Security or Speed? Choose both!
summary
LPL Financial builds a pipeline that adds security without slowing delivery by scanning Terraform source, blocking bad plans in Terraform Cloud, and surfacing runtime alerts from Prisma Cloud and endpoint agents into Splunk. They onboard GitHub repos to Bridgecrew-style IaC scanning, bake golden images with agents, add drift detection between code and live resources, and pilot a VS Code policy plugin for immediate feedback. The result is fewer runtime alerts and faster remediation while developers keep deploying.
AI-written summary · about
chapters (7)
- 0:00Introduction and welcome
- 1:47Gates vs guardrails explained
- 8:14Security automation journey
- 17:04Terraform security integration
- 22:07Market trends and patterns
- 26:44Lessons learned and advice
- 29:54Closing thoughts and thanks
related talks
22mSecurity vs Dev Experience Threat … or Opportunity
23mTurbocharge your development with agile security
19mApplication Security at High Velocity
44mCloud Security Podcast - LIVE!
39mSecurity Tooling in Your DevOps Pipeline
33mSecurity scans for terraform templates
14mThe power of preventative cloud security with Tenable and
32mAutomating Security Compliance at Scale