• Data Catalogers
• Deployment Tools
• Tokenization / Encryption
•API Gateways
• Batch Infrastructure
• Observability
Central processes with multiple keys are only marginally more secure. They are an anti-pattern.
Federated, or other similar, model where the central processes can only interact via federated components down in the divisions isolate access to the least privileged area.
https://joe.blog.freemansoft.com