A Diary of Change in the Dusty Financial Sector
summary
Operations teams standardize legacy landing zones with Terraform, introduce Vault (including Enterprise) to dynamically generate AWS secrets via Vault, and wire pipelines (Bitbucket/Jenkins then GitLab/Git) so provisioning drops from days and weeks to hours and minutes. Infrastructure includes Terraform-managed FortiGate multi‑active firewall clusters and Packer-built hardened VM images; Sentinel enforces policies like image whitelists and IAM restrictions, and approvals are automated via an API to HP Service Manager, enabling secure self‑service across multi‑cloud.
AI-written summary · about
chapters (4)
related talks
41mAutomating Multi-Cloud, Multi-Region Vault for Teams and Landing Zones
21mA secure automation platform: Terraform Enterprise, Ansible Automation Platform, & Vault Enterprise
01h 03mContinuous Security in the Cloud
23mHashiCorp Vault and Getting Day 2 Operations Right
40mInfrastructure as Code in the Wild
49mPublic cloud in regulated industry, not just swipe of a cred
21mSolving AWS IAM Challenges at Scale With Terraform
01h 01mRethinking the “Sec” in DevSecOps for modern architectures