Relationship Therapy: Keeping Developers and Security Teams Happy
Talkat Open Source Leadership Summit 2019 · on Tuesday, 2019-03-12· at 15:00· The Ritz-Carlton Ballroom·
summary
Netflix describes three practical fixes: transparency, lower friction, scale. Concrete work includes using AWS CloudTrail and Access Advisor to grant a standard base IAM role, observe thousands of apps, then automatically remove unused rights with repo kid (open source) while notifying owners — live at Netflix and community-supported. For risk prioritization, an automated, continuous scoring engine built as scum blur observes service dependencies, internet exposure and sensitive data links to rank thousands of services so security investment follows measured risk.
AI-written summary · about
chapters (3)
related talks
34mDevelopers do care about security: Building a more collaborative path
53mWe Come Bearing Gifts: Enabling Product Security with Culture and Cloud
40mConstruction Time Again: A Lesson in Paving Paths for Security
47mThe Only Reason Security Really Matters for DevOps
47mCloud Security at Scale and What it Means for Your Application
30mArmy of Proxies! How Netflix scales identity based zero trust...
54mNetflix’s Journey to Confident Automated Changes
49mHow to Kick Off Privacy Engineering Within a Security Team