Secure Your Systems the Better Way Using Policy-as-Code
Talkat Platform Engineering Day NA 2024 · on Tuesday, 2024-11-12· at 14:40· Salt Palace | Level 1 | Grand Ballroom G·
summary
Policy as code means translating human security decisions into YAML that is version-controlled and enforced by CI/CD so deployments get just-in-time guardrails. Examples include VM provisioning blocked by InfoSec until policies were codified, and a cert workflow that initially halts a production rollout but is fixed by an automated pipeline pulling from an upstream CA. Tooling mentioned includes Open Policy Agent, Kyno, Opal, Permit, Hashi Corp Cent and AWS am, with best practices like centralized policy management and policy testing and auditing.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:36QR Code
- 2:46What is PolicyasCode
- 4:25Benefits of PolicyasCode
- 7:12Complexity and Policy Definition
- 12:24Case Study
- 14:27Bridging Silos
- 16:26Pack Tools
- 17:26Best Practices
- 20:56Review
related talks
23mSecurity As Code - The New Model Of Achieving Security At Scale
42mBeyond Code: Shaping Security in a Developer-Driven World
24mSecurity as Code A SecDevOps Use Case
22mPolicy as [versioned] Code - How to do it Right
45mSecure All the Things: From IaC to Kubernetes
30mRedefining Access Control: Scaling Policy as Code for Humans and AI Agents
43mApplication Code of Conduct - Full-Stack Policy as Code
43mEmpowering The Guardians Of Your Code Kingdom