What types of AWS policies does the new recommendation feature analyze?

The feature analyzes both built-in AWS policies and user-defined policies, making recommendations based on how the policies are currently being used to help reduce permissions to only what's necessary.

How do the new automation policies handle guest users?

The new fine-grained remediations automatically eliminate direct stale guest access and stale guest membership, allowing collaboration when necessary while revoking access when it's no longer relevant.

Varonis January 2025: AWS Policy Recommendations & Guest Access Automation

Name: Varonis January 2025: AWS Policy Recommendations & Guest Access Automation
Uploaded: 2026-04-12T14:21:58-04:00
Duration: 2 min 38 s
Description: TL;DR New AWS over-permissive policy recommendations automatically analyze built-in and user-defined policies to suggest rightsizing based on actual usage patterns. Expanded automation policies now include fine-grained remediations for automatically el...

Varonis

04/12/2026

0 (0%)

Report Like Favorite

Transcript

And I'm Lexi Croisdale. We're so excited to share the latest updates from Varonis with you. I can't believe we're already in 2025, and we have so many exciting new updates to share. Killian, do you want to go ahead and kick us off with our new AWS capabilities? Sure thing. AWS policies can be overwhelming to analyze and understand. But with Varonis' new AWS over-permissive policy recommendations, we can help take the guesswork out of rightsizing access. We'll automatically analyze both built-in AWS policies as well as user-defined policies and make recommendations on how the policies should be configured based on our analysis of how the policies are currently being used. This can help reduce the scope of the rights to just what's necessary without sacrificing functionality. Lexi, want to take us through another really neat enhancement? I sure do. We're expanding our automation policies to include additional fine-grained remediations targeting non-org users. We have a number of existing policies, but these new additions specifically help us automatically eliminate direct stale guest access as well as stale guest membership. This will allow users to collaborate when necessary, then revoke the access when it's no longer relevant. Killian, any final updates to share? We've got one more folks will love to hear. For those of you looking to continue your Varonis journey, we've released some brand new learning and enablement courses and certifications. My favorite thing about the new training is the addition of a hands-on training lab, which will allow folks to get practical experience in a controlled environment. That should close us out for this month's product updates. Awesome. Thanks, Killian. I actually do have one more treat for all our customers. We'd like to invite you to an upcoming What's New in Varonis webinar coming in March. Hear all of the new updates from this past quarter and what's planned for 2025 live. There'll be more details and a link to register in the description of this video. Now, if you're interested in learning more about this month's update, visit our website, Varonis.com. And if you are a customer, go ahead and contact your account representative today. We will see you in February for more exciting updates. Bye. Varonis

TL;DR

New AWS over-permissive policy recommendations automatically analyze built-in and user-defined policies to suggest rightsizing based on actual usage patterns.
Expanded automation policies now include fine-grained remediations for automatically eliminating stale guest access and membership for non-org users.
New learning and enablement courses feature hands-on training labs for practical experience in controlled environments.

Summary

This January 2025 product update from Varonis introduces three key enhancements focused on cloud security and access management. The headline feature is new AWS over-permissive policy recommendations, which automatically analyze both built-in and user-defined AWS policies to suggest rightsizing configurations based on actual usage patterns. This capability addresses the complexity of AWS policy management by identifying where permissions exceed what's necessary for functionality. The update also expands Varonis automation policies with fine-grained remediations specifically targeting non-organization users, enabling automatic revocation of stale guest access and membership. This helps organizations maintain collaboration capabilities while ensuring access is removed when no longer relevant. Additionally, Varonis has released new learning and enablement courses with hands-on training labs, allowing customers to gain practical experience in controlled environments. The update closes with an invitation to an upcoming March webinar covering quarterly updates and 2025 roadmap plans.

Chapters

0:00 - Introduction
0:22 - AWS Policy Recommendations
1:01 - Guest Access Automation
1:29 - Training and Enablement

Key Quotes

0:22 "AWS policies can be overwhelming to analyze and understand."
0:27 "With Varonis' new AWS over-permissive policy recommendations, we can help take the guesswork out of rightsizing access."
0:50 "This can help reduce the scope of the rights to just what's necessary without sacrificing functionality."

Categories:

» Webinar Library » Varonis
» Data Protection » Backup & Recovery
» Cybersecurity » Identity & Access Management (IAM)
» Cybersecurity » Cloud Security
» Data Protection

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

07/14/2026

01:00 PM

07/14/2026

Crafting a Championship-Worthy Security Team for Unmatched Defense

https://www.truthinit.com/index.php/channel/2025/crafting-a-championship-worthy-security-team-for-unmatched-defense/
07/14/2026

02:00 PM

07/14/2026

Understanding the Crucial Role of Context in Safeguarding AI-Accessible Data

https://www.truthinit.com/index.php/channel/2037/understanding-the-crucial-role-of-context-in-safeguarding-ai-accessible-data/
07/21/2026

04:00 AM

07/21/2026

Strategies for Managing AI Governance and Securing App-to-LLM API Traffic

https://www.truthinit.com/index.php/channel/1967/strategies-for-managing-ai-governance-and-securing-app-to-llm-api-traffic/
07/22/2026

06:30 AM

07/22/2026

Insights and Strategies in Data Protection and Privacy Management

https://www.truthinit.com/index.php/channel/2000/insights-and-strategies-in-data-protection-and-privacy-management/
07/22/2026

01:00 PM

07/22/2026

Insights from Attackers During the FIFA World Cup: A HUMAN Dialogue

https://www.truthinit.com/index.php/channel/2029/insights-from-attackers-during-the-fifa-world-cup-a-human-dialogue/
07/28/2026

01:00 PM

07/28/2026

Illumio + Netskope: Zero Trust in the Age of AI Autonomy

https://www.truthinit.com/index.php/channel/2031/illumio-netskope-zero-trust-in-the-age-of-ai-autonomy/
07/29/2026

04:00 AM

07/29/2026

Real-Time Strategies for Safeguarding Against Prompt Injections

https://www.truthinit.com/index.php/channel/1968/real-time-strategies-for-safeguarding-against-prompt-injections/
07/29/2026

12:00 PM

07/29/2026

Unified Data Security in Action: Uncover, Analyze, and Resolve Threats

https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
07/29/2026

01:00 PM

07/29/2026

Ask Your Cloud Anything: Unlocking Governance Silos in your Environments

https://www.truthinit.com/index.php/channel/2048/ask-your-cloud-anything-unlocking-governance-silos-in-your-environments/
08/19/2026

12:00 PM

08/19/2026

Becoming Agent Ready: Insights from Cyera's Expertise

https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-insights-from-cyeras-expertise/
09/30/2026

04:00 AM

09/30/2026

AI Command Center: Optimizing Visibility and Control in Your Operations

https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/