Back to the SOCless Future
summary
Twilio Security Operations describes a serverless SOCless stack that automates response playbooks using AWS Step Functions to orchestrate short, modular Lambda tasks, DynamoDB for execution state, API Gateway/CloudWatch for event ingress, and Secrets Manager for credentials. The team ships a Python library called Atlas core to glue pieces together, reduces automation delivery to two weeks, and already runs about ten use cases in production, auto-scaling and capturing every function execution for later analytics.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 1:00Who am I
- 1:26Agenda
- 1:56Questions
- 2:15Security Operations
- 2:49Environment
- 3:10Path to Success
- 3:46Magic Box
- 5:47Building Magic Box
- 7:10Use case demo
- 9:43Technology behind the framework
- 10:55AWS Thunder Functions
- 11:28Lambda Functions
- 12:28AWS Step Functions
- 13:04State Machines
- 13:46Data Storage
- 15:49Human Interaction
- 17:16Atlas Core
- 18:21Atlas Automation
- 20:45Highlights
- 23:52Call to Action
- 25:19Use Cases
- 25:58Question
- 26:39Secret Management
- 28:57Dev Environment
related talks
39m/Automate. Serverless and event-driven approach to DevOps
51mTaking Serverless to the Next Level
30mSecurity in the Serverless Environment
48mThe future will be Serverless
40mServerless Architecture Security Patterns for Securing the Unseen
01h 18mBuilding applications with Serverless Framework ...
30mThinking Serverless: From User Request to Serverless Solution
23mServerless Ops: What to Do / This is What We Do, When the Server Goes Away