06 Compliance in a bucket
summary
A finance organization built a shared container platform on managed Kubernetes in AWS and Azure, using a central Nexus registry, image scanning with Fortify and Nexus Lifecycle, runtime checks, and Slack alerts to enforce approved images in CI/CD. Policies are implemented with Open Policy Agent and evaluated via a “mission control” UI that considers context before deploy; tooling choices and benchmarking are driven by the tension between developer autonomy and centralized compliance.
AI-written summary · about
chapters (7)
- 0:00Introduction to compliance
- 2:43Containers in finance sector
- 7:03Setting up container platform
- 10:35Compliance monitoring challenges
- 13:28Policy frameworks for compliance
- 17:28Pipeline compliance demo
- 20:48Future of compliance in teams
related talks
51mA container platform for the banking industry why, what & how
37mAchieving High Security at Scale with Microservices
46mA Security State of Mind: Continuous Security with Kubernetes
27mRethinking Compliance in a Containerised World
48mBuilding GDPR, ISO27001 Containerized Application for continuous compliance
48mSecurity and compliance for container-based microservices
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
43m6 Strategies to Bring Order to Kubernetes Security Disruptions