Modern Security with Microservices and the Cloud
It's great that you've moved to microservices, but how are you handling security and distributing secrets? Traditional architectures use perimeter-based security, but you can't exactly wrap the cloud in your own personal firewall. Many organizations are practicing "lift and shift" to leverage the cloud, but then find themselves at the end of failed compliance audits. Seth Vargo will highlight the new security challenges associated with using cloud technologies and microservices, then showcase techniques for solving those challenges. Using HashiCorp Vault, a free and open source secrets management tool, he'll show the primitive requirements for secrets management in a microservices- and cloud-based world to help organizations "move and improve." You'll learn techniques such as dynamic, auto-rotating credentials, encryption as a service, PKI infrastructure, and role-based access controls (RBAC), and leave with an understanding of the challenges of modern security in the cloud, strategies for updating existing applications to reduce attack surfaces, and probably a moderate sense of paranoia.