Cloud Native Posture Management for All
summary
Claims two open source projects: CN Query for GraphQL queries across hosts clouds and services and CN Spec for declarative assertions and policies. Demonstrations show SSH-host port queries, GCP Cloud Run listings, and a GitHub org two‑factor check; packs and policy repos exist on GitHub and integrations include AWS GCP Azure Kubernetes Docker GitHub GitLab Linux Mac OS and more. The system is built, extensible, and designed to scan fleets and fail assertions when misconfigurations or drift appear — it works end to end.
AI-written summary · about
chapters (11)
- 0:00Cloud Native Posture Management intro
- 1:16Security beyond fear and compliance
- 5:12Posture as situational awareness
- 8:03Tool fragmentation in security
- 11:56Vulnerabilities and misconfigurations
- 14:22Assurance and reconciliation loop
- 17:56CN Query and GraphQL interface
- 20:46CN Query for unified scanning
- 21:06CN Spec for assertions and policies
- 24:36Query Packs and security platform
- 26:45Getting started with open source
related talks
40mCloud Security Novice to Native in 10 Steps: A CNAPP Approach
32mCloud Native Policy as Code: Principles and Best Practices
41mCloud Native Security For The Rest Of Us
23mCloud Native Security for the Rest of Us
16mInfrastructure security, visibility and cost-optimization
34mCloud Native Security: A New Paradigm for a New World
26mAn Introduction to Cloud Native Security
16mLevel Up Your Cloud-native Security