Zach Koncir, Preventative+Detective Control for Security-DevOps Days Toronto 2019 Day 1 Ignite Talk

Video from Toronto's DevOps Days 2019 conference Day 1 Ignite Talk Zach Koncir, AWS Practice Lead, Sourced Group Preventative and Detective Control for Security Conscious Organizations: Detective controls and preventative controls are concepts we use a lot with our client. We advocate for “Freedom within Boundaries” for developers; at the end of the day, we want devs to go fast, yet organizations are still secure and protected. The boundaries are been configured by two sets of things. A pipeline driven, aka preventative control framework for all below the line fundamental resources, as well as cloud-native tools plus OSS tools to prevent any out of boundary actions. Below the line resources are what we describe as “Fundamental Infrastructure”, like SDN, Routing, IAMs while detective controls for some above the line resources like Serverless functions or VMs. Follow us on Twitter: @DevOpsDaysTO @DevOpsTO Visit https://devopsto.com for more info!

Видео Zach Koncir, Preventative+Detective Control for Security-DevOps Days Toronto 2019 Day 1 Ignite Talk автора Coding Shambhala