Continuous Security in the Cloud
summary
A one and a half year migration moves customer-facing railway apps onto AWS, using Terraform modules to define VPCs, security groups, DB subnet groups and a bastion host, automating secrets with password-store and injecting creds via mchain, and deploying about 10 services on Elastic Beanstalk (roughly a hundred small instances). Legacy lift-and-shift proves hardest, but automation, CloudWatch/CloudTrail logging, IAM-based user provisioning and immutable deploys speed feature flow, improve auditability and cut ops toil while maintaining security.
AI-written summary · about
chapters (17)
- 0:00Start
- 0:31Continuous Security in the Cloud
- 3:26Why Is Devops and Moving to the Cloud Important
- 8:21Continuous Delivery
- 8:57What Is Devops
- 10:16What Is Your Definition of Devops
- 20:12Jump Server
- 20:54Management Server
- 22:06Terraform
- 25:04Networking in Amazon
- 30:58Security Groups
- 38:41Secret Variables
- 39:08Git Script
- 47:52The Aws Command-Line Client
- 49:27Elastic Beanstalk
- 55:06Application Level Security
- 55:30Security Culture
related talks
45mSecurity Lessons Learned Moving a Bank 100% in the Cloud
17mCloud Security in Continuous Delivery
17mAdvance securely: Safely migrating to
40mBalancing agility and security: SBB’s journey to AWS(SEC204)
43mTransformation Path For Moving Applications Public Cloud
30mLeaping from Mainframes to AWS: Technology Time Travel in the Government
23mA Journey to Automated Infrastructure
26mCase Study of Success