Securing Infrastructure-as-code in CI/CD Pipelines

Guest Speaker: Yoni LeitersdorfYou want to catch security issues in your cloud infrastructure before deployment but you don’t have a lot of time to spend on it. What is infrastructure as code (IaC) security? How do you inject IaC security into the CI/CD pipeline to catch security risks before deployment? How do you do that without impacting the pipeline and frustrating developers? You will also learn how we catch common security issues in CI such as:Privilege escalation in AWS due to overly permissive IAM permissionsDrift issue caused by someone changing a security group leading to exposuresSharing IAM roles for resources in public and private subnets may not be a good ideaYoni has successfully implemented IaC security in their CI/CD pipeline at Indeni. He will share best practices and tips to get IaC security implemented quickly. Support the show