Cloud Security at Scale and What it Means for Your Application

on YouTube ↗47m

" summary

Netflix runs ~50M subscribers and consumes roughly one third of US downstream bandwidth, with hundreds of applications and hundreds of production pushes per day; deployments use an immutable server model so average instance TTL is under three days. Security tooling includes chaos monkey and Chaos Gorilla to force availability resilience, security monkey for config auditing, Bakery and Asgard for image build and fleet management, plus Project Monterey, Penguin Shortbread, Lazy Falcon, Security Grouper, Scum and Sketchy Screenshotter — most are in use at scale and many are open sourced.

AI-written summary · about

" chapters (43)

1. 0:00Introduction
2. 0:47Ben Hagen
3. 4:03Netflix
4. 6:12Developers
5. 8:55Netflix Security
6. 10:02Trusting Developers
7. 10:43Immutable Server Pattern
8. 12:00Time to Live
9. 12:34Amazon Web Services
10. 13:47Important Concepts
11. 14:57Programmatic Access
12. 15:40Code Example
13. 16:30Security Groups
14. 17:42IP Addresses
15. 18:21Heartbleed
16. 19:17Deployment
17. 19:54Installation
18. 20:28Asgard
19. 21:30Security Problems
20. 22:02Chaos Monkey
21. 25:37Summary
22. 26:05Logo
23. 26:15Cloud is chaotic
24. 26:45Project Monterey
25. 28:02Developer Empowerment
26. 28:28Penguin Shortbread
27. 30:12Traffic
28. 31:13Lazy Falcon
29. 32:04What are Security Groups
30. 32:41Security Grouper
31. 32:51Purpose of Security Grouper
32. 34:03Scum Blur
33. 35:43Screenshots
34. 36:13Scribble Screenshot ER
35. 37:01Any Questions
36. 37:56Multiple Accounts
37. 39:02Paid Tools
38. 40:54Problems with Developers
39. 42:31Immutable Servers
40. 43:22Amazon VPC
41. 44:22Elasticity
42. 45:28Predictive Modeling
43. 46:21Security Tools

" related talks

• 31mKeeping Your Cloud Footprint in CheckCoburn Watson · GOTO London 2015
• 27mBehind the Scenes: Running Critical Services @ NetflixManuel Correa · ScaleConf Colombia 2019
• 41mDystopia as a ServiceAdrian Cockcroft · Collaboration Summit 2013
• 41mHow Netflix Embraces Failure to Improve Resilience and Maximize AvailabilityAriel Tseitlin · LISA '13
• 01h 52mDeep Dive into the Cloud Native Open Source with NetflixOSSAdrian Cockcroft · GOTO Copenhagen 2014
• 29mHow Netflix Thinks About DevOpsTejas Chopra · Developer Growth Summit 2022
• 31mHow Netflix Thinks About DevOpsDave Hahn · DevOpsDays Rockies 2016
• 38mSecuring Distributed Cache: Achieving Secure-by-Default with Key Challenges &...Akashdeep Goel, Sriram Rangarajan, Samuel Fu · SREcon25 Americas