Automation Best Practices for SRE and Security
summary
Datadog builds a workflow automation product that ties alerts to actions (Slack, EventBridge, AWS) and learns four concrete practices: design reusable modular workflows that take variables and serve tens of monitors, ensure targeted execution so the right team’s script is surfaced in the right signal, enforce strict access controls and vault-backed credentials after banks refused permissive IAM, and integrate with monitoring and audit trails so workflows are versioned, tested, and alert when executions fail (one customer discovered missed IP blocks when a workflow silently stopped).
AI-written summary · about
chapters (9)
- 0:00Introduction and speaker intro
- 1:45Why automation best practices matter
- 5:40Reusable workflows for scalability
- 9:17Targeted workflows for precision
- 13:11Security risks in automation
- 17:50Access control and credential management
- 20:58Monitoring automation health
- 25:54Key takeaways and conclusion
- 26:16Q&A session
related talks
44mAuditing Your Automation's Access: Using More Automation
44mTackling Toil: SecOps Automation at Amplify Education
01h 02mSecuring data and democratizing the alert landscape
50mTraffic safety: Auditing and enforcing IAM best practices
33mAutomating Cloud Security and Incident Response (DevSecOps)
22mAutomate security for FedRAMP compliance in the cloud
27mIncluding security in your engineering culture
50mAutomation in action: Strategies for risk mitigation