DevOps Done Right With Infrastructure-as-Code Security - Seguridad Mania.com - España y América Latina

Security is often perceived as a drag on the required speed and agility of development. Legacy approaches to security happen late in the development process ultimately slowing down delivery. In this session, we’ll share how to automate and integrate your security programs into the DevOps pipeline preventing insecure cloud infrastructure from being deployed. We’ll show the ability to merge a planned environment (infrastructure-as-code files) with a runtime environment to predict security exposures that would occur before the infrastructure-as-code is deployed. Learn how we catch common cloud security issues in CI such as: Privilege escalation in AWS due to overly permissive IAM permissions Sharing IAM roles for resources in public & private subnets may not be a good idea