Istio for Controls Compliance
Talkat Istio Day Europe 2023 · on Tuesday, 2023-04-18· at 15:50· Hall 7, Room D | Ground Floor | Europe Complex·
summary
Istio implements mTLS and X.509 SPIFFE identities, uses Envoy as the enforcement point (Envoy as PEP) and can integrate with OPA for decisions, producing Envoy access logs that satisfy audit requirements. Real deployments map identity-based policies over a small static firewall pipe to boost agility. Claims include meeting encryption in transit, service-to-service authN/authZ, and audit controls for PCI DSS, GDPR and FedRAMP, where packages require ~250–350 controls and Istio addresses more than 10% of FedRAMP controls.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:02Zero trust motivation
- 3:49Service identity and auth
- 6:16Five runtime checks
- 9:02Regulatory compliance with Istio
- 11:10Layering policies for agility
- 13:56Network versus identity policies
- 16:03Q&A
related talks
32mIstio: Sailing to a Secure Services Mesh
32mIstio: Weaving the Service Mesh [I]
45mIstio to the Rescue
48mIstio An open platform to connect, manage, and secure microservices
43mHow the DoD Use Istio for End-to-End Encryption and Authentication
43mService Mesh for developers
47mIstio, le meilleur ami de votre cluster K8S
42mIstio: Weaving, Securing and Observing microservices