Compliance-as-Code: How to do regulated business using public cloud
summary
Shows a concrete compliance-as-code setup for Azure using ARM/Terraform and Azure Policy to prevent/detect/remediate noncompliant resources, with a live demo that denies a storage account in East US and blocks Microsoft Databricks workspaces because they send identity metadata to the US. Replaces Databricks with Synapse + Cosmos, enforces encryption and regional whitelists, and produces continuous audit (controls evaluate ~every 20 minutes) so audits go from months to minutes and operational risk measurably drops.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:05Primary Goal of this Session
- 5:48Overall challenges with public cloud
- 11:06Azure Databricks
- 14:11Azure Machine Learning services
- 15:20What is Compliance-as-Code?
- 16:57Compliance-as-Code practice
related talks
54mImplement DevSecOps in Azure
49mPublic cloud in regulated industry, not just swipe of a cred
48mInfra as code, control it from the tower.
01h 01mGetting Started with Azure Governance and Management
47mAzure Governance using Policies and Blueprints
51mDesigning Data Architectures that InfoSec will actually approve
01h 02mThe Modern Cloud
45mRunning a Real-World, Mission-Critical System on Azure