Conf42: DevSecOps 2021

How to keep your startup’s cloud secure when your security team is just you

In this talk, we’ll evaluate tools and techniques for implementing continuous security at your startup at the infrastructure level. Quite often as DevOps engineers at startups, we’re expected to be experts in security, and that often isn’t the case. We know to keep our ports closed, and to operate on the principle of least privilege, but with infrastructure as code introducing a vulnerability...