From Zero to Secure in One Minute
summary
Claims an automated lifecycle that boots prepatched instances, attaches an encrypted data volume and only promotes machines after an automated Nessus scan. Uses AWS S3 for configs and keys, EC2 + Cloud‑Init to run boot scripts, Chef for config, dm‑crypt for volume encryption and Cloudefigo as the orchestration layer. Implements dynamic IAM roles that shrink permissions after scans pass and supports key destruction so terminated volumes are rendered useless via crypto shredding.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:38Cloud security context
- 2:34Orchestration layer focus
- 3:54Cloud attack vectors
- 6:52Browser Stack hack analysis
- 10:25Modern architecture challenges
- 13:24Introducing Cloudigo
- 14:14Automation and encryption
- 16:05Technical building blocks
- 20:10Launching and demo
- 26:21Updating and preparation
- 31:03Configuration management
- 33:35Encryption demo
- 38:40Scanning and production
- 42:01Production management
- 46:28Termination and shredding
- 48:21Summary and open source
- 50:58Q&A
related talks
12mCloud Security from Scratch
17mAdvance securely: Safely migrating to
50mBoot my (secure)-(portable) clouds!
53mAchieving End-to-end Security on AWS
36mManaged Zero Trust Security With HashiCorp Cloud Platform
33mAutomating Cloud Security and Incident Response (DevSecOps)
17mCloud Security in Continuous Delivery
42mZero Trust security with HashiCorp Vault and AWS (PRT239)