Defenders guide to cloud native infrastructure security
summary
Walks through building a cloud-native environment with containers, serverless and service mesh wired into automated CI/CD, adds concrete security gates at provisioning, build and runtime, and demoes policy checks with open source scanners and cloud services. Shows specific phases for Infrastructure, Supply Chain and Run Time protection, runs an automated CIS Benchmarks scan to verify results, and delivers the actual deployments and scans so viewers see what commands and checks succeed or fail.
AI-written summary · about
chapters (28)
- 0:00Intro
- 1:12What You Will Learn?
- 1:58What is Cloud Native?
- 3:02Why Cloud Native?
- 4:21Code to Production Workflow
- 4:48Cloud Native Microservices Demo Application
- 5:20Why Security Defence?
- 6:52Cloud Native Attack Surface
- 7:27Container Attack Surface
- 7:49Kubernetes Attack Surface
- 8:48Application Security
- 10:54Centralised Logging & Monitoring
- 11:37Risk Analysis
- 13:08Security Profiles
- 13:39Network Security Policies
- 14:23Metadata Concealment
- 15:07RBAC with least privilege access possible
- 15:56Secrets Injection into KBS Pod
- 16:43TLS with Cert-Manager
- 17:04Pod Security Policies
- 17:53Open Policy Agent - Policy Engine
- 18:27Container Runtime Security
- 19:27Docker CIS Benchmarks
- 19:40Audit Your Kubernetes Clusters
- 20:00Security Best Practices
- 20:28What are Your Key Takeaways?
- 20:57References & Resources
- 21:10Recommended Reads & More Learning
related talks
19mFrom Code to Cloud: Embedding Security
39mThe Art of (Cloud Native) Defense: Pillars of Kubernetes Security
10mKeynote: CloudNativeDevSecOps
40mSecurity-as-Code to Accelerate DevSecOps, a Practical Guide to Get Started
34mCloud Native Security 101: Building Blocks, Patterns and Best Practices
55mWhat you need to know about security for cloud DevOps
32mNot-So-Spooky Security Strategies
12mCloud Security from Scratch