Don’t fall asleep at the wheel … in Cloud
summary
Argues that tooling alone doesn’t secure cloud platforms and gives concrete fixes: replace brittle homegrown Slack bot for temporary DB access with a database proxy (bot works but shows stability limits under heavy queries), add an agentless runtime scanner to catch live container CVEs, and prefer cloud‑native firewalls for agility. Warns about costs from egress and per‑instance scanners, the complexity of a shared K8s cluster and namespace/ip management, and recommends annual tool reviews, RACI least‑privilege, and guardrails that are actually enforced.
AI-written summary · about
chapters (16)
- 0:00Introduction and welcome
- 1:31Speaker background and cloud focus
- 3:38Security in cloud decisions
- 9:11Tooling and automation in cloud
- 12:20Database access controls and tooling
- 15:48Abstraction and zero trust
- 18:16Cloud native security
- 20:19Architecting from the back door
- 22:05Optics and illusions in security
- 24:10Immutable infrastructure and observability
- 25:34RFPs, ISOs, and compliance certs
- 28:40Security costs and egress
- 31:49Multi-cloud and guardrails
- 33:31Recap and 10x model
- 36:40Revolution and latency in cloud
- 38:47Q&A and closing
related talks
35mCloud Native Security for the Rest of Us
32mHacking the Cloud Native Renaissance: Lowering Risk of Kubernetes Adoption
19mHow to Secure Your Kubernetes Clusters
37mSecure By Design: Architecting cloud and AI workloads from the perspective of infosec
29mSecuring the platform: Hard-won lessons from the teams who've been breached, scaled, and survived
20mDefense in Depth: Securing your new Kubernetes cluster from the challenges that lurk within
56mThe Future of AppSec is Cloud-Native
22mSecuring Kubernetes