# Attack Surface Management - Matt Lea - CSP #227

Page: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/attack-surface-management-matt-lea-csp-227
Text version: https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/attack-surface-management-matt-lea-csp-227.md
Podcast: [CISO Stories Podcast (Audio)](https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889)
Published: 2026-08-10T16:00:00+00:00
Episode link: https://cspaudio.libsyn.com/attack-surface-management-matt-lea-csp-227
Audio file: https://dts.podtrac.com/redirect.mp3/traffic.libsyn.com/secure/cspaudio/CSP_227_1--7547a9c0-e0a6-4fd6-a694-3a6dedeeedb5--audio-converted--36c70f98-101d-4789-a286-0cb40f90e081.mp3?dest-id=2584793
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/attack-surface-management-matt-lea-csp-227
Duration seconds: 1502

## Resource

In this episode of CISO Stories, Jessica Hoffman sits down with Matt Lee to explore attack surface management, AWS security, and the cloud misconfigurations that can put organizations at risk. Matt shares lessons from his experience auditing cloud environments, including common AWS security gaps around identity and access management, exposed resources, security groups, and overly permissive access. The conversation also covers emerging challenges around AI agents, protecting production data, and balancing speed of innovation with security controls. From preventing cloud breaches to building stronger security practices, Matt breaks down what organizations should understand about reducing risk in today's evolving threat landscape. Segment Resources: https://schematical.com/techdebt https://www.oreilly.com/videos/zero-to-hero/0642572107789/ https://schematical.com/posts https://schematical.com/free https://schematical.com/speaking This segment is sponsored by Horizon3. Visit https://cisostoriespodcast.com/horizon3 to learn more about them! Visit https://cisostoriespodcast.com for all the latest episodes! Show Notes: https://cisostoriespodcast.com/csp-227

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/ciso-stories-podcast-audio-3570889/episodes/attack-surface-management-matt-lea-csp-227/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/ciso-stories-podcast-audio-3570889/attack-surface-management-matt-lea-csp-227.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.