Using an Image Release Process for Security Wins
summary
Shows a one and a half year effort to build a self‑service image release pipeline that produces golden AWS AMIs and lets teams publish and consume images via tags (non‑prod / prod). Uses Packer + GitLab CI to bootstrap EC2, run Puppet, run Inspec tests for package versions, users, sudo rules and malware scans, then copy AMIs across regions and announce via Slack. Outcome: teams build images themselves, automated tests catch mismatches, pipeline runs in production.
AI-written summary · about
chapters (13)
- 0:00Introduction and motivation
- 3:53Why build custom images
- 7:28Real-world use case
- 8:13Introducing Packer
- 9:23Key requirements for process
- 11:30Release process workflow
- 14:19Building in stages
- 16:48Meaningful image testing
- 17:29GitOps and SlackOps
- 19:00Best practices and cleanup
- 20:49Pipeline walkthrough
- 23:20Live demo and testing
- 27:42Conclusion and resources
related talks
23mBuilding a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform
19mDevOps Challenges: The Key Is Technical Excellence
56mHCP Packer Learn Lab: Build a Golden Image Pipeline
28mBuilding an image pipeline using CentOS Stream and Image Builder
39mFollowing the Golden Image Road: Best Practices and Pitfalls
37mGolden Image Factory With HCP Packer & Terraform
11mAutomating Cloud Security Compliance: From Patching to Machine Image Building and Auto Scheduling
38mAccelerating innovation through AWS Cloud technology