Cloud Native Identity Management
summary
Describes a cloud-native identity management architecture for workload authentication and authorization in large, dynamic environments. It explains using the SPIFFE standard and open-source tools (SPIRE, Vault) plus small custom components to provide zero-trust networking, rotating secrets, and workload identity, and outlines how this foundation can enable additional security and traffic management via Envoy and Istio.
AI-written summary · about
chapters (7)
- 0:00Cloud Native Identity intro
- 4:55Core identity challenges
- 11:21Technical requirements
- 17:46Deployment complexity
- 22:31Demo and solutions
- 27:30Simplifying Identity Management
- 35:49Q&A
related talks
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]
23mKeynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
04mSecurely Bridging Cloud-Native and Traditional Workloads...
23mThe Long and Windy Road that leads to Cloud Native Security
33mUniform Workload Identity Everywhere: SPIRE Integrations and Extensibility
36mSecuring Agentic Platforms with Zero-Trust Workload Identities
34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE
26mUntangling the Multi-Cloud Identity and Access Problem With SPIFFE Tornjak