Sentinel: A Platform for Fine-grained Application Security
summary
Sentinel is a declarative security policy platform used at eBay to manage fine-grained policies across Kubernetes, OpenStack and legacy systems. It uses the Kubernetes API and controller framework to represent desired state and run control loops that evaluate policies at scale, enforcing rules on endpoints (VMs, containers, firewalls) while providing near real-time monitoring and visualization of policy violations.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:31Agenda
- 1:11Application Policies
- 3:07Access. control
- 6:43Questions ...
- 8:55Complicated
- 13:16Following the design principles..
- 14:54System Capabilities
- 24:10Policy Language
- 24:46Enforcement
- 25:56Violations
- 27:32Architecture
- 31:17Implementation
- 35:10A note on scale
- 37:16Summary
related talks
27mSentinel policy as code in a highly regulated financial industry
41mPolicy as Code with Sentinel Language
20mSentinel in action: Policy as code for secure Terraform workflows in HCP
35mInnovate Fast, Operate Securely: AI-Powered Protection for Containerized Workloads
26mPolicy as Code for Network as Code
48mAzure Sentinel the modern SIEM system
21mModernize your security operations with Azure Sentinel
53mAzure Sentinel - Modern Day SIEM tool for SOC !