PCI and Politics
summary
ActBlue automates PCI compliance by moving a tokenized vault to AWS and using Chef for server hardening, Terraform for orchestration and terraform plan/apply as the change log, plus InSpec for verification with inspec tests run against test and production accounts. The stack handles $1–8M daily and $2.2B so far, reduces PCI scope to roughly 10% of infrastructure, and the demo shows changing SSH ports and creating CloudTrail via Terraform then passing InSpec checks, demonstrating the approach works end to end.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:28ActBlue
- 2:25PCI
- 7:23Moving to AWS
- 15:15Demo
- 16:26Port scanning
- 16:51Inspect code
- 18:19Inspect
- 19:51terraform
- 20:29plan output
- 21:16test output
- 21:28CloudTrail
- 22:25Example
- 25:10Key takeaways
- 28:28QA
related talks
40mInfrastructure as Code in the Wild
24mPCI Compliance using Cloud Foundry and BOSH Add-ons
34mA House of Cards (of Credit) in the Cloud
11mKeynote: Automating RBI Compliance With Unified Policy-as-Code
36mImproving Security while Reducing Toil with DevSecOps
05mAchieving PCI Compliance On a Single Foundation
06mLightning Talk: PCI DSS and
16mBuilding PCI-compliant real-time payment processing with AsapCard