Keynote: CloudNativeDevSecOps
summary
Developers must own application security end-to-end, not hand it off to a separate team, because cloud-native shifts control of VPCs, IAM, networking and logging into code. The talk claims 90% of cloud risk from misconfiguration and recommends scanning repos, images and scan Terraform and CloudFormation templates in CI/CD, enforcing automated least-privilege IAM in CI/CD for serverless, and adding runtime logging/anomaly monitoring; Check Point’s CloudGuard/SourceGuard examples show these steps implemented as integrated tooling.
AI-written summary · about
chapters (5)
related talks
09mKeynote: Modern Least Privilege and DevSecOps
25mKeynote: DevOps - The Return of Security
01h 26mKeynote Presentation Software Defined Security Governance
41mPanel: Securing Cloud Native Applications
48mSecurity for Cloud Native Applications
11mKeynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...
14mFrom security theater to DevSecOps: Why security must be ingrained
56mThe Future of AppSec is Cloud-Native