Launch Control - Automating a Security Baseline...
summary
Describes a concrete system that deploys a declarative, self‑healing security baseline across many AWS accounts using Terraform and a hybrid workspace model that avoids provider explosion by mapping one workspace per account and orchestrating modules. Implements telemetry (Route 53 DNS logs to S3) feeding a threat detection pipeline, automates promotion through dev → staging → prod and reduces end‑to‑end rollout from months to minutes. Emphasizes Terraform hybrid workspace model and Route 53 logging to S3 as proven pieces.
AI-written summary · about
chapters (8)
- 0:00Introduction and team intro
- 2:07What is a cloud security baseline
- 7:27Implementation challenges and goals
- 10:14Terraform provider scaling issues
- 16:12Hybrid workspace architecture
- 18:23Route 53 logging deployment example
- 19:27Platform outcomes and benefits
- 21:52Summary and Q&A
related talks
33mAutomating Cloud Security and Incident Response (DevSecOps)
45mThe Automation of a Landing Zone
55mBest practices
40mCreating a managed, governed, and secure SaaS foundation on
19mSynchronization of Infrastructure Provisioning & Application Deployments
22mAutomating the CIS Foundations Benchmark for AWS with Terraform
55mPlan and deploy your own security architecture based on the AWS SRA
40mFrom Launch Pad to Landing Zone: DevOps Governance with Terraform