How Remote Work is Driving the Need for Multi-Cloud DevSecOps: How to Build a Pipeline
summary
Remote work drives a push to run security earlier and across multiple clouds, and the session shows a concrete, working pipeline: it runs IaC scans with Checkov and Terrascan, provisions via Terraform while retrieving credentials from HashiCorp Vault, executes a CIS benchmark using CIS-CAT inside CI/CD (despite CIS-CAT not being CI-native), and applies automated remediation so the end-to-end pipeline both assesses and hardens multi-cloud infrastructure.
AI-written summary · about
chapters (7)
- 0:00Intro
- 2:28Its Code
- 4:31Cyber Security
- 6:50Solution Delivery
- 10:50Use Cases
- 12:25Other Steps
- 18:38Enable Collaboration
related talks
01h 01mRethinking the “Sec” in DevSecOps for modern architectures
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
07mCI/CD Evolution: Ensuring Security and Overview During Rapid Growth
42mContinuous Security: Integrate security tools into your DevOps Pipeline
34mContinuous Security - Integrating Pipeline Security
25mDecoupling DevSecOps from CI/CD Pipelines
30mHandling Security Objections to DevOps
36mImproving Security while Reducing Toil with DevSecOps