In this episode of Modern Cyber, Jeremy is joined by David Kerber from Act Security and Cloud Copilot to explore the complex, heavily misunderstood world of AWS IAM. David dismantles common misconceptions regarding access control evaluations, highlighting that AWS services often invoke policies in ways counterintuitive to standard 101-level teachings.

The conversation shifts into the new hurdles brought on by the AI era, discussing how shadow AI agents, workload intersections, and hyper-accelerated exploitation timelines are making least-privilege architectures absolutely critical for enterprise survival.

Key Discussion Points:

• The Inverted Evaluation Model: Why AWS IAM doesn't function as a basic gatekeeper, and how individual AWS services actually initiate and interpret identity policies ...