BeyondCorp: A DevOps Security Model Without Sign‑On and VPN
summary
Describes implementing BeyondCorp-style zero-trust access for DevOps to remove VPNs and centralized credential management. Covers problems of many servers and services (monitoring, databases, admin UIs) accessed from distributed teams, and presents a model where per-service access is enforced without relying on passwords, basic auth, or network perimeter VPNs.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 7:36Access and VPN problems
- 14:01Google's BeyondCorp
- 19:03BeyondCorp at Dodo Pizza
- 25:47SSH certificates for servers
- 31:52BeyondCorp limitations
- 36:28Security and phishing protection
- 40:01Q&A
related talks
20mTrust by verify - how to provide secure access to your team
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
25mBuilding a DevOps Supply Chain on Zero Trust Principles
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
02h 48mZero Trust: the new normal!
31mEmbracing Zero Trust When You Aren't the World's Largest Internet Company
27mA Simplified and Practical Approach to Pursuing a Zero Trust Architecture
26mTaking Your DevOps Tooling To The Dark Side