InfoTechTarget and Informa Tech's Digital Businesses Combine.

Together, we power an unparalleled network of 220+ online properties covering 10,000+ granular topics, serving an audience of 50+ million professionals with original, objective content from trusted sources. We help you gain critical insights and make more informed decisions across your business priorities.

DevOps Done Right With Infrastructure-as-Code Security

Presented by

Charles Kim, Solution Architect, Indeni

About this talk

Security is often perceived as a drag on the required speed and agility of development. Legacy approaches to security happen late in the development process ultimately slowing down delivery. In this session, we’ll share how to automate and integrate your security programs into the DevOps pipeline preventing insecure cloud infrastructure from being deployed. We’ll show the ability to merge a planned environment (infrastructure-as-code files) with a runtime environment to predict security exposures that would occur before the infrastructure-as-code is deployed. Learn how we catch common cloud security issues in CI such as: Privilege escalation in AWS due to overly permissive IAM permissions Sharing IAM roles for resources in public & private subnets may not be a good idea
Enterprise Architecture

Enterprise Architecture

77855 subscribers418 talks
Best practices for achieving Enterprise IT and operational efficiency.
The Enterprise Architecture channel presents the next generation of Enterprise IT: recognizing the strategic importance of digital transformation and the data center to make companies more nimble and competitive. These presentations will help demanding IT and BizOps professionals achieve flexibility, scalability and performance with reduced risk and complexity.
Related topics