Automated Cloud Security
summary
Uses cloud custodian and small serverless functions (Goblet on GCP) to detect, aggregate and remediate cloud issues; policies deploy as Lambda-like functions triggered by Pub/Sub or Security Command Center logs. Built an owner-resolution notifier that cuts time-to-remediate drastically and a GitHub-to-SCC webhook aggregator deployed in days. Uses GCP IAM Recommender and metric filters to safely drop unused roles and delete stale keys, plus an automated pipeline to rotate GCP service account keys daily.
AI-written summary · about
chapters (6)
- 0:00Introduction to talk
- 3:54What is serverless
- 10:14Finding vulnerabilities
- 19:37Remediating security issues
- 26:37Making vulnerabilities obsolete
- 31:53Summary and Q&A
related talks
33mAutomating Cloud Security and Incident Response (DevSecOps)
43mWalking on Broken Clouds
13mMaking cloud security more human
12mCloud Security from Scratch
51mCloudSec Hero to Zero: Self-Obsolescing Through Prolific Efficiency
37mOptimizing Cloud Detection & Response With Security Chaos Engineering
05mMulti-cloud security made easy for DevOps
31mA Comprehensive Approach to Cloud Security Posture Management