CloudNativeSecurityCon North America 2024

Achieving comprehensive Zero Trust through user/RBAC authentication alone is challenging. Realizing full zero trust often requires network-level access controls, complicating access management across authentication and network ACLs while adhering to least privilege principles. Manually managing numerous ACLs is extremely daunting for security teams, especially in high-traffic environments where network activity makes maintaining proper access controls difficult. We will share a case study on leveraging AWS VPC Flow Logs and Terraform to automate security group configuration without third-party solutions. We demonstrate how to analyze historical network traffic data using a few lines of Rust code to establish and maintain network ACLs. Furthermore, we showcase optimizations to AWS-related Terraform workflows for much faster application of security groups. All tools and scripts developed for this workflow will be released as open-source software.