What types of AWS policies does the new recommendation feature analyze?

The feature analyzes both built-in AWS policies and user-defined policies, making recommendations based on how the policies are currently being used to help reduce permissions to only what's necessary.

How do the new automation policies handle guest users?

The new fine-grained remediations automatically eliminate direct stale guest access and stale guest membership, allowing collaboration when necessary while revoking access when it's no longer relevant.

Varonis January 2025: AWS Policy Recommendations & Guest Access Automation

Name: Varonis January 2025: AWS Policy Recommendations & Guest Access Automation
Uploaded: 2026-04-12T14:21:58-04:00
Duration: 2 min 38 s
Description: TL;DR New AWS over-permissive policy recommendations automatically analyze built-in and user-defined policies to suggest rightsizing based on actual usage patterns. Expanded automation policies now include fine-grained remediations for automatically el...

Varonis

04/12/2026

0 (0%)

Report Like Favorite

Transcript

And I'm Lexi Croisdale. We're so excited to share the latest updates from Varonis with you. I can't believe we're already in 2025, and we have so many exciting new updates to share. Killian, do you want to go ahead and kick us off with our new AWS capabilities? Sure thing. AWS policies can be overwhelming to analyze and understand. But with Varonis' new AWS over-permissive policy recommendations, we can help take the guesswork out of rightsizing access. We'll automatically analyze both built-in AWS policies as well as user-defined policies and make recommendations on how the policies should be configured based on our analysis of how the policies are currently being used. This can help reduce the scope of the rights to just what's necessary without sacrificing functionality. Lexi, want to take us through another really neat enhancement? I sure do. We're expanding our automation policies to include additional fine-grained remediations targeting non-org users. We have a number of existing policies, but these new additions specifically help us automatically eliminate direct stale guest access as well as stale guest membership. This will allow users to collaborate when necessary, then revoke the access when it's no longer relevant. Killian, any final updates to share? We've got one more folks will love to hear. For those of you looking to continue your Varonis journey, we've released some brand new learning and enablement courses and certifications. My favorite thing about the new training is the addition of a hands-on training lab, which will allow folks to get practical experience in a controlled environment. That should close us out for this month's product updates. Awesome. Thanks, Killian. I actually do have one more treat for all our customers. We'd like to invite you to an upcoming What's New in Varonis webinar coming in March. Hear all of the new updates from this past quarter and what's planned for 2025 live. There'll be more details and a link to register in the description of this video. Now, if you're interested in learning more about this month's update, visit our website, Varonis.com. And if you are a customer, go ahead and contact your account representative today. We will see you in February for more exciting updates. Bye. Varonis

TL;DR

New AWS over-permissive policy recommendations automatically analyze built-in and user-defined policies to suggest rightsizing based on actual usage patterns.
Expanded automation policies now include fine-grained remediations for automatically eliminating stale guest access and membership for non-org users.
New learning and enablement courses feature hands-on training labs for practical experience in controlled environments.

Summary

This January 2025 product update from Varonis introduces three key enhancements focused on cloud security and access management. The headline feature is new AWS over-permissive policy recommendations, which automatically analyze both built-in and user-defined AWS policies to suggest rightsizing configurations based on actual usage patterns. This capability addresses the complexity of AWS policy management by identifying where permissions exceed what's necessary for functionality. The update also expands Varonis automation policies with fine-grained remediations specifically targeting non-organization users, enabling automatic revocation of stale guest access and membership. This helps organizations maintain collaboration capabilities while ensuring access is removed when no longer relevant. Additionally, Varonis has released new learning and enablement courses with hands-on training labs, allowing customers to gain practical experience in controlled environments. The update closes with an invitation to an upcoming March webinar covering quarterly updates and 2025 roadmap plans.

Chapters

0:00 - Introduction
0:22 - AWS Policy Recommendations
1:01 - Guest Access Automation
1:29 - Training and Enablement

Key Quotes

0:22 "AWS policies can be overwhelming to analyze and understand."
0:27 "With Varonis' new AWS over-permissive policy recommendations, we can help take the guesswork out of rightsizing access."
0:50 "This can help reduce the scope of the rights to just what's necessary without sacrificing functionality."

Categories:

» Webinar Library » Varonis
» Data Protection » Backup & Recovery
» Cybersecurity » Identity & Access Management (IAM)
» Cybersecurity » Cloud Security
» Data Protection

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

10/13/2026

01:00 PM

10/13/2026

Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
10/15/2026

11:00 AM

10/15/2026

Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
10/20/2026

11:00 AM

10/20/2026

Harnessing Data Governance for AI with Cyera and Snowflake

https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
10/27/2026

11:00 AM

10/27/2026

Maximize Security, Value, and Returns on Your Microsoft Investment

https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
10/27/2026

01:00 PM

10/27/2026

The HUMAN Experience: Real-Time Insights into Page Intelligence

https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
10/28/2026

01:00 AM

10/28/2026

[APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
10/28/2026

06:00 AM

10/28/2026

[EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
10/28/2026

01:00 PM

10/28/2026

[AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era

https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
10/28/2026

01:00 PM

10/28/2026

EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
11/04/2026

11:00 AM

11/04/2026

Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape

https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
11/04/2026

11:00 AM

11/04/2026

Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions

https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
11/05/2026

02:00 PM

11/05/2026

HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
11/05/2026

02:00 PM

11/05/2026

Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption

https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
11/19/2026

01:00 PM

11/19/2026

360View: Govern, Secure & Recover Your Microsoft 365 Environment

https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/