- Published
- Source
- AWS Security Blog
- Filed under
- Cloud, Identity, AI for defence
You’re building a data agent that lets business users ask questions about lakehouse data in natural language. You’ve already built governance policies that control who can access which datasets. The challenge is making the agent respect those rules without rebuilding them in your application code. When a user asks a question, the agent maps it…
Protecting sign-ins
- Phishing-resistant multi-factor authentication – passkeys or security keys – for administrators first.
- Block the old sign-in methods that skip MFA, and review who can grant apps access to your data.
- Alert on impossible travel, newly added MFA methods and unusual consent grants.
More helpNCSC: multi-factor authentication for online services (opens in a new tab)
MyCyberWay training
Microsoft SC-300 exam training
Most attacks start with an identity. Learn to defend it.
Tutor-led SC-300 preparation: Microsoft Entra ID, authentication and Conditional Access, workload and application identities, and identity governance with access reviews and Privileged Identity Management.
- Entra ID and hybrid identity
- Conditional Access and authentication
- Access reviews and PIM
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
