Zero Touch Prod: Towards Safer and More Secure Production Environments
Talkat SREcon19 Europe/Middle East/Africa · on Wednesday, 2019-10-02· at 16:00· Track 1: The Liffey B·
summary
Zero Touch Prod enforces that every production change is automation-validated or goes through an audited break‑glass path; Google reports building a centralized safety tracker and proxies that enforce peer-reviewed binaries and job configs, fine‑grained auth, rate‑limits, and delegated privileges. An internal analysis finds about 13% of outages would be preventable under ZTP. The tooling is in‑house (started ~2016), shows positive ROI, and retains audited emergency overrides when automation fails.
AI-written summary · about
chapters (20)
- 0:00Intro
- 1:37Scenarios
- 8:12Reliable Automation
- 13:00Humans
- 13:27We wield big power
- 13:58Responsibility and temptation
- 14:52Assumptions
- 16:46Who can run
- 18:36Transient access
- 20:15Unilateral Access
- 20:41Peer Review
- 21:57Proxy Approval
- 23:53Assessing and tracking adoption
- 27:18Conclusion
- 28:30Proxy Benefits
- 29:21Quote
- 29:51Who defines security checks
- 32:09Ratelimiting
- 34:22Adoption rate
- 35:10Open source
related talks
23mZero Privilege Architecture - 3 Years Onward
42mTest Driven Security in the DevOps pipeline
26mTaking Your DevOps Tooling To The Dark Side
25mBuilding a DevOps Supply Chain on Zero Trust Principles
59mProduction Readiness Strategies for an Automated World
40mEnd the Battle Between Security and Productivity
45mZero Trust: Getting to Step One..and What to Do When You Get There
33mMinimum Viable Security