Modern Security With Microservices And The Cloud

on YouTube ↗31m

" summary

Argues security moves from perimeter locks to layered defense and gives concrete tooling and behaviors: dynamic time‑based revocable credentials implemented via Vault, encryption everywhere through unified APIs, and codified best practices so app devs call an API instead of choosing ciphers. Demonstrates Vault running on GKE with Vault transit and database secrets engines, generating short‑lived Postgres users, revoking them on demand, and offering TOTP as a service; live demo errs briefly but ultimately shows the features working.

AI-written summary · about

" chapters (12)

1. 0:00Start
2. 0:58TRADITIONAL SECURITY
3. 2:20CLOUD + MICROSERVICE SECURITY
4. 4:04STOP THINKING ABOUT SECURITY LIKE THIS
5. 4:35START THINKING LIKE THIS
6. 5:23CLOUD SECURITY HELPS
7. 5:50PHYSICAL SECURITY
8. 7:05HARDWARE SECURITY
9. 7:29AUTOMATED VULNERABILITY SCANNING
10. 7:50FEATURES OF MODERN SECURITY
11. 8:22DYNAMIC, TIME-BASED, & REVOKABLE
12. 9:56UNIFIED API & CODIFIED BEST PRACTICES

" related talks

• 41mModern Security with Microservices and the CloudSandeep Dinesh · NDC Oslo 2018
• 31mModern Security with Microservices and the CloudSeth Vargo · ScaleConf Colombia 2018
• 51mInsecure Transit - MicroserviceSam Newman · GOTO Berlin 2018
• 57mHow Do I Secure My Micro-Services?John Melton · CodeMash 2018
• 01h 00mInsecure Transit - Microservice SecuritySam Newman · NDC London 2019
• 38mHow To Secure Your MicroServicesAndy Davies · NDC London 2020
• 47mManaging your Secrets in a Cloud EnvironmentTaswar Bhatti · Update Conference Prague 2018
• 51mIntroduction to VaultSeth Vargo · GOTO London 2015