DevSecOps with IoT - Is it a myth?
summary
Claim: DevSecOps for IoT is achievable end-to-end. The demo shows a GitHub + npm workflow that creates a CloudFormation stack, provisions Greengrass Core groups, deploys Lambdas and Docker containers, and pushes OTA updates so edge apps sync to IoT Analytics and QuickSight. Security uses mutual TLS and secrets via a secret manager; hardware keys recommend HSM. Greengrass runs on 1 core 120MB RAM, supports offline operation, and the pipeline successfully deploys and logs Edge-to-Cloud activity.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:35The source of data is increasing-coming from billions of edge devices
- 18:28Shared Responsibility Model
- 21:49Secure with lot Device Defender
- 23:34Monitor your fleet
- 30:47The World is Changing
related talks
31mDevSecOps Ain't That Hard, a Framework
10mDevOps on the Edge!
31mBring Cloud Connectivity and Intelligence to the IoT Edge
01mIndustrial Edge-to-Cloud Connectivity
39mThe Path Of DevOps Enlightenment For InfoSec
37mGet all your (IoT) Ducks in a Row with AWS Greengrass
48mHow practical is “DevSecOps” really? – A field report
30mHandling Security Objections to DevOps