Running Cloud Foundry in a Compliance and Security Focused Environment
summary
cloud.gov runs Cloud Foundry + BOSH on AWS with full automation: concourse pipelines drive terraform, bosh releases and a CG‑hardened stemcell, while Nessus, Tripwire and static/dynamic scanners feed a continuous security pipeline. compliance is decomposed as YAML and auto‑published; BDD tests verify docs vs. infrastructure so auditors see proof instead of prose. FedRAMP process is underway (platform maps ~255 NIST controls) and simple public apps go from months to days to get ATO; ephemeral jump boxes and redeploys to GovCloud work end‑to‑end.
AI-written summary · about
chapters (37)
- 0:00Intro
- 0:30Cloud Backup
- 0:57Compliance
- 2:24Compliance Experts
- 2:53How long will it take
- 3:07Authority to operate
- 3:18Impact on team morale
- 3:43Speed and security
- 4:25Why Paz
- 4:54Cloud Gov
- 5:57FISMA
- 8:30Security by Layers
- 9:36Data Center or Cloud
- 10:06Public Cloud Provider
- 11:21Three Rules of Cloud
- 11:33Automation
- 12:39Concourse
- 13:16Audit Trail
- 15:43Security
- 18:36Network Access
- 19:07User Access
- 19:33Single SignOn
- 21:03ephemeral jump boxes
- 21:41FedRAMP
- 22:00Documentation
- 23:07FedRAMP Template
- 23:44High Confidence
- 26:11Continuous Compliance
- 26:28Questions
- 26:47Whats Next
- 28:42QA
- 29:25Gov Cloud
- 30:08Terraform
- 31:09Cultural Shift
- 32:21Secret Injection
- 33:09Reduce Compliance Documentation
- 34:10Blessed Build Packs
related talks
26mThe State of Supply Chain Security in the Cloud Foundry Ecosystem
49mPublic cloud in regulated industry, not just swipe of a cred
12mCloud Security from Scratch
35mBuilding Security In: Using Cloud Foundry to Secure CF Apps
26mKeynote: A Platform for the Enterprise: Where Maturity and Innovation Intersect
31mHealthy Agile Product Security
11mOpening Remarks - Chip Childers, CTO, Cloud Foundry Foundation
05mCompliance in the Driver’s Seat Is Your Cloud Car Stuck in the Carpark