Kubernetes security often focuses on pods, network policies, and runtime protection, but one of the biggest attack vectors is IAM (Identity and Access Management) misconfigurations—a silent threat that can lead to full cluster compromise.

In this lightning talk, I will demystify Kubernetes IAM across AWS, GCP, and Azure, highlighting common security pitfalls that engineers unknowingly introduce. Through real-world misconfigurations and attack scenarios, attendees will learn:

1- How Kubernetes IAM differs across cloud platforms and why it matters.
2- Common IAM mistakes—overly permissive roles, insecure service accounts, and default credentials.
3- How attackers exploit weak IAM settings to escalate privileges and access clusters.
4- Quick security fixes—implementing least privilege, external identity providers, and secure RBAC.

This session is ideal for cloud engineers, security professionals, and Kubernetes beginners who want to improve their Kubernetes security posture with practical, easy-to-implement IAM best practices.