Building in security for open source projects
summary
Team grows from a handful to a dedicated open source org with added management and specialists, pushes back on vendors turning projects into proprietary or “available source” forks and relicenses acquired code to permissive terms. Highlights: Firecracker microVM (KVM-based, used in Fargate and Lambda to spin VMs in very short times), AWS-backed OpenJDK distro with free support, Cloud Development Kit (CDK) that emits configuration code instead of hand-editing YAML, and Open Distro for Elasticsearch with built-in security.
AI-written summary · about
chapters (5)
- 0:00Intro
- 1:26Available source software licenses
- 3:08AWS opensource projects
- 6:36AWS opensource hiring
- 8:08Open distro for Elastic Search
related talks
59mSecurity in the Open: OSS and AWS
28mBuilding an open source security... (Fletcher Heisler, Marcelo Elizeche Landó)
14mand beyond: Securely managing open source on AWS
52mCollaborating to Improve Open Source Security: How the Ecosystem Is Stepping Up
22mKeynote: Bringing Greater Trust and Security by Design to the Open Source Ecosys...
17mBuilding Secure Open Source Communities From the Ground Up
44mDevSecOps: Balancing Agility, Security & Stability in a Continuous Software Business
33mKubernetes is Open by Default, Use Open Source to Secure