AWS Security Profile: Matt Luttrell, Principal Solutions Architect for AWS Identity
This blog post features an interview with Matt Luttrell, a Principal Solutions Architect for AWS Identity, highlighting his role, background in security, and current projects within Amazon Web Services (AWS). Luttrell has been with AWS for approximately five years, transitioning through various roles from Professional Services consulting to a solutions architect. In his current capacity on the Identity Solutions team, he serves both internal and external functions. Internally, he collaborates with product managers, influences concepts like data perimeters, and acts as a customer advocate to product teams. Externally, he engages with customers and participates in public speaking events.
Luttrell's journey into security began with a side interest during his software development career, working for security-conscious companies. His CISSP certification further solidified his expertise in security-specific domains. At AWS, security is integral to all roles. He focused extensively on identity and AWS Identity and Access Management (IAM), including AWS IAM Access Analyzer, especially with financial services customers before joining the Identity Solutions team. He simplifies his role for non-technical audiences by explaining that he helps customers assemble and understand the various services and features offered by AWS.
Currently, Luttrell is enthusiastic about his team's work on data perimeters, an area where they are providing continued guidance through workshops, conference presentations, blog posts, and video tutorials. He is also creating in-depth videos on IAM policy evaluation, offering prescriptive advice for crafting secure IAM policies. He finds the shift from traditional network-based security perimeters to identity-based perimeters in the cloud particularly compelling, emphasizing that distributed resources and identities necessitate a strong focus on authentication, authorization, and visibility. This paradigm shift, marked by concepts like zero trust and data perimeters, is driving significant innovation in the identity space.
Luttrell recently co-presented a 400-level workshop at re:Invent 2022 titled “AWS Identity and Access Management (IAM) policy evaluation in action.” This workshop introduced a new mental model for understanding policy evaluation, guiding attendees through different scenarios and comparing resource-based versus identity-based policies. The goal was to provide attendees with a deeper understanding of policy evaluation and practical advice for writing more secure IAM policies. His favorite Amazon Leadership Principle is "Learn and Be Curious," as he believes discomfort leads to learning and growth, making him constantly seek new knowledge in the complex identity world.
He expresses immense pride in his current team, noting their strong commitment to Customer Obsession. He values the team's dedication to advocating for customers, listening to their feedback, and challenging features that might not align with customer needs. The opportunity to mentor and teach within AWS and his role brings him great fulfillment, as he views career growth as a non-zero-sum game. If he were to pursue a career outside of security, he would choose to be a ski instructor, driven by his love for skiing, the mountains, and teaching.
#AWSSecurity #IdentityAndAccessManagement #DataPerimeters #IAMPolicyEvaluation #CloudSecurity #SolutionsArchitect #ZeroTrust #LeadershipPrinciples #AWSSecurity #IdentityAndAccessManagement #DataPerimeters #IAMPolicyEvaluation #CloudSecurity #SolutionsArchitect #ZeroTrust #LeadershipPrinciples
No comments yet
Let’s Architect! Getting started with containers
Let’s Architect! Designing serverless solutions
Let’s Architect! Tools for developers
Let’s Architect! Learn About Machine Learning on AWS
Let’s Architect! Security in software architectures
