DevSecOps: Security Automation at Scale
summary
AWS releases 1430 major features last year (vs 61 in 2010) and amazon.com deploys roughly every 10 seconds across up to 30,000 hosts, so security is automated at cloud scale. Practical steps: pick a trust level (manage keys or use KMS/HSM), prefer managed EKS over self-hosted Kubernetes, bake security into stories and CI/CD (git-secrets, signed artifacts, IAM/STS roles), and treat CloudTrail/CloudWatch/S3 logs as inputs to event-driven functions that auto-update WAFs, revoke keys, and feed EMR/ML analytics.
AI-written summary · about
chapters (25)
- 0:00Intro
- 0:38Amazon Web Services
- 1:31Amazoncom
- 2:51Automation
- 3:46Rule bending
- 4:32Automated DDoS attacks
- 4:51People act with malice
- 5:13Establish your level of trust
- 7:00Deploy Kubernetes
- 7:23Managed Kubernetes
- 8:07Security Automation
- 8:49Planning Security Automation
- 8:59Security by Design
- 9:56Leadership Principles
- 10:44Security is Everybodys Job
- 11:54Security Ownership
- 12:53What are you securing
- 13:45In the cloud
- 17:33Automation Responses
- 17:59Questions to ask yourself
- 19:30Demo
- 22:23Logging at AWS
- 22:45Elastic MapReduce
- 23:25What are we looking for
- 24:07Recap
related talks
29mPragmatic Security Automation and DevSecOps in the Cloud
53mAchieving End-to-end Security on AWS
33mAutomating Cloud Security and Incident Response (DevSecOps)
01h 08mKeynote
51mAWS Security Essentials
24mDevSecOps Best Practices: Secure Everything You Have
38mBuilding Security at Speed
37mDevelop and implement a successful DevSecOps approach