Keep your nose out of it. Denying yourself access to production
summary
Advocates removing everyday production access and replacing it with automated, auditable controls: create an emergency super user account with hardware MFA, push all deployments via CI/CD and infrastructure-as-code (ARM/Pulumi/Terraform), eliminate passwords using managed system identity and per-environment Key Vaults, ship logs to Application Insights/Azure Monitor, require code review approvals before merge, and use Azure Privileged Identity Management for just-in-time role assignments that expire and are logged. These steps reduce accidental deletes, insider data leaks, and compromised-dev-machine escalation.
AI-written summary · about
chapters (14)
- 0:00Start
- 8:13Set Up a Super User
- 8:25Emergency Admin
- 8:53Be Careful with the Mfa
- 11:18Continuous Integration
- 13:13Infrastructure S Code
- 14:37Malicious Code
- 15:21Purpose of Code Reviews
- 17:15Managed System Identity
- 24:53Keyword Secrets
- 27:15Security Boundaries
- 41:59Practical Processes
- 44:40Key Vaults
- 53:08Minimize Access to Production
related talks
01h 01mKeep your nose out of it. Denying yourself access to production
38mSecuring your CI/CD Pipeline
25mSecuring Your DevOps Transformation
44mDeveloper Productivity Shouldn’t Breach Security
49mAzure DevOps security - Lessons learned
46mSecrets Management for the Modern Tech. Pro
21mSecuring a Security Company
48mSecurity from zero