Shift-left! Scanning for Security Compliance from Day Zero
summary
Covers detecting misconfiguration-related security compliance violations in public cloud environments by shifting scanning left into the development lifecycle. Describes taking written security policies and implementing automated scanning to detect compliance issues across product infrastructure from day zero, focused on large-scale cloud resource estates.
AI-written summary · about
chapters (12)
- 0:00Start
- 1:58Misconfigurations?
- 2:36The Numbers
- 3:13Policies to detect misconfigurations
- 5:25Manually enforced policies
- 7:12Dealing with misconfigurations at scale
- 11:29Sample Policy
- 11:51Policy - Code
- 13:03Technical Demo
- 27:32Scanning accounts - 'Scanner'
- 30:58Reporting to engineering teams
- 34:13Developer workflow
related talks
22mShifting left, how security fits into the DevOps story
22mOur Journey to Shift-left Security with Infrastructure as Code
32mCompliance As Code: Shift-Left and Shift-Right Approaches in a Cloud World
32mShift-Left Compliance
37mDevSecOps Guide to Bulletproof Your Development Workflow
12mCloud Security from Scratch
31mA Comprehensive Approach to Cloud Security Posture Management
28mDevSecOps - Security from Scratch