Keynote: Modern Least Privilege and DevSecOps
summary
Argues that modern least privilege becomes practical when automation and platform affordances bake security into the developer experience, citing Cloud Native Buildpacks and a bank running about 500,000 containers on a Cloud Foundry-like platform that uses repave the platform workflows to rotate credentials instead of 90‑day firefights. Describes Tanzu application platform doing security scans and cryptographic signing by default, and proposes using GitOps, cluster‑api and Knative to reduce runtime variance and make continuous rebuilding the standard remediation.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:22DevSecOps
- 2:35Modern Applications
- 4:44History
- 5:33Cloud Native Build Packs
- 6:18Cloud Foundry
- 7:06Kubernetes
- 8:35Summary
related talks
17mKeynote: Modern Least Privilege with DevSecOps
23mModern Least Privilege and DevSecOps
10mKeynote: CloudNativeDevSecOps
25mKeynote: DevOps - The Return of Security
22mKeynote: Cloud Native Security: Rotate, Repair, Repave
01h 26mKeynote Presentation Software Defined Security Governance
34mPrinciple of Least Privilege: How to Secure Kubernetes Without Making Users Hate You
15mKeynote: The Security Symphony