Keynote: Cloud & Cloud Native Identity and Access Management: Challenges & Opportunities
summary
Argues that solving zero trust requires concrete pieces not slogans: adopt SPIFFE/SPIRE for workload identity, issue SVID short-lived certs to every container, correlate those identities with OAuth/OIDC + OPA/REGO for delegated auth, and federate across Kubernetes/istio meshes. Reports real deployments with tens of thousands of containers and millions of API transactions, warns externalized authorization is still rare, and says automation and governance are the hardest parts to make this scale and stick.
AI-written summary · about
chapters (5)
related talks
05mSponsored Keynote: From Google to NIST — The Future of Cloud Native Security
35mDemystifying Zero-Trust for Cloud Native Technologies
23mThe Long and Windy Road that leads to Cloud Native Security
36mCloud Native Identity Management
36mSecuring Agentic Platforms with Zero-Trust Workload Identities
19mKeynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integri...
17mKeynote: Modern Least Privilege with DevSecOps
35mCloud Native Security for the Rest of Us