Securing Danish Healthcare Using Cloud Native
summary
A Danish telemedicine platform serving all five regions and 98 municipalities is built with Terraform and Kubernetes and uses a defense‑in‑depth stack: declarative infra, a service mesh with mutual mTLS and an authorization header rule, runtime detection and secrets in HashiCorp Vault, and CI checks. Static terraform scans flag 16 critical issues via tfsec, kube discovery finds exposed API servers and old 1.16.1 versions, image scanning with Trivy returns ~170 CVEs on nginx, and Falco alerts on shells and crypto miners.
AI-written summary · about
chapters (17)
- 0:00Intro
- 0:25Cloud native definition
- 1:01Common Danish telemedicine platform
- 3:18The 4 C's of cloud native security
- 6:21Demo: cloud provider security
- 10:25Kubernetes infrastructure
- 11:35Demo: k8s infrastructure
- 14:43Cluster
- 17:30Demo: cluster
- 21:18Runtime cluster security
- 25:11Intruder detection
- 25:33Demo: intruder detection
- 30:56Container security
- 33:24Code
- 34:19Demo: attack
- 40:32Summary
- 43:05Outro
related talks
32mGotchas Using Terraform in a Secure Delivery Pipeline
14mLightning Talk: 5 Security Tips for Terraform
45mDesigning Sovereign & Secure Cloud Native Infrastructures for the Public Sect...
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
29mShifting Terraform Configuration Security Left
35mPackaging Security in Terraform Modules
15mSecure Distributed Healthcare Platforms
41mCloud Native Security For The Rest Of Us